last executing test programs: 1m56.020542906s ago: executing program 3 (id=7570): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) 1m55.171043702s ago: executing program 3 (id=7575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a66505}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x18) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x1}, 0x100042, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 1m54.868162775s ago: executing program 3 (id=7577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0xe, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, 0x50) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfdef) 1m54.798026208s ago: executing program 3 (id=7578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000001300)=""/181, 0x28, 0xb5, 0x1}, 0x28) 1m54.571980588s ago: executing program 3 (id=7581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) close(0x4) 1m54.199930944s ago: executing program 3 (id=7585): perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x8, 0xc, 0xffffbffb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.867952095s ago: executing program 32 (id=7585): perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x8, 0xc, 0xffffbffb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.552225408s ago: executing program 1 (id=7736): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x7fe2, 0xfffffffe, 0x12}, 0x50) 1m12.067430959s ago: executing program 1 (id=7740): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100050009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) 1m11.654063237s ago: executing program 1 (id=7742): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81}, 0x48) write$cgroup_subtree(r3, &(0x7f0000000000), 0xe) 1m11.400698998s ago: executing program 1 (id=7744): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 1m11.150817548s ago: executing program 1 (id=7747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1m10.770222325s ago: executing program 1 (id=7750): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x3, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 55.508730071s ago: executing program 33 (id=7750): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x3, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.947779974s ago: executing program 4 (id=7978): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 5.81020178s ago: executing program 4 (id=7980): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) r2 = perf_event_open(&(0x7f00000007c0)={0x3, 0x80, 0x4, 0x8, 0x8, 0xe, 0x0, 0x83, 0x440, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x8}, 0x4042, 0x2040000000000, 0x2, 0x8, 0x5, 0x69, 0x1, 0x0, 0xa, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000900)={r1, r2, 0x0, 0xa, &(0x7f00000008c0)='syzkaller\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', @remote}) 5.041087313s ago: executing program 4 (id=7982): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6972f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xd6, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2b3, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8940, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002240), &(0x7f0000002300), 0x8001, r9}, 0x38) 5.039580423s ago: executing program 0 (id=7991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 4.494495077s ago: executing program 0 (id=7996): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.963975419s ago: executing program 0 (id=7989): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 3.844553265s ago: executing program 0 (id=7992): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.580064006s ago: executing program 0 (id=7994): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) r2 = perf_event_open(&(0x7f00000007c0)={0x3, 0x80, 0x4, 0x8, 0x8, 0xe, 0x0, 0x83, 0x440, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x8}, 0x4042, 0x2040000000000, 0x2, 0x8, 0x5, 0x69, 0x1, 0x0, 0xa, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000900)={r1, r2, 0x0, 0xa, &(0x7f00000008c0)='syzkaller\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.190774573s ago: executing program 4 (id=7998): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x180a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 3.170396134s ago: executing program 5 (id=7999): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.944185473s ago: executing program 5 (id=8001): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 2.750227322s ago: executing program 5 (id=8002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 2.577147209s ago: executing program 2 (id=8003): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.140687278s ago: executing program 5 (id=8004): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.140436428s ago: executing program 2 (id=8005): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.598446301s ago: executing program 5 (id=8007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18) 1.598230312s ago: executing program 2 (id=8008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 903.547881ms ago: executing program 0 (id=8009): perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x5, 0x5, 0x29, 0x0, 0xf2, 0x4010, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff80, 0x1, @perf_bp={0x0, 0x8}, 0xc082, 0xa, 0x0, 0xd2b97a5300ed9d9a, 0x7f, 0x4bba, 0x8, 0x0, 0x0, 0x0, 0x96}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0xa2265000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x36) 903.317341ms ago: executing program 2 (id=8010): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 658.157202ms ago: executing program 4 (id=8011): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 608.090144ms ago: executing program 2 (id=8012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x10000000000}, 0x20) 93.732056ms ago: executing program 5 (id=8013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 67.661297ms ago: executing program 4 (id=8014): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=8015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): ocess `syz.1.2111'. [ 445.275040][T12181] netlink: 49819 bytes leftover after parsing attributes in process `syz.3.2115'. [ 446.727570][T12213] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2124'. [ 446.776111][T12213] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 446.858782][T12213] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2124'. [ 447.119356][T12216] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.2125'. [ 447.385329][T12223] netlink: 49819 bytes leftover after parsing attributes in process `syz.0.2128'. [ 451.846072][T12361] validate_nla: 3 callbacks suppressed [ 451.846089][T12361] netlink: 'syz.1.2177': attribute type 10 has an invalid length. [ 452.127980][T12368] netlink: 49819 bytes leftover after parsing attributes in process `syz.3.2179'. [ 453.293070][T12389] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2186'. [ 453.389919][T12393] netlink: 'syz.3.2188': attribute type 10 has an invalid length. [ 453.401440][T12393] macvlan0: entered allmulticast mode [ 453.418550][T12393] veth1_vlan: entered allmulticast mode [ 453.426899][T12393] macvlan0: entered promiscuous mode [ 453.434406][T12393] team0: Port device macvlan0 added [ 453.816462][T12405] netlink: 'syz.1.2194': attribute type 10 has an invalid length. [ 454.096770][T12413] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2196'. [ 454.339501][T12417] netlink: 'syz.3.2199': attribute type 10 has an invalid length. [ 454.347770][T12417] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2199'. [ 455.286051][T12429] netlink: 61959 bytes leftover after parsing attributes in process `syz.3.2205'. [ 455.418848][T12442] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2207'. [ 455.480907][T12440] netlink: 49819 bytes leftover after parsing attributes in process `syz.1.2215'. [ 456.478784][T12479] netlink: 'syz.0.2219': attribute type 10 has an invalid length. [ 456.600392][T12481] netlink: 49819 bytes leftover after parsing attributes in process `syz.2.2220'. [ 457.387874][T12509] netlink: 'syz.2.2229': attribute type 10 has an invalid length. [ 457.407881][T12509] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 457.428924][T12509] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 457.450635][T12509] team0: Port device netdevsim0 removed [ 459.013651][T12548] netlink: 'syz.3.2242': attribute type 10 has an invalid length. [ 460.139089][T12582] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 460.147073][T12582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2252'. [ 460.292506][T12591] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2256'. [ 460.321219][T12591] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 461.112168][T12615] netlink: 'syz.2.2264': attribute type 13 has an invalid length. [ 461.460872][T12625] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 [ 461.994896][T12647] delete_channel: no stack [ 462.934628][T12677] netlink: 'syz.1.2289': attribute type 29 has an invalid length. [ 462.974764][T12677] netlink: 'syz.1.2289': attribute type 29 has an invalid length. [ 462.984374][T12677] netlink: 'syz.1.2289': attribute type 29 has an invalid length. [ 463.079637][T12687] netlink: 'syz.2.2292': attribute type 10 has an invalid length. [ 463.565746][T12703] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2300'. [ 463.585001][T12703] batadv_slave_1: entered promiscuous mode [ 465.178522][T12759] netlink: 'syz.0.2321': attribute type 33 has an invalid length. [ 465.186584][T12759] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2321'. [ 466.099555][T12778] netlink: 'syz.0.2326': attribute type 10 has an invalid length. [ 466.976051][T12801] netlink: 'syz.2.2337': attribute type 2 has an invalid length. [ 466.997539][T12801] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2337'. [ 467.611211][T12830] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2347'. [ 467.623289][T12830] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2347'. [ 467.633220][T12826] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2347'. [ 469.967647][T12886] netlink: 'syz.3.2372': attribute type 2 has an invalid length. [ 469.980019][T12886] netlink: 'syz.3.2372': attribute type 8 has an invalid length. [ 469.987801][T12886] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2372'. [ 470.960896][T12926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2384'. [ 470.976004][T12926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2384'. [ 470.987426][T12926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2384'. [ 470.997365][T12926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2384'. [ 471.021754][T12930] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2382'. [ 471.051136][T12930] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2382'. [ 471.069408][T12925] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2382'. [ 472.525761][T12972] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2396'. [ 473.549491][T13010] netlink: 'syz.2.2409': attribute type 21 has an invalid length. [ 473.557391][T13010] netlink: 'syz.2.2409': attribute type 11 has an invalid length. [ 473.879853][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 475.182355][T13065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2433'. [ 476.280804][T13103] __nla_validate_parse: 1 callbacks suppressed [ 476.280821][T13103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2448'. [ 476.299308][T13103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2448'. [ 476.326981][T13103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2448'. [ 476.337317][T13103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2448'. [ 477.183068][T13135] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2459'. [ 481.047389][T13182] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2473'. [ 481.150976][T13182] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2473'. [ 481.361756][T13184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2473'. [ 481.373596][T13188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2473'. [ 482.493509][T13231] netlink: 'syz.2.2488': attribute type 21 has an invalid length. [ 482.503898][T13231] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2488'. [ 484.995284][T13311] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2518'. [ 485.005187][T13311] openvswitch: netlink: Message has 20476 unknown bytes. [ 485.015603][T13311] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2518'. [ 485.026785][T13311] netlink: get zone limit has 4 unknown bytes [ 485.295629][T13317] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2521'. [ 486.215547][T13338] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2528'. [ 486.380901][T13358] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2534'. [ 486.832919][T13376] netlink: 'syz.1.2540': attribute type 21 has an invalid length. [ 486.841559][T13376] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2540'. [ 487.312230][T13398] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2551'. [ 487.328771][T13398] openvswitch: netlink: Flow key attribute not present in set flow. [ 487.559665][T13404] netlink: 'syz.0.2553': attribute type 21 has an invalid length. [ 487.596160][T13404] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2553'. [ 488.254494][T13421] netlink: 'syz.0.2561': attribute type 9 has an invalid length. [ 488.294490][T13421] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2561'. [ 492.364622][T13568] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2611'. [ 493.036260][T13589] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2619'. [ 494.990828][T13648] netlink: 'syz.3.2635': attribute type 10 has an invalid length. [ 495.012204][T13648] bond_slave_1: entered promiscuous mode [ 495.018719][T13648] bridge_slave_1: entered promiscuous mode [ 495.024897][T13648] dummy0: entered promiscuous mode [ 495.054846][T13648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.079316][T13648] bond0: entered promiscuous mode [ 495.094971][T13648] bond0: entered allmulticast mode [ 495.107556][T13648] bond_slave_1: entered allmulticast mode [ 495.122032][T13648] bridge_slave_1: entered allmulticast mode [ 495.135274][T13648] dummy0: entered allmulticast mode [ 495.164930][T13648] team0: Port device bond0 added [ 495.465656][T13651] syzkaller0: entered promiscuous mode [ 495.471478][T13651] syzkaller0: entered allmulticast mode [ 497.325329][T13683] netlink: 'syz.3.2654': attribute type 9 has an invalid length. [ 497.346616][T13683] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2654'. [ 498.356047][T13704] TCP: TCP_TX_DELAY enabled [ 500.195504][T13750] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 500.214066][T13750] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2673'. [ 501.422907][T13774] netlink: 'syz.0.2681': attribute type 10 has an invalid length. [ 501.477636][T13774] bond_slave_1: entered promiscuous mode [ 501.483700][T13774] bridge_slave_1: entered promiscuous mode [ 501.489957][T13774] dummy0: entered promiscuous mode [ 501.498850][T13774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.508073][T13774] bond0: entered promiscuous mode [ 501.516993][T13774] bond0: entered allmulticast mode [ 501.522470][T13774] bond_slave_1: entered allmulticast mode [ 501.528624][T13774] bridge_slave_1: entered allmulticast mode [ 501.534733][T13774] dummy0: entered allmulticast mode [ 501.541759][T13774] team0: Port device bond0 added [ 501.780444][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.786772][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.590389][T13808] netlink: 'syz.2.2691': attribute