last executing test programs: 2m59.439969438s ago: executing program 3 (id=8572): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x2e}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000280)=0x20000) 2m59.332450181s ago: executing program 3 (id=8573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000030800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m59.258045716s ago: executing program 3 (id=8574): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1, 0x0, 0x27}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab50200000000000a", @ANYRES32, @ANYRES8=r0], 0xfe33) 2m59.064170652s ago: executing program 3 (id=8576): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 2m58.937156479s ago: executing program 3 (id=8579): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) close(0x3) 2m58.2038945s ago: executing program 3 (id=8581): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4083, 0xff3}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000100)=""/167, 0xa7}], 0x3}, 0x2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2m57.737039862s ago: executing program 32 (id=8581): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4083, 0xff3}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000100)=""/167, 0xa7}], 0x3}, 0x2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 59.055497187s ago: executing program 5 (id=10863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x3c}}, 0x8000) 58.840751999s ago: executing program 5 (id=10865): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mkdir(&(0x7f0000001a80)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20071, &(0x7f00000006c0)=ANY=[@ANYBLOB='gid', @ANYBLOB]) 58.644382793s ago: executing program 5 (id=10869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 58.339443149s ago: executing program 5 (id=10871): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r0, r1, 0x2f, 0x2000, 0x4}, 0x20) 57.610621262s ago: executing program 5 (id=10879): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 57.423567278s ago: executing program 5 (id=10894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.382241049s ago: executing program 33 (id=10894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.781033776s ago: executing program 2 (id=11030): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) 39.682201069s ago: executing program 2 (id=11031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 39.559323626s ago: executing program 2 (id=11032): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 39.267304613s ago: executing program 2 (id=11033): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 38.819760966s ago: executing program 6 (id=10995): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) 38.775875421s ago: executing program 2 (id=11037): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfefca) close(r0) 38.398026294s ago: executing program 34 (id=10995): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) 36.623762631s ago: executing program 2 (id=11052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 36.105850356s ago: executing program 35 (id=11052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 3.294919649s ago: executing program 7 (id=11424): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 3.088228207s ago: executing program 7 (id=11428): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x110901, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) close(0x3) 2.840566222s ago: executing program 8 (id=11433): sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x80032}, 0x80, 0x0}, 0x60040855) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.823767916s ago: executing program 7 (id=11434): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) 2.719881131s ago: executing program 1 (id=11435): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/8, 0x8}}, 0x10) 2.667920512s ago: executing program 4 (id=11437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.5965063s ago: executing program 8 (id=11439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) 2.527292374s ago: executing program 4 (id=11441): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x63) 2.521273797s ago: executing program 1 (id=11442): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="9b", 0x1}, {&(0x7f0000000080)="11", 0x1}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000600000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 2.380899582s ago: executing program 1 (id=11443): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) 2.348704592s ago: executing program 0 (id=11444): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 1:2'], 0xa) 2.317668837s ago: executing program 4 (id=11445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01"], 0x44}}, 0x0) 2.280811631s ago: executing program 8 (id=11446): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x12, 0x300, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0x300, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x2000000, 0x0, 0xe00}, 0x28) 2.149896385s ago: executing program 4 (id=11447): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x87fff, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.145869613s ago: executing program 0 (id=11457): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[], 0x10) 2.114135078s ago: executing program 1 (id=11448): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}]}, 0x38}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209", 0x25}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 2.037950201s ago: executing program 8 (id=11449): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x50, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) 1.975341892s ago: executing program 0 (id=11450): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 1.877704937s ago: executing program 7 (id=11451): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)=""/275, 0x113}, {&(0x7f0000000040)=""/205, 0xcd}, {&(0x7f0000001a40)=""/4127, 0x101f}, {&(0x7f0000000140)=""/210, 0xd2}, {&(0x7f0000000a00)=""/208, 0xd0}, {&(0x7f0000000300)=""/294, 0x126}, {&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000003ac0)=""/4122, 0x101a}, {&(0x7f0000000440)=""/151, 0x97}], 0x9}, 0x100) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.876062174s ago: executing program 1 (id=11462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 1.756394567s ago: executing program 1 (id=11452): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1c) 1.714182197s ago: executing program 8 (id=11453): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x28, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 1.618217808s ago: executing program 7 (id=11454): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) 1.617910161s ago: executing program 4 (id=11455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 822.276272ms ago: executing program 0 (id=11456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 822.063451ms ago: executing program 8 (id=11459): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef42100fffee3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 645.127925ms ago: executing program 36 (id=11459): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef42100fffee3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 634.65643ms ago: executing program 7 (id=11460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) 498.024282ms ago: executing program 37 (id=11460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) 476.773556ms ago: executing program 4 (id=11461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc, '\x00', r1}, 0x94) 414.543304ms ago: executing program 38 (id=11461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc, '\x00', r1}, 0x94) 397.896044ms ago: executing program 0 (id=11469): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x2, 0x0, 0xf, 0x4000003, 0x2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0xfe3a) 0s ago: executing program 0 (id=11465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) kernel console output (not intermixed with test programs): h: netlink: Either Ethernet header or EtherType is required. [ 378.903714][T18761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.922554][T18761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.951088][T18761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.979040][T18761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.463056][T18790] netlink: 'syz.3.6243': attribute type 1 has an invalid length. [ 379.484351][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6243'. [ 379.683402][T18792] netlink: 'syz.4.6245': attribute type 21 has an invalid length. [ 379.713494][T18796] netlink: 'syz.3.6247': attribute type 27 has an invalid length. [ 379.737768][T18796] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6247'. [ 379.739942][T18792] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6245'. [ 380.116540][T18803] netlink: 'syz.4.6250': attribute type 1 has an invalid length. [ 381.763396][T18858] __nla_validate_parse: 3 callbacks suppressed [ 381.763417][T18858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6278'. [ 381.780055][T18858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6278'. [ 381.812898][T18859] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6277'. [ 382.052242][T18873] netlink: 'syz.4.6285': attribute type 32 has an invalid length. [ 382.491412][T18896] netlink: 'syz.0.6297': attribute type 39 has an invalid length. [ 382.809503][T18906] netlink: 'syz.4.6301': attribute type 46 has an invalid length. [ 382.847605][T18906] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6301'. [ 382.969308][T18910] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6303'. [ 383.014935][T18910] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6303'. [ 383.073514][T18910] netlink: 'syz.0.6303': attribute type 6 has an invalid length. [ 383.119266][T18910] netlink: 'syz.0.6303': attribute type 5 has an invalid length. [ 383.160053][T18910] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6303'. [ 