last executing test programs:

3.665455342s ago: executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

3.54858728s ago: executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x20001419)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ae}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x0, 0x4, 0x4}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, 0x0, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0)

3.178962816s ago: executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x12, 0x0}, 0x2100)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x100}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

3.055893015s ago: executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0)

2.869586633s ago: executing program 0:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='ext4_journal_start\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)

2.746389942s ago: executing program 0:
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xb}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000000)=r3, 0x8)

2.003622825s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.883367313s ago: executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r2], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x400000001)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/49, 0x31, <r5=>0x0, &(0x7f0000000380)=""/140, 0x8c}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', 0x0, r3, 0x1, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1, <r8=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000800)=r4}, 0x20)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xffffb658, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x22, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x100, 0x3}, 0x10, r5, r0, 0x0, &(0x7f0000000900)=[r3, r7, r8, r1, r3, r1, r1, r9, r0], 0x0, 0x10, 0x1}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x1003, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x2f})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a2, &(0x7f0000000080))

1.747202604s ago: executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000005}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)

1.652115598s ago: executing program 4:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdef)

1.224228073s ago: executing program 1:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.084193875s ago: executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000061123c000400000095000000bf51a21da6467c0000000072cf80928cac0ae9f46adbd49c19fd3341345ecdc6660da8adda661c121ba05af7e7f5f54f299332a838d766c4395d01000080fef4c3f5cbb1e904"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0xb3, 0x7f}, 0x48)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x3)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xffffffff, 0x12)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

730.701299ms ago: executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {}]}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/225, 0x3f, 0xe1, 0x1}, 0x20)

689.866665ms ago: executing program 4:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x10000, 0x8001, 0x384, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x0, 0xffffff81, 0x0, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{}, 0x0, &(0x7f0000001340)='%-5lx  \x00'}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x901c0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080))

652.96699ms ago: executing program 3:
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0xd, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000ac205415b11286000095000000000000de"], &(0x7f0000003240)='GPL\x00', 0x0, 0x5}, 0xc01)

530.443979ms ago: executing program 2:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000005fab3197d3c9d820a3841b8e1a55"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

501.737993ms ago: executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r2], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000005c0)=0x400000001)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/49, 0x31, <r5=>0x0, &(0x7f0000000380)=""/140, 0x8c}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', 0x0, r3, 0x1, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1, <r8=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000800)=r4}, 0x20)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xffffb658, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x22, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x100, 0x3}, 0x10, r5, r0, 0x0, &(0x7f0000000900)=[r3, r7, r8, r1, r3, r1, r1, r9, r0], 0x0, 0x10, 0x1}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x1003, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x2f})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a2, &(0x7f0000000080))

374.908572ms ago: executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

320.894711ms ago: executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000005}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)

318.504071ms ago: executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

306.879373ms ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

267.039189ms ago: executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000e9ffffff0000000061102d00000000009500000000000000671c63e0df51edab8e49e7e11c871e96fe8276b071a43685b44723dc89828b5f11b52a86233d10d4c914fec8d5de407bf85a25bd93"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x0, 0x0)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000240)={[{0x2b, 'cpuacct'}]}, 0x9)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x2, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1e000003, 0x1, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xf, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

190.18587ms ago: executing program 1:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffd)

185.928332ms ago: executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {}]}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/225, 0x3f, 0xe1, 0x1}, 0x20)

161.877915ms ago: executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

111.813363ms ago: executing program 1:
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0xb)

106.396063ms ago: executing program 2:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002ac0)={{r0}, 0x0, 0x0, 0x406}, 0x20)

62.29222ms ago: executing program 3:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003e0081064e81f782db44b9040a1d08040300000000070aa11800150006f7132603600e1208000f0000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

31.847545ms ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10)

0s ago: executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00))
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000200)=0x7fff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