type 10 has an invalid length. [ 502.600054][T13808] bond_slave_1: entered promiscuous mode [ 502.606546][T13808] dummy0: entered promiscuous mode [ 502.619525][T13808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.633581][T13808] bond0: entered promiscuous mode [ 502.656730][T13808] bond0: entered allmulticast mode [ 502.662498][T13808] bond_slave_1: entered allmulticast mode [ 502.671440][T13808] dummy0: entered allmulticast mode [ 502.680480][T13808] team0: Port device bond0 added [ 504.703446][T13844] netlink: 'syz.0.2705': attribute type 10 has an invalid length. [ 515.420996][T14028] syzkaller0: entered promiscuous mode [ 515.427093][T14028] syzkaller0: entered allmulticast mode [ 518.557270][T14119] netlink: 'syz.0.2800': attribute type 27 has an invalid length. [ 518.573003][T14119] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2800'. [ 523.937532][T14224] syzkaller0: entered promiscuous mode [ 523.943673][T14224] syzkaller0: entered allmulticast mode [ 528.272816][T14276] syzkaller0: entered promiscuous mode [ 528.278653][T14276] syzkaller0: entered allmulticast mode [ 530.953060][T14322] pim6reg1: entered allmulticast mode [ 533.154896][T14356] syzkaller0: entered promiscuous mode [ 533.171523][T14356] syzkaller0: entered allmulticast mode [ 535.203773][T14369] netlink: 'syz.0.2872': attribute type 1 has an invalid length. [ 535.211867][T14369] netlink: 'syz.0.2872': attribute type 4 has an invalid length. [ 535.219870][T14369] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2872'. [ 537.049865][T14402] syzkaller0: entered promiscuous mode [ 537.058431][T14402] syzkaller0: entered allmulticast mode [ 537.104271][T14405] netlink: 'syz.2.2887': attribute type 1 has an invalid length. [ 537.113087][T14405] netlink: 'syz.2.2887': attribute type 4 has an invalid length. [ 537.121041][T14405] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2887'. [ 541.628703][T14443] netlink: 'syz.3.2900': attribute type 1 has an invalid length. [ 541.650739][T14443] netlink: 'syz.3.2900': attribute type 4 has an invalid length. [ 541.677089][T14443] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2900'. [ 542.963755][T14464] sit0: left promiscuous mode [ 543.017951][T14464] sit0: entered promiscuous mode [ 547.076687][ T5798] Bluetooth: hci0: Malformed HCI Event [ 556.450240][T14618] delete_channel: no stack [ 556.736291][ T5798] Bluetooth: hci2: Malformed HCI Event [ 561.256617][ T5798] Bluetooth: hci3: Malformed HCI Event [ 563.222968][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.236989][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.994948][T14701] delete_channel: no stack [ 566.136480][T14715] netlink: 'syz.0.3000': attribute type 21 has an invalid length. [ 566.144704][T14715] netlink: 'syz.0.3000': attribute type 12 has an invalid length. [ 566.152639][T14715] netlink: 'syz.0.3000': attribute type 13 has an invalid length. [ 566.160498][T14715] netlink: 'syz.0.3000': attribute type 14 has an invalid length. [ 566.168632][T14715] netlink: 'syz.0.3000': attribute type 15 has an invalid length. [ 566.176467][T14715] netlink: 'syz.0.3000': attribute type 16 has an invalid length. [ 566.184440][T14715] netlink: 12914 bytes leftover after parsing attributes in process `syz.0.3000'. [ 566.491079][T14737] delete_channel: no stack [ 577.183050][T14831] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3043'. [ 582.476222][T14873] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3058'. [ 582.584223][T14876] syz.1.3060[14876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.584455][T14876] syz.1.3060[14876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 584.013135][T14904] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3069'. [ 586.755202][T14936] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3082'. [ 587.279301][ T5798] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 587.973511][T14977] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 588.000347][T14977] netlink: 'syz.2.3098': attribute type 4 has an invalid length. [ 588.008132][T14977] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3098'. [ 589.367541][T15018] netlink: 'syz.1.3115': attribute type 10 has an invalid length. [ 589.383829][T15018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3115'. [ 589.399735][T15018] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 590.446461][T15045] syzkaller0: entered promiscuous mode [ 590.461195][T15045] syzkaller0: entered allmulticast mode [ 591.165267][T15058] syz.0.3129: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 591.190096][T15058] CPU: 1 PID: 15058 Comm: syz.0.3129 Not tainted syzkaller #0 [ 591.197653][T15058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 591.207751][T15058] Call Trace: [ 591.211055][T15058] [ 591.214016][T15058] dump_stack_lvl+0x16c/0x230 [ 591.218719][T15058] ? show_regs_print_info+0x20/0x20 [ 591.223934][T15058] ? load_image+0x3b0/0x3b0 [ 591.228478][T15058] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 591.234916][T15058] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 591.241432][T15058] warn_alloc+0x210/0x300 [ 591.245808][T15058] ? stack_trace_save+0x9c/0xe0 [ 591.250729][T15058] ? zone_watermark_ok_safe+0x230/0x230 [ 591.256357][T15058] ? kasan_set_track+0x5f/0x70 [ 591.261161][T15058] ? kasan_set_track+0x4e/0x70 [ 591.265965][T15058] ? __kasan_kmalloc+0x8f/0xa0 [ 591.270750][T15058] ? xsk_init_queue+0xb0/0x110 [ 591.275671][T15058] ? xsk_setsockopt+0x4db/0x6f0 [ 591.280555][T15058] ? do_sock_setsockopt+0x175/0x1a0 [ 591.285782][T15058] ? __x64_sys_setsockopt+0x184/0x200 [ 591.291188][T15058] __vmalloc_node_range+0x126/0x1320 [ 591.296574][T15058] ? free_vm_area+0x50/0x50 [ 591.301134][T15058] vmalloc_user+0x74/0x80 [ 591.305576][T15058] ? xskq_create+0xbf/0x170 [ 591.310102][T15058] xskq_create+0xbf/0x170 [ 591.314458][T15058] xsk_init_queue+0xb0/0x110 [ 591.319075][T15058] xsk_setsockopt+0x4db/0x6f0 [ 591.323779][T15058] ? xsk_poll+0x670/0x670 [ 591.328136][T15058] ? __fget_files+0x28/0x4d0 [ 591.332751][T15058] ? aa_sock_opt_perm+0x74/0x100 [ 591.337736][T15058] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 591.343323][T15058] ? security_socket_setsockopt+0x7e/0xa0 [ 591.349064][T15058] ? xsk_poll+0x670/0x670 [ 591.353425][T15058] do_sock_setsockopt+0x175/0x1a0 [ 591.358478][T15058] ? __fdget+0x180/0x210 [ 591.362784][T15058] __x64_sys_setsockopt+0x184/0x200 [ 591.368018][T15058] do_syscall_64+0x55/0xb0 [ 591.372452][T15058] ? clear_bhb_loop+0x40/0x90 [ 591.377142][T15058] ? clear_bhb_loop+0x40/0x90 [ 591.381839][T15058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.387744][T15058] RIP: 0033:0x7f933d38f749 [ 591.392181][T15058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.411809][T15058] RSP: 002b:00007f933e308038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 591.420251][T15058] RAX: ffffffffffffffda RBX: 00007f933d5e5fa0 RCX: 00007f933d38f749 [ 591.428242][T15058] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 591.436229][T15058] RBP: 00007f933d413f91 R08: 0000000000000004 R09: 0000000000000000 [ 591.444217][T15058] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 591.452209][T15058] R13: 00007f933d5e6038 R14: 00007f933d5e5fa0 R15: 00007ffd23146268 [ 591.460239][T15058] [ 591.508402][T15058] Mem-Info: [ 591.511749][T15058] active_anon:11431 inactive_anon:0 isolated_anon:0 [ 591.511749][T15058] active_file:16079 inactive_file:40080 isolated_file:0 [ 591.511749][T15058] unevictable:768 dirty:127 writeback:0 [ 591.511749][T15058] slab_reclaimable:10258 slab_unreclaimable:95478 [ 591.511749][T15058] mapped:26162 shmem:1360 pagetables:577 [ 591.511749][T15058] sec_pagetables:0 bounce:0 [ 591.511749][T15058] kernel_misc_reclaimable:0 [ 591.511749][T15058] free:1339632 free_pcp:9408 free_cma:0 [ 591.596941][T15058] Node 0 active_anon:45624kB inactive_anon:0kB active_file:64316kB inactive_file:160120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104648kB dirty:508kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11000kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 591.643380][T15058] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 591.687985][T15058] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.769780][T15058] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 591.788508][T15058] Node 0 DMA32 free:1447044kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:45580kB inactive_anon:0kB active_file:64316kB inactive_file:158804kB unevictable:1536kB writepending:508kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:17176kB local_pcp:12652kB free_cma:0kB [ 591.843937][T15058] lowmem_reserve[]: 0 0 1 1 1 [ 591.863754][T15058] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 591.909914][T15058] lowmem_reserve[]: 0 0 0 0 0 [ 591.925683][T15058] Node 1 Normal free:3896108kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21312kB local_pcp:10336kB free_cma:0kB [ 591.956465][T15058] lowmem_reserve[]: 0 0 0 0 0 [ 591.961855][T15058] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 591.988529][T15058] Node 0 DMA32: 1071*4kB (UME) 1*8kB (M) 972*16kB (UME) 1784*32kB (UME) 1280*64kB (UME) 704*128kB (UME) 326*256kB (UME) 221*512kB (UME) 158*1024kB (UM) 8*2048kB (UM) 201*4096kB (UM) = 1447044kB [ 592.008678][T15058] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 592.032873][T15058] Node 1 Normal: 221*4kB (UME) 43*8kB (UME) 48*16kB (UME) 55*32kB (UME) 16*64kB (UME) 3*128kB (ME) 3*256kB (UM) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896108kB [ 592.059554][T15058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.070365][T15058] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 592.086568][T15058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.096901][T15058] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 592.107368][T15058] 57519 total pagecache pages [ 592.113201][T15058] 0 pages in swap cache [ 592.117588][T15058] Free swap = 124996kB [ 592.122234][T15058] Total swap = 124996kB [ 592.126486][T15058] 2097051 pages RAM [ 592.140109][T15058] 0 pages HighMem/MovableOnly [ 592.144969][T15058] 416137 pages reserved [ 592.154253][T15058] 0 pages cma reserved [ 595.080534][ T5798] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 595.517408][T15124] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3150'. [ 595.585781][T15124] netlink: zone id is out of range [ 595.600434][T15124] netlink: del zone limit has 8 unknown bytes [ 595.905376][T15129] netlink: 'syz.0.3153': attribute type 10 has an invalid length. [ 595.951949][T15129] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.983007][T15129] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.002184][T15129] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.016084][T15129] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.124637][T15129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.135414][T15129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.146179][T15129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.161464][T15129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.203576][T15129] geneve1: entered promiscuous mode [ 596.210868][T15129] geneve1: entered allmulticast mode [ 596.223660][T15129] team0: Port device geneve1 added [ 596.455502][T15140] netlink: 'syz.3.3158': attribute type 10 has an invalid length. [ 596.479777][T15140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3158'. [ 596.505605][T15140] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 601.083200][T15211] bond_slave_1: mtu less than device minimum [ 604.575301][T15237] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3190'. [ 604.594908][T15237] netlink: zone id is out of range [ 604.625005][T15237] netlink: del zone limit has 8 unknown bytes [ 605.754323][T15250] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 605.795544][T15250] syzkaller0: entered promiscuous mode [ 605.834243][T15250] syzkaller0: entered allmulticast mode [ 608.084837][T15273] syzkaller0: entered promiscuous mode [ 608.090649][T15273] syzkaller0: entered allmulticast mode [ 608.537656][T15285] syzkaller0: entered promiscuous mode [ 608.544756][T15285] syzkaller0: entered allmulticast mode [ 610.254900][T15293] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3206'. [ 610.267972][T15293] netlink: zone id is out of range [ 610.291668][T15293] netlink: del zone limit has 8 unknown bytes [ 611.140617][T15320] syzkaller0: entered promiscuous mode [ 611.146205][T15320] syzkaller0: entered allmulticast mode [ 614.140342][T15362] syzkaller0: entered promiscuous mode [ 614.146128][T15362] syzkaller0: entered allmulticast mode [ 614.174934][T15362] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 614.181326][T15362] syzkaller0: Linktype set failed because interface is up [ 616.175441][T15370] netlink: 'syz.0.3235': attribute type 39 has an invalid length. [ 616.377681][T15379] syzkaller0: entered promiscuous mode [ 616.384534][T15379] syzkaller0: entered allmulticast mode [ 619.142033][T15406] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 619.594222][T15406] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.604641][T15406] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.616605][T15406] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.627452][T15406] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.715553][T15406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.726032][T15406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.735902][T15406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.745129][T15406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.779442][T15406] geneve1: entered promiscuous mode [ 619.786473][T15406] geneve1: entered allmulticast mode [ 619.801058][T15406] team0: Port device geneve1 added [ 621.769856][T15450] netlink: 'syz.1.3264': attribute type 10 has an invalid length. [ 622.017511][T15450] geneve1: entered promiscuous mode [ 622.025393][T15450] geneve1: entered allmulticast mode [ 622.049039][T15450] team0: Port device geneve1 added [ 623.781740][T15498] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3278'. [ 623.986426][T15503] netlink: 'syz.3.3280': attribute type 10 has an invalid length. [ 624.167929][T15503] geneve1: entered promiscuous mode [ 624.177914][T15503] geneve1: entered allmulticast mode [ 624.205498][T15503] team0: Port device geneve1 added [ 624.673161][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.679673][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.467909][T15534] syzkaller0: entered promiscuous mode [ 625.474645][T15534] syzkaller0: entered allmulticast mode [ 625.598130][T15537] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 629.338122][T15561] netlink: 'syz.0.3294': attribute type 10 has an invalid length. [ 629.346450][T15561] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.355784][T15561] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.365344][T15561] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.374283][T15561] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.427901][ T5798] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 630.753361][T15600] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 630.795189][T15600] syzkaller0: entered promiscuous mode [ 630.801483][T15600] syzkaller0: entered allmulticast mode [ 633.232290][T15621] netlink: 'syz.3.3325': attribute type 7 has an invalid length. [ 633.286382][T15619] pim6reg1: entered promiscuous mode [ 633.299615][T15619] pim6reg1: entered allmulticast mode [ 634.527148][T15650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.183628][T15673] sctp: [Deprecated]: syz.0.3334 (pid 