383.842232][T18955] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6324'. [ 383.860162][T18955] unsupported nla_type 65024 [ 383.918790][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.925219][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.315380][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6338'. [ 384.463305][T18993] validate_nla: 1 callbacks suppressed [ 384.463329][T18993] netlink: 'syz.1.6343': attribute type 1 has an invalid length. [ 385.015389][T19027] netlink: 'syz.4.6360': attribute type 4 has an invalid length. [ 385.047149][T19027] netlink: 'syz.4.6360': attribute type 16 has an invalid length. [ 385.068911][T19027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6360'. [ 385.252260][T19041] netlink: 'syz.2.6367': attribute type 58 has an invalid length. [ 385.798059][T19066] netlink: 'syz.0.6379': attribute type 1 has an invalid length. [ 386.082380][T19084] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 386.306974][T19101] netlink: 'syz.1.6394': attribute type 21 has an invalid length. [ 386.342076][T19101] netlink: 'syz.1.6394': attribute type 7 has an invalid length. [ 386.422981][T19104] netlink: 'syz.3.6397': attribute type 13 has an invalid length. [ 386.626221][T19116] netlink: 'syz.1.6403': attribute type 39 has an invalid length. [ 386.640809][T19104] bridge0: port 3(team0) entered disabled state [ 386.647413][T19104] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.654904][T19104] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.734176][T19123] netlink: 'syz.2.6404': attribute type 1 has an invalid length. [ 386.978985][T19104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.995559][T19104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.145603][T19108] __nla_validate_parse: 4 callbacks suppressed [ 387.145626][T19108] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6399'. [ 387.179840][T19108] tc_dump_action: action bad kind [ 387.234303][T19116] syz_tun (unregistering): left allmulticast mode [ 387.255233][T19116] bridge0: port 4(syz_tun) entered disabled state [ 387.327828][T19131] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6405'. [ 387.363672][ T4170] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.398516][ T4170] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.431055][ T4170] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.458355][ T4170] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.623175][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6413'. [ 388.205387][T19191] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.6431'. [ 388.225844][T19191] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.6431'. [ 388.578262][T19215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.594477][T19215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.631525][T19218] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6444'. [ 388.644722][T19215] hsr0: entered promiscuous mode [ 388.661041][T19218] batadv_slave_1: entered promiscuous mode [ 388.861009][T19231] netlink: 208 bytes leftover after parsing attributes in process `syz.3.6450'. [ 388.982541][T19240] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6453'. [ 389.806603][T19288] validate_nla: 6 callbacks suppressed [ 389.806623][T19288] netlink: 'syz.3.6476': attribute type 21 has an invalid length. [ 390.080011][T19307] netlink: 'syz.1.6484': attribute type 11 has an invalid length. [ 390.218829][T19316] netlink: 'syz.4.6489': attribute type 4 has an invalid length. [ 390.226927][T19315] netlink: 'syz.2.6488': attribute type 1 has an invalid length. [ 390.240043][T19316] netlink: 'syz.4.6489': attribute type 17 has an invalid length. [ 390.269827][T19315] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6488'. [ 390.290495][T19320] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6491'. [ 390.314009][T19320] C: entered allmulticast mode [ 390.319111][T19320] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 390.764605][T19351] bond_slave_0: entered promiscuous mode [ 390.770649][T19351] bond_slave_1: entered promiscuous mode [ 391.242946][T19373] netlink: 'syz.3.6514': attribute type 15 has an invalid length. [ 391.270163][T19373] netlink: 'syz.3.6514': attribute type 7 has an invalid length. [ 391.326820][T19377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.515940][T19389] netlink: 'syz.3.6524': attribute type 5 has an invalid length. [ 391.584995][T19391] netlink: 'syz.3.6526': attribute type 32 has an invalid length. [ 392.263525][T19422] netlink: 'syz.2.6540': attribute type 1 has an invalid length. [ 392.466059][T19438] __nla_validate_parse: 7 callbacks suppressed [ 392.466080][T19438] netlink: 15678 bytes leftover after parsing attributes in process `syz.2.6546'. [ 393.127734][T19480] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6567'. [ 393.209031][T19482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6568'. [ 393.481716][T19480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.536734][T19480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.593358][T19480] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 393.613774][T19480] veth1_vlan: left allmulticast mode [ 393.637691][T19480] bond0 (unregistering): Released all slaves [ 393.987266][T19516] bond_slave_0: left promiscuous mode [ 393.993437][T19516] bond_slave_1: left promiscuous mode [ 394.151764][T19516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.227659][T19516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.280919][T19516] veth1_vlan: left allmulticast mode [ 394.629605][T19549] delete_channel: no stack [ 394.675375][T19129] wg0 speed is unknown, defaulting to 1000 [ 394.682478][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.691583][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.701909][T19129] syz0: Port: 1 Link DOWN [ 394.722609][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.739973][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.331000][T19582] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6617'. [ 395.497512][ T30] audit: type=1107 audit(1760312642.570:7): pid=19595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 395.645220][T19606] validate_nla: 8 callbacks suppressed [ 395.645243][T19606] netlink: 'syz.1.6629': attribute type 2 has an invalid length. [ 395.700033][T19606] netlink: 'syz.1.6629': attribute type 3 has an invalid length. [ 395.719985][T19606] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6629'. [ 395.756923][T19611] netlink: 'syz.2.6632': attribute type 1 has an invalid length. [ 395.919334][T19620] netlink: 'syz.2.6636': attribute type 3 has an invalid length. [ 395.950081][T19620] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6636'. [ 396.080708][T19630] netlink: 'syz.3.6641': attribute type 9 has an invalid length. [ 396.088510][T19630] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6641'. [ 396.576137][T19664] netlink: 'syz.2.6658': attribute type 2 has an invalid length. [ 396.622384][T19664] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6658'. [ 397.019989][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6667'. [ 397.125433][T19688] openvswitch: netlink: Message has 2 unknown bytes. [ 397.150178][T19688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.532829][T19711] netlink: 'syz.4.6681': attribute type 4 has an invalid length. [ 398.331366][T19767] netlink: 'syz.2.6708': attribute type 46 has an invalid length. [ 398.339268][T19767] netlink: 'syz.2.6708': attribute type 19 has an invalid length. [ 398.500172][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6714'. [ 398.676745][T19791] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6720'. [ 398.872081][T19803] netlink: 'syz.0.6727': attribute type 2 has an invalid length. [ 398.898231][T19803] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6727'. [ 399.456409][T19839] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6745'. [ 399.476004][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6745'. [ 399.643461][T19851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6751'. [ 400.150903][T19886] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6768'. [ 400.211893][T19888] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6769'. [ 400.248939][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6771'. [ 400.448588][T19906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6778'. [ 400.798801][T19923] validate_nla: 5 callbacks suppressed [ 400.798822][T19923] netlink: 'syz.1.6786': attribute type 1 has an invalid length. [ 401.061367][T19934] ksmbd: Unknown IPC event: 1, ignore. [ 401.107660][T19936] netlink: 'syz.0.6792': attribute type 12 has an invalid length. [ 401.613630][T19964] netlink: 'syz.4.6806': attribute type 13 has an invalid length. [ 401.654846][T19964] erspan0: refused to change device tx_queue_len [ 401.673918][T19964] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 401.693560][T19970] openvswitch: netlink: Message has 8 unknown bytes. [ 402.009626][T19972] bond0 (unregistering): (slave 30): Releasing backup interface [ 402.038538][T19972] bond0 (unregistering): (slave €Â0): Releasing backup interface [ 402.058719][T19972] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 402.093264][T19972] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 402.107085][T19972] bond0 (unregistering): Released all slaves [ 403.371348][T20064] netlink: 'syz.2.6856': attribute type 1 has an invalid length. [ 403.925738][T20100] netlink: 'syz.1.6874': attribute type 3 has an invalid length. [ 403.965273][T20100] __nla_validate_parse: 17 callbacks suppressed [ 403.965297][T20100] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6874'. [ 404.081885][T20109] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6877'. [ 404.445920][T20126] netlink: 'syz.3.6886': attribute type 2 has an invalid length. [ 404.465326][T20126] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.6886'. [ 406.534427][T20251] netlink: 'syz.2.6944': attribute type 1 has an invalid length. [ 406.569810][T20251] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6944'. [ 406.591362][T20256] netlink: 