lave_1): Enslaving as an active interface with an up link
[   73.367029][ T4033] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[   73.410816][ T4033] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'.
[   73.489144][ T3931] team0: Port device team_slave_0 added
[   73.519356][ T3931] team0: Port device team_slave_1 added
[   73.599435][ T3931] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.660332][ T3931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.692541][ T3931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.785320][ T4046] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[   73.818151][ T4052] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
[   73.861005][ T4046] team0: Device veth0_macvtap failed to register rx_handler
[   73.902440][ T3931] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.909407][ T3931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.958468][ T3931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.298149][ T3931] device hsr_slave_0 entered promiscuous mode
[   74.310189][ T3575] Bluetooth: hci4: command tx timeout
[   74.350931][ T3931] device hsr_slave_1 entered promiscuous mode
[   74.406629][ T3931] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.510555][ T3931] Cannot create hsr debugfs directory
[   74.589113][   T52] device hsr_slave_0 left promiscuous mode
[   74.613489][   T52] device hsr_slave_1 left promiscuous mode
[   74.685433][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.707480][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.723124][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.774632][ T4073] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[   74.783736][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.807041][   T52] device bridge_slave_1 left promiscuous mode
[   74.830043][ T4073] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'.
[   74.853403][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.955842][   T52] device bridge_slave_0 left promiscuous mode
[   74.963447][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.013519][   T52] device veth1_macvtap left promiscuous mode
[   75.020869][   T52] device veth0_macvtap left promiscuous mode
[   75.027202][   T52] device veth1_vlan left promiscuous mode
[   75.033915][   T52] device veth0_vlan left promiscuous mode
[   75.201349][   T52] team0 (unregistering): Port device team_slave_1 removed
[   75.215653][   T52] team0 (unregistering): Port device team_slave_0 removed
[   75.226734][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.239554][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.305466][   T52] bond0 (unregistering): Released all slaves
[   75.371496][ T4080] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[   75.381381][ T4080] team0: Device veth0_macvtap failed to register rx_handler
[   76.309613][ T4114] tap0: tun_chr_ioctl cmd 1074025677
[   76.316688][   T22] cfg80211: failed to load regulatory.db
[   76.340904][ T4114] tap0: linktype set to 805
[   76.390435][ T3584] Bluetooth: hci4: command tx timeout
[   77.017749][ T3931] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.132774][ T3931] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.178272][ T3931] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.210170][ T3931] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.396693][ T4152] tap0: tun_chr_ioctl cmd 1074025677
[   77.403068][ T4152] tap0: linktype set to 805
[   77.553467][ T3931] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.643409][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.658010][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.776894][ T3931] 8021q: adding VLAN 0 to HW filter on device team0
[   77.817355][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.833910][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.885176][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.892316][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.926818][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.946479][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.960844][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.980595][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.987708][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.071446][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   78.138790][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.157965][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.197591][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   78.218353][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   78.270901][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   78.279455][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   78.360739][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.385040][ T3931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.448255][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.470725][ T3584] Bluetooth: hci4: command tx timeout
[   78.490514][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   78.508766][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.553708][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.600951][ T4200] tap0: tun_chr_ioctl cmd 1074025677
[   78.631701][ T4200] tap0: linktype set to 805
[   79.417362][ T3931] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.466970][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   79.490319][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   79.541190][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.557817][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.614599][ T4246] tap0: tun_chr_ioctl cmd 1074025677
[   79.653274][ T4246] tap0: linktype set to 805
[   79.677245][ T3931] device veth0_vlan entered promiscuous mode
[   79.720715][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.747518][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.842832][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.860765][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.882345][ T3931] device veth1_vlan entered promiscuous mode
[   80.067564][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   80.095148][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.128628][ T3931] device veth0_macvtap entered promiscuous mode
[   80.169623][ T3931] device veth1_macvtap entered promiscuous mode
[   80.331250][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.377439][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.441297][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.524709][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.567118][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.597807][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.613096][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.623788][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.636176][ T3931] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.644977][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   80.653579][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.666605][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.683845][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.711206][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.740005][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.760564][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.815114][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.849442][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.910133][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.935865][ T3931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.961344][ T3931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.012342][ T3931] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.064082][ T4309] tap0: tun_chr_ioctl cmd 1074025677
[   81.107020][ T4309] tap0: linktype set to 805
[   81.144019][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.173231][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.223298][ T3931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.294600][ T3931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.332821][ T3931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.383604][ T3931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.671341][   T36] wlan1: Trigger new scan to find an IBSS to join
[   81.712418][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.733240][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.778267][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   81.842946][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.868920][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.943730][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   82.116575][ T4356] tap0: tun_chr_ioctl cmd 1074025677
[   82.143320][ T4356] tap0: linktype set to 805
[   82.227711][ T3584] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[   82.713640][    T9] wlan1: Trigger new scan to find an IBSS to join
[   82.917851][ T3584] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   83.612898][ T4424] syz-executor.0 (4424) used greatest stack depth: 19200 bytes left
[   83.707856][ T3584] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   84.522064][ T4466] syz-executor.0 (4466) used greatest stack depth: 18880 bytes left
[   87.672622][ T4286] wlan1: Trigger new scan to find an IBSS to join
[   88.710301][ T3641] wlan1: Trigger new scan to find an IBSS to join
[   89.671221][ T3947] wlan1: Trigger new scan to find an IBSS to join
[   90.630293][ T4294] wlan1: Trigger new scan to find an IBSS to join
[   90.720213][ T3947] wlan1: Trigger new scan to find an IBSS to join
[   91.781284][ T4290] wlan1: Creating new IBSS network, BSSID ce:df:70:b7:1e:7d
[   92.711268][   T56] wlan1: Trigger new scan to find an IBSS to join
[   93.670164][ T4294] wlan1: Trigger new scan to find an IBSS to join
[   95.670335][   T11] wlan1: Trigger new scan to find an IBSS to join
[   95.670393][   T36] wlan1: Trigger new scan to find an IBSS to join
[   96.689881][   T52] wlan1: Creating new IBSS network, BSSID 5a:d9:dd:06:92:34
[   98.630110][   T56] wlan1: Trigger new scan to find an IBSS to join
[   98.720201][ T3947] wlan1: Trigger new scan to find an IBSS to join
[   99.609157][ T4294] wlan1: Creating new IBSS network, BSSID da:2a:7b:77:97:2c
[   99.666348][   T52] wlan1: Creating new IBSS network, BSSID 3a:5c:e8:4d:5d:9a
[  103.194462][ T5131] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.1'.
[  104.342095][ T5167] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.0'.
[  105.612471][ T5197] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.4'.
[  106.536735][ T5235] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.2'.
[  107.628577][ T5268] netlink: 14546 bytes leftover after parsing attributes in process `syz-executor.4'.
[  108.557856][ T5304] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  108.591733][ T5304] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[  108.643697][ T5304] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[  108.668710][ T5309] syz-executor.2[5309] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  108.668866][ T5309] syz-executor.2[5309] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.767229][ T5337] syz-executor.1[5337] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.770890][ T5339] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  109.812139][ T5339] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[  109.851989][ T5337] syz-executor.1[5337] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  109.891564][ T5339] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[  110.701558][ T5369] syz-executor.0[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.701698][ T5369] syz-executor.0[5369] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  110.754530][ T5374] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  110.920026][ T5374] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[  110.968076][ T5374] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  111.567146][ T5401] Driver unsupported XDP return value 0 on prog  (id 493) dev N/A, expect packet loss!
[  111.726373][ T5406] syz-executor.1[5406] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  111.726537][ T5406] syz-executor.1[5406] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.100094][ T5415] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  112.130174][ T5415] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  112.163351][ T5415] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  112.501648][ T5431] syz-executor.0[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  112.501786][ T5431] syz-executor.0[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  113.107749][ T5455] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  113.197241][ T5455] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
[  113.222288][ T5455] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'.
[  113.583807][ T3584] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6
[  114.837072][ T5503] bpf_get_probe_write_proto: 2 callbacks suppressed
[  114.837088][ T5503] syz-executor.2[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  114.865938][ T5503] syz-executor.2[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.031387][ T3584] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6
[  115.849882][ T5537] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  115.894307][ T5537] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  116.175390][ T3584] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  116.591137][ T5565] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  116.638637][ T5565] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'.
[  117.506948][ T3584] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6
[  117.517570][ T5599] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  117.546854][ T5599] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'.
[  118.466888][ T5633] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  118.503027][ T5633] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  118.544246][ T3584] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  118.719109][ T5649] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  118.900599][ T5649] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  119.206916][ T5667] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  119.224701][ T5667] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'.
[  119.494736][ T3584] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  119.644432][ T5685] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  119.685094][ T5685] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  119.699189][ T5689] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  119.730307][ T5689] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  119.767193][ T5691] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  119.941865][ T5704] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.195590][ T5719] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  120.671372][ T5737] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.0'.
[  120.862001][ T5749] validate_nla: 8 callbacks suppressed
[  120.862017][ T5749] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  120.863789][ T5748] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  120.896288][ T5748] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  120.927112][ T5748] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  120.973136][ T5748] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  121.039122][ T5757] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  121.391908][ T5778] __nla_validate_parse: 1 callbacks suppressed
[  121.391924][ T5778] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.0'.
[  121.511370][ T5781] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  121.519724][ T5781] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  121.840216][ T4286] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  121.855716][ T5794] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  121.898042][ T5794] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  121.944921][ T5802] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  122.029839][ T5806] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.4'.