15673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.183628][T15673] Use struct sctp_sack_info instead [ 635.294838][T15679] netlink: 'syz.3.3335': attribute type 153 has an invalid length. [ 635.316216][T15679] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3335'. [ 636.318689][T15695] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 636.387953][T15692] syzkaller0: entered promiscuous mode [ 636.394246][T15692] syzkaller0: entered allmulticast mode [ 636.511067][T15703] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 636.623355][T10111] syzkaller0: tun_net_xmit 48 [ 642.240828][T15765] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 655.004745][T15952] syzkaller0: entered promiscuous mode [ 655.010416][T15952] syzkaller0: entered allmulticast mode [ 659.091949][T16004] syzkaller0: entered promiscuous mode [ 659.099153][T16004] syzkaller0: entered allmulticast mode [ 659.128639][T16005] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 659.135090][T10111] syzkaller0: tun_net_xmit 48 [ 659.206296][T16004] syzkaller0: tun_net_xmit 1280 [ 660.978354][T16014] netlink: 'syz.3.3433': attribute type 11 has an invalid length. [ 660.994332][T16014] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3433'. [ 661.988663][T16024] netlink: 'syz.2.3441': attribute type 28 has an invalid length. [ 668.465999][T16092] syzkaller0: entered promiscuous mode [ 668.515108][T16092] syzkaller0: entered allmulticast mode [ 684.356668][T16301] pim6reg1: entered promiscuous mode [ 684.379095][T16301] pim6reg1: entered allmulticast mode [ 686.104137][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.110803][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.410900][ T5798] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 689.793775][T16417] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3577'. [ 691.362153][ T5798] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 692.952815][ T5798] Bluetooth: hci3: unexpected event 0x2c length: 82 > 17 [ 694.308821][ T5798] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17 [ 695.421080][T16545] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3625'. [ 695.879627][ T5798] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 695.987660][T16563] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3633'. [ 696.001653][T16563] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 696.033605][T16563] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 696.444869][T16582] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3638'. [ 696.674378][T16586] netlink: 'syz.2.3643': attribute type 29 has an invalid length. [ 696.830538][T16586] netlink: 'syz.2.3643': attribute type 29 has an invalid length. [ 696.906845][T16595] netlink: 'syz.1.3645': attribute type 10 has an invalid length. [ 697.042068][T16595] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 697.062443][T16595] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 697.301647][T16595] team0: Port device netdevsim0 removed [ 697.447425][T16595] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 701.264310][T16680] netlink: 'syz.0.3676': attribute type 10 has an invalid length. [ 701.783452][ T5798] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 702.265666][T16706] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3683'. [ 703.197723][T16743] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3698'. [ 703.704987][T16761] netlink: 'syz.3.3703': attribute type 21 has an invalid length. [ 703.728504][T16761] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3703'. [ 703.771541][T16761] netlink: 'syz.3.3703': attribute type 4 has an invalid length. [ 704.613848][T16775] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3709'. [ 705.127783][T16796] pim6reg1: entered promiscuous mode [ 705.138062][T16796] pim6reg1: entered allmulticast mode [ 705.789522][T16816] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3721'. [ 705.805783][T16814] netlink: 'syz.1.3719': attribute type 10 has an invalid length. [ 706.126940][T16828] netlink: 'syz.1.3725': attribute type 10 has an invalid length. [ 706.147416][T16828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3725'. [ 706.166632][T16828] bridge0: port 1(team0) entered disabled state [ 706.239770][T16828] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 706.868703][T16851] netlink: 'syz.2.3735': attribute type 2 has an invalid length. [ 706.897473][T16851] netlink: 'syz.2.3735': attribute type 1 has an invalid length. [ 706.916552][T16851] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3735'. [ 707.548685][T16863] tun0: tun_chr_ioctl cmd 1074025677 [ 707.618635][T16863] tun0: linktype set to 776 [ 709.041697][T16885] pim6reg1: entered promiscuous mode [ 709.047701][T16885] pim6reg1: entered allmulticast mode [ 709.231045][T16892] netlink: 'syz.1.3748': attribute type 21 has an invalid length. [ 709.248540][T16892] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3748'. [ 709.267985][T16892] netlink: 'syz.1.3748': attribute type 4 has an invalid length. [ 709.402786][T16894] netlink: 'syz.2.3749': attribute type 21 has an invalid length. [ 710.403744][T16934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.147834][T16960] netlink: 'syz.2.3770': attribute type 10 has an invalid length. [ 712.371013][T16967] netlink: 'syz.0.3772': attribute type 12 has an invalid length. [ 712.381834][T16967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3772'. [ 713.507102][T16984] IPv6: Can't replace route, no match found [ 713.536944][T16984] netlink: 'syz.3.3776': attribute type 10 has an invalid length. [ 713.627554][T16984] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 713.699167][T16984] bond0: (slave wlan1): Opening slave failed [ 714.675816][T16996] netlink: 'syz.3.3784': attribute type 21 has an invalid length. [ 715.159233][T17005] netlink: 'syz.2.3785': attribute type 21 has an invalid length. [ 715.193365][T17005] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3785'. [ 715.216991][T17005] netlink: 'syz.2.3785': attribute type 4 has an invalid length. [ 718.805031][T17033] netlink: 'syz.3.3794': attribute type 10 has an invalid length. [ 720.151159][T17046] netlink: 'syz.0.3795': attribute type 21 has an invalid length. [ 721.234117][T17060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.537041][T17069] delete_channel: no stack [ 721.894097][T17087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.008987][T17081] netlink: 'syz.0.3812': attribute type 10 has an invalid length. [ 722.016982][T17081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3812'. [ 722.052268][T17081] bridge0: port 1(team0) entered disabled state [ 722.193609][T17081] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 722.232427][T17093] IPv6: Can't replace route, no match found [ 722.247596][T17095] netlink: 'syz.1.3815': attribute type 10 has an invalid length. [ 722.256981][T17095] mac80211_hwsim hwsim9 O3ãc¤±: left allmulticast mode [ 722.279321][T17095] bond0: (slave O3ãc¤±): Opening slave failed [ 722.959941][T17110] delete_channel: no stack [ 723.089150][T17117] netlink: 'syz.2.3822': attribute type 3 has an invalid length. [ 723.101719][T17117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3822'. [ 723.655920][T17134] IPv6: Can't replace route, no match found [ 723.758835][T17131] netlink: 'syz.2.3827': attribute type 10 has an invalid length. [ 723.767185][T17131] mac80211_hwsim hwsim5 O3ãc¤±: left allmulticast mode [ 723.791414][T17131] bond0: (slave O3ãc¤±): Opening slave failed [ 724.319128][T17145] delete_channel: no stack [ 725.458825][T17164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3837'. [ 725.757439][T17169] netlink: 'syz.3.3839': attribute type 7 has an invalid length. [ 725.880898][T17173] netlink: 'syz.1.3846': attribute type 10 has an invalid length. [ 725.960441][T17176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.294707][T17185] delete_channel: no stack [ 728.184773][T17208] netlink: 'syz.1.3852': attribute type 21 has an invalid length. [ 728.821407][T17220] delete_channel: no stack [ 730.649416][T17243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.436169][T17271] netlink: 'syz.0.3871': attribute type 10 has an invalid length. [ 732.679087][T17304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.348856][T17470] netlink: 'syz.1.3936': attribute type 21 has an invalid length. [ 745.980217][T17490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3933'. [ 747.545075][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.552695][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.613090][T17521] netlink: 'syz.2.3944': attribute type 4 has an invalid length. [ 748.691205][T17520] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 748.708478][T17521] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3944'. [ 749.556180][T17539] netlink: 'syz.3.3951': attribute type 21 has an invalid length. [ 749.564243][T17539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3951'. [ 750.297864][T17566] netlink: 'syz.3.3955': attribute type 10 has an invalid length. [ 750.306007][T17566] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3955'. [ 750.333067][T17566] bond0: left allmulticast mode [ 750.337986][T17566] bond_slave_1: left allmulticast mode [ 750.359276][T17566] bridge_slave_1: left allmulticast mode [ 750.364974][T17566] dummy0: left allmulticast mode [ 750.437751][T17566] team0: Port device bond0 removed [ 750.708499][T17575] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3958'. [ 750.731090][T17578] netlink: 'syz.1.3958': attribute type 29 has an invalid length. [ 750.793612][T17578] netlink: 'syz.1.3958': attribute type 29 has an invalid length. [ 750.998615][T17582] netlink: 'syz.1.3958': attribute type 29 has an invalid length. [ 751.109153][T17575] netlink: 'syz.1.3958': attribute type 29 has an invalid length. [ 751.167039][T17578] netlink: 'syz.1.3958': attribute type 29 has an invalid length. [ 751.716981][T17587] team0: left allmulticast mode [ 751.733145][T17587] team_slave_0: left allmulticast mode [ 751.741746][T17587] team_slave_1: left allmulticast mode [ 751.747693][T17587] netdevsim netdevsim3 ªªªªªª: left allmulticast mode [ 751.754877][T17587] geneve1: left allmulticast mode [ 751.760986][T17587] team0: left promiscuous mode [ 751.765949][T17587] team_slave_0: left promiscuous mode [ 751.773435][T17587] team_slave_1: left promiscuous mode [ 751.780678][T17587] netdevsim netdevsim3 ªªªªªª: left promiscuous mode [ 751.789988][T17587] macvlan0: left promiscuous mode [ 751.797022][T17587] geneve1: left promiscuous mode [ 751.807882][T17587] bridge0: port 1(team0) entered disabled state [ 752.409952][T17612] netlink: 'syz.3.3967': attribute type 21 has an invalid length. [ 753.001642][T17621] bridge0: entered allmulticast mode [ 753.730265][T17626] netlink: 'syz.3.3972': attribute type 4 has an invalid length. [ 753.758601][T17626] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3972'. [ 754.238408][T17645] netlink: 'syz.2.3984': attribute type 12 has an invalid length. [ 754.246280][T17645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3984'. [ 755.473302][T17669] netlink: 'syz.1.3990': attribute type 21 has an invalid length. [ 755.680569][T17672] netlink: 'syz.1.3986': attribute type 10 has an invalid length. [ 755.695279][T17672] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3986'. [ 755.704991][T17672] bond_slave_1: entered promiscuous mode [ 755.710811][T17672] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 755.718752][T17672] bond0: entered promiscuous mode [ 755.723994][T17672] dummy0: entered promiscuous mode [ 755.732164][T17672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.821725][T17682] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 756.109108][T17677] netlink: 'syz.0.3985': attribute type 4 has an invalid length. [ 756.158223][T17677] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3985'. [ 756.893873][T17696] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 756.931140][T17696] netlink: 'syz.3.3991': attribute type 12 has an invalid length. [ 756.968164][T17696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3991'. [ 757.831336][T17728] netlink: 'syz.2.3997': attribute type 10 has an invalid length. [ 757.846299][T17728] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3997'. [ 757.857999][T17728] bond0: left allmulticast mode [ 757.863409][T17728] bond_slave_1: left allmulticast mode [ 757.869449][T17728] dummy0: left allmulticast mode [ 757.890049][T17728] team0: Port device bond0 removed [ 758.077193][T17735] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4007'. [ 758.112187][T17738] netlink: 'syz.3.4007': attribute type 29 has an invalid length. [ 758.374410][T17738] netlink: 'syz.3.4007': attribute type 29 has an invalid length. [ 758.423659][T17735] netlink: 'syz.3.4007': attribute type 29 has an invalid length. [ 758.473152][T17743] netlink: 'syz.3.4007': attribute type 29 has an invalid length. [ 758.548776][T17746] netlink: 'syz.3.4007': attribute type 29 has an invalid length. [ 759.400046][T17763] bridge0: entered allmulticast mode [ 760.594320][T17786] validate_nla: 1 callbacks suppressed [ 760.594337][T17786] netlink: 'syz.1.4008': attribute type 12 has an invalid length. [ 760.660857][T17786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4008'. [ 760.690430][T17780] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4010'. [ 760.933680][T17793] netlink: 'syz.0.4011': attribute type 10 has an invalid length. [ 760.955390][T17793] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4011'. [ 761.000809][T17796] netlink: 'syz.3.4012': attribute type 4 has an invalid length. [ 761.009383][T17793] bond0: left allmulticast mode [ 761.010370][T17796] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4012'. [ 761.019198][T17793] bond_slave_1: left allmulticast mode [ 761.032359][T17793] bridge_slave_1: left allmulticast mode [ 761.038293][T17793] dummy0: left allmulticast mode [ 761.052773][T17793] team0: Port device bond0 removed [ 761.320215][T17814] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 761.599379][T17819] netlink: 'syz.0.4019': attribute type 21 has an invalid length. [ 761.615428][T17817] bridge0: entered allmulticast mode [ 761.753559][T17821] netlink: 'syz.2.4020': attribute type 23 has an invalid length. [ 761.813983][T17821] netlink: 'syz.2.4020': attribute type 10 has an invalid length. [ 762.586290][T17835] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 762.626546][T17835] netlink: 'syz.0.4023': attribute type 12 has an invalid length. [ 762.654372][T17835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4023'. [ 763.092837][T17855] netlink: 'syz.1.4031': attribute type 29 has an invalid length. [ 763.168126][T17858] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4031'. [ 763.216448][T17855] netlink: 'syz.1.4031': attribute type 29 has an invalid length. [ 766.318627][T17862] netlink: 'syz.1.4031': attribute type 29 has an invalid length. [ 768.329330][T17884] netlink: 'syz.0.4038': attribute type 23 has an invalid length. [ 768.420482][T17884] netlink: 'syz.0.4038': attribute type 10 has an invalid length. [ 769.054664][T17901] netlink: 'syz.2.4041': attribute type 12 has an invalid length. [ 769.103113][T17901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4041'. [ 771.491059][T17948] netlink: 'syz.1.4055': attribute type 23 has an invalid length. [ 771.581972][T17948] netlink: 'syz.1.4055': attribute type 10 has an invalid length. [ 772.769165][T17966] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4060'. [ 772.976010][T17972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4062'. [ 