'syz.3.6946': attribute type 3 has an invalid length. [ 406.599533][T20256] netlink: 'syz.3.6946': attribute type 1 has an invalid length. [ 407.998281][T20304] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6971'. [ 408.553279][T20336] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6985'. [ 408.847640][T20352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6993'. [ 408.911902][T20336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.936775][T20336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.953349][T20336] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 408.964831][T20336] bond0 (unregistering): Released all slaves [ 408.996300][T20354] netlink: 'syz.4.6995': attribute type 1 has an invalid length. [ 409.005367][T20354] netlink: 'syz.4.6995': attribute type 2 has an invalid length. [ 409.014047][T20354] netlink: 16134 bytes leftover after parsing attributes in process `syz.4.6995'. [ 409.592031][T20392] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.7013'. [ 409.678665][T20396] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7016'. [ 410.595904][T20447] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7038'. [ 410.975786][T20447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.989177][T20447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.012013][T20447] bond0 (unregistering): Released all slaves [ 411.030326][T20467] delete_channel: no stack [ 411.212793][T20478] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7055'. [ 411.223766][T20476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7053'. [ 411.302204][T20475] can: request_module (can-proto-0) failed. [ 411.362993][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7058'. [ 411.585781][T20497] netlink: 'syz.1.7064': attribute type 1 has an invalid length. [ 411.630032][T20497] netlink: 'syz.1.7064': attribute type 2 has an invalid length. [ 411.967915][T20524] netlink: 'syz.0.7074': attribute type 10 has an invalid length. [ 411.981317][T20524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7074'. [ 412.575687][T20560] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.7095'. [ 412.658196][T20563] netlink: 'syz.2.7096': attribute type 29 has an invalid length. [ 412.694514][T20563] netlink: 'syz.2.7096': attribute type 29 has an invalid length. [ 413.715443][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7120'. [ 415.349490][T20666] __nla_validate_parse: 1 callbacks suppressed [ 415.349511][T20666] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7146'. [ 415.468556][T20672] netlink: 'syz.4.7148': attribute type 12 has an invalid length. [ 415.479055][T20672] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.7148'. [ 415.560957][T20674] netlink: 'syz.3.7149': attribute type 22 has an invalid length. [ 415.568934][T20674] netlink: 'syz.3.7149': attribute type 1 has an invalid length. [ 415.614437][T20674] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7149'. [ 415.960018][T20697] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7160'. [ 415.980405][T20697] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7160'. [ 416.335000][T20717] netlink: 'syz.4.7170': attribute type 27 has an invalid length. [ 416.351786][T20717] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7170'. [ 417.209456][T20774] netlink: 'syz.4.7198': attribute type 21 has an invalid length. [ 417.239986][T20774] netlink: 'syz.4.7198': attribute type 15 has an invalid length. [ 417.247932][T20774] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7198'. [ 417.276736][T20774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.912858][T20796] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.7209'. [ 418.206926][T20805] xt_l2tp: v2 sid > 0xffff: 1114112 [ 418.334177][T20814] netlink: 'syz.4.7216': attribute type 10 has an invalid length. [ 418.362613][T20814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7216'. [ 418.401114][T20814] dummy0: entered allmulticast mode [ 418.431674][T20814] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 418.606103][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7222'. [ 418.785956][T20837] netlink: 'syz.1.7227': attribute type 21 has an invalid length. [ 420.152001][T20906] netlink: 'syz.4.7262': attribute type 3 has an invalid length. [ 420.173177][T20906] netlink: 'syz.4.7262': attribute type 3 has an invalid length. [ 420.750647][T20939] __nla_validate_parse: 5 callbacks suppressed [ 420.750668][T20939] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7277'. [ 420.965848][T20951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7285'. [ 421.271466][T20957] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7287'. [ 421.309676][T20957] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7287'. [ 421.347684][T20957] netlink: 'syz.2.7287': attribute type 5 has an invalid length. [ 421.385922][T20957] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7287'. [ 421.651847][T20965] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7291'. [ 422.564867][T20996] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7305'. [ 422.590043][T20996] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7305'. [ 423.011274][T21019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7312'. [ 423.094661][T21025] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.7319'. [ 423.939224][T21070] netlink: 'syz.3.7341': attribute type 2 has an invalid length. [ 425.303016][T21143] netlink: 'syz.2.7376': attribute type 29 has an invalid length. [ 425.334291][T21143] netlink: 'syz.2.7376': attribute type 29 has an invalid length. [ 425.347169][T21148] IPv6: Can't replace route, no match found [ 427.431883][T21240] __nla_validate_parse: 6 callbacks suppressed [ 427.431908][T21240] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7423'. [ 427.790569][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7433'. [ 427.830228][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7433'. [ 427.872714][T21268] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.7434'. [ 428.419907][T21292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7446'. [ 428.452891][T21292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7446'. [ 428.666520][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7452'. [ 433.179695][T21396] netlink: 'syz.3.7495': attribute type 21 has an invalid length. [ 433.278861][T21401] netlink: 531 bytes leftover after parsing attributes in process `syz.0.7497'. [ 433.631240][T21419] netlink: 'syz.1.7506': attribute type 46 has an invalid length. [ 433.825150][T21433] netlink: 'syz.3.7513': attribute type 21 has an invalid length. [ 433.852964][T21433] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.7513'. [ 436.770619][T21537] netlink: 'syz.4.7564': attribute type 10 has an invalid length. [ 437.244903][T21564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7578'. [ 437.444025][T21578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7581'. [ 437.464537][T21576] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7581'. [ 438.691113][T21647] netlink: 'syz.1.7614': attribute type 10 has an invalid length. [ 438.699333][T21647] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7614'. [ 438.898668][T21658] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.7620'. [ 439.300224][T21675] netlink: 'syz.2.7626': attribute type 1 has an invalid length. [ 439.971004][T21706] netlink: 'syz.4.7644': attribute type 4 has an invalid length. [ 440.079970][T21706] netlink: 130968 bytes leftover after parsing attributes in process `syz.4.7644'. [ 440.336439][T21717] netlink: 'syz.0.7650': attribute type 1 has an invalid length. [ 440.397412][T21722] netlink: 'syz.2.7652': attribute type 10 has an invalid length. [ 441.023359][T21752] netlink: 'syz.2.7665': attribute type 11 has an invalid length. [ 441.033281][T21752] netlink: 'syz.2.7665': attribute type 11 has an invalid length. [ 441.059934][T21752] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7665'. [ 441.422799][T21771] xt_limit: Overflow, try lower: 271964/0 [ 441.847200][T21793] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7686'. [ 441.927874][T21798] netlink: 'syz.3.7687': attribute type 10 has an invalid length. [ 441.931919][T21801] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7689'. [ 441.971996][T21798] bond0: (slave .3ãc¤±): Enslaving as an active interface with an up link [ 442.165289][T21813] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7693'. [ 442.198571][T21811] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7693'. [ 442.773133][T21851] netlink: 'syz.1.7712': attribute type 4 has an invalid length. [ 443.013753][T21856] netlink: 'syz.4.7715': attribute type 12 has an invalid length. [ 443.031022][T21856] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.7715'. [ 443.863258][T21886] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.7729'. [ 443.922360][T21892] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7732'. [ 444.169263][T21910] Zero length message leads to an empty skb [ 444.185338][T21910] netlink: 'syz.0.7739': attribute type 10 has an invalid length. [ 444.205215][T21910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7739'. [ 444.215012][T21910] batadv0: entered promiscuous mode [ 444.228122][T21910] batadv0: entered allmulticast mode [ 444.234288][T21910] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 444.487389][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7749'. [ 444.512373][T21928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7749'. [ 444.537008][T21928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7749'. [ 444.694599][T21939] netlink: 'syz.0.7752': attribute type 10 has an invalid length. [ 445.339451][T21976] netlink: 'syz.3.7772': attribute type 29 has an invalid length. [ 445.355030][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.361490][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.378243][T21983] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7775'. [ 445.383787][T21981] netlink: 'syz.3.7772': attribute type 29 has an invalid length. [ 