[  122.156533][ T5810] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  122.814962][ T5840] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.4'.
[  123.049079][ T5851] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.4'.
[  123.239410][ T5863] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'.
[  123.917489][ T5889] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.3'.
[  124.131879][ T5899] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.4'.
[  124.777078][ T3575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  124.789037][ T3575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  124.820143][ T3575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  124.834792][ T3575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  124.844525][ T3575] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  124.851975][ T3575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  124.877764][ T5924] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.1'.
[  124.923621][ T3644] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.033504][ T3644] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.179104][ T3644] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.374534][ T3644] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.588082][ T5916] chnl_net:caif_netlink_parms(): no params data found
[  126.143690][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.190072][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.198207][ T5916] device bridge_slave_0 entered promiscuous mode
[  126.283186][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.320019][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.341848][ T5916] device bridge_slave_1 entered promiscuous mode
[  126.435244][ T5992] __nla_validate_parse: 3 callbacks suppressed
[  126.435259][ T5992] netlink: 1041 bytes leftover after parsing attributes in process `syz-executor.3'.
[  126.596819][ T5916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.669004][ T5916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.758318][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  126.855519][ T5916] team0: Port device team_slave_0 added
[  126.870750][ T3584] Bluetooth: hci4: command tx timeout
[  126.892022][ T5916] team0: Port device team_slave_1 added
[  127.070441][ T6015] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.2'.
[  127.140579][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.147921][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.289582][ T5916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.339051][ T6031] validate_nla: 8 callbacks suppressed
[  127.339067][ T6031] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  127.365037][ T5916] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.400001][ T5916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.410025][ T6031] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.3'.
[  127.455652][ T5916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.467729][ T6035] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'.
[  127.478169][ T6035] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  127.659172][ T5916] device hsr_slave_0 entered promiscuous mode
[  127.685526][ T5916] device hsr_slave_1 entered promiscuous mode
[  127.737303][ T5916] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.756199][ T5916] Cannot create hsr debugfs directory
[  127.971096][ T3644] device hsr_slave_0 left promiscuous mode
[  127.979283][ T3644] device hsr_slave_1 left promiscuous mode
[  128.001602][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.018006][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.036189][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.046593][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.056188][ T3644] device bridge_slave_1 left promiscuous mode
[  128.062688][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.077941][ T3644] device bridge_slave_0 left promiscuous mode
[  128.084645][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.106391][ T3644] device veth1_macvtap left promiscuous mode
[  128.112708][ T3644] device veth0_macvtap left promiscuous mode
[  128.118910][ T3644] device veth1_vlan left promiscuous mode
[  128.127821][ T3644] device veth0_vlan left promiscuous mode
[  128.685248][ T3644] team0 (unregistering): Port device team_slave_1 removed
[  128.720606][ T3644] team0 (unregistering): Port device team_slave_0 removed
[  128.734179][ T3644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.747090][ T3644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.817684][ T3644] bond0 (unregistering): Released all slaves
[  128.901829][ T6063] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  128.910943][ T6063] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  128.922159][ T6063] bridge0: port 3(dummy0) entered blocking state
[  128.928746][ T6063] bridge0: port 3(dummy0) entered disabled state
[  128.936502][ T6063] device dummy0 entered promiscuous mode
[  128.950949][ T3584] Bluetooth: hci4: command tx timeout
[  128.956685][ T6063] bridge0: port 3(dummy0) entered blocking state
[  128.964094][ T6063] bridge0: port 3(dummy0) entered forwarding state
[  128.987062][ T6065] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'.
[  129.015361][ T6065] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  129.639658][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  129.727293][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  130.298667][ T6104] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  130.367817][ T6104] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  130.489114][ T6108] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'.
[  130.535993][ T6108] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  130.641065][ T5916] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  130.691712][ T5916] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  130.772344][ T5916] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  130.786012][ T5916] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  130.851371][ T4286] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  131.031218][ T3584] Bluetooth: hci4: command tx timeout
[  131.291719][ T5916] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.341963][ T6139] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  131.374120][ T6139] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  131.416913][ T6139] bridge0: port 3(dummy0) entered blocking state
[  131.437173][ T6139] bridge0: port 3(dummy0) entered disabled state
[  131.533054][ T6139] device dummy0 entered promiscuous mode
[  131.559544][ T6139] bridge0: port 3(dummy0) entered blocking state
[  131.566033][ T6139] bridge0: port 3(dummy0) entered forwarding state
[  131.602191][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  131.623254][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  131.686032][ T5916] 8021q: adding VLAN 0 to HW filter on device team0
[  131.764716][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  131.801001][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  131.847153][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.854418][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.931252][ T6149] device batadv0 entered promiscuous mode
[  132.015172][ T6151] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'.
[  132.040151][ T6151] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  132.081082][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  132.094988][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  132.125848][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  132.155598][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.162839][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.208078][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  132.247724][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  132.301619][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  132.321591][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  132.360587][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  132.378125][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  132.419034][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  132.428715][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  132.454249][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.485129][ T5916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.512301][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  132.532446][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  132.547111][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.642185][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  132.648538][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  133.110078][ T3584] Bluetooth: hci4: command tx timeout
[  133.148119][ T6186] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  133.204198][ T6186] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  133.228266][ T6189] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'.
[  133.265467][ T6189] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  133.370265][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  133.377724][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  133.533568][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.559054][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  133.568935][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  133.588517][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  133.597068][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  133.618447][ T5916] device veth0_vlan entered promiscuous mode
[  133.636103][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  133.644601][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  133.727290][ T5916] device veth1_vlan entered promiscuous mode
[  134.033317][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  134.042821][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  134.060622][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  134.126649][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  134.163269][ T5916] device veth0_macvtap entered promiscuous mode
[  134.202665][ T6219] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  134.241787][ T5916] device veth1_macvtap entered promiscuous mode
[  134.284235][ T6219] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  134.349659][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.411054][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.457557][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.495856][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.525888][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.566421][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.614626][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.654593][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.706920][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.739452][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  134.761579][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  134.804607][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  134.845568][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  134.881278][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.896782][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.908391][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.921990][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.935680][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.956673][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.986861][ T5916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.013882][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.026373][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.048371][ T6236] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  135.078829][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  135.143424][ T6236] bridge0: port 3(dummy0) entered blocking state
[  135.176550][ T6236] bridge0: port 3(dummy0) entered disabled state
[  135.187684][ T6236] device dummy0 entered promiscuous mode
[  135.215838][ T6236] bridge0: port 3(dummy0) entered blocking state
[  135.222337][ T6236] bridge0: port 3(dummy0) entered forwarding state
[  135.236863][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.271349][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  135.308302][ T5916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.318805][ T5916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.349137][ T5916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.392996][ T5916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.414660][ T6241] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'.
[  135.428714][ T6241] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  135.833920][ T3947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.886319][ T3947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.981041][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  136.052856][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.085927][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.191134][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  136.572250][ T6282] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  136.630850][ T6283] device batadv0 entered promiscuous mode
[  136.644820][ T6282] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  138.540216][ T6336] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  138.658369][ T6336] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  139.090405][ T6359] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  139.744735][ T6385] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.3'.
[  140.205571][ T6398] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  140.253719][ T6398] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  140.913397][ T6423] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  141.100104][ T6433] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.0'.
[  141.595722][ T6454] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  141.672991][ T6454] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  142.596075][ T6467] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  142.654684][ T6474] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.1'.
[  143.534035][ T6494] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  143.593290][ T6494] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  143.866929][ T6508] device batadv0 entered promiscuous mode
[  144.655914][ T6514] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.0'.
[  144.688892][ T6512] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  145.284462][ T6545] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  145.320262][ T6545] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  145.887543][ T6555] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.4'.
[  145.906433][ T6556] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  147.662456][ T6584] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  147.760383][ T6584] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  148.566744][ T3575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  148.575157][ T3575] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  148.583723][ T3575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  148.595323][ T3575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  148.603471][ T3575] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  148.610894][ T3575] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  149.432800][ T6607] chnl_net:caif_netlink_parms(): no params data found
[  149.893869][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.949083][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.008954][ T6607] device bridge_slave_0 entered promiscuous mode
[  150.068613][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.111031][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.155645][ T6638] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  150.179299][ T6638] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  150.179356][ T6607] device bridge_slave_1 entered promiscuous mode
[  150.305113][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.346669][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.515300][ T6607] team0: Port device team_slave_0 added