773.280411][T17980] netlink: 'syz.3.4064': attribute type 29 has an invalid length. [ 773.386879][T17980] netlink: 'syz.3.4064': attribute type 29 has an invalid length. [ 773.475474][T17980] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4064'. [ 775.804849][T17982] netlink: 'syz.3.4064': attribute type 29 has an invalid length. [ 776.282755][T18007] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4074'. [ 776.537854][T18010] netlink: 'syz.3.4073': attribute type 23 has an invalid length. [ 776.587511][T18010] netlink: 'syz.3.4073': attribute type 10 has an invalid length. [ 777.851771][T18035] netlink: 'syz.2.4082': attribute type 29 has an invalid length. [ 777.904444][T18035] netlink: 'syz.2.4082': attribute type 29 has an invalid length. [ 777.945884][T18035] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4082'. [ 778.291293][T18040] netlink: 'syz.2.4082': attribute type 29 has an invalid length. [ 778.392418][T18047] netlink: 'syz.3.4084': attribute type 10 has an invalid length. [ 779.416531][T18056] netlink: 'syz.1.4087': attribute type 10 has an invalid length. [ 779.508896][T18056] bond0: (slave netdevsim0): Releasing backup interface [ 779.826669][T18065] netlink: 'syz.1.4089': attribute type 4 has an invalid length. [ 779.848298][T18065] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4089'. [ 780.053150][T18069] netlink: 'syz.3.4092': attribute type 23 has an invalid length. [ 780.081332][T18069] netlink: 'syz.3.4092': attribute type 10 has an invalid length. [ 781.715145][T18100] validate_nla: 2 callbacks suppressed [ 781.715163][T18100] netlink: 'syz.1.4105': attribute type 39 has an invalid length. [ 781.737282][T18096] netlink: 'syz.2.4103': attribute type 4 has an invalid length. [ 781.746085][T18096] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4103'. [ 782.119615][T18114] netlink: 'syz.1.4111': attribute type 10 has an invalid length. [ 784.660120][T18154] netlink: 'syz.2.4124': attribute type 39 has an invalid length. [ 784.745953][T18157] netlink: 'syz.0.4123': attribute type 4 has an invalid length. [ 784.755544][T18157] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4123'. [ 786.600678][T18198] netlink: 'syz.3.4137': attribute type 39 has an invalid length. [ 786.673069][T18201] netlink: 'syz.1.4138': attribute type 2 has an invalid length. [ 786.703010][T18201] netlink: 'syz.1.4138': attribute type 8 has an invalid length. [ 786.737870][T18201] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4138'. [ 786.782786][T18209] netlink: 'syz.2.4141': attribute type 29 has an invalid length. [ 786.855500][T18209] netlink: 'syz.2.4141': attribute type 29 has an invalid length. [ 786.878528][T18213] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4142'. [ 786.888096][T18210] netlink: 'syz.2.4141': attribute type 29 has an invalid length. [ 787.395487][T18213] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4142'. [ 787.700683][T18219] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4142'. [ 787.833176][T18216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4142'. [ 788.362283][T18235] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4150'. [ 789.460309][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4160'. [ 789.681987][T18268] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.4162'. [ 789.875650][T18277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4168'. [ 789.890656][T18277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4168'. [ 789.907517][T18277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4168'. [ 790.050017][T18281] netlink: 'syz.1.4170': attribute type 9 has an invalid length. [ 790.661765][T18290] netlink: 'syz.1.4180': attribute type 7 has an invalid length. [ 792.097096][T18338] __nla_validate_parse: 6 callbacks suppressed [ 792.097115][T18338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4187'. [ 792.217105][T18338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4187'. [ 792.248756][T18341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4187'. [ 792.331321][T18340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4187'. [ 793.205202][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4193'. [ 794.397311][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4205'. [ 796.166458][T18425] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4220'. [ 796.616459][T18452] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4229'. [ 796.643848][T18452] openvswitch: netlink: Flow key attribute not present in set flow. [ 797.231776][T18468] netlink: 'syz.2.4235': attribute type 9 has an invalid length. [ 797.263562][T18468] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4235'. [ 799.027219][T18499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4248'. [ 799.055261][T18499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4248'. [ 799.075998][T18499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4248'. [ 799.091180][T18499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4248'. [ 800.837457][T18544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4261'. [ 800.846728][T18544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4261'. [ 800.857657][T18544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4261'. [ 800.870077][T18544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4261'. [ 801.745619][T18569] syzkaller0: entered promiscuous mode [ 801.757466][T18569] syzkaller0: entered allmulticast mode [ 802.013236][T18575] netlink: 'syz.3.4273': attribute type 9 has an invalid length. [ 802.033190][T18575] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4273'. [ 803.921691][T18594] netlink: 'syz.1.4281': attribute type 1 has an invalid length. [ 803.935997][T18594] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4281'. [ 807.975784][T18720] syzkaller0: entered promiscuous mode [ 807.995858][T18720] syzkaller0: entered allmulticast mode [ 808.997916][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.004509][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.803919][T18764] syzkaller0: entered promiscuous mode [ 810.828924][T18764] syzkaller0: entered allmulticast mode [ 812.603713][T18771] syzkaller0: entered promiscuous mode [ 812.609261][T18771] syzkaller0: entered allmulticast mode [ 820.773449][T18911] pim6reg1: entered allmulticast mode [ 823.986306][T18939] syzkaller0: entered promiscuous mode [ 823.994913][T18939] syzkaller0: entered allmulticast mode [ 829.550058][T18978] syzkaller0: entered promiscuous mode [ 834.328270][T19036] netlink: 'syz.1.4445': attribute type 10 has an invalid length. [ 834.336271][T19036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4445'. [ 834.349969][T19036] bond0: (slave dummy0): Releasing backup interface [ 834.370735][T19036] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 835.224225][T19051] netlink: 'syz.2.4450': attribute type 21 has an invalid length. [ 835.244496][T19051] netlink: 'syz.2.4450': attribute type 12 has an invalid length. [ 835.258334][T19051] netlink: 'syz.2.4450': attribute type 13 has an invalid length. [ 835.270686][T19051] netlink: 'syz.2.4450': attribute type 14 has an invalid length. [ 835.280832][T19051] netlink: 'syz.2.4450': attribute type 15 has an invalid length. [ 835.306168][T19051] netlink: 'syz.2.4450': attribute type 16 has an invalid length. [ 835.326460][T19051] netlink: 12914 bytes leftover after parsing attributes in process `syz.2.4450'. [ 843.207488][T19146] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4478'. [ 845.810192][T19181] netlink: 'syz.2.4489': attribute type 10 has an invalid length. [ 845.822004][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4489'. [ 845.834626][T19181] bond0: (slave dummy0): Releasing backup interface [ 845.852395][T19181] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 849.778859][ T5798] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 850.698136][T19242] netlink: 'syz.0.4509': attribute type 1 has an invalid length. [ 850.716809][T19242] netlink: 'syz.0.4509': attribute type 4 has an invalid length. [ 850.727543][T19242] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4509'. [ 851.001648][T19255] netlink: 'syz.3.4513': attribute type 21 has an invalid length. [ 851.028366][T19255] netlink: 'syz.3.4513': attribute type 12 has an invalid length. [ 851.036634][T19255] netlink: 'syz.3.4513': attribute type 13 has an invalid length. [ 851.045521][T19255] netlink: 'syz.3.4513': attribute type 14 has an invalid length. [ 851.055715][T19255] netlink: 'syz.3.4513': attribute type 15 has an invalid length. [ 851.064428][T19255] netlink: 'syz.3.4513': attribute type 16 has an invalid length. [ 851.073199][T19255] netlink: 12914 bytes leftover after parsing attributes in process `syz.3.4513'. [ 852.980020][ T5798] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 854.869723][T19305] pim6reg1: entered promiscuous mode [ 854.882117][T19305] pim6reg1: entered allmulticast mode [ 855.542835][T19339] bond_slave_1: mtu less than device minimum [ 855.782237][T19346] syzkaller0: entered promiscuous mode [ 855.788460][T19346] syzkaller0: entered allmulticast mode [ 856.946516][T19373] netlink: 'syz.3.4558': attribute type 39 has an invalid length. [ 861.215465][T19481] netlink: 'syz.2.4595': attribute type 7 has an invalid length. [ 861.421321][T19488] pim6reg1: entered promiscuous mode [ 861.428653][T19488] pim6reg1: entered allmulticast mode [ 861.932866][T19506] sctp: [Deprecated]: syz.1.4603 (pid 19506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 861.932866][T19506] Use struct sctp_sack_info instead [ 865.492339][T19537] netlink: 'syz.1.4623': attribute type 1 has an invalid length. [ 865.502289][T19537] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4623'. [ 865.594369][T19543] syzkaller0: entered promiscuous mode [ 865.600549][T19543] syzkaller0: entered allmulticast mode [ 865.753505][T19549] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4618'. [ 867.509252][T19587] syzkaller0: entered promiscuous mode [ 867.514980][T19587] syzkaller0: entered allmulticast mode [ 868.159441][T19601] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4634'. [ 870.428770][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.435116][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.459662][T19681] lo: left promiscuous mode [ 876.464264][T19681] lo: entered allmulticast mode [ 878.157102][T19717] netlink: 'syz.1.4670': attribute type 10 has an invalid length. [ 879.048592][T19728] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4671'. [ 880.943098][T19761] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4693'. [ 880.979783][T19761] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 881.056762][T19761] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 881.916734][T19784] netlink: 'syz.2.4694': attribute type 29 has an invalid length. [ 882.245025][T19780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4692'. [ 882.258915][T19784] netlink: 'syz.2.4694': attribute type 29 has an invalid length. [ 882.267322][T19788] netlink: 'syz.0.4695': attribute type 10 has an invalid length. [ 882.280584][T19788] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 882.291911][T19788] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 882.333777][T19788] team0: Port device netdevsim0 removed [ 882.435652][T19788] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 882.466119][T19788] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 885.254964][T19850] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4712'. [ 886.747041][T19882] netlink: 'syz.3.4721': attribute type 10 has an invalid length. [ 886.763614][T19882] team0: Port device ªªªªªª removed [ 886.781820][T19882] netdevsim netdevsim3 ªªªªªª: entered promiscuous mode [ 886.792672][T19882] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 887.321904][T19896] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4725'. [ 887.870441][T19913] netlink: 'syz.1.4732': attribute type 10 has an invalid length. [ 887.961443][T19913] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 887.991908][T19913] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 888.006535][T19913] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 888.677332][T19928] netlink: 'syz.1.4736': attribute type 2 has an invalid length. [ 888.705773][T19928] netlink: 'syz.1.4736': attribute type 1 has an invalid length. [ 888.756021][T19928] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4736'. [ 889.245709][T19947] tun0: tun_chr_ioctl cmd 1074025677 [ 889.251527][T19947] tun0: linktype set to 776 [ 890.046388][T19968] netlink: 'syz.2.4745': attribute type 10 has an invalid length. [ 892.567943][T20036] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 892.769695][T20042] netlink: 'syz.3.4766': attribute type 2 has an invalid length. [ 892.778800][T20042] netlink: 'syz.3.4766': attribute type 1 has an invalid length. [ 892.797817][T20042] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4766'. [ 893.203001][T20055] netlink: 'syz.3.4770': attribute type 3 has an invalid length. [ 893.239782][T20055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4770'. [ 893.634673][T20068] netlink: 'syz.2.4776': attribute type 2 has an invalid length. [ 893.644474][T20068] netlink: 'syz.2.4776': attribute type 1 has an invalid length. [ 893.660012][T20068] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4776'. [ 893.675048][T20066] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4775'. [ 893.781092][T20071] netlink: 'syz.1.4777': attribute type 7 has an invalid length. [ 896.110950][T20116] netlink: 'syz.0.4788': attribute type 2 has an invalid length. [ 896.130538][T20116] netlink: 'syz.0.4788': attribute type 1 has an invalid length. [ 896.207079][T20116] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4788'. [ 898.005429][T20162] netlink: 'syz.1.4800': attribute type 3 has an invalid length. [ 898.019378][T20162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4800'. [ 898.296523][T20175] netlink: 'syz.1.4803': attribute type 2 has an invalid length. [ 898.306938][T20175] netlink: 'syz.1.4803': attribute type 1 has an invalid length. [ 898.318331][T20175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4803'. [ 901.157409][ T5798] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 901.247035][T20181] netlink: 'syz.2.4806': attribute type 10 has an invalid length. [ 901.365069][T20181] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 901.386425][T20181] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 902.209735][T20207] netlink: 'syz.3.4817': attribute type 2 has an invalid length. [ 902.231037][T20207] netlink: 'syz.3.4817': attribute type 1 has an invalid length. [ 902.272312][T20207] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4817'. [ 902.299940][T20206] netlink: 'syz.0.4815': attribute type 3 has an invalid length. [ 902.309805][T20206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4815'. [ 902.764838][T20220] netlink: 'syz.2.4830': attribute type 3 has an invalid length. [ 902.773467][T20220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4830'. [ 902.777108][T20217] netlink: 'syz.1.4820': attribute type 10 has an invalid length. [ 902.794534][T20217] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4820'. [ 902.999881][T20229] netlink: 'syz.3.4824': attribute type 10 has an invalid length. [ 904.450435][T20248] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 904.462106][T20248] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 905.570573][T20262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4834'. [ 