445.398604][T21980] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7774'. [ 445.431028][T21985] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7774'. [ 445.552452][T21992] netlink: 'syz.3.7777': attribute type 2 has an invalid length. [ 445.590113][T21992] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.7777'. [ 446.290217][T22032] C: renamed from team_slave_0 [ 446.317907][T22032] netlink: 'syz.3.7798': attribute type 1 has an invalid length. [ 446.348870][T22032] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 446.938309][T22059] netlink: 'syz.2.7812': attribute type 3 has an invalid length. [ 448.021692][T22107] netlink: 'syz.3.7834': attribute type 10 has an invalid length. [ 448.044284][T22107] hsr0: left promiscuous mode [ 448.081504][T22107] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 448.129234][T22107] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 448.145548][T22107] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 448.266737][T22118] netlink: 'syz.0.7838': attribute type 11 has an invalid length. [ 449.600530][T22180] __nla_validate_parse: 10 callbacks suppressed [ 449.600556][T22180] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.7868'. [ 449.699174][T22190] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.7873'. [ 449.747477][T22190] nbd: must specify a size in bytes for the device [ 449.773132][T22195] netlink: 'syz.3.7875': attribute type 21 has an invalid length. [ 449.797327][T22195] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.7875'. [ 450.680640][T22237] netlink: 'syz.1.7895': attribute type 29 has an invalid length. [ 450.697266][T22237] netlink: 'syz.1.7895': attribute type 29 has an invalid length. [ 451.353385][T22275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7914'. [ 451.668615][T22289] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7921'. [ 452.016845][T22315] netlink: 'syz.0.7942': attribute type 12 has an invalid length. [ 452.037353][T22316] xt_policy: neither incoming nor outgoing policy selected [ 452.044295][T22315] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7942'. [ 452.223939][T22325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7938'. [ 452.726660][T22351] netlink: 272 bytes leftover after parsing attributes in process `syz.0.7950'. [ 452.984784][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7957'. [ 453.342783][T22385] netlink: 'syz.3.7968': attribute type 2 has an invalid length. [ 453.512039][T22398] netlink: del zone limit has 4 unknown bytes [ 454.040099][T22423] netlink: 809 bytes leftover after parsing attributes in process `syz.0.7985'. [ 454.142890][T22428] netlink: 'syz.2.7987': attribute type 29 has an invalid length. [ 454.583170][T22450] Dead loop on virtual device ip6_vti0, fix it urgently! [ 455.076221][T22480] __nla_validate_parse: 2 callbacks suppressed [ 455.076245][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8009'. [ 455.306042][T22494] netlink: 182 bytes leftover after parsing attributes in process `syz.0.8018'. [ 456.205700][T22525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8032'. [ 456.217924][T22525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8032'. [ 456.621064][T22542] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8040'. [ 457.118034][T22566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8058'. [ 457.150319][T22564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8058'. [ 457.464538][T22580] tmpfs: Unknown parameter '' [ 457.924520][T22608] netlink: 'syz.0.8072': attribute type 1 has an invalid length. [ 458.862258][T22662] netlink: 54775 bytes leftover after parsing attributes in process `syz.0.8099'. [ 459.213800][T22684] xt_l2tp: missing protocol rule (udp|l2tpip) [ 459.373354][T22691] netlink: 'syz.1.8113': attribute type 11 has an invalid length. [ 461.072908][T22766] netlink: 'syz.0.8146': attribute type 4 has an invalid length. [ 461.094821][T22766] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8146'. [ 462.170667][T22810] netlink: 143 bytes leftover after parsing attributes in process `syz.3.8169'. [ 462.221229][T22810] netlink: 512 bytes leftover after parsing attributes in process `syz.3.8169'. [ 462.231500][T22813] netlink: 'syz.0.8168': attribute type 10 has an invalid length. [ 462.241044][T22814] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 462.247564][T22814] žåÓD`¼ê: hsr_addr_subst_dest: Unknown node [ 463.105332][T22857] •]ôÉX: renamed from veth0_vlan (while UP) [ 463.425256][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8200'. [ 463.530252][T22884] netlink: 'syz.4.8204': attribute type 11 has an invalid length. [ 463.548413][T22884] netlink: 'syz.4.8204': attribute type 11 has an invalid length. [ 466.124230][T22957] tmpfs: Bad value for 'uid' [ 466.128893][T22957] tmpfs: Bad value for 'uid' [ 467.849429][T23031] netlink: 'syz.1.8275': attribute type 1 has an invalid length. [ 467.971782][T23039] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8279'. [ 467.992578][T23039] netlink: 130940 bytes leftover after parsing attributes in process `syz.0.8279'. [ 468.314926][T23057] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.8289'. [ 468.730658][T23078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.756241][T23082] tmpfs: Bad value for 'mode' [ 469.288459][T23116] netlink: 'syz.2.8317': attribute type 10 has an invalid length. [ 469.309997][T23116] netlink: 'syz.2.8317': attribute type 19 has an invalid length. [ 469.317987][T23116] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8317'. [ 469.697078][T23138] nftables ruleset with unbound set [ 469.713649][T23139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8326'. [ 469.822104][T23146] xt_l2tp: missing protocol rule (udp|l2tpip) [ 469.930748][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8334'. [ 470.204088][T23164] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.8340'. [ 470.401907][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8346'. [ 470.441379][T23180] netlink: 'syz.3.8348': attribute type 27 has an invalid length. [ 470.452590][T23180] netlink: 'syz.3.8348': attribute type 4 has an invalid length. [ 470.462688][T23180] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8348'. [ 470.604604][T23188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8352'. [ 470.626464][T23188] bridge_slave_0: entered allmulticast mode [ 470.640080][T23188] netlink: 'syz.0.8352': attribute type 4 has an invalid length. [ 470.710560][T23191] netlink: 'syz.3.8355': attribute type 27 has an invalid length. [ 470.779638][T23198] sctp: [Deprecated]: syz.0.8357 (pid 23198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.779638][T23198] Use struct sctp_sack_info instead [ 471.020626][T23211] netlink: 'syz.4.8363': attribute type 29 has an invalid length. [ 471.040069][T23211] netlink: 'syz.4.8363': attribute type 29 has an invalid length. [ 471.115651][T23215] netlink: 'syz.1.8365': attribute type 1 has an invalid length. [ 473.075863][T23330] validate_nla: 3 callbacks suppressed [ 473.075890][T23330] netlink: 'syz.1.8419': attribute type 23 has an invalid length. [ 473.177668][T23334] netlink: 'syz.3.8424': attribute type 2 has an invalid length. [ 473.185739][T23334] __nla_validate_parse: 12 callbacks suppressed [ 473.185760][T23334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8424'. [ 473.214933][T23338] netlink: 'syz.0.8422': attribute type 1 has an invalid length. [ 473.223335][T23338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8422'. [ 474.598051][T23423] netlink: 'syz.0.8466': attribute type 6 has an invalid length. [ 474.656964][T23423] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8466'. [ 475.660429][T23462] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8486'. [ 476.390039][T23475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8490'. [ 476.443803][T23481] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.8492'. [ 476.460581][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8490'. [ 476.490491][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.500756][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.509259][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.518476][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.527322][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.585627][ T4170] : left promiscuous mode [ 476.827459][T23503] xt_bpf: check failed: parse error [ 477.035430][T23513] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 477.404245][T23491] wg0 speed is unknown, defaulting to 1000 [ 477.535224][T23528] x_tables: ip_tables: ipvs.0 match: invalid size 40 (kernel) != (user) 48 [ 478.657693][ T5146] Bluetooth: hci0: command tx timeout [ 479.023391][T23491] chnl_net:caif_netlink_parms(): no params data found [ 480.100852][ T4170] hsr_slave_0: left promiscuous mode [ 480.135496][ T4170] hsr_slave_1: left promiscuous mode [ 480.150774][ T4170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.329664][T23604] netlink: 'syz.4.8530': attribute type 1 has an invalid length. [ 480.709846][ T5146] Bluetooth: hci0: command tx timeout [ 480.797377][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8541'. [ 481.907711][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8553'. [ 481.994650][T23491] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.002478][T23491] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.010212][T23491] bridge_slave_0: entered allmulticast mode [ 482.017586][T23491] bridge_slave_0: entered promiscuous mode [ 482.057065][T23491] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.067576][T23491] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.075545][T23491] bridge_slave_1: entered allmulticast mode [ 482.088861][T23491] bridge_slave_1: entered promiscuous mode [ 482.223653][T23491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.258879][T23491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.360321][T23671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8558'. [ 482.432106][T23491] team0: Port device team_slave_0 added [ 482.468759][T23491] team0: Port