[  150.536115][ T6607] team0: Port device team_slave_1 added
[  150.633571][ T3575] Bluetooth: hci0: command tx timeout
[  150.659867][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.703143][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.851383][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.923217][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.959984][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.076297][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.257290][ T6607] device hsr_slave_0 entered promiscuous mode
[  151.297452][ T6607] device hsr_slave_1 entered promiscuous mode
[  151.339235][ T6607] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.369054][ T6607] Cannot create hsr debugfs directory
[  151.865992][ T6607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.880881][ T6670] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  151.889081][ T6670] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  152.066364][ T6607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.171480][ T6607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.328626][ T6607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.370764][ T6687] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.1'.
[  152.634339][ T6607] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  152.707498][ T6607] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  152.714406][ T3575] Bluetooth: hci0: command tx timeout
[  152.740730][ T6607] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  152.775584][ T6607] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  152.867171][ T4286] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  153.013401][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.027204][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  153.127642][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.164502][ T6607] 8021q: adding VLAN 0 to HW filter on device team0
[  153.281725][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  153.311454][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.351973][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.359124][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.388956][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  153.418492][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  153.431219][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  153.455930][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.463084][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.472230][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  153.515468][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  153.558225][ T6607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  153.602222][ T6607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.633422][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  153.652682][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  153.668040][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  153.691130][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  153.716914][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  153.740931][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  153.749581][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  153.778680][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  153.801885][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  153.817159][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  153.828989][ T6728] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'.
[  154.727792][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  154.758886][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.792784][ T3575] Bluetooth: hci0: command tx timeout
[  154.803630][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.940333][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  154.966098][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  155.100923][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  155.109275][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  155.168522][ T6607] device veth0_vlan entered promiscuous mode
[  155.188267][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  155.200762][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  155.264126][ T6607] device veth1_vlan entered promiscuous mode
[  155.363658][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  155.372516][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  155.420801][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  155.460216][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  155.472520][ T6607] device veth0_macvtap entered promiscuous mode
[  155.502329][ T6607] device veth1_macvtap entered promiscuous mode
[  155.582426][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.630029][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.657430][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.701436][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.758363][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.808938][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.863683][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.876480][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.886577][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.897170][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.909003][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.922507][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.940618][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.953699][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.973249][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.988284][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.006918][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.016963][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.027486][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.037378][ T6607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.048432][ T6607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.070904][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.084047][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  156.096822][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  156.134393][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  156.150799][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  156.174883][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  156.184230][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  156.206342][ T6780] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.4'.
[  156.246708][ T6607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.310231][ T6607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.318952][ T6607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.373699][ T6607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.815966][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.857538][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.871879][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  156.890374][ T3575] Bluetooth: hci0: command tx timeout
[  156.952054][ T3641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.981205][ T3641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.036065][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  157.492752][ T6813] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'.
[  157.550492][ T6818] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.4'.
[  157.706437][ T6827] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 256 (only 8 groups)
[  157.885254][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  158.282912][ T6847] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.0'.
[  158.364538][ T6850] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'.
[  158.637344][ T6861] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 256 (only 8 groups)
[  159.360627][   T26] audit: type=1804 audit(1718356597.773:2): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/271/memory.events" dev="sda1" ino=1960 res=1 errno=0
[  159.400159][ T6887] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'.
[  159.519110][   T26] audit: type=1800 audit(1718356597.783:3): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0
[  159.854749][ T6904] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 256 (only 8 groups)
[  160.294228][ T6922] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'.
[  160.766346][   T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  161.764710][ T6958] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'.
[  161.840416][ T6958] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'.
[  161.869467][ T6962] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'.
[  161.981151][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  162.088145][ T3641] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  163.404588][ T6996] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'.
[  163.424706][ T6996] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'.
[  163.812082][ T7013] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  163.838639][ T7013] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  164.182850][ T7031] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'.
[  164.241542][ T7031] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'.
[  164.707317][ T7045] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  164.924605][ T7045] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  165.569464][ T7070] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'.
[  165.603243][ T7070] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[  167.041828][ T7097] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'.
[  167.087886][ T7097] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'.
[  167.100485][ T7102] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.139741][ T7102] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.251683][   T26] audit: type=1804 audit(1718356605.683:4): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2365170372/syzkaller.lDPOfJ/274/memory.events" dev="sda1" ino=1946 res=1 errno=0
[  167.370414][   T26] audit: type=1800 audit(1718356605.723:5): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1946 res=0 errno=0
[  168.502359][ T3584] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  168.593124][ T7148] __nla_validate_parse: 1 callbacks suppressed
[  168.593141][ T7148] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'.
[  169.209247][   T26] audit: type=1804 audit(1718356607.633:6): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1910218691/syzkaller.PLzBWF/75/memory.events" dev="sda1" ino=1958 res=1 errno=0
[  169.362881][   T26] audit: type=1800 audit(1718356607.633:7): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1958 res=0 errno=0
[  171.062206][ T7207] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'.
[  171.228672][   T26] audit: type=1804 audit(1718356609.653:8): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1910218691/syzkaller.PLzBWF/77/memory.events" dev="sda1" ino=1957 res=1 errno=0
[  171.267828][   T26] audit: type=1800 audit(1718356609.653:9): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1957 res=0 errno=0
[  172.656437][ T7247] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'.
[  173.773953][   T26] audit: type=1804 audit(1718356612.203:10): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/300/memory.events" dev="sda1" ino=1945 res=1 errno=0
[  173.881426][   T26] audit: type=1800 audit(1718356612.233:11): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1945 res=0 errno=0
[  174.129708][ T7283] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'.
[  175.670102][ T3586] Bluetooth: hci2: command 0x0406 tx timeout
[  175.670312][ T3575] Bluetooth: hci1: command 0x0406 tx timeout
[  175.676251][ T3586] Bluetooth: hci3: command 0x0406 tx timeout
[  175.942370][   T26] audit: type=1804 audit(1718356614.373:12): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1910218691/syzkaller.PLzBWF/88/memory.events" dev="sda1" ino=1947 res=1 errno=0
[  176.039139][   T26] audit: type=1800 audit(1718356614.403:13): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1947 res=0 errno=0
[  177.461112][ T7358] lo: mtu less than device minimum
[  177.501657][   T26] audit: type=1804 audit(1718356615.933:14): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3163779327/syzkaller.10HDwI/51/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  177.611501][   T26] audit: type=1800 audit(1718356615.963:15): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1959 res=0 errno=0
[  178.997204][ T7391] lo: mtu less than device minimum
[  179.357210][   T26] audit: type=1804 audit(1718356617.783:16): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/308/memory.events" dev="sda1" ino=1961 res=1 errno=0
[  179.427825][   T26] audit: type=1800 audit(1718356617.823:17): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1961 res=0 errno=0
[  179.923847][ T7431] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  179.952216][ T7433] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  179.960934][ T7431] netlink: 'syz-executor.3': attribute type 15 has an invalid length.
[  179.990229][ T7433] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.0'.
[  180.878894][ T7462] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  180.900115][ T7462] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[  181.545262][ T7488] Zero length message leads to an empty skb
[  181.574602][ T7488] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  181.596223][ T7488] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'.
[  181.936734][ T7495] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  182.030070][ T7495] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.3'.
[  182.937108][   T26] audit: type=1804 audit(1718356621.363:18): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/314/memory.events" dev="sda1" ino=1952 res=1 errno=0
[  182.997858][   T26] audit: type=1800 audit(1718356621.363:19): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1952 res=0 errno=0
[  183.045953][ T7527] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  183.062257][ T7527] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.2'.
[  184.003028][ T7571] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  184.010962][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  184.100240][ T7571] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'.
[  184.767347][ T7601] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  184.789216][ T7601] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'.
[  185.499166][ T7631] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  185.522450][ T7631] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'.
[  186.472223][ T7664] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  186.520174][ T7664] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'.
[  187.818759][ T7705] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  187.868106][ T7705] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'.
[  188.911519][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  189.601810][ T7761] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  189.667125][ T7761] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'.
[  191.374033][ T7799] tun0: tun_chr_ioctl cmd 1074025694
[  191.391068][ T7799] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'.
[  191.448588][ T7807] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  191.523657][ T7807] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'.
[  192.288158][   T26] audit: type=1804 audit(1718356630.713:20): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1910218691/syzkaller.PLzBWF/146/memory.events" dev="sda1" ino=1957 res=1 errno=0
[  192.418567][   T26] audit: type=1800 audit(1718356630.713:21): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1957 res=0 errno=0
[  193.055475][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  193.103842][ T7842] tun0: tun_chr_ioctl cmd 1074025694
[  193.110232][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  193.134946][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  193.154835][ T7843] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  193.210578][ T7842] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'.