905.679893][T20263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.708961][T20271] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 905.861750][T20278] netlink: 'syz.3.4841': attribute type 21 has an invalid length. [ 905.880969][T20278] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4841'. [ 907.811405][T20302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4848'. [ 914.485216][T20396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4876'. [ 915.485244][T20416] netlink: 'syz.2.4884': attribute type 10 has an invalid length. [ 915.498094][T20416] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4884'. [ 917.953351][T20474] netlink: 'syz.3.4900': attribute type 10 has an invalid length. [ 917.962314][T20474] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4900'. [ 920.579802][T20526] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 920.594696][T20526] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 921.475148][T20543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4923'. [ 923.512789][T20577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4937'. [ 923.526094][T20580] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 923.535555][T20580] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 923.547627][T20580] batman_adv: batadv0: Interface activated: wlan0 [ 925.208557][T20614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4948'. [ 925.553830][T20625] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 925.584893][T20625] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 930.094659][T20724] netlink: 'syz.0.4982': attribute type 10 has an invalid length. [ 930.104232][T20724] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4982'. [ 931.861783][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.870852][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.235131][T20788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5001'. [ 936.295247][T20925] netlink: 'syz.1.5046': attribute type 10 has an invalid length. [ 936.307355][T20925] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5046'. [ 937.668937][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5059'. [ 947.387452][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5142'. [ 993.314359][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.320815][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1030.454893][T23266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5853'. [ 1040.884427][T23569] IPv6: pim6reg1: Disabled Multicast RS [ 1048.075943][T23731] IPv6: pim6reg1: Disabled Multicast RS [ 1049.993095][T23782] IPv6: pim6reg1: Disabled Multicast RS [ 1050.682051][T23801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1051.776122][T23829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6037'. [ 1054.781548][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.787902][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.977914][T24111] IPv6: …: Disabled Multicast RS [ 1067.892135][T24246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'. [ 1070.158817][T24305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6163'. [ 1071.085054][T24342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6178'. [ 1077.767254][T24512] delete_channel: no stack [ 1079.174041][T24550] delete_channel: no stack [ 1079.544290][T24562] IPv6: pim6reg1: Disabled Multicast RS [ 1080.380469][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6263'. [ 1080.841443][T24607] delete_channel: no stack [ 1081.439546][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1085.075855][T24747] delete_channel: no stack [ 1086.277280][T24763] delete_channel: no stack [ 1087.136816][T24777] delete_channel: no stack [ 1093.590403][T24951] netlink: 'syz.3.6376': attribute type 10 has an invalid length. [ 1094.470912][T24981] netlink: 'syz.2.6395': attribute type 10 has an invalid length. [ 1095.415684][T25018] netlink: 'syz.2.6400': attribute type 10 has an invalid length. [ 1095.512702][T25019] netlink: 'syz.3.6401': attribute type 10 has an invalid length. [ 1096.630384][T25051] netlink: 'syz.1.6410': attribute type 10 has an invalid length. [ 1096.974960][T25057] netlink: 'syz.1.6411': attribute type 10 has an invalid length. [ 1097.301678][T25066] netlink: 'syz.0.6423': attribute type 10 has an invalid length. [ 1098.815847][T25098] netlink: 'syz.0.6424': attribute type 10 has an invalid length. [ 1099.406493][T25114] netlink: 'syz.2.6429': attribute type 10 has an invalid length. [ 1100.774102][T25125] delete_channel: no stack [ 1101.419082][T25149] delete_channel: no stack [ 1101.836389][T25169] netlink: 'syz.2.6446': attribute type 10 has an invalid length. [ 1102.320437][T25178] netlink: 'syz.3.6447': attribute type 10 has an invalid length. [ 1104.575096][T25215] netlink: 'syz.1.6458': attribute type 10 has an invalid length. [ 1106.353304][T25257] netlink: 'syz.0.6473': attribute type 10 has an invalid length. [ 1107.587898][T25262] delete_channel: no stack [ 1109.375638][T25325] netlink: 'syz.3.6485': attribute type 10 has an invalid length. [ 1110.704917][T25356] netlink: 'syz.1.6498': attribute type 10 has an invalid length. [ 1111.913908][T25378] delete_channel: no stack [ 1111.985240][T25389] netlink: 'syz.3.6509': attribute type 10 has an invalid length. [ 1112.371296][T25401] netlink: 'syz.1.6513': attribute type 10 has an invalid length. [ 1113.758018][T25448] netlink: 'syz.3.6527': attribute type 10 has an invalid length. [ 1114.784495][T25483] netlink: 'syz.2.6533': attribute type 10 has an invalid length. [ 1115.737342][T25507] netlink: 'syz.2.6542': attribute type 10 has an invalid length. [ 1116.181678][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.189667][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.321770][T25527] netlink: 'syz.0.6548': attribute type 10 has an invalid length. [ 1116.606979][T25533] netlink: 'syz.1.6547': attribute type 10 has an invalid length. [ 1118.171601][T25582] netlink: 'syz.2.6561': attribute type 10 has an invalid length. [ 1118.180255][T25583] netlink: 'syz.0.6559': attribute type 10 has an invalid length. [ 1118.699340][T25592] netlink: 'syz.2.6562': attribute type 10 has an invalid length. [ 1119.094335][T25598] netlink: 'syz.3.6563': attribute type 10 has an invalid length. [ 1119.635863][T25621] netlink: 'syz.1.6571': attribute type 10 has an invalid length. [ 1120.304052][T25632] delete_channel: no stack [ 1120.834759][T25652] netlink: 'syz.0.6583': attribute type 10 has an invalid length. [ 1121.296207][T25672] netlink: 'syz.2.6595': attribute type 10 has an invalid length. [ 1121.729888][T25677] delete_channel: no stack [ 1122.294518][T25679] delete_channel: no stack [ 1122.601199][T25701] netlink: 'syz.3.6597': attribute type 10 has an invalid length. [ 1124.888426][T25771] netlink: 'syz.0.6614': attribute type 10 has an invalid length. [ 1126.018491][T25794] netlink: 'syz.2.6622': attribute type 10 has an invalid length. [ 1126.611432][T25823] netlink: 'syz.3.6629': attribute type 10 has an invalid length. [ 1127.195289][T25842] netlink: 'syz.0.6634': attribute type 10 has an invalid length. [ 1127.497119][T25851] netlink: 'syz.2.6636': attribute type 10 has an invalid length. [ 1128.077991][T25870] netlink: 'syz.3.6641': attribute type 10 has an invalid length. [ 1129.376349][T25913] netlink: 'syz.0.6654': attribute type 10 has an invalid length. [ 1129.907265][T25925] netlink: 'syz.0.6655': attribute type 10 has an invalid length. [ 1130.523776][T25937] netlink: 'syz.3.6662': attribute type 10 has an invalid length. [ 1131.210756][T25965] netlink: 'syz.1.6670': attribute type 10 has an invalid length. [ 1133.470618][T26024] netlink: 'syz.3.6685': attribute type 10 has an invalid length. [ 1134.495252][T26038] delete_channel: no stack [ 1136.644967][T26108] netlink: 'syz.1.6712': attribute type 10 has an invalid length. [ 1136.990693][T26102] delete_channel: no stack [ 1138.442761][T26157] netlink: 'syz.1.6728': attribute type 10 has an invalid length. [ 1139.234588][T26178] netlink: 'syz.0.6736': attribute type 10 has an invalid length. [ 1141.574992][T26221] netlink: 'syz.2.6748': attribute type 10 has an invalid length. [ 1143.835640][T26274] netlink: 'syz.1.6764': attribute type 10 has an invalid length. [ 1143.855812][T26273] netlink: 'syz.0.6763': attribute type 10 has an invalid length. [ 1145.556381][T26317] netlink: 'syz.0.6779': attribute type 10 has an invalid length. [ 1147.101553][T26357] netlink: 'syz.0.6790': attribute type 10 has an invalid length. [ 1151.503536][T26474] netlink: 'syz.2.6831': attribute type 10 has an invalid length. [ 1152.860307][T26507] netlink: 'syz.1.6843': attribute type 10 has an invalid length. [ 1154.422041][T26542] netlink: 'syz.2.6853': attribute type 10 has an invalid length. [ 1154.825785][T26552] netlink: 'syz.0.6857': attribute type 10 has an invalid length. [ 1156.863974][T26614] netlink: 'syz.0.6876': attribute type 10 has an invalid length. [ 1158.989254][T26681] netlink: 'syz.1.6895': attribute type 10 has an invalid length. [ 1159.605631][T26700] netlink: 'syz.3.6899': attribute type 10 has an invalid length. [ 1162.966588][T26793] delete_channel: no stack [ 1165.832337][T26865] netlink: 'syz.0.6946': attribute type 10 has an invalid length. [ 1166.242850][T26875] netlink: 'syz.1.6951': attribute type 10 has an invalid length. [ 1168.383224][T26917] delete_channel: no stack [ 1170.441252][T26969] netlink: 'syz.1.6984': attribute type 10 has an invalid length. [ 1171.744975][T26990] delete_channel: no stack [ 1172.554210][T27017] netlink: 'syz.1.7001': attribute type 10 has an invalid length. [ 1173.040866][T27023] delete_channel: no stack [ 1173.738929][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1173.747199][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1173.756223][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1173.764260][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1173.771906][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1173.781204][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1173.917558][T27037] chnl_net:caif_netlink_parms(): no params data found [ 1173.975562][T27037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.982839][T27037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.990532][T27037] bridge_slave_0: entered allmulticast mode [ 1173.997255][T27037] bridge_slave_0: entered promiscuous mode [ 1174.005765][T27037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.012956][T27037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.022572][T27037] bridge_slave_1: entered allmulticast mode [ 1174.030208][T27037] bridge_slave_1: entered promiscuous mode [ 1174.060406][T27037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.073446][T27037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.107532][T27037] team0: Port device team_slave_0 added [ 1174.117546][T27037] team0: Port device team_slave_1 added [ 1174.147569][T27037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.154632][T27037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.181148][T27037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.194473][T27037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.201553][T27037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.227569][T27037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.299461][T27037] hsr_slave_0: entered promiscuous mode [ 1174.305711][T27037] hsr_slave_1: entered promiscuous mode [ 1174.312051][T27037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1174.321718][T27037] Cannot create hsr debugfs directory [ 1174.437653][ T3464] bond0: (slave netdevsim0): Releasing backup interface [ 1174.445444][ T3464] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1175.502897][T27037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1175.512898][T27037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1175.522450][T27037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1175.532195][T27037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1175.615124][T27037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.659652][T27037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.671131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.679194][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.694304][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.701496][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.793471][ T3464] batman_adv: batadv0: Interface deactivated: wlan0 [ 1175.829949][ T3464] batman_adv: batadv0: Removing interface: wlan0 [ 1175.859968][ T5798] Bluetooth: hci1: command tx timeout [ 1175.925965][ T3464] hsr_slave_1: left promiscuous mode [ 1175.933020][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.940803][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.950010][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.957410][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.966272][ T3464] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1175.973549][ T3464] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1175.989955][ T3464] veth1_vlan: left promiscuous mode [ 1175.995616][ T3464] veth0_vlan: left promiscuous mode [ 1176.231336][ T3464] geneve1 (unregistering): left promiscuous mode [ 1176.237862][ T3464] geneve1 (unregistering): left allmulticast mode [ 1176.249670][ T3464] team0 (unregistering): Port device geneve1 removed [ 1176.529163][ T3464] team_slave_1 (unregistering): left promiscuous mode [ 1176.536010][ T3464] team_slave_1 (unregistering): left allmulticast mode [ 1176.546257][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 1176.585617][ T3464] team_slave_0 (unregistering): left promiscuous mode [ 1176.595478][ T3464] team_slave_0 (unregistering): left allmulticast mode [ 1176.605181][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 1176.647975][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.657793][ T3464] bond_slave_1 (unregistering): left promiscuous mode [ 1176.737191][ T3464] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1176.746770][ T3464] bridge_slave_1 (unregistering): left promiscuous mode [ 1176.834751][ T3464] batadv0 (unregistering): left allmulticast mode [ 1176.844092][ T3464] team0 (unregistering): Port device batadv0 removed [ 1176.873920][ T3464] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1177.084574][ T3464] bond0 (unregistering): Released all slaves [ 1177.130318][T27037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.210556][T27037] veth0_vlan: entered promiscuous mode [ 1177.223299][T27037] veth1_vlan: entered promiscuous mode [ 1177.266710][T27037] veth0_macvtap: entered promiscuous mode [ 1177.277826][T27037] veth1_macvtap: entered promiscuous mode [ 1177.304106][T27037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.319389][T27037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.331372][T27037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.341678][T27037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.350565][T27037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.360056][T27037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.427482][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.441080][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.465689][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.473820][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.632455][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.639265][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.938304][ T5798] Bluetooth: hci1: command tx timeout [ 