device team_slave_1 added [ 482.721357][T23491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.738687][T23491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.791026][ T5146] Bluetooth: hci0: command tx timeout [ 482.805112][T23689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8566'. [ 482.829805][T23491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.874740][T23491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.899974][T23491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.989856][T23491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.191778][T23491] hsr_slave_0: entered promiscuous mode [ 483.337469][T23491] hsr_slave_1: entered promiscuous mode [ 483.371068][T23714] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.8574'. [ 483.655101][T23727] netlink: 292 bytes leftover after parsing attributes in process `syz.1.8578'. [ 484.871435][ T5146] Bluetooth: hci0: command tx timeout [ 485.309320][T23755] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 485.624742][ T4170] team0: left allmulticast mode [ 485.645445][ T4170] C: left allmulticast mode [ 485.653519][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 485.663539][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 485.672211][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 485.682162][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 485.692380][T23773] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 485.693346][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 485.727059][ T4170] team_slave_1: left allmulticast mode [ 485.732904][ T4170] team0: left promiscuous mode [ 485.737712][ T4170] C: left promiscuous mode [ 485.742875][ T4170] team_slave_1: left promiscuous mode [ 485.749871][ T4170] bridge0: port 3(team0) entered disabled state [ 485.770499][ T4170] bridge_slave_1: left allmulticast mode [ 485.776474][ T4170] bridge_slave_1: left promiscuous mode [ 485.782978][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.806903][ T4170] bridge_slave_0: left promiscuous mode [ 485.824056][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.493031][ T4170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.504019][ T4170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.522889][ T4170] bond0 (unregistering): (slave .3ãc¤±): Releasing backup interface [ 486.557012][ T4170] bond0 (unregistering): Released all slaves [ 486.604658][T23491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.635701][T23491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.691038][T23491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.721506][T23801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8600'. [ 486.809335][T23491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 487.750387][ T5837] Bluetooth: hci3: command tx timeout [ 487.759819][T23770] wg0 speed is unknown, defaulting to 1000 [ 487.955894][T23491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.077949][T23491] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.178451][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.185752][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.307933][T23868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8620'. [ 488.340046][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.347432][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.444273][ T4170] hsr_slave_0: left promiscuous mode [ 488.463742][ T4170] hsr_slave_1: left promiscuous mode [ 488.478534][ T4170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.525554][ T4170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.927068][ T4170] team0 (unregistering): Port device team_slave_1 removed [ 488.983723][ T4170] team0 (unregistering): Port device C removed [ 489.571220][T23770] chnl_net:caif_netlink_parms(): no params data found [ 489.576374][T23900] netlink: 'syz.4.8628': attribute type 13 has an invalid length. [ 489.586491][T23900] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.8628'. [ 489.840030][ T5837] Bluetooth: hci3: command tx timeout [ 490.024953][T23770] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.050399][T23770] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.057814][T23770] bridge_slave_0: entered allmulticast mode [ 490.066814][T23770] bridge_slave_0: entered promiscuous mode [ 490.079499][T23770] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.106228][T23770] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.120201][T23770] bridge_slave_1: entered allmulticast mode [ 490.138593][T23770] bridge_slave_1: entered promiscuous mode [ 490.357233][T23770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.391865][T23935] netlink: 'syz.4.8637': attribute type 21 has an invalid length. [ 490.408134][T23770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.473339][T23491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.544881][T23770] team0: Port device team_slave_0 added [ 490.573435][T23770] team0: Port device team_slave_1 added [ 490.726408][T23770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.739465][T23950] netlink: 'syz.4.8643': attribute type 2 has an invalid length. [ 490.743121][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.801200][T23770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.823827][T23770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.838295][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.899850][T23770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.084974][T23770] hsr_slave_0: entered promiscuous mode [ 491.101420][T23770] hsr_slave_1: entered promiscuous mode [ 491.108152][T23770] debugfs: 'hsr0' already exists in 'hsr' [ 491.115832][T23770] Cannot create hsr debugfs directory [ 491.134517][T23491] veth0_vlan: entered promiscuous mode [ 491.309624][T23491] veth1_vlan: entered promiscuous mode [ 491.619016][T23491] veth0_macvtap: entered promiscuous mode [ 491.724237][T23491] veth1_macvtap: entered promiscuous mode [ 491.874633][T23491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.920808][ T5837] Bluetooth: hci3: command tx timeout [ 491.931167][T23770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 491.980406][T23491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.001826][T23770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 492.055185][T23770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 492.087425][T23770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 492.158781][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.189477][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.242407][T24001] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 492.303010][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.343289][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.635124][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.672829][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.760849][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.796934][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.842011][T23770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.924566][T23770] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.959616][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.966968][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.053603][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.060874][ T4170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.879525][T23770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.992712][ T5837] Bluetooth: hci3: command tx timeout [ 494.407204][T24078] C: renamed from team_slave_0 [ 494.446215][T24078] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8681'. [ 494.958357][T23770] veth0_vlan: entered promiscuous mode [ 494.994455][T23770] veth1_vlan: entered promiscuous mode [ 495.061183][T24100] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.8688'. [ 495.088441][T23770] veth0_macvtap: entered promiscuous mode [ 495.130908][T23770] veth1_macvtap: entered promiscuous mode [ 495.151696][T24104] netlink: 'syz.0.8690': attribute type 13 has an invalid length. [ 495.168813][T24104] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8690'. [ 495.188052][T23770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.247072][T23770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.293426][T17771] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.325382][T17771] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.366229][T17771] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.385537][T17771] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.659895][T17771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.689790][T17771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.793386][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.811470][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.883786][T24132] netlink: 'syz.2.8699': attribute type 11 has an invalid length. [ 497.520085][T24189] netlink: 'syz.2.8724': attribute type 2 has an invalid length. [ 498.541289][T24236] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.8747'. [ 498.999380][T24256] xt_l2tp: missing protocol rule (udp|l2tpip) [ 499.621977][T24284] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8770'. [ 499.633437][T24284] netlink: 'syz.4.8770': attribute type 1 has an invalid length. [ 500.343016][T24321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8788'. [ 500.371530][T24321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8788'. [ 500.420751][T24326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8791'. [ 500.633067][T24337] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8796'. [ 500.678873][T24339] delete_channel: no stack [ 501.326267][T24372] netlink: 'syz.1.8813': attribute type 39 has an invalid length. [ 502.396564][T24428] sock: sock_set_timeout: `syz.1.8839' (pid 24428) tries to set negative timeout [ 502.460154][T24430] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8840'. [ 502.677009][T24441] tmpfs: Bad value for 'mode' [ 503.408828][T24470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8858'. [ 