[  193.221185][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  193.242820][ T7843] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  193.267754][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  193.294629][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  193.318712][ T7839] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  193.585960][ T7858] IPv6: NLM_F_CREATE should be specified when creating new route
[  193.631864][ T7858] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
[  193.770568][ T7863] device dummy0 entered promiscuous mode
[  193.834130][ T7865] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  194.077744][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  194.084119][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  194.253327][ T7887] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'.
[  194.408554][ T7894] IPv6: NLM_F_CREATE should be specified when creating new route
[  194.454185][ T7894] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
[  194.676741][ T7902] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  196.510197][ T7937] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  196.567045][ T7940] validate_nla: 10 callbacks suppressed
[  196.567060][ T7940] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  196.773792][ T7945] device dummy0 entered promiscuous mode
[  196.927576][ T7958] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'.
[  196.958682][ T7954] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  196.977428][ T7961] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  197.045794][ T7961] netlink: 'syz-executor.2': attribute type 19 has an invalid length.
[  197.072137][ T7967] netlink: 'syz-executor.1': attribute type 11 has an invalid length.
[  197.090047][ T7961] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'.
[  197.116839][ T7962] netlink: 'syz-executor.4': attribute type 49 has an invalid length.
[  197.140567][ T7954] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  197.169655][ T7966] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  197.210899][ T7963] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  197.777960][ T7980] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  197.811285][ T7979] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'.
[  198.025099][ T7986] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.2'.
[  198.210732][ T7992] tun0: tun_chr_ioctl cmd 1074025694
[  198.263321][ T7992] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.1'.
[  198.288821][ T7999] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'.
[  198.527886][ T8008] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  199.732611][ T8026] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'.
[  200.069120][ T8034] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'.
[  200.086163][ T8037] tun0: tun_chr_ioctl cmd 1074025694
[  200.379275][ T3644] device hsr_slave_0 left promiscuous mode
[  200.453045][ T3644] device hsr_slave_1 left promiscuous mode
[  200.503509][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.520829][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.585443][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.622062][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.705221][ T3644] device dummy0 left promiscuous mode
[  200.737634][ T3644] bridge0: port 3(dummy0) entered disabled state
[  200.872446][ T3644] device bridge_slave_1 left promiscuous mode
[  200.878842][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.020864][ T3644] device bridge_slave_0 left promiscuous mode
[  201.027186][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.350764][ T3644] device veth1_macvtap left promiscuous mode
[  201.367211][ T3644] device veth1_vlan left promiscuous mode
[  201.393920][ T3644] device veth0_vlan left promiscuous mode
[  202.135911][ T3644] team0 (unregistering): Port device team_slave_1 removed
[  202.206775][ T3644] team0 (unregistering): Port device team_slave_0 removed
[  202.245409][ T3644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.293560][ T3644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.378440][ T3644] bond0 (unregistering): Released all slaves
[  202.983697][ T8098] __nla_validate_parse: 3 callbacks suppressed
[  202.983715][ T8098] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.0'.
[  203.252890][ T8100] validate_nla: 7 callbacks suppressed
[  203.252908][ T8100] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  203.330927][ T8100] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  203.401471][ T8101] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  203.484210][ T8100] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  203.977051][ T8131] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.3'.
[  204.306483][ T8139] ref_ctr_offset mismatch. inode: 0x79f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe
[  204.867755][ T8145] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  204.907925][ T8145] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  204.931268][ T8150] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  205.140443][ T8145] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  205.913627][ T8183] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  206.468773][ T8206] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.3'.
[  206.503125][ T8206] openvswitch: netlink: Flow key attr not present in new flow.
[  207.095777][ T8234] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.2'.
[  207.117065][ T8230] ref_ctr_offset mismatch. inode: 0x7a4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe
[  207.135606][ T8234] openvswitch: netlink: Flow key attr not present in new flow.
[  207.322624][ T8248] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'.
[  208.008087][ T8271] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.3'.
[  208.084822][ T8271] openvswitch: netlink: Flow key attr not present in new flow.
[  209.104917][ T8310] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.3'.
[  209.129496][ T8310] openvswitch: netlink: Flow key attr not present in new flow.
[  209.183492][ T8309] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  209.223151][ T8309] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  209.246355][ T8311] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  209.307166][ T8309] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  209.548945][ T8318] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  209.579623][ T8318] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  209.618302][ T8318] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  210.051680][ T8341] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  210.109644][ T8341] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  210.143225][ T8346] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  210.222019][ T8349] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  210.236386][ T8341] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  210.248720][ T8354] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  210.266348][ T8349] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  210.720620][   T11] wlan1: Trigger new scan to find an IBSS to join
[  210.976044][ T8388] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  211.022435][ T8388] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  213.113434][ T8482] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.4'.
[  213.307548][ T8489] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len
[  213.674457][   T11] wlan1: Trigger new scan to find an IBSS to join
[  214.102219][ T8517] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.2'.
[  215.670158][   T11] wlan1: Creating new IBSS network, BSSID 7e:64:fd:c5:1b:a6
[  216.994253][ T8522] mac80211_hwsim hwsim11 wlan1: refused to change device tx_queue_len
[  217.203630][ T8536] validate_nla: 18 callbacks suppressed
[  217.203686][ T8536] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  217.281850][ T8536] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  217.300932][ T8545] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  217.354436][ T8536] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  218.136381][ T8571] mac80211_hwsim hwsim7 wlan1: refused to change device tx_queue_len
[  218.720630][ T8586] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  218.731793][ T8586] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  218.787827][ T8586] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  218.831894][ T8586] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  219.410301][ T8612] mac80211_hwsim hwsim11 wlan1: refused to change device tx_queue_len
[  219.787080][ T8626] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  219.832618][ T8626] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  220.481851][ T8651] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len
[  221.998213][ T8709] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'.
[  222.064660][ T8709] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  222.877874][ T8742] validate_nla: 5 callbacks suppressed
[  222.877889][ T8742] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  222.946370][ T8742] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'.
[  222.989340][ T8742] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  223.017904][ T8742] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  223.081383][ T8742] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  224.290993][ T8778] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  224.320225][ T8778] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'.
[  224.385780][ T8778] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  224.407862][ T8778] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  224.464711][ T8778] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'.
[  226.130553][ T8830] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.0'.
[  227.772502][ T8886] device wlan1 entered promiscuous mode
[  230.734186][ T8892] netlink: 'syz-executor.4': attribute type 58 has an invalid length.
[  230.785657][ T8892] netlink: 'syz-executor.4': attribute type 58 has an invalid length.
[  230.804851][ T8902] netlink: 'syz-executor.4': attribute type 58 has an invalid length.
[  230.847320][ T8905] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  230.866462][ T8905] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[  230.912396][ T8905] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  230.954698][ T8909] netlink: 16255 bytes leftover after parsing attributes in process `syz-executor.0'.
[  234.325600][ T8923] device wlan1 entered promiscuous mode
[  234.346978][ T8941] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'.
[  234.578348][ T8960] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  234.611806][ T8960] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  234.658874][ T8960] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'.
[  234.852594][ T8969] netlink: 'syz-executor.0': attribute type 58 has an invalid length.
[  234.883139][ T8969] netlink: 'syz-executor.0': attribute type 58 has an invalid length.
[  234.931662][ T8972] netlink: 'syz-executor.0': attribute type 58 has an invalid length.
[  235.335274][ T8988] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'.
[  235.711769][ T9009] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  238.531702][ T9033] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'.
[  238.772450][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  242.174426][ T9078] device wlan1 entered promiscuous mode
[  242.275651][ T9088] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  242.995445][ T9123] device wlan1 entered promiscuous mode
[  244.724031][ T9172] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.4'.
[  247.350095][   T47] Bluetooth: hci4: command 0x0406 tx timeout
[  249.947699][ T9257] device syzkaller0 entered promiscuous mode
[  252.152478][ T9319] device syzkaller0 entered promiscuous mode
[  254.128802][ T9371] device syzkaller0 entered promiscuous mode
[  255.137317][ T9429] validate_nla: 3 callbacks suppressed
[  255.137333][ T9429] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  255.168108][ T9429] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[  255.904004][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  255.910360][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  255.920691][ T9434] bridge0: port 4(hsr_slave_1) entered blocking state
[  255.943313][ T9434] bridge0: port 4(hsr_slave_1) entered disabled state
[  256.172808][ T9447] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  256.217052][ T9447] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.0'.
[  256.515600][ T9458] device syzkaller0 entered promiscuous mode
[  257.574415][ T9499] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  257.586063][ T9495] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[  257.605219][ T9499] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  257.616013][ T9495] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  257.626480][ T9495] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.4'.
[  257.849714][ T9512] bridge0: port 3(hsr_slave_1) entered blocking state
[  257.868182][ T9512] bridge0: port 3(hsr_slave_1) entered disabled state
[  258.280475][ T9531] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  258.321618][ T9531] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  258.698795][ T9540] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  258.730033][ T9540] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  258.752280][ T9540] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.0'.
[  258.866328][ T9550] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  258.940344][ T9550] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.4'.
[  260.413092][ T9586] device syzkaller0 entered promiscuous mode
[  260.614958][ T9609] bridge0: port 3(veth0_to_bond) entered blocking state
[  260.627451][ T9611] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  260.650807][ T9609] bridge0: port 3(veth0_to_bond) entered disabled state
[  260.659090][ T9609] device veth0_to_bond entered promiscuous mode
[  260.690237][ T9611] netlink: 127868 bytes leftover after parsing attributes in process `syz-executor.1'.
[  260.700838][ T9609] bridge0: port 3(veth0_to_bond) entered blocking state
[  260.708098][ T9609] bridge0: port 3(veth0_to_bond) entered forwarding state
[  260.770935][ T9616] device veth0_to_bond left promiscuous mode
[  260.814333][ T9616] bridge0: port 3(veth0_to_bond) entered disabled state
[  261.598939][ T9644] device syzkaller0 entered promiscuous mode
[  262.130227][ T9659] bridge0: port 4(veth0_to_bond) entered blocking state
[  262.148789][ T9659] bridge0: port 4(veth0_to_bond) entered disabled state
[  262.242243][ T9659] device veth0_to_bond entered promiscuous mode
[  262.302276][ T9659] bridge0: port 4(veth0_to_bond) entered blocking state
[  262.309332][ T9659] bridge0: port 4(veth0_to_bond) entered forwarding state
[  262.331529][ T9665] device veth0_to_bond left promiscuous mode
[  262.337992][ T9665] bridge0: port 4(veth0_to_bond) entered disabled state
[  262.389180][ T9672] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  263.172329][ T9690] device syzkaller0 entered promiscuous mode
[  263.960837][ T9707] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  264.917031][ T9750] device syzkaller0 entered promiscuous mode
[  265.129828][ T9765] netlink: 'syz-executor.0': attribute type 46 has an invalid length.
[  265.388222][ T9779] bridge0: port 3(veth0_to_bond) entered blocking state
[  265.420350][ T9779] bridge0: port 3(veth0_to_bond) entered disabled state
[  265.451339][ T9779] device veth0_to_bond entered promiscuous mode
[  265.460920][ T9779] bridge0: port 3(veth0_to_bond) entered blocking state
[  265.468016][ T9779] bridge0: port 3(veth0_to_bond) entered forwarding state
[  265.484416][ T9784] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  265.499734][ T9783] device veth0_to_bond left promiscuous mode
[  265.509814][ T9783] bridge0: port 3(veth0_to_bond) entered disabled state
[  265.702943][ T9799] netlink: 'syz-executor.1': attribute type 46 has an invalid length.
[  266.076083][ T9801] device syzkaller0 entered promiscuous mode