1178.087747][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1178.097351][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1178.117708][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1178.131082][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1178.152262][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1178.160027][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1178.479819][T27106] chnl_net:caif_netlink_parms(): no params data found [ 1178.561337][T27118] IPv6: …: Disabled Multicast RS [ 1178.651449][T27106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.658969][T27106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.666258][T27106] bridge_slave_0: entered allmulticast mode [ 1178.674062][T27106] bridge_slave_0: entered promiscuous mode [ 1178.688033][T27106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.696845][T27106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.704172][T27106] bridge_slave_1: entered allmulticast mode [ 1178.711836][T27106] bridge_slave_1: entered promiscuous mode [ 1178.757301][T27106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.775456][T27106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.847003][T27106] team0: Port device team_slave_0 added [ 1178.872717][T27106] team0: Port device team_slave_1 added [ 1178.887952][T27129] delete_channel: no stack [ 1178.938091][T27106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.947656][T27106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.981031][T27106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.009293][T27106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.046640][T27106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1179.073200][T27106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.131554][T27106] hsr_slave_0: entered promiscuous mode [ 1179.138926][T27106] hsr_slave_1: entered promiscuous mode [ 1179.145525][T27106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.153909][T27106] Cannot create hsr debugfs directory [ 1179.296842][ T3464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.451687][ T3464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.570757][ T3464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.607761][T27150] netlink: 'syz.3.7028': attribute type 10 has an invalid length. [ 1179.668940][ T3464] bond0: (slave netdevsim0): Releasing backup interface [ 1179.676610][ T3464] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1179.687653][ T3464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.018964][ T5798] Bluetooth: hci1: command tx timeout [ 1180.060417][T27161] IPv6: …: Disabled Multicast RS [ 1180.192059][ T5798] Bluetooth: hci4: command tx timeout [ 1180.860288][T27187] netlink: 'syz.0.7038': attribute type 10 has an invalid length. [ 1180.888037][T27187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.896724][T27187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.932320][T27187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.939603][T27187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.948038][T27187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.955285][T27187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.992924][T27187] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1181.273747][T27194] netlink: 'syz.1.7039': attribute type 10 has an invalid length. [ 1181.419934][T27106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1181.430415][T27106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1181.462101][T27106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1181.518554][T27106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1181.919692][T27106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.999912][T27106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.022903][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.030115][T10121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.079246][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.086445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.102351][ T5798] Bluetooth: hci1: command tx timeout [ 1182.260273][ T5798] Bluetooth: hci4: command tx timeout [ 1182.304068][T27235] IPv6: …: Disabled Multicast RS [ 1182.515749][ T3464] team0: left allmulticast mode [ 1182.528298][ T3464] team_slave_0: left allmulticast mode [ 1182.536194][ T3464] team_slave_1: left allmulticast mode [ 1182.549544][ T3464] geneve1: left allmulticast mode [ 1182.566328][ T3464] team0: left promiscuous mode [ 1182.582331][ T3464] team_slave_0: left promiscuous mode [ 1182.588806][ T3464] team_slave_1: left promiscuous mode [ 1182.594370][ T3464] geneve1: left promiscuous mode [ 1182.601787][ T3464] bridge0: port 1(team0) entered disabled state [ 1182.614553][ T3464] hsr_slave_0: left promiscuous mode [ 1182.621265][ T3464] hsr_slave_1: left promiscuous mode [ 1182.637089][ T3464] veth1_vlan: left promiscuous mode [ 1182.642652][ T3464] veth0_vlan: left promiscuous mode [ 1182.982149][ T3464] team0 (unregistering): Port device geneve1 removed [ 1183.419793][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 1183.461615][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 1183.500990][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.511644][ T3464] bond_slave_1 (unregistering): left promiscuous mode [ 1183.900631][ T3464] bond0 (unregistering): Released all slaves [ 1183.948612][T27251] netlink: 'syz.0.7054': attribute type 10 has an invalid length. [ 1183.984780][T27251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.992239][T27251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.133730][T27106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.266431][T27106] veth0_vlan: entered promiscuous mode [ 1184.280471][T27106] veth1_vlan: entered promiscuous mode [ 1184.307586][T27106] veth0_macvtap: entered promiscuous mode [ 1184.317025][T27106] veth1_macvtap: entered promiscuous mode [ 1184.340208][T27106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1184.350388][ T5798] Bluetooth: hci4: command tx timeout [ 1184.350719][T27106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.371702][T27106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.385291][T27106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.395895][T27106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.407497][T27106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.462041][T27106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.472083][T27106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.481233][T27106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.490548][T27106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.554285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.572238][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.607846][T10121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.616063][T10121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.311667][T27272] netlink: 'syz.2.7053': attribute type 10 has an invalid length. [ 1185.341291][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1185.360440][T27272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.368127][T27272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.378697][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1185.390706][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1185.406679][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1185.414602][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1185.423384][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1185.424300][T27272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.437586][T27272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.445273][T27272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.452505][T27272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.479938][T27272] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1185.627742][T27282] netlink: 'syz.0.7056': attribute type 10 has an invalid length. [ 1186.003549][T27273] chnl_net:caif_netlink_parms(): no params data found [ 1186.102461][ T3464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.198044][ T3464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.310655][ T3464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.325947][T27273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.339003][T27273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.346289][T27273] bridge_slave_0: entered allmulticast mode [ 1186.354144][T27273] bridge_slave_0: entered promiscuous mode [ 1186.368613][T27273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.381326][T27273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.391555][T27273] bridge_slave_1: entered allmulticast mode [ 1186.402150][T27273] bridge_slave_1: entered promiscuous mode [ 1186.427612][ T5798] Bluetooth: hci4: command tx timeout [ 1186.453191][ T3464] bond0: (slave netdevsim0): Releasing backup interface [ 1186.470110][ T3464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.541495][T27273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.557598][T27273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.662975][T27273] team0: Port device team_slave_0 added [ 1186.674064][T27273] team0: Port device team_slave_1 added [ 1187.540093][ T5798] Bluetooth: hci2: command tx timeout [ 1187.638850][T27273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.650764][T27273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.701956][T27273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.398989][T27273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.417016][T27273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.469722][T27273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.618404][ T5798] Bluetooth: hci2: command tx timeout [ 1189.834335][T27273] hsr_slave_0: entered promiscuous mode [ 1189.875174][T27273] hsr_slave_1: entered promiscuous mode [ 1191.718264][ T5798] Bluetooth: hci2: command tx timeout [ 1193.298768][ T3464] hsr_slave_1: left promiscuous mode [ 1193.630552][ T3464] veth1_vlan: left promiscuous mode [ 1193.635862][ T3464] veth0_vlan: left promiscuous mode [ 1193.778464][ T5798] Bluetooth: hci2: command tx timeout [ 1196.539204][ T3464] geneve1 (unregistering): left promiscuous mode [ 1196.545919][ T3464] geneve1 (unregistering): left allmulticast mode [ 1196.614785][ T3464] team0 (unregistering): Port device geneve1 removed [ 1197.217379][ T3464] team_slave_1 (unregistering): left promiscuous mode [ 1197.224369][ T3464] team_slave_1 (unregistering): left allmulticast mode [ 1197.235871][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 1197.280054][ T3464] team_slave_0 (unregistering): left promiscuous mode [ 1197.286893][ T3464] team_slave_0 (unregistering): left allmulticast mode [ 1197.297445][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 1197.337776][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.738041][ T3464] bond0 (unregistering): Released all slaves [ 1198.267129][T27417] netlink: 'syz.0.7093': attribute type 10 has an invalid length. [ 1199.315571][T27273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1199.389578][T27273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1199.445944][T27273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1199.508307][T27273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1200.021048][T27273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.080736][T27273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.122121][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.129324][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.171490][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.178706][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.406182][T27273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.708845][T27273] veth0_vlan: entered promiscuous mode [ 1201.762081][T27273] veth1_vlan: entered promiscuous mode [ 1202.081037][T27273] veth0_macvtap: entered promiscuous mode [ 1202.138004][T27273] veth1_macvtap: entered promiscuous mode [ 1202.272137][T27273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1202.318390][T27273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.336110][T27273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1202.359495][T27273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.389855][T27273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1202.446760][T27273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.482044][T27273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.508337][T27273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.530967][T27273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.555843][T27273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1202.583335][T27273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.598253][T27273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.606987][T27273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.666026][T27273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.896864][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.929392][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.008705][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1203.029280][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.223984][T27573] ref_ctr_offset mismatch. inode: 0x239c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 1204.463343][T10111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.762626][T10111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.072124][T10111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.398918][T10111] bond0: (slave ªªªªªª): Releasing backup interface [ 1205.478612][T10111] netdevsim netdevsim3 ªªªªªª (unregistering): left promiscuous mode [ 1205.539812][T10111] netdevsim netdevsim3 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.712717][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1206.740415][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1206.754874][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1206.769695][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1206.798422][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1206.821466][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1207.858244][T27658] veth0_vlan: entered allmulticast mode [ 1208.431051][T27605] chnl_net:caif_netlink_parms(): no params data found [ 1208.901859][ T5798] Bluetooth: hci0: command tx timeout [ 1210.814393][T27605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.822299][T27605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.829951][T27605] bridge_slave_0: entered allmulticast mode [ 1210.837229][T27605] bridge_slave_0: entered promiscuous mode [ 1210.846429][T27605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.855168][T27605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.862738][T27605] bridge_slave_1: entered allmulticast mode [ 1210.870275][T27605] bridge_slave_1: entered promiscuous mode [ 1210.957942][T27732] netlink: 'syz.2.7183': attribute type 39 has an invalid length. [ 1210.978809][ T5798] Bluetooth: hci0: command tx timeout [ 1211.025672][T27605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.046504][T27605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.131449][T27605] team0: Port device team_slave_0 added [ 1211.179364][T27605] team0: Port device team_slave_1 added [ 1211.263701][T27741] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7187'. [ 1211.306739][T27741] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7187'. [ 1211.348849][T27746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7187'. [ 1211.359622][T27605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.367071][T27605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.443276][T27605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.510042][T27605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.536805][T27605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.587374][T27605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.723689][T27605] hsr_slave_0: entered promiscuous mode [ 1211.746112][T27605] hsr_slave_1: entered promiscuous mode [ 1211.780021][T27605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1211.794750][T27605] Cannot create hsr debugfs directory [ 1211.805293][T27764] netlink: 'syz.1.7194': attribute type 10 has an invalid length. [ 1212.106299][T27764] team0 (unregistering): Port device team_slave_0 removed [ 1212.124941][T27764] team0 (unregistering): Port device team_slave_1 removed [ 1212.493531][T10111] hsr_slave_0: left promiscuous mode [ 1212.511709][T10111] hsr_slave_1: left promiscuous mode [ 1212.554980][T10111] veth1_vlan: left allmulticast mode [ 1212.571854][T10111] veth1_vlan: left promiscuous mode [ 1212.577174][T10111] veth0_vlan: left promiscuous mode [ 1213.069404][ T5798] Bluetooth: hci0: command tx timeout [ 1213.161407][T10111] team0 (unregistering): Port device geneve1 removed [ 1213.346381][T10111] team0 (unregistering): Port device macvlan0 removed [ 1213.796407][T10111] team0 (unregistering): Port device team_slave_1 removed [ 1213.875073][T10111] team0 (unregistering): Port device team_slave_0 removed [ 1213.947944][T10111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1213.961710][T10111] bond_slave_1 (unregistering): left promiscuous mode [ 1214.070941][T10111] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1214.080495][T10111] bridge_slave_1 (unregistering): left promiscuous mode [ 1214.205961][T10111] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1214.442884][T10111] bond0 (unregistering): Released all slaves [ 1215.118699][T27865] dvmrp1: tun_chr_ioctl cmd 2147767521 [ 1215.138401][ T5798] Bluetooth: hci0: command tx timeout [ 1215.488393][T27887] bridge0: port 3(ip6gretap0) entered blocking state [ 1215.508972][T27887] bridge0: port 3(ip6gretap0) entered disabled state [ 1215.515899][T27887] ip6gretap0: entered allmulticast mode [ 1215.546974][T27887] ip6gretap0: entered promiscuous mode [ 1215.569100][T27887] bridge0: port 3(ip6gretap0) entered blocking state [ 1215.575987][T27887] bridge0: port 3(ip6gretap0) entered forwarding state [ 1215.777193][T27605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1215.800182][T27605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1215.815682][T27605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1215.841940][T27605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1216.121537][T27605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.210120][T27605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.240427][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.247615][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.300247][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.307399][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.413681][T27931] tap0: tun_chr_ioctl cmd 1074025675 [ 1216.434105][T27931] tap0: persist enabled [ 1216.469430][T27931] tap0: tun_chr_ioctl cmd 1074025675 [ 1216.474776][T27931] tap0: persist enabled [ 1219.505714][T27605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.657648][T27605] veth0_vlan: entered promiscuous mode [ 1219.738853][T27605] veth1_vlan: entered promiscuous mode [ 1219.838332][T27605] veth0_macvtap: entered promiscuous mode [ 1219.874767][T27605] veth1_macvtap: entered promiscuous mode [ 1219.924188][T27605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.952995][T27605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.990479][T27605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.016215][T27605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.037466][T27605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.063411][T27605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.100109][T27605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.134228][T27605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.154171][T27605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.180215][T27605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.201669][T27605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.222977][T27605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.246047][T27605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.277188][T27605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.601075][T27605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.626723][T27605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.655979][T27605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.683287][T27605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.056663][T10111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.079664][T10111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.131568][T17297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.162590][T17297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.435725][T28170] dvmrp1: tun_chr_ioctl cmd 35108 [ 1226.837747][T28310] netlink: 'syz.2.7415': attribute type 10 has an invalid length. [ 1226.845978][T28310] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7415'. [ 1226.878539][T28310] bond0: entered promiscuous mode [ 1226.883628][T28310] bond_slave_0: entered promiscuous mode [ 1226.900978][T28310] bond_slave_1: entered promiscuous mode [ 1226.914880][T28310] bridge0: entered promiscuous mode [ 1226.921260][T28310] bridge0: port 4(bond0) entered blocking state [ 1226.952649][T28310] bridge0: port 4(bond0) entered disabled state [ 1226.980213][T28310] bond0: entered allmulticast mode [ 1226.985392][T28310] bond_slave_0: entered allmulticast mode [ 1226.996007][T28310] bond_slave_1: entered allmulticast mode [ 1227.001945][T28310] bridge0: entered allmulticast mode [ 1227.017028][T28310] bond0: left allmulticast mode [ 1227.028991][T28310] bond_slave_0: left allmulticast mode [ 1227.034505][T28310] bond_slave_1: left allmulticast mode [ 1227.052306][T28310] bridge0: left allmulticast mode [ 1228.045641][T28361] syz.3.7441[28361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1228.045768][T28361] syz.3.7441[28361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1228.430994][T28381] syz.0.7451[28381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1228.463365][T28381] syz.0.7451[28381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1229.112134][T28424] pim6reg1: entered promiscuous mode [ 1229.152570][T28424] pim6reg1: entered allmulticast mode [ 1229.309475][T28431] pim6reg1: entered promiscuous mode [ 1229.314833][T28431] pim6reg1: entered allmulticast mode [ 1229.614343][T28442] syzkaller0: entered promiscuous mode [ 1229.621253][T28442] syzkaller0: entered allmulticast mode [ 1230.513972][T28447] syzkaller0: entered promiscuous mode [ 1230.523788][T28447] syzkaller0: entered allmulticast mode [ 1239.071483][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.077833][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.803467][T28612] syzkaller0: entered promiscuous mode [ 1243.842666][T28612] syzkaller0: entered allmulticast mode [ 1247.323747][T28660] veth1_macvtap: left promiscuous mode [ 1247.370219][T28660] veth1_macvtap: entered promiscuous mode [ 1247.402704][T28660] macsec0: entered promiscuous mode [ 1247.435179][T28660] macsec0: entered allmulticast mode [ 1247.444173][T28660] veth1_macvtap: entered allmulticast mode [ 1248.714388][T28679] syzkaller0: entered promiscuous mode [ 1248.743527][T28679] syzkaller0: entered allmulticast mode [ 1250.027544][T28703] sit0: entered allmulticast mode [ 1252.358409][T28738] veth0_vlan: entered allmulticast mode [ 1253.316758][T28754] bond_slave_1: mtu less than device minimum [ 1256.453445][T28759] sit0: entered allmulticast mode [ 1266.303580][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1266.313902][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1266.378255][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1266.387088][T28849] veth1_macvtap: left promiscuous mode [ 1266.405495][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1266.415088][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1266.438584][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1267.928427][T28846] chnl_net:caif_netlink_parms(): no params data found [ 1268.386909][T28846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.414952][T28846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.491581][T28846] bridge_slave_0: entered allmulticast mode [ 1268.514830][ T5798] Bluetooth: hci3: command tx timeout [ 1268.572700][T28846] bridge_slave_0: entered promiscuous mode [ 1268.694115][T28846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.759229][T28846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.861832][T28846] bridge_slave_1: entered allmulticast mode [ 1268.936677][T28846] bridge_slave_1: entered promiscuous mode [ 1269.285383][T17297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.370281][T28846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.393430][T28846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.493135][T17297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.536227][T28846] team0: Port device team_slave_0 added [ 1269.591812][T17297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.613546][T28846] team0: Port device team_slave_1 added [ 1269.679469][T17297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.695171][T28846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.702839][T28846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.729997][T28846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.795198][T28846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.802530][T28846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.835422][T28846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1270.578319][ T5798] Bluetooth: hci3: command tx timeout [ 1272.664095][ T5798] Bluetooth: hci3: command tx timeout [ 1272.690607][T28923] bond_slave_1: mtu less than device minimum [ 1272.750385][T28846] hsr_slave_0: entered promiscuous mode [ 1272.762773][T28846] hsr_slave_1: entered promiscuous mode [ 1272.774357][T28846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1272.794414][T28846] Cannot create hsr debugfs directory [ 1274.063761][T28846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1274.221121][T28846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1274.477916][T28846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1274.738936][ T5798] Bluetooth: hci3: command tx timeout [ 1275.344813][T28846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1276.727823][T17297] hsr_slave_0: left promiscuous mode [ 1276.781645][T17297] hsr_slave_1: left promiscuous mode [ 1276.804782][T17297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.812931][T17297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.857760][T17297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.878010][T17297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.921236][T17297] bridge_slave_1: left allmulticast mode [ 1276.935130][T17297] bridge_slave_1: left promiscuous mode [ 1276.941456][T17297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.955926][T17297] bridge_slave_0: left allmulticast mode [ 1276.962454][T17297] bridge_slave_0: left promiscuous mode [ 1276.968820][T17297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.068903][T17297] veth1_macvtap: left allmulticast mode [ 1277.074780][T17297] veth1_macvtap: left promiscuous mode [ 1277.086541][T17297] veth0_macvtap: left promiscuous mode [ 1277.092572][T17297] veth1_vlan: left promiscuous mode [ 1277.105453][T17297] veth0_vlan: left promiscuous mode [ 1277.865377][T17297] team0 (unregistering): Port device team_slave_1 removed [ 1277.908336][T17297] team0 (unregistering): Port device team_slave_0 removed [ 1277.964827][T17297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.007782][T17297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.506648][T17297] bond0 (unregistering): Released all slaves [ 1278.587174][T29000] syzkaller0: entered promiscuous mode [ 1280.373015][T29032] tun0: tun_chr_ioctl cmd 2147767507 [ 1280.544367][T28846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.622382][T28846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.695913][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.703137][T10123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.735110][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.742365][T10121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.809569][T29048] pim6reg1: entered promiscuous mode [ 1280.835900][T29048] pim6reg1: entered allmulticast mode [ 1281.582965][T28846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.607959][T29079] pim6reg1: entered promiscuous mode [ 1281.638602][T29079] pim6reg1: entered allmulticast mode [ 1281.653138][T29081] syz.0.7700[29081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1281.655391][T29081] syz.0.7700[29081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1282.627181][T28846] veth0_vlan: entered promiscuous mode [ 1282.712003][T28846] veth1_vlan: entered promiscuous mode [ 1282.811060][T28846] veth0_macvtap: entered promiscuous mode [ 1282.839233][T28846] veth1_macvtap: entered promiscuous mode [ 1282.955220][T28846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.968764][T28846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.985437][T28846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.044168][T28846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.057860][T28846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.087539][T28846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.126215][T28846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.197199][T28846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.271796][T28846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.310176][T28846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.365859][T28846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.413891][T28846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.478338][T28846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.538965][T28846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.611201][T28846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.684562][T28846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.715967][T28846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.746022][T28846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.253124][T29035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.302774][T29035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.925558][ T2111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.933648][ T2111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.945399][T29161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.119145][T29168] sit0: entered promiscuous mode [ 1291.881684][T29216] sit0: entered allmulticast mode [ 1291.902375][T29217] sit0: entered promiscuous mode [ 1297.462224][ T5106] Bluetooth: hci1: command 0x0406 tx timeout [ 1298.954731][T29295] pim6reg1: entered promiscuous mode [ 1298.960350][T29295] pim6reg1: entered allmulticast mode [ 1300.686959][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.693382][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.825663][ T5106] Bluetooth: hci4: command 0x0406 tx timeout [ 1307.703019][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 