503.447307][T24474] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8861'. [ 503.490982][T24477] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8860'. [ 503.498344][T24478] tmpfs: Bad value for 'uid' [ 503.516533][T24478] tmpfs: Bad value for 'uid' [ 503.940612][ T30] audit: type=1107 audit(1760312751.020:8): pid=24500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='uZ.' [ 503.979896][ T30] audit: type=1107 audit(1760312751.020:9): pid=24500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='”ÓÞtúó.0²ôâ•'\ûo»Uéc·J' [ 505.135731][T24545] netlink: 1204 bytes leftover after parsing attributes in process `syz.5.8893'. [ 505.415058][T24555] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8899'. [ 505.424611][T24555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8899'. [ 506.052949][T24593] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8916'. [ 506.393900][T24614] tmpfs: Bad value for 'gid' [ 506.398774][T24614] tmpfs: Bad value for 'gid' [ 506.795317][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.801743][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.266953][T24649] netlink: 'syz.5.8937': attribute type 1 has an invalid length. [ 507.776880][T24676] netlink: 'syz.2.8948': attribute type 1 has an invalid length. [ 507.800030][T24676] netlink: 'syz.2.8948': attribute type 2 has an invalid length. [ 508.744176][T24728] netlink: 'syz.1.8967': attribute type 29 has an invalid length. [ 508.801655][T24728] netlink: 'syz.1.8967': attribute type 29 has an invalid length. [ 509.552734][T24773] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8983'. [ 509.613994][T24778] netlink: 'syz.1.8984': attribute type 1 has an invalid length. [ 509.652788][T24778] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.8984'. [ 509.689046][T24778] nbd: must specify at least one socket [ 509.998717][T24796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8992'. [ 510.573467][T24827] netlink: 332 bytes leftover after parsing attributes in process `syz.0.9004'. [ 510.772348][T24838] netlink: 'syz.5.9008': attribute type 29 has an invalid length. [ 510.818296][T24838] netlink: 'syz.5.9008': attribute type 29 has an invalid length. [ 511.251726][T24866] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.9019'. [ 511.384445][T24873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9022'. [ 511.447213][T24877] netlink: 'syz.4.9023': attribute type 1 has an invalid length. [ 511.463038][T24877] netlink: 17231 bytes leftover after parsing attributes in process `syz.4.9023'. [ 511.535982][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9025'. [ 511.710778][T24888] netlink: 'syz.0.9029': attribute type 6 has an invalid length. [ 511.724487][T24888] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.9029'. [ 511.945257][T24903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9038'. [ 512.461250][T24936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9051'. [ 512.556827][T24938] xt_l2tp: v2 tid > 0xffff: 327812 [ 512.846325][T24958] validate_nla: 3 callbacks suppressed [ 512.846346][T24958] netlink: 'syz.5.9062': attribute type 10 has an invalid length. [ 512.888588][T24958] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 513.134291][T24973] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9068'. [ 513.357109][T24984] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 513.387946][T24988] netlink: 'syz.0.9075': attribute type 1 has an invalid length. [ 513.671748][T24999] netlink: 'syz.4.9080': attribute type 29 has an invalid length. [ 513.683269][T24999] netlink: 'syz.4.9080': attribute type 29 has an invalid length. [ 513.725834][T25001] netlink: 'syz.1.9090': attribute type 2 has an invalid length. [ 513.759503][T25001] netlink: 'syz.1.9090': attribute type 9 has an invalid length. [ 513.781822][T25001] netlink: 'syz.1.9090': attribute type 1 has an invalid length. [ 513.790121][T25001] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.9090'. [ 514.649347][T25057] netlink: 'syz.1.9109': attribute type 3 has an invalid length. [ 514.933763][T25071] netlink: 'syz.5.9116': attribute type 6 has an invalid length. [ 514.946281][T25071] netlink: 'syz.5.9116': attribute type 1 has an invalid length. [ 515.319276][T25092] netlink: zone id is out of range [ 515.324818][T25092] netlink: zone id is out of range [ 515.331152][T25092] netlink: zone id is out of range [ 515.844789][T25122] xt_l2tp: missing protocol rule (udp|l2tpip) [ 516.507481][T25162] __nla_validate_parse: 4 callbacks suppressed [ 516.507505][T25162] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9161'. [ 516.545054][T25162] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9161'. [ 516.778160][T25174] syz.2.9166 (25174) used obsolete PPPIOCDETACH ioctl [ 516.923010][T25186] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9173'. [ 517.290595][T25203] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.9181'. [ 517.311671][T25205] xt_l2tp: wrong L2TP version: 0 [ 518.003336][T25232] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9195'. [ 518.409926][T25254] validate_nla: 3 callbacks suppressed [ 518.409948][T25254] netlink: 'syz.1.9206': attribute type 23 has an invalid length. [ 518.564984][T25261] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9208'. [ 518.745089][T25272] netlink: 'syz.0.9214': attribute type 3 has an invalid length. [ 518.766626][T25274] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9215'. [ 518.779875][T25272] netlink: 'syz.0.9214': attribute type 1 has an invalid length. [ 518.796334][T25272] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.9214'. [ 518.954341][T25282] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.9219'. [ 518.978780][T25285] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.9220'. [ 520.587586][T25375] netlink: 'syz.5.9264': attribute type 2 has an invalid length. [ 520.738117][T25380] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 522.372455][T25472] __nla_validate_parse: 8 callbacks suppressed [ 522.372477][T25472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9311'. [ 522.894185][T25504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9326'. [ 522.971723][T25507] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.9328'. [ 523.034377][T25511] netlink: 312 bytes leftover after parsing attributes in process `syz.1.9331'. [ 523.054964][T25509] netlink: 'syz.0.9329': attribute type 10 has an invalid length. [ 523.087095][T25509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9329'. [ 523.128880][T25509] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 523.505612][T25536] xt_HMARK: spi-set and port-set can't be combined [ 524.028318][T25565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9357'. [ 524.037675][T25565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9357'. [ 524.450196][T25580] netlink: 'syz.1.9364': attribute type 3 has an invalid length. [ 524.458021][T25580] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9364'. [ 524.691032][T25589] netlink: 'syz.2.9369': attribute type 10 has an invalid length. [ 524.756552][T25589] batman_adv: batadv0: Adding interface: netdevsim0 [ 524.795222][T25589] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.838884][T25589] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 525.116769][T25609] netlink: 'syz.4.9377': attribute type 3 has an invalid length. [ 525.124904][T25609] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9377'. [ 526.157716][T25634] netlink: 763 bytes leftover after parsing attributes in process `syz.4.9389'. [ 526.608675][T25664] netlink: 'syz.1.9403': attribute type 10 has an invalid length. [ 527.104930][T25688] TCP: TCP_TX_DELAY enabled [ 527.303154][T25699] netlink: 'syz.1.9422': attribute type 10 has an invalid length. [ 527.339390][T25699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.474978][T25709] xt_policy: too many policy elements [ 527.860370][T25732] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 528.135515][T25749] __nla_validate_parse: 1 callbacks suppressed [ 528.135541][T25749] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9445'. [ 528.160563][T25749] batadv_slave_1: entered promiscuous mode [ 528.387476][T25763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9452'. [ 528.403301][T25761] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9451'. [ 528.921070][T25794] netlink: 'syz.5.9467': attribute type 21 has an invalid length. [ 528.942196][T25794] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9467'. [ 528.962666][T25794] netlink: 'syz.5.9467': attribute type 5 has an invalid length. [ 528.979901][T25794] netlink: 'syz.5.9467': attribute type 6 has an invalid length. [ 528.999008][T25794] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9467'. [ 529.580560][T25832] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9486'. [ 529.688795][T25835] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.9488'. [ 530.770832][T25902] netlink: 'syz.5.9520': attribute type 21 has an invalid length. [ 530.778790][T25902] netlink: 'syz.5.9520': attribute type 6 has an invalid length. [ 530.806909][T25902] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9520'. [ 531.773870][T25956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9544'. [ 531.799948][T25956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9544'. [ 532.677628][ T30] audit: type=1107 audit(1760312779.750:10): pid=26011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='õz¡' [ 532.880540][T26021] netlink: 'syz.0.9573': attribute type 5 has an invalid length. [ 532.888450][T26021] netlink: 'syz.0.9573': attribute type 6 has an invalid length. [ 533.900767][T26076] netlink: 'syz.2.9601': attribute type 21 has an invalid length. [ 533.908663][T26076] __nla_validate_parse: 5 callbacks suppressed [ 533.908684][T26076] netlink: 14532 bytes leftover after parsing attributes in process `syz.2.9601'. [ 533.955881][T26077] netlink: 11 bytes leftover after parsing attributes in process `syz.0.9600'. [ 534.119835][T26084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9604'. [ 534.950795][T26101] xt_l2tp: invalid flags combination: 