[  266.103976][ T9814] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  266.414070][ T9821] bridge0: port 4(veth0_to_bond) entered blocking state
[  266.449123][ T9821] bridge0: port 4(veth0_to_bond) entered disabled state
[  266.476574][ T9821] device veth0_to_bond entered promiscuous mode
[  266.508454][ T9821] bridge0: port 4(veth0_to_bond) entered blocking state
[  266.515519][ T9821] bridge0: port 4(veth0_to_bond) entered forwarding state
[  266.569529][ T9826] device veth0_to_bond left promiscuous mode
[  266.652325][ T9826] bridge0: port 4(veth0_to_bond) entered disabled state
[  267.172455][ T9836] netlink: 'syz-executor.2': attribute type 46 has an invalid length.
[  267.866911][ T9850] device syzkaller0 entered promiscuous mode
[  268.406654][ T9875] bridge0: port 3(veth0_to_bond) entered blocking state
[  268.430088][ T9875] bridge0: port 3(veth0_to_bond) entered disabled state
[  268.456349][ T9875] device veth0_to_bond entered promiscuous mode
[  268.727659][ T9875] bridge0: port 3(veth0_to_bond) entered blocking state
[  268.734805][ T9875] bridge0: port 3(veth0_to_bond) entered forwarding state
[  268.936029][ T9874] device veth0_to_bond left promiscuous mode
[  268.961050][ T9874] bridge0: port 3(veth0_to_bond) entered disabled state
[  268.971390][ T9879] netlink: 'syz-executor.3': attribute type 46 has an invalid length.
[  269.926042][ T9917] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'.
[  269.960152][ T9920] bridge0: port 4(veth0_to_bond) entered blocking state
[  269.967197][ T9920] bridge0: port 4(veth0_to_bond) entered disabled state
[  270.028474][ T9920] device veth0_to_bond entered promiscuous mode
[  270.077741][ T9920] bridge0: port 4(veth0_to_bond) entered blocking state
[  270.084817][ T9920] bridge0: port 4(veth0_to_bond) entered forwarding state
[  270.379058][ T9929] device syzkaller0 entered promiscuous mode
[  270.706297][ T9943] netlink: 'syz-executor.3': attribute type 27 has an invalid length.
[  270.763503][ T9943] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  270.787412][ T9943] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  271.890586][ T9957] bridge0: port 4(veth0_to_bond) entered blocking state
[  271.897763][ T9957] bridge0: port 4(veth0_to_bond) entered disabled state
[  271.913859][ T9957] device veth0_to_bond entered promiscuous mode
[  271.924581][ T9957] bridge0: port 4(veth0_to_bond) entered blocking state
[  271.931694][ T9957] bridge0: port 4(veth0_to_bond) entered forwarding state
[  271.973493][ T9948] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'.
[  272.030587][ T9959] device veth0_to_bond left promiscuous mode
[  272.067820][ T9959] bridge0: port 4(veth0_to_bond) entered disabled state
[  273.033306][ T3586] Bluetooth: hci0: command 0x0406 tx timeout
[  273.149796][ T9973] device syzkaller0 entered promiscuous mode
[  274.051865][T10010] 
: renamed from ipvlan1
[  274.467582][T10028] device syzkaller0 entered promiscuous mode
[  275.707995][T10049] device syzkaller0 entered promiscuous mode
[  275.792092][T10069] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  275.810828][T10069] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  275.822483][T10069] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
[  275.995183][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  276.014555][T10074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.118621][T10070] 
: renamed from ipvlan1
[  276.769497][T10090] device syzkaller0 entered promiscuous mode
[  276.982360][T10100] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'.
[  277.126410][T10111] 
: renamed from ipvlan1
[  277.785102][T10127] device syzkaller0 entered promiscuous mode
[  277.795085][T10134] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'.
[  278.039600][T10152] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  278.080689][T10152] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  278.134610][T10152] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'.
[  278.457500][T10173] bridge0: port 3(veth0_to_bond) entered blocking state
[  278.468182][T10173] bridge0: port 3(veth0_to_bond) entered disabled state
[  278.488944][T10173] device veth0_to_bond entered promiscuous mode
[  278.604062][T10173] bridge0: port 3(veth0_to_bond) entered blocking state
[  278.611167][T10173] bridge0: port 3(veth0_to_bond) entered forwarding state
[  278.691959][T10171] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'.
[  279.043201][T10173] device veth0_to_bond left promiscuous mode
[  279.049426][T10173] bridge0: port 3(veth0_to_bond) entered disabled state
[  279.329657][T10185] device syzkaller0 entered promiscuous mode
[  279.352325][T10197] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  279.383383][T10197] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  279.392852][T10197] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'.
[  279.427288][T10201] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  279.447510][T10201] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'.
[  279.563667][T10211] bridge0: port 3(veth0_to_bond) entered blocking state
[  279.573521][T10211] bridge0: port 3(veth0_to_bond) entered disabled state
[  279.582714][T10211] device veth0_to_bond entered promiscuous mode
[  279.593479][T10211] bridge0: port 3(veth0_to_bond) entered blocking state
[  279.600588][T10211] bridge0: port 3(veth0_to_bond) entered forwarding state
[  279.622632][T10211] device veth0_to_bond left promiscuous mode
[  279.637600][T10211] bridge0: port 3(veth0_to_bond) entered disabled state
[  280.012620][T10238] netlink: 'syz-executor.4': attribute type 46 has an invalid length.
[  280.028501][T10237] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  280.230451][T10249] bridge0: port 3(veth0_to_bond) entered blocking state
[  280.239324][T10249] bridge0: port 3(veth0_to_bond) entered disabled state
[  280.253258][T10249] device veth0_to_bond entered promiscuous mode
[  280.261596][T10249] bridge0: port 3(veth0_to_bond) entered blocking state
[  280.268648][T10249] bridge0: port 3(veth0_to_bond) entered forwarding state
[  280.290417][T10249] device veth0_to_bond left promiscuous mode
[  280.299589][T10249] bridge0: port 3(veth0_to_bond) entered disabled state
[  280.433247][T10257] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  280.572876][T10268] netlink: 'syz-executor.2': attribute type 46 has an invalid length.
[  280.671965][T10279] bridge0: port 3(veth0_to_bond) entered blocking state
[  280.679218][T10279] bridge0: port 3(veth0_to_bond) entered disabled state
[  280.688713][T10279] device veth0_to_bond entered promiscuous mode
[  280.706000][T10279] bridge0: port 3(veth0_to_bond) entered blocking state
[  280.713065][T10279] bridge0: port 3(veth0_to_bond) entered forwarding state
[  280.736105][T10279] device veth0_to_bond left promiscuous mode
[  280.742639][T10279] bridge0: port 3(veth0_to_bond) entered disabled state
[  280.851600][T10288] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  280.866117][T10288] __nla_validate_parse: 9 callbacks suppressed
[  280.866133][T10288] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'.
[  280.888984][T10284] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'.
[  281.059597][T10298] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'.
[  281.196589][T10308] netlink: 'syz-executor.1': attribute type 46 has an invalid length.
[  281.222613][T10308] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'.
[  281.232445][T10311] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'.
[  281.251737][T10313] bridge0: port 4(veth0_to_bond) entered blocking state
[  281.276001][T10313] bridge0: port 4(veth0_to_bond) entered disabled state
[  281.314156][T10313] device veth0_to_bond entered promiscuous mode
[  281.339866][T10313] bridge0: port 4(veth0_to_bond) entered blocking state
[  281.346933][T10313] bridge0: port 4(veth0_to_bond) entered forwarding state
[  281.378464][T10315] device veth0_to_bond left promiscuous mode
[  281.395097][T10315] bridge0: port 4(veth0_to_bond) entered disabled state
[  281.427410][T10322] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  281.436367][T10322] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'.
[  281.628839][T10324] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'.
[  281.681419][T10336] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  281.705863][T10339] netlink: 'syz-executor.4': attribute type 46 has an invalid length.
[  281.745118][T10339] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'.
[  281.797669][T10346] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'.
[  281.889436][T10353] bridge0: port 3(veth0_to_bond) entered blocking state
[  281.907114][T10353] bridge0: port 3(veth0_to_bond) entered disabled state
[  281.920124][T10353] device veth0_to_bond entered promiscuous mode
[  281.926788][T10353] bridge0: port 3(veth0_to_bond) entered blocking state
[  281.933860][T10353] bridge0: port 3(veth0_to_bond) entered forwarding state
[  281.992038][T10359] device veth0_to_bond left promiscuous mode
[  282.021305][T10359] bridge0: port 3(veth0_to_bond) entered disabled state
[  282.072514][T10352] �: renamed from pim6reg1
[  282.287648][T10374] netlink: 'syz-executor.2': attribute type 46 has an invalid length.
[  282.666555][T10398] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  282.690030][T10398] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  283.038391][T10417] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  283.050257][T10417] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  283.483265][T10435] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[  284.229844][T10494] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  284.288111][T10494] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  285.042846][T10547] device syzkaller0 entered promiscuous mode
[  285.498001][T10580] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  285.560065][T10580] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  285.708737][T10593] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  285.727518][T10593] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  286.059580][T10599] �: renamed from pim6reg1
[  286.208644][T10614] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  286.484167][T10627] __nla_validate_parse: 8 callbacks suppressed
[  286.484214][T10627] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'.
[  286.545561][T10637] device macvlan1 entered promiscuous mode
[  286.567238][T10637] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  286.752554][T10644] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  286.873945][T10642] �: renamed from pim6reg1
[  286.897190][T10651] netlink: 134056 bytes leftover after parsing attributes in process `syz-executor.4'.
[  286.960709][T10651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  286.977189][T10651] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  287.671438][T10667] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'.
[  287.868549][T10682] device pim6reg1 entered promiscuous mode
[  288.240082][T10704] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  288.293722][T10709] netlink: 134056 bytes leftover after parsing attributes in process `syz-executor.3'.
[  288.346079][T10709] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  288.382398][T10709] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  288.597786][T10723] device pim6reg1 entered promiscuous mode
[  288.719697][T10727] netlink: 16366 bytes leftover after parsing attributes in process `syz-executor.0'.
[  289.205985][T10740] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  289.661295][T10755] device pim6reg1 entered promiscuous mode
[  290.177971][T10775] �: renamed from pim6reg1
[  290.434620][T10786] device macvlan1 entered promiscuous mode
[  290.468230][T10786] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
[  290.748162][T10801] device pim6reg1 entered promiscuous mode
[  290.998759][T10823] 
��0: renamed from pim6reg1
[  291.394771][T10846] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'.
[  291.407768][T10844] device pim6reg1 entered promiscuous mode
[  292.241417][T10885] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'.
[  293.526740][T10948] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'.
[  293.585884][T10951] 
��0: renamed from pim6reg1
[  294.360158][T10987] 
��0: renamed from pim6reg1
[  294.456215][T10993] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[  294.552033][T11005] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'.
[  295.491999][T11029] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  295.533066][T11029] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'.
[  295.624883][T11035] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  295.687915][T11039] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  295.866265][T11051] sctp: [Deprecated]: syz-executor.0 (pid 11051) Use of int in max_burst socket option deprecated.
[  295.866265][T11051] Use struct sctp_assoc_value instead
[  296.049009][T11063] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  296.065449][T11066] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  296.078265][T11066] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'.
[  296.096892][T11063] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  296.117876][T11068] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  296.160154][T11063] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  296.170641][T11063] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  296.210085][   T26] audit: type=1804 audit(1718356734.633:22): pid=11074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2453059575/syzkaller.iJb6nP/606/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0
[  296.275432][   T26] audit: type=1800 audit(1718356734.643:23): pid=11074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1953 res=0 errno=0
[  296.305572][T11077] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  296.425762][T11085] sctp: [Deprecated]: syz-executor.2 (pid 11085) Use of int in max_burst socket option deprecated.
[  296.425762][T11085] Use struct sctp_assoc_value instead
[  297.733195][T11132] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
[  297.744379][T11132] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'.
[  297.782338][   T26] audit: type=1804 audit(1718356736.213:24): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3163779327/syzkaller.10HDwI/359/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  297.815572][T11137] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  297.839710][   T26] audit: type=1800 audit(1718356736.213:25): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1960 res=0 errno=0
[  297.851291][T11137] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  298.177867][T11168] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'.
[  298.586884][ T3586] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  299.589858][ T3586] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  299.657177][T11240] device syzkaller0 entered promiscuous mode
[  300.341497][T11288] device syzkaller0 entered promiscuous mode
[  300.352968][T11274] �: renamed from pim6reg1
[  300.498269][T11296] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  300.518622][T11296] netlink: 112865 bytes leftover after parsing attributes in process `syz-executor.2'.
[  300.815220][ T3586] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  301.740563][T11339] �: renamed from pim6reg1
[  301.936163][T11368] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  301.968335][T11368] netlink: 112865 bytes leftover after parsing attributes in process `syz-executor.2'.
[  302.292177][T11390] �: renamed from pim6reg1
[  302.354108][T11396] validate_nla: 14 callbacks suppressed
[  302.354122][T11396] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  302.370712][T11396] device veth1_macvtap left promiscuous mode
[  302.392349][T11396] bridge0: port 3(macsec0) entered blocking state
[  302.403954][T11396] bridge0: port 3(macsec0) entered disabled state
[  302.412307][T11396] device macsec0 entered promiscuous mode
[  302.466491][T11398] device syzkaller0 entered promiscuous mode
[  302.599264][T11402] device wg2 entered promiscuous mode
[  302.716216][T11411] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  302.750643][T11411] netlink: 112865 bytes leftover after parsing attributes in process `syz-executor.3'.