1311.012284][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1311.022519][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1311.031348][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1311.050464][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1311.059306][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1311.066719][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1312.481442][T29445] bond_slave_1: mtu less than device minimum [ 1312.916459][T29457] syz.2.7798[29457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1312.916592][T29457] syz.2.7798[29457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1313.138545][ T5798] Bluetooth: hci0: command tx timeout [ 1314.305643][T29468] syzkaller0: entered promiscuous mode [ 1314.320320][T29468] syzkaller0: entered allmulticast mode [ 1315.219015][ T5798] Bluetooth: hci0: command tx timeout [ 1316.875017][T29433] chnl_net:caif_netlink_parms(): no params data found [ 1317.298406][ T5798] Bluetooth: hci0: command tx timeout [ 1317.619453][T29433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.663506][T29433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.690360][T29433] bridge_slave_0: entered allmulticast mode [ 1317.708979][T29433] bridge_slave_0: entered promiscuous mode [ 1317.724348][T29433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.731956][T29433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.744929][T29433] bridge_slave_1: entered allmulticast mode [ 1317.752795][T29433] bridge_slave_1: entered promiscuous mode [ 1318.027282][T29433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.056524][T29433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.228852][T29433] team0: Port device team_slave_0 added [ 1318.237581][T29433] team0: Port device team_slave_1 added [ 1319.425464][ T5798] Bluetooth: hci0: command tx timeout [ 1319.906547][T29433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.986497][T29433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.107285][T29433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.187174][T29433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.408284][T29433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.578411][T29433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.702498][T29433] hsr_slave_0: entered promiscuous mode [ 1323.728645][T29433] hsr_slave_1: entered promiscuous mode [ 1323.735053][T29433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1323.751864][T29433] Cannot create hsr debugfs directory [ 1323.757733][T29590] sit0: left promiscuous mode [ 1324.082478][T29593] sit0: entered promiscuous mode [ 1324.447667][T29599] syz.4.7830[29599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1324.452423][T29599] syz.4.7830[29599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1326.100136][T29433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1326.333419][T10123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.416047][T29433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1326.435896][T29433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1326.485749][T29433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1326.605964][T10123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.756104][T10123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.052415][T10123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.957991][T29656] sit0: entered allmulticast mode [ 1328.043209][T29433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.403332][T29433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.649861][T29035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.657023][T29035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.010772][ T2111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.017954][ T2111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.492725][T29433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1329.529183][T29433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1330.574620][T29433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.146593][T10123] hsr_slave_0: left promiscuous mode [ 1331.297029][T10123] hsr_slave_1: left promiscuous mode [ 1331.354113][T10123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.418618][T10123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.460667][T10123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.468133][T10123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.543735][T10123] bridge_slave_1: left allmulticast mode [ 1331.568281][T10123] bridge_slave_1: left promiscuous mode [ 1331.608471][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.659072][T10123] bridge_slave_0: left allmulticast mode [ 1331.664767][T10123] bridge_slave_0: left promiscuous mode [ 1331.688621][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.934800][T10123] veth1_macvtap: left promiscuous mode [ 1331.940624][T10123] veth0_macvtap: left promiscuous mode [ 1331.946309][T10123] veth1_vlan: left promiscuous mode [ 1331.983290][T10123] veth0_vlan: left promiscuous mode [ 1334.777540][T10123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.894350][T10123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.063872][T10123] bond0 (unregistering): Released all slaves [ 1336.190168][T29753] veth0_vlan: entered allmulticast mode [ 1336.551490][T29433] veth0_vlan: entered promiscuous mode [ 1336.611846][T29433] veth1_vlan: entered promiscuous mode [ 1336.766080][T29433] veth0_macvtap: entered promiscuous mode [ 1336.821233][T29433] veth1_macvtap: entered promiscuous mode [ 1336.913443][T29433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.939188][T29433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.958354][T29433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.988750][T29433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.014281][T29433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.048414][T29433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.114213][T29433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.180689][T29433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.248323][T29433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.300272][T29433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.461560][T29433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.476096][T29433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.486700][T29433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.508290][T29433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1337.749668][T29433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.761056][T29433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.870285][T29433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.892534][T29433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.206555][T29798] veth1_macvtap: entered promiscuous mode [ 1338.212802][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.234116][T29798] macsec0: entered promiscuous mode [ 1338.242317][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.304486][T29798] macsec0: entered allmulticast mode [ 1338.333469][T29798] veth1_macvtap: entered allmulticast mode [ 1338.527485][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.659133][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.398786][T29883] bridge0: port 3(ip6gretap0) entered blocking state [ 1342.408775][T29883] bridge0: port 3(ip6gretap0) entered disabled state [ 1342.415672][T29883] ip6gretap0: entered allmulticast mode [ 1342.449940][T29883] ip6gretap0: entered promiscuous mode [ 1350.617684][T29998] syzkaller0: entered promiscuous mode [ 1350.639278][T29998] syzkaller0: entered allmulticast mode [ 1350.953706][T30016] veth1_macvtap: left promiscuous mode [ 1350.976656][T30019] veth1_macvtap: entered promiscuous mode [ 1351.006126][T30019] macsec0: entered promiscuous mode [ 1351.022991][T30019] macsec0: entered allmulticast mode [ 1351.038343][T30019] veth1_macvtap: entered allmulticast mode [ 1359.045473][T30186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.008898][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.020322][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.677831][T30306] [ 1364.680217][T30306] ====================================================== [ 1364.687248][T30306] WARNING: possible circular locking dependency detected [ 1364.694288][T30306] syzkaller #0 Not tainted [ 1364.698711][T30306] ------------------------------------------------------ [ 1364.705736][T30306] syz.2.8015/30306 is trying to acquire lock: [ 1364.711807][T30306] ffff8880b8e29370 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 1364.720467][T30306] [ 1364.720467][T30306] but task is already holding lock: [ 1364.727848][T30306] ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 1364.736764][T30306] [ 1364.736764][T30306] which lock already depends on the new lock. [ 1364.736764][T30306] [ 1364.747149][T30306] [ 1364.747149][T30306] the existing dependency chain (in reverse order) is: [ 1364.756144][T30306] [ 1364.756144][T30306] -> #1 (&base->lock){-.-.}-{2:2}: [ 1364.763422][T30306] _raw_spin_lock_irqsave+0xa8/0xf0 [ 1364.769126][T30306] lock_timer_base+0x123/0x270 [ 1364.774393][T30306] __mod_timer+0xf9/0xdb0 [ 1364.779235][T30306] queue_delayed_work_on+0x12a/0x1e0 [ 1364.785027][T30306] kvfree_call_rcu+0x541/0x780 [ 1364.790291][T30306] rtnl_register_internal+0x486/0x590 [ 1364.796166][T30306] rtnl_register+0x32/0x70 [ 1364.801086][T30306] ip_rt_init+0x2ec/0x390 [ 1364.805915][T30306] ip_init+0xe/0x20 [ 1364.810219][T30306] inet_init+0x2c1/0x3e0 [ 1364.814962][T30306] do_one_initcall+0x1fd/0x750 [ 1364.820229][T30306] do_initcall_level+0x137/0x1f0 [ 1364.825671][T30306] do_initcalls+0x69/0xd0 [ 1364.830503][T30306] kernel_init_freeable+0x3d2/0x570 [ 1364.836206][T30306] kernel_init+0x1d/0x1c0 [ 1364.841039][T30306] ret_from_fork+0x48/0x80 [ 1364.845964][T30306] ret_from_fork_asm+0x11/0x20 [ 1364.851232][T30306] [ 1364.851232][T30306] -> #0 (krc.lock){..-.}-{2:2}: [ 1364.858245][T30306] __lock_acquire+0x2ddb/0x7c80 [ 1364.863604][T30306] lock_acquire+0x197/0x410 [ 1364.868607][T30306] _raw_spin_lock+0x2e/0x40 [ 1364.873609][T30306] kvfree_call_rcu+0x15a/0x780 [ 1364.878877][T30306] trie_delete_elem+0x535/0x6a0 [ 1364.884232][T30306] bpf_prog_1db1603a7cfa36fb+0x45/0x49 [ 1364.890197][T30306] bpf_trace_run3+0x1e7/0x400 [ 1364.895373][T30306] __bpf_trace_timer_start+0x14a/0x1b0 [ 1364.901374][T30306] enqueue_timer+0x398/0x530 [ 1364.906466][T30306] __mod_timer+0x977/0xdb0 [ 1364.911387][T30306] sk_reset_timer+0x23/0xc0 [ 1364.916393][T30306] tipc_sk_finish_conn+0x154/0x7e0 [ 1364.922011][T30306] tipc_socketpair+0x254/0x470 [ 1364.927276][T30306] __sys_socketpair+0x2b0/0x550 [ 1364.932631][T30306] __x64_sys_socketpair+0x9b/0xb0 [ 1364.938159][T30306] do_syscall_64+0x55/0xb0 [ 1364.943079][T30306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1364.949482][T30306] [ 1364.949482][T30306] other info that might help us debug this: [ 1364.949482][T30306] [ 1364.959690][T30306] Possible unsafe locking scenario: [ 1364.959690][T30306] [ 1364.967129][T30306] CPU0 CPU1 [ 1364.972478][T30306] ---- ---- [ 1364.977827][T30306] lock(&base->lock); [ 1364.981877][T30306] lock(krc.lock); [ 1364.988182][T30306] lock(&base->lock); [ 1364.994750][T30306] lock(krc.lock); [ 1364.998542][T30306] [ 1364.998542][T30306] *** DEADLOCK *** [ 1364.998542][T30306] [ 1365.006665][T30306] 2 locks held by syz.2.8015/30306: [ 1365.011835][T30306] #0: ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 1365.021124][T30306] #1: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 1365.030414][T30306] [ 1365.030414][T30306] stack backtrace: [ 1365.036289][T30306] CPU: 0 PID: 30306 Comm: syz.2.8015 Not tainted syzkaller #0 [ 1365.043722][T30306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1365.053759][T30306] Call Trace: [ 1365.057018][T30306] [ 1365.059933][T30306] dump_stack_lvl+0x16c/0x230 [ 1365.064597][T30306] ? load_image+0x3b0/0x3b0 [ 1365.069079][T30306] ? show_regs_print_info+0x20/0x20 [ 1365.074260][T30306] ? print_circular_bug+0x12b/0x1a0 [ 1365.079442][T30306] check_noncircular+0x2bd/0x3c0 [ 1365.084364][T30306] ? print_deadlock_bug+0x5d0/0x5d0 [ 1365.089542][T30306] ? lockdep_lock+0xe0/0x220 [ 1365.094114][T30306] ? _find_first_zero_bit+0xd3/0x100 [ 1365.099409][T30306] __lock_acquire+0x2ddb/0x7c80 [ 1365.104245][T30306] ? stack_trace_snprint+0xf0/0xf0 [ 1365.109342][T30306] ? __stack_depot_save+0x560/0x630 [ 1365.114519][T30306] ? verify_lock_unused+0x140/0x140 [ 1365.119712][T30306] ? kasan_save_stack+0x4d/0x60 [ 1365.124564][T30306] ? kasan_save_stack+0x3e/0x60 [ 1365.129399][T30306] ? __kasan_record_aux_stack+0xaf/0xc0 [ 1365.134925][T30306] ? kvfree_call_rcu+0xee/0x780 [ 1365.139767][T30306] ? trie_delete_elem+0x535/0x6a0 [ 1365.144788][T30306] ? bpf_prog_1db1603a7cfa36fb+0x45/0x49 [ 1365.150407][T30306] ? bpf_trace_run3+0x1e7/0x400 [ 1365.155248][T30306] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 1365.160863][T30306] ? enqueue_timer+0x398/0x530 [ 1365.165604][T30306] ? __mod_timer+0x977/0xdb0 [ 1365.170172][T30306] ? sk_reset_timer+0x23/0xc0 [ 1365.174841][T30306] ? tipc_sk_finish_conn+0x154/0x7e0 [ 1365.180106][T30306] ? tipc_socketpair+0x254/0x470 [ 1365.185020][T30306] ? __sys_socketpair+0x2b0/0x550 [ 1365.190024][T30306] ? __x64_sys_socketpair+0x9b/0xb0 [ 1365.195202][T30306] ? do_syscall_64+0x55/0xb0 [ 1365.199772][T30306] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1365.205818][T30306] lock_acquire+0x197/0x410 [ 1365.210300][T30306] ? kvfree_call_rcu+0x15a/0x780 [ 1365.215221][T30306] ? read_lock_is_recursive+0x20/0x20 [ 1365.220570][T30306] ? __phys_addr+0xba/0x170 [ 1365.225055][T30306] _raw_spin_lock+0x2e/0x40 [ 1365.229539][T30306] ? kvfree_call_rcu+0x15a/0x780 [ 1365.234509][T30306] kvfree_call_rcu+0x15a/0x780 [ 1365.239267][T30306] ? call_rcu+0x930/0x930 [ 1365.243583][T30306] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1365.249455][T30306] ? _raw_spin_unlock+0x40/0x40 [ 1365.254288][T30306] trie_delete_elem+0x535/0x6a0 [ 1365.259124][T30306] bpf_prog_1db1603a7cfa36fb+0x45/0x49 [ 1365.264561][T30306] bpf_trace_run3+0x1e7/0x400 [ 1365.269217][T30306] ? bpf_trace_run3+0xf4/0x400 [ 1365.273967][T30306] ? bpf_trace_run2+0x3c0/0x3c0 [ 1365.278794][T30306] ? __bpf_trace_timer_start+0x133/0x1b0 [ 1365.284412][T30306] __bpf_trace_timer_start+0x14a/0x1b0 [ 1365.289852][T30306] ? __bpf_trace_timer_class+0x100/0x100 [ 1365.295468][T30306] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1365.301358][T30306] ? _raw_spin_unlock+0x40/0x40 [ 1365.306182][T30306] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1365.311534][T30306] enqueue_timer+0x398/0x530 [ 1365.316103][T30306] __mod_timer+0x977/0xdb0 [ 1365.320503][T30306] sk_reset_timer+0x23/0xc0 [ 1365.324991][T30306] tipc_sk_finish_conn+0x154/0x7e0 [ 1365.330100][T30306] tipc_socketpair+0x254/0x470 [ 1365.334845][T30306] __sys_socketpair+0x2b0/0x550 [ 1365.339678][T30306] __x64_sys_socketpair+0x9b/0xb0 [ 1365.344688][T30306] do_syscall_64+0x55/0xb0 [ 1365.349082][T30306] ? clear_bhb_loop+0x40/0x90 [ 1365.353739][T30306] ? clear_bhb_loop+0x40/0x90 [ 1365.358396][T30306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1365.364269][T30306] RIP: 0033:0x7fd1f0b8f749 [ 1365.368664][T30306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.388252][T30306] RSP: 002b:00007fd1eedf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1365.396646][T30306] RAX: ffffffffffffffda RBX: 00007fd1f0de5fa0 RCX: 00007fd1f0b8f749 [ 1365.404598][T30306] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1365.412547][T30306] RBP: 00007fd1f0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1365.420502][T30306] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 1365.428453][T30306] R13: 00007fd1f0de6038 R14: 00007fd1f0de5fa0 R15: 00007ffde317ba18 [ 1365.436408][T30306]