8 [ 535.029566][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9614'. [ 535.042417][T26106] netlink: 312 bytes leftover after parsing attributes in process `syz.2.9614'. [ 535.821997][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9629'. [ 535.851828][T26148] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.9631'. [ 535.974891][T26155] netlink: 'syz.1.9634': attribute type 4 has an invalid length. [ 536.121354][T26159] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9636'. [ 536.806634][T26202] netlink: 62967 bytes leftover after parsing attributes in process `syz.4.9656'. [ 536.897685][T26206] netlink: 'syz.1.9658': attribute type 2 has an invalid length. [ 536.928356][T26206] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.9658'. [ 537.034734][T26216] netlink: 'syz.1.9664': attribute type 5 has an invalid length. [ 537.044000][T26216] netlink: 'syz.1.9664': attribute type 7 has an invalid length. [ 537.766127][T26256] netlink: 'syz.4.9685': attribute type 1 has an invalid length. [ 537.799799][T26256] netlink: 'syz.4.9685': attribute type 1 has an invalid length. [ 537.862127][T26263] netlink: 'syz.5.9687': attribute type 3 has an invalid length. [ 538.098871][T26268] netlink: 'syz.2.9689': attribute type 3 has an invalid length. [ 538.230133][T26274] netlink: del zone limit has 4 unknown bytes [ 538.480674][T26282] netlink: 'syz.5.9696': attribute type 7 has an invalid length. [ 539.448038][T26327] netlink: 'syz.2.9717': attribute type 29 has an invalid length. [ 540.238311][T26380] __nla_validate_parse: 4 callbacks suppressed [ 540.238334][T26380] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9753'. [ 540.293315][T26380] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9753'. [ 540.753690][T26402] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.9755'. [ 541.367387][T26423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9765'. [ 541.486069][T26429] validate_nla: 1 callbacks suppressed [ 541.486089][T26429] netlink: 'syz.0.9766': attribute type 1 has an invalid length. [ 541.501302][T26429] netlink: 'syz.0.9766': attribute type 2 has an invalid length. [ 541.840907][T26444] netlink: 'syz.0.9774': attribute type 11 has an invalid length. [ 541.852648][T26442] netlink: 'syz.5.9773': attribute type 19 has an invalid length. [ 541.863487][T26442] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9773'. [ 543.169522][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9809'. [ 543.412494][T26531] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9816'. [ 543.612051][T26541] netlink: 'syz.2.9821': attribute type 2 has an invalid length. [ 543.704979][T26548] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9825'. [ 543.731866][T26548] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9825'. [ 544.005469][T26562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9832'. [ 545.414585][T26614] __nla_validate_parse: 1 callbacks suppressed [ 545.414607][T26614] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9857'. [ 545.431924][T26614] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9857'. [ 545.477804][T26614] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9857'. [ 546.650677][T26681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9888'. [ 546.674428][T26678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9888'. [ 546.696995][T26681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9888'. [ 547.417043][T26712] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9901'. [ 547.440889][T26712] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9901'. [ 547.464026][T26707] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9901'. [ 547.660852][T26725] C: renamed from team_slave_0 (while UP) [ 547.687979][T26725] netlink: 'syz.5.9910': attribute type 3 has an invalid length. [ 547.759790][T26725] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9910'. [ 547.793494][T26725] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 549.513147][T26803] netlink: 'syz.5.9946': attribute type 4 has an invalid length. [ 550.478893][T26853] __nla_validate_parse: 8 callbacks suppressed [ 550.478916][T26853] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.9970'. [ 550.980243][T26879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9981'. [ 551.035033][T26883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9981'. [ 551.047081][T26879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9981'. [ 551.369020][T26902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9992'. [ 551.445838][T26905] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.9993'. [ 552.008297][T26935] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.10006'. [ 552.020660][T26935] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 552.571647][T26953] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.10015'. [ 552.643894][T26957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10017'. [ 552.687713][T26957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10017'. [ 552.886589][T26965] @0Ù: renamed from bond_slave_1 (while UP) [ 555.210711][T27056] netlink: 'syz.4.10064': attribute type 2 has an invalid length. [ 555.641268][T27075] netlink: 'syz.0.10072': attribute type 2 has an invalid length. [ 556.288320][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.414908][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.502967][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.628776][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.694157][T27107] __nla_validate_parse: 4 callbacks suppressed [ 556.694181][T27107] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.10088'. [ 557.131887][ T37] bridge_slave_1: left allmulticast mode [ 557.150236][ T37] bridge_slave_1: left promiscuous mode [ 557.156843][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.221469][ T37] bridge_slave_0: left allmulticast mode [ 557.240101][ T37] bridge_slave_0: left promiscuous mode [ 557.245984][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.275008][T27121] netlink: 'syz.2.10094': attribute type 5 has an invalid length. [ 557.321165][T27121] netlink: 'syz.2.10094': attribute type 9 has an invalid length. [ 557.361386][T27121] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10094'. [ 557.559086][T27131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.569547][T27131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 557.705907][T27131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.731939][T27131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.740601][T27131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 558.420055][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.444144][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.455964][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 558.468434][ T37] bond0 (unregistering): Released all slaves [ 558.503833][T27136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10097'. [ 559.071094][T27176] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.10108'. [ 559.313806][T27128] wg0 speed is unknown, defaulting to 1000 [ 559.658128][T27197] netlink: 'syz.4.10117': attribute type 21 has an invalid length. [ 559.829884][ T5146] Bluetooth: hci3: command tx timeout [ 560.236913][ T37] hsr_slave_0: left promiscuous mode [ 560.246913][ T37] hsr_slave_1: left promiscuous mode [ 560.276759][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.289839][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.308132][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.321206][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.372148][ T37] veth1_macvtap: left promiscuous mode [ 560.378069][ T37] veth0_macvtap: left promiscuous mode [ 560.400024][ T37] veth1_vlan: left promiscuous mode [ 560.410282][ T37] veth0_vlan: left promiscuous mode [ 560.450328][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10124'. [ 560.697143][T27225] option changes via remount are deprecated (pid=27224 comm=syz.2.10127) [ 561.834146][ T37] team0 (unregistering): Port device team_slave_1 removed [ 561.910567][ T5146] Bluetooth: hci3: command tx timeout [ 561.921717][ T37] team0 (unregistering): Port device C removed [ 562.842818][T27235] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.10131'. [ 562.870143][T27128] chnl_net:caif_netlink_parms(): no params data found [ 563.198903][T27128] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.206406][T27128] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.214547][T27128] bridge_slave_0: entered allmulticast mode [ 563.223854][T27128] bridge_slave_0: entered promiscuous mode [ 563.249265][T27128] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.256856][T27128] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.277248][T27128] bridge_slave_1: entered allmulticast mode [ 563.309629][T27128] bridge_slave_1: entered promiscuous mode [ 563.471460][T27128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.518679][T27128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.774485][T27128] team0: Port device team_slave_0 added [ 563.810776][T27128] team0: Port device team_slave_1 added [ 563.991035][ T5146] Bluetooth: hci3: command tx timeout [ 564.057343][T27128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.077250][T27128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.109828][T27128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.136809][T27128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.154116][T27128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.219783][T27128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.437917][T27128] hsr_slave_0: entered promiscuous mode [ 564.481116][T27128] hsr_slave_1: entered promiscuous mode [ 564.487628][T27128] debugfs: 'hsr0' already exists in 'hsr' [ 564.520183][T27128] Cannot create hsr debugfs directory [ 565.203861][T27280] wg0 speed is unknown, defaulting to 1000 [ 565.210219][T27318] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10162'. [ 565.790935][T27338] pimreg: tun_chr_ioctl cmd 1074025677 [ 565.809989][T27338] pimreg: linktype set to 6 [ 