[  302.837438][T11416] device syzkaller0 entered promiscuous mode
[  302.997185][T11427] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  303.277668][T11446] device syzkaller0 entered promiscuous mode
[  303.493860][T11446] device wg2 entered promiscuous mode
[  303.517680][T11463] sctp: [Deprecated]: syz-executor.0 (pid 11463) Use of struct sctp_assoc_value in delayed_ack socket option.
[  303.517680][T11463] Use struct sctp_sack_info instead
[  303.639217][T11466] device syzkaller0 entered promiscuous mode
[  303.740084][T11470] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  303.755424][T11470] device veth1_macvtap left promiscuous mode
[  303.787535][T11470] bridge0: port 3(macsec0) entered blocking state
[  303.808686][T11470] bridge0: port 3(macsec0) entered disabled state
[  303.837972][T11470] device macsec0 entered promiscuous mode
[  304.196809][T11500] sctp: [Deprecated]: syz-executor.1 (pid 11500) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.196809][T11500] Use struct sctp_sack_info instead
[  304.316068][T11503] device syzkaller0 entered promiscuous mode
[  304.465183][T11507] device syzkaller0 entered promiscuous mode
[  304.486801][T11503] device wg2 entered promiscuous mode
[  305.007397][T11525] �: renamed from pim6reg1
[  305.115578][T11534] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  305.140041][T11534] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'.
[  305.219527][T11532] device syzkaller0 entered promiscuous mode
[  305.348692][T11545] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  305.381726][T11545] device veth1_macvtap left promiscuous mode
[  305.404837][T11545] bridge0: port 5(macsec0) entered blocking state
[  305.426254][T11545] bridge0: port 5(macsec0) entered disabled state
[  305.446989][T11545] device macsec0 entered promiscuous mode
[  305.566641][T11547] device wg2 left promiscuous mode
[  305.624058][T11547] device wg2 entered promiscuous mode
[  305.640527][T11560] sctp: [Deprecated]: syz-executor.0 (pid 11560) Use of struct sctp_assoc_value in delayed_ack socket option.
[  305.640527][T11560] Use struct sctp_sack_info instead
[  305.748162][T11552] device syzkaller0 entered promiscuous mode
[  305.795732][T11554] device syzkaller0 entered promiscuous mode
[  306.023177][T11582] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  306.694021][T11609] device syzkaller0 entered promiscuous mode
[  306.793317][T11612] device syzkaller0 entered promiscuous mode
[  306.805788][T11609] device wg2 left promiscuous mode
[  306.862047][T11615] device syzkaller0 entered promiscuous mode
[  306.878223][T11609] device wg2 entered promiscuous mode
[  307.600501][T11632] device syzkaller0 entered promiscuous mode
[  307.650166][T11640] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  307.658274][T11640] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'.
[  308.271565][T11672] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  308.279665][T11672] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'.
[  308.695662][T11681] device syzkaller0 entered promiscuous mode
[  308.779834][T11681] device wg2 left promiscuous mode
[  308.817638][T11681] device wg2 entered promiscuous mode
[  309.291039][T11701] device syzkaller0 entered promiscuous mode
[  309.508426][T11711] device syzkaller0 entered promiscuous mode
[  309.603200][T11722] device syzkaller0 entered promiscuous mode
[  309.686997][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  309.767727][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  309.777544][T11732] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  309.812506][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  309.851794][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  309.890597][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  309.932832][T11729] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  310.052091][T11742] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.1'.
[  310.170253][T11748] device syzkaller0 entered promiscuous mode
[  310.794565][T11776] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  311.066122][T11785] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.2'.
[  311.459111][T11798] device netdevsim0 entered promiscuous mode
[  311.596500][T11796] device syzkaller0 entered promiscuous mode
[  311.723763][T11811] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'.
[  312.152220][T11839] device syzkaller0 entered promiscuous mode
[  312.183941][T11843] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  312.410566][T11858] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.0'.
[  312.561901][T11865] device pim6reg1 entered promiscuous mode
[  312.990804][T11885] device syzkaller0 entered promiscuous mode
[  313.461889][T11904] device syzkaller0 entered promiscuous mode
[  313.537858][T11896] device syzkaller0 entered promiscuous mode
[  313.617680][T11910] device wg2 left promiscuous mode
[  313.653994][T11904] device wg2 entered promiscuous mode
[  313.786307][T11920] device pim6reg1 entered promiscuous mode
[  313.965967][T11933] device syzkaller0 entered promiscuous mode
[  313.996425][T11939] device netdevsim0 entered promiscuous mode
[  314.257655][T11949] device syzkaller0 entered promiscuous mode
[  314.553175][T11967] device pim6reg1 entered promiscuous mode
[  315.143056][T11997] device syzkaller0 entered promiscuous mode
[  317.012215][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  317.018546][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  318.128337][T12079] device syzkaller0 entered promiscuous mode
[  318.953893][T12080] device wg2 entered promiscuous mode
[  319.307024][T12101] device pim6reg1 entered promiscuous mode
[  321.472346][   T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.508478][   T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.518910][   T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.527990][   T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.577018][   T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  321.586143][   T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  322.452348][   T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.597203][   T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.713729][   T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.843854][T12167] device pim6reg1 entered promiscuous mode
[  322.881848][   T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.036348][T12149] chnl_net:caif_netlink_parms(): no params data found
[  323.698276][   T47] Bluetooth: hci5: command tx timeout
[  324.112894][T12149] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.120501][T12149] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.129056][T12149] device bridge_slave_0 entered promiscuous mode
[  324.169203][T12149] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.186452][T12149] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.222875][T12149] device bridge_slave_1 entered promiscuous mode
[  324.325057][T12149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.337591][T12149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.431565][T12149] team0: Port device team_slave_0 added
[  324.445947][T12149] team0: Port device team_slave_1 added
[  324.535243][T12149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.555181][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.631232][T12149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.663729][T12149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.674316][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.727316][T12149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.905749][T12149] device hsr_slave_0 entered promiscuous mode
[  324.950651][T12149] device hsr_slave_1 entered promiscuous mode
[  325.460055][   T56] device hsr_slave_0 left promiscuous mode
[  325.478007][   T56] device hsr_slave_1 left promiscuous mode
[  325.511277][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.518843][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.560152][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.567581][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.587025][   T56] bridge0: port 3(dummy0) entered disabled state
[  325.615887][   T56] device bridge_slave_1 left promiscuous mode
[  325.617175][T12234] validate_nla: 13 callbacks suppressed
[  325.617189][T12234] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  325.633063][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.666962][   T56] device bridge_slave_0 left promiscuous mode
[  325.670922][T12234] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[  325.685301][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.731968][   T56] device veth1_macvtap left promiscuous mode
[  325.747666][   T56] device veth0_macvtap left promiscuous mode
[  325.754032][   T47] Bluetooth: hci5: command tx timeout
[  325.768860][   T56] device veth1_vlan left promiscuous mode
[  325.792985][   T56] device veth0_vlan left promiscuous mode
[  326.339402][   T56] team0 (unregistering): Port device team_slave_1 removed
[  326.418633][   T56] team0 (unregistering): Port device team_slave_0 removed
[  326.492677][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  326.580387][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  326.880980][   T56] bond0 (unregistering): Released all slaves
[  327.476073][T12149] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  327.497479][T12149] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  327.540634][T12149] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  327.602185][T12149] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  327.825255][T12300] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  327.830144][   T47] Bluetooth: hci5: command tx timeout
[  327.848086][T12300] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  328.052980][T12149] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.081521][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  328.099639][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  328.112424][T12149] 8021q: adding VLAN 0 to HW filter on device team0
[  328.143329][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  328.152741][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  328.171017][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.178128][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.249753][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  328.270783][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  328.297034][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  328.401271][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.408383][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.491004][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  328.499877][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  328.533652][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  328.544558][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  328.554524][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  328.565135][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  328.573797][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  328.582639][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  328.595448][T12149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  328.622038][T12149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  328.637582][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  328.651979][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  328.668449][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  329.405684][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  329.426686][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  329.496181][T12149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.883761][T12364] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  329.895117][T12364] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'.
[  329.910098][   T47] Bluetooth: hci5: command tx timeout
[  330.152279][T12375] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'.
[  330.649699][T12396] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.658602][T12396] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.759240][T12402] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  330.772803][T12402] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'.
[  330.810374][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  330.824282][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  330.905143][T12400] device bridge_slave_1 left promiscuous mode
[  330.950752][T12400] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.978236][T12400] device bridge_slave_0 left promiscuous mode
[  330.992137][T12400] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.193549][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  331.215735][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  331.253593][T12149] device veth0_vlan entered promiscuous mode
[  331.287726][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  331.325869][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  331.364186][T12149] device veth1_vlan entered promiscuous mode
[  331.461687][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  331.476050][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  331.495870][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  331.531367][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  331.572666][T12149] device veth0_macvtap entered promiscuous mode
[  331.595540][T12149] device veth1_macvtap entered promiscuous mode
[  331.649656][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.678319][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.703537][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.724540][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.744762][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.764166][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.774174][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.784714][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.797472][T12149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.807791][T12424] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  331.836806][T12424] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  331.856804][T12424] netlink: 16114 bytes leftover after parsing attributes in process `syz-executor.2'.
[  331.892283][T12422] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
[  331.904345][T12422] netlink: 'syz-executor.0': attribute type 22 has an invalid length.
[  331.950019][T12422] netlink: 14384 bytes leftover after parsing attributes in process `syz-executor.0'.
[  331.979156][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  331.987760][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  332.037247][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  332.055693][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  332.078840][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.101936][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.121404][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.161330][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.187057][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.223766][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.255364][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.275306][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.293166][T12149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.307110][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  332.377475][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  332.477419][T12149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.530125][T12149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.560196][T12149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.599412][T12149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.809336][T12450] device syzkaller0 entered promiscuous mode
[  333.052149][ T3641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.071152][ T3641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.086960][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  333.126323][ T3641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.156033][ T3641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.182023][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  333.525086][T12482] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  333.560867][T12482] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  333.581801][T12482] netlink: 16114 bytes leftover after parsing attributes in process `syz-executor.4'.
[  333.631388][T12488] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  333.789502][T12494] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'.
[  334.674913][T12534] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.684317][T12534] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.792858][T12535] device macsec0 left promiscuous mode
[  334.798513][T12535] bridge0: port 3(macsec0) entered disabled state
[  334.828262][T12535] device bridge_slave_1 left promiscuous mode
[  334.834841][T12535] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.844072][T12535] device bridge_slave_0 left promiscuous mode
[  334.851506][T12535] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.491339][T12563] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
[  335.546868][T12567] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  335.574822][T12570] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'.
[  336.146832][T12597] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
[  336.216870][T12601] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  336.266943][T12607] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'.
[  336.637657][T12631] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
[  336.918774][T12642] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  336.990148][T12642] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'.
[  337.811984][T12687] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  338.365503][T12715] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  338.716375][T12736] IPv6: NLM_F_CREATE should be specified when creating new route
[  338.741065][T12736] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'.
[  338.832110][T12740] �: renamed from pim6reg1
[  338.888248][T12740] netlink: 'syz-executor.3': attribute type 19 has an invalid length.
[  338.935079][T12748] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  338.994347][T12750] bridge0: port 3(veth1_to_hsr) entered blocking state
[  339.050199][T12750] bridge0: port 3(veth1_to_hsr) entered disabled state
[  339.077544][T12750] device veth1_to_hsr entered promiscuous mode
[  339.124441][T12750] bridge0: port 3(veth1_to_hsr) entered blocking state
[  339.131514][T12750] bridge0: port 3(veth1_to_hsr) entered forwarding state
[  339.453729][T12768] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  339.470235][T12768] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'.
[  339.722875][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.775769][ T3586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  339.789337][ T3586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  339.797409][ T3586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  339.808904][ T3586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  339.816811][ T3586] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  339.824968][ T3586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  339.834791][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.950969][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.972270][T12795] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  339.980635][T12795] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'.
[  340.032845][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.262967][T12781] chnl_net:caif_netlink_parms(): no params data found
[  340.514379][T12830] bridge0: port 6(veth1_to_hsr) entered blocking state
[  340.521616][T12830] bridge0: port 6(veth1_to_hsr) entered disabled state
[  340.529808][T12830] device veth1_to_hsr entered promiscuous mode
[  340.536533][T12830] bridge0: port 6(veth1_to_hsr) entered blocking state
[  340.543545][T12830] bridge0: port 6(veth1_to_hsr) entered forwarding state
[  340.584733][T12781] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.609157][T12781] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.645001][T12781] device bridge_slave_0 entered promiscuous mode
[  340.716518][T12832] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  340.738890][T12832] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'.
[  340.785679][T12781] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.797676][T12781] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.832620][T12781] device bridge_slave_1 entered promiscuous mode
[  340.923868][T12781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.972132][T12781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.083099][T12781] team0: Port device team_slave_0 added
[  341.114547][T12847] bridge0: port 3(veth1_to_hsr) entered disabled state
[  341.122158][T12847] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.130413][T12847] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.174694][T12852] device veth1_to_hsr left promiscuous mode
[  341.203328][T12852] bridge0: port 3(veth1_to_hsr) entered disabled state
[  341.212019][T12852] device bridge_slave_1 left promiscuous mode
[  341.218234][T12852] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.233320][T12852] device bridge_slave_0 left promiscuous mode
[  341.239676][T12852] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.285489][T12781] team0: Port device team_slave_1 added
[  341.353094][T12781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.390159][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.450474][T12781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.486698][T12781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.499971][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.554914][T12781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.593290][T12863] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  341.625449][T12863] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'.
[  341.736719][ T3577] 
[  341.739078][ T3577] ======================================================
[  341.746084][ T3577] WARNING: possible circular locking dependency detected
[  341.753084][ T3577] 6.1.93-syzkaller #0 Not tainted
[  341.758085][ T3577] ------------------------------------------------------
[  341.765083][ T3577] syz-executor.3/3577 is trying to acquire lock:
[  341.771386][ T3577] ffff8880b9835e90 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x84/0x670
[  341.781747][ T3577] 
[  341.781747][ T3577] but task is already holding lock:
[  341.789178][ T3577] ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  341.798647][ T3577] 
[  341.798647][ T3577] which lock already depends on the new lock.
[  341.798647][ T3577] 
[  341.809030][ T3577] 
[  341.809030][ T3577] the existing dependency chain (in reverse order) is:
[  341.818024][ T3577] 
[  341.818024][ T3577] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  341.825306][ T3577]        lock_acquire+0x1f8/0x5a0
[  341.830321][ T3577]        _raw_spin_lock_nested+0x2d/0x40
[  341.835951][ T3577]        raw_spin_rq_lock_nested+0x26/0x140
[  341.841830][ T3577]        task_fork_fair+0x5d/0x350
[  341.846929][ T3577]        sched_cgroup_fork+0x374/0x400
[  341.852374][ T3577]        copy_process+0x2442/0x4060
[  341.857557][ T3577]        kernel_clone+0x222/0x920
[  341.862562][ T3577]        user_mode_thread+0x12e/0x190
[  341.867915][ T3577]        rest_init+0x23/0x300
[  341.872576][ T3577]        start_kernel+0x0/0x53f
[  341.877408][ T3577]        start_kernel+0x496/0x53f
[  341.882412][ T3577]        secondary_startup_64_no_verify+0xcf/0xdb
[  341.888813][ T3577] 
[  341.888813][ T3577] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  341.896094][ T3577]        lock_acquire+0x1f8/0x5a0
[  341.901107][ T3577]        _raw_spin_lock_irqsave+0xd1/0x120
[  341.906899][ T3577]        try_to_wake_up+0xad/0x12e0
[  341.912088][ T3577]        rcu_read_unlock_special+0x3d2/0x540
[  341.918052][ T3577]        __rcu_read_unlock+0x92/0x100
[  341.923408][ T3577]        get_mem_cgroup_from_mm+0x19f/0x290
[  341.929289][ T3577]        get_mm_memcg_path+0x1b/0x600
[  341.934653][ T3577]        __mmap_lock_do_trace_acquire_returned+0x12f/0x670
[  341.941852][ T3577]        lock_mm_and_find_vma+0x219/0x2e0
[  341.947567][ T3577]        exc_page_fault+0x169/0x620
[  341.952756][ T3577]        asm_exc_page_fault+0x22/0x30
[  341.958122][ T3577]        copy_user_enhanced_fast_string+0xa/0x40
[  341.964446][ T3577]        _copy_from_iter+0x2c2/0xff0
[  341.969726][ T3577]        copy_page_from_iter+0x76/0x100
[  341.975277][ T3577]        pipe_write+0x857/0x1af0
[  341.980216][ T3577]        vfs_write+0x7ae/0xba0
[  341.984963][ T3577]        ksys_write+0x19c/0x2c0
[  341.989795][ T3577]        do_syscall_64+0x3b/0xb0
[  341.994720][ T3577]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  342.001126][ T3577] 
[  342.001126][ T3577] -> #0 (lock#10){+.+.}-{2:2}:
[  342.008068][ T3577]        validate_chain+0x1661/0x5950
[  342.013432][ T3577]        __lock_acquire+0x125b/0x1f80
[  342.018794][ T3577]        lock_acquire+0x1f8/0x5a0
[  342.023809][ T3577]        __mmap_lock_do_trace_acquire_returned+0x9d/0x670
[  342.030907][ T3577]        stack_map_get_build_id_offset+0x99e/0x9c0
[  342.037399][ T3577]        __bpf_get_stack+0x495/0x570
[  342.042675][ T3577]        bpf_get_stack_raw_tp+0x1b2/0x220
[  342.048377][ T3577]        bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e
[  342.054357][ T3577]        bpf_trace_run2+0x1fd/0x410
[  342.059548][ T3577]        trace_tlb_flush+0x151/0x1a0
[  342.064823][ T3577]        switch_mm_irqs_off+0x84a/0xc20
[  342.070356][ T3577]        __schedule+0x1140/0x4550
[  342.075373][ T3577]        schedule+0xbf/0x180
[  342.080045][ T3577]        do_nanosleep+0x192/0x5f0
[  342.085053][ T3577]        hrtimer_nanosleep+0x24d/0x490
[  342.090498][ T3577]        __se_sys_clock_nanosleep+0x323/0x3b0
[  342.096551][ T3577]        do_syscall_64+0x3b/0xb0
[  342.101477][ T3577]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  342.107879][ T3577] 
[  342.107879][ T3577] other info that might help us debug this:
[  342.107879][ T3577] 
[  342.118087][ T3577] Chain exists of:
[  342.118087][ T3577]   lock#10 --> &p->pi_lock --> &rq->__lock
[  342.118087][ T3577] 
[  342.129726][ T3577]  Possible unsafe locking scenario:
[  342.129726][ T3577] 
[  342.137184][ T3577]        CPU0                    CPU1
[  342.142549][ T3577]        ----                    ----
[  342.147897][ T3577]   lock(&rq->__lock);
[  342.151957][ T3577]                                lock(&p->pi_lock);
[  342.158544][ T3577]                                lock(&rq->__lock);
[  342.165123][ T3577]   lock(lock#10);
[  342.168840][ T3577] 
[  342.168840][ T3577]  *** DEADLOCK ***
[  342.168840][ T3577] 
[  342.177056][ T3577] 3 locks held by syz-executor.3/3577:
[  342.182497][ T3577]  #0: ffff8880b983aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  342.192408][ T3577]  #1: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x410
[  342.201792][ T3577]  #2: ffff8880788e2e58 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x232/0x9c0
[  342.212571][ T3577] 
[  342.212571][ T3577] stack backtrace:
[  342.218449][ T3577] CPU: 0 PID: 3577 Comm: syz-executor.3 Not tainted 6.1.93-syzkaller #0
[  342.226759][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  342.236810][ T3577] Call Trace:
[  342.240077][ T3577]  <TASK>
[  342.242997][ T3577]  dump_stack_lvl+0x1e3/0x2cb
[  342.247668][ T3577]  ? nf_tcp_handle_invalid+0x642/0x642
[  342.253122][ T3577]  ? print_circular_bug+0x12b/0x1a0
[  342.258310][ T3577]  check_noncircular+0x2fa/0x3b0
[  342.263257][ T3577]  ? add_chain_block+0x850/0x850
[  342.268199][ T3577]  ? lockdep_lock+0x11f/0x2a0
[  342.272877][ T3577]  ? trace_event_raw_event_lock+0x240/0x240
[  342.278766][ T3577]  validate_chain+0x1661/0x5950
[  342.283624][ T3577]  ? unwind_next_frame+0x1a3f/0x2220
[  342.288895][ T3577]  ? reacquire_held_locks+0x660/0x660
[  342.294260][ T3577]  ? reacquire_held_locks+0x660/0x660
[  342.299621][ T3577]  ? preempt_count_add+0x8f/0x180
[  342.304636][ T3577]  ? validate_chain+0x112/0x5950
[  342.309579][ T3577]  ? stack_trace_save+0x1c0/0x1c0
[  342.314607][ T3577]  ? mark_lock+0x9a/0x340
[  342.318930][ T3577]  __lock_acquire+0x125b/0x1f80
[  342.323781][ T3577]  lock_acquire+0x1f8/0x5a0
[  342.328275][ T3577]  ? __mmap_lock_do_trace_acquire_returned+0x84/0x670
[  342.335026][ T3577]  ? trace_event_raw_event_lock+0x240/0x240
[  342.340909][ T3577]  ? read_lock_is_recursive+0x10/0x10
[  342.346273][ T3577]  ? validate_chain+0x112/0x5950
[  342.351204][ T3577]  ? down_read_trylock+0x24a/0x3b0
[  342.356303][ T3577]  ? stack_map_get_build_id_offset+0x232/0x9c0
[  342.362447][ T3577]  ? __mmap_lock_do_trace_acquire_returned+0x84/0x670
[  342.369195][ T3577]  __mmap_lock_do_trace_acquire_returned+0x9d/0x670
[  342.375769][ T3577]  ? __mmap_lock_do_trace_acquire_returned+0x84/0x670
[  342.382520][ T3577]  stack_map_get_build_id_offset+0x99e/0x9c0
[  342.388491][ T3577]  ? __lock_acquire+0x125b/0x1f80
[  342.393506][ T3577]  ? __bpf_get_stackid+0x910/0x910
[  342.398608][ T3577]  __bpf_get_stack+0x495/0x570
[  342.403362][ T3577]  ? stack_map_get_build_id_offset+0x9c0/0x9c0
[  342.409503][ T3577]  ? psi_task_switch+0x43d/0x770
[  342.414426][ T3577]  ? __cant_sleep+0x270/0x270
[  342.419088][ T3577]  bpf_get_stack_raw_tp+0x1b2/0x220
[  342.424276][ T3577]  bpf_prog_ec3b2eefa702d8d3+0x3a/0x3e
[  342.429722][ T3577]  bpf_trace_run2+0x1fd/0x410
[  342.434383][ T3577]  ? bpf_trace_run2+0x110/0x410
[  342.439217][ T3577]  ? bpf_trace_run1+0x3d0/0x3d0
[  342.444055][ T3577]  ? __perf_event_task_sched_out+0xb19/0xc60
[  342.450021][ T3577]  trace_tlb_flush+0x151/0x1a0
[  342.454775][ T3577]  switch_mm_irqs_off+0x84a/0xc20
[  342.459785][ T3577]  ? psi_task_switch+0x340/0x770
[  342.464707][ T3577]  ? switch_mm+0x190/0x190
[  342.469115][ T3577]  __schedule+0x1140/0x4550
[  342.473618][ T3577]  ? do_nanosleep+0x153/0x5f0
[  342.478291][ T3577]  ? __sched_text_start+0x8/0x8
[  342.483132][ T3577]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  342.489028][ T3577]  ? _raw_spin_unlock+0x40/0x40
[  342.493869][ T3577]  schedule+0xbf/0x180
[  342.497929][ T3577]  do_nanosleep+0x192/0x5f0
[  342.502421][ T3577]  ? do_nanosleep+0x7c/0x5f0
[  342.506999][ T3577]  ? usleep_range_state+0x1c0/0x1c0
[  342.512185][ T3577]  ? memset+0x1f/0x40
[  342.516156][ T3577]  ? __hrtimer_init+0x181/0x260
[  342.520995][ T3577]  hrtimer_nanosleep+0x24d/0x490
[  342.525921][ T3577]  ? nanosleep_copyout+0x120/0x120
[  342.531018][ T3577]  ? __remove_hrtimer+0x4b0/0x4b0
[  342.536034][ T3577]  ? timespec64_add_safe+0x220/0x220
[  342.541306][ T3577]  ? restore_fpregs_from_fpstate+0xfc/0x230
[  342.547453][ T3577]  __se_sys_clock_nanosleep+0x323/0x3b0
[  342.552987][ T3577]  ? __x64_sys_clock_nanosleep+0xa0/0xa0
[  342.558604][ T3577]  ? syscall_enter_from_user_mode+0x2e/0x230
[  342.564568][ T3577]  ? lockdep_hardirqs_on+0x94/0x130
[  342.569754][ T3577]  ? syscall_enter_from_user_mode+0x2e/0x230
[  342.575721][ T3577]  do_syscall_64+0x3b/0xb0
[  342.580128][ T3577]  ? clear_bhb_loop+0x45/0xa0
[  342.584798][ T3577]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  342.590680][ T3577] RIP: 0033:0x7fc2fc0a82b5
[  342.595077][ T3577] Code: Unable to access opcode bytes at 0x7fc2fc0a828b.
[  342.602077][ T3577] RSP: 002b:00007ffced1c4600 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  342.610476][ T3577] RAX: ffffffffffffffda RBX: 0000000000000713 RCX: 00007fc2fc0a82b5
[  342.618433][ T3577] RDX: 00007ffced1c4640 RSI: 0000000000000000 RDI: 0000000000000000
[  342.626393][ T3577] RBP: 00007ffced1c46bc R08: 0000000000000000 R09: 0000000000000010
2024/06/14 09:19:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  342.634378][ T3577] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  342.642334][ T3577] R13: 00000000000536ac R14: 0000000000053681 R15: 0000000000000006
[  342.650297][ T3577]  </TASK>
[  342.655508][ T3586] Bluetooth: hci1: command tx timeout
[  342.677208][T12879] netlink: 'syz-executor.3': attribute type 22 has an invalid length.
[  342.822452][T12884] device syzkaller0 entered promiscuous mode