566.030719][T27347] netlink: 'syz.0.10171': attribute type 13 has an invalid length. [ 566.045491][T27347] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.10171'. [ 566.069952][ T5146] Bluetooth: hci3: command tx timeout [ 566.527801][T27128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 566.605805][T27128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 566.677769][T27128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.030615][T27128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 567.388707][T27128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.440631][T27396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10182'. [ 567.491722][T27128] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.515329][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.522584][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.601494][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.608689][ T4170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.667746][T27404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10187'. [ 567.779746][T27408] netlink: 'syz.1.10188': attribute type 29 has an invalid length. [ 568.235992][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.242794][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.486773][T27128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.659072][T27454] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10201'. [ 568.798015][T27461] proc: Unknown parameter 'obj_role' [ 569.118427][T27128] veth0_vlan: entered promiscuous mode [ 569.159224][T27128] veth1_vlan: entered promiscuous mode [ 569.217258][T27128] veth0_macvtap: entered promiscuous mode [ 569.254247][T27128] veth1_macvtap: entered promiscuous mode [ 569.300551][T27128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.321744][T27128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.338768][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.365509][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.410188][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.419074][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.690862][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.703987][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.816803][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.831934][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.985232][T27503] netlink: 14577 bytes leftover after parsing attributes in process `syz.4.10218'. [ 570.003198][T27505] netlink: 338 bytes leftover after parsing attributes in process `syz.0.10219'. [ 571.398115][T27558] netlink: 830 bytes leftover after parsing attributes in process `syz.4.10240'. [ 571.881410][T27581] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 572.808210][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10263'. [ 573.116068][T27611] tap0: tun_chr_ioctl cmd 1074025677 [ 573.151384][T27611] tap0: linktype set to 825 [ 573.499657][T27629] netlink: 'syz.2.10273': attribute type 15 has an invalid length. [ 573.625440][T27635] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10274'. [ 573.660457][T27631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10274'. [ 573.673798][T27635] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10274'. [ 573.877989][T27644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10280'. [ 573.900840][T27644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10280'. [ 573.931732][T27644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10280'. [ 574.642992][T27678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10296'. [ 574.701189][T27678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10296'. [ 574.764661][T27687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10296'. [ 574.963394][T27693] netlink: 'syz.4.10303': attribute type 29 has an invalid length. [ 575.314938][T27716] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.10314'. [ 575.540298][T27726] netlink: 'syz.5.10320': attribute type 21 has an invalid length. [ 575.569322][T27726] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10320'. [ 576.025296][T27755] netlink: 'syz.2.10333': attribute type 29 has an invalid length. [ 576.072194][T27755] netlink: 'syz.2.10333': attribute type 29 has an invalid length. [ 576.094470][T27755] netlink: 'syz.2.10333': attribute type 29 has an invalid length. [ 576.156675][T27757] netlink: 'syz.1.10334': attribute type 29 has an invalid length. [ 579.210965][T27884] __nla_validate_parse: 13 callbacks suppressed [ 579.210987][T27884] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.10393'. [ 579.320423][T27865] wg0 speed is unknown, defaulting to 1000 [ 579.423522][T27891] netlink: 'syz.5.10398': attribute type 10 has an invalid length. [ 579.459789][T27891] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10398'. [ 579.480574][T27891] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 580.526151][T27910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10405'. [ 580.567705][T27910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10405'. [ 580.664179][T27912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10405'. [ 581.233000][T27930] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10415'. [ 581.290600][T27934] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10415'. [ 581.319883][T27930] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10415'. [ 581.437038][T27939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.473396][T27941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10420'. [ 581.501600][T27941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10420'. [ 581.541433][T27944] xt_socket: unknown flags 0x20 [ 581.689117][T27951] netlink: 'syz.0.10425': attribute type 39 has an invalid length. [ 582.008500][T27964] netlink: 'syz.4.10431': attribute type 29 has an invalid length. [ 582.061655][T27964] netlink: 'syz.4.10431': attribute type 29 has an invalid length. [ 582.110376][T27964] netlink: 'syz.4.10431': attribute type 29 has an invalid length. [ 582.608613][T27999] netlink: 'syz.2.10445': attribute type 39 has an invalid length. [ 583.520064][T28047] proc: Unknown parameter 'obj_role' [ 584.436324][T28076] __nla_validate_parse: 7 callbacks suppressed [ 584.436345][T28076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10481'. [ 584.481216][T28076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10481'. [ 584.513921][T28076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10481'. [ 584.621026][T28084] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10485'. [ 584.635245][T28082] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10484'. [ 585.043986][T28108] tap0: tun_chr_ioctl cmd 1074025672 [ 585.049360][T28108] tap0: ignored: set checksum enabled [ 585.466208][T28122] netlink: 'syz.1.10506': attribute type 2 has an invalid length. [ 585.478136][T28126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10504'. [ 585.489112][T28126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10504'. [ 585.501884][T28126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10504'. [ 585.625113][T28131] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.10507'. [ 585.674987][T28133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10509'. [ 585.991811][T28151] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 587.046617][T28178] netlink: 'syz.4.10528': attribute type 7 has an invalid length. [ 587.100056][T28178] netlink: 'syz.4.10528': attribute type 6 has an invalid length. [ 587.317489][T28184] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 588.994182][T28225] netlink: 'syz.0.10547': attribute type 2 has an invalid length. [ 590.494245][T28257] __nla_validate_parse: 5 callbacks suppressed [ 590.494268][T28257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10563'. [ 590.513236][T28257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10563'. [ 590.524782][T28257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10563'. [ 591.672433][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10576'. [ 591.683906][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10576'. [ 591.695928][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10576'. [ 592.043697][T28307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10585'. [ 592.088798][T28307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10585'. [ 592.121181][T28307] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10585'. [ 592.419068][T28328] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10595'. [ 592.934840][T28361] netlink: 'syz.0.10610': attribute type 10 has an invalid length. [ 593.020593][T28363] netlink: 'syz.1.10611': attribute type 29 has an invalid length. [ 593.086381][T28363] netlink: 'syz.1.10611': attribute type 29 has an invalid length. [ 593.117983][T28370] netlink: 'syz.1.10611': attribute type 29 has an invalid length. [ 594.203993][T28432] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 594.277670][T28438] netlink: 'syz.4.10643': attribute type 6 has an invalid length. [ 594.538444][T28453] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 594.557200][T28453] syzkaller0: linktype set to 804 [ 594.827804][T28469] tap0: tun_chr_ioctl cmd 35108 [ 594.987309][T28478] netlink: 'syz.4.10663': attribute type 21 has an invalid length. [ 595.454728][T28505] netlink: 'syz.2.10676': attribute type 21 has an invalid length. [ 596.195142][T28551] __nla_validate_parse: 13 callbacks suppressed [ 596.195163][T28551] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.10699'. [ 596.434626][T28568] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.10708'. [ 596.470293][T28561] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.10708'. [ 596.508348][T28568] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.10708'. [ 596.529458][T28573] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10711'. [ 596.671247][T28581] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10713'. [ 596.864002][T28593] netlink: 'syz.2.10719': attribute type 33 has an invalid length. [ 596.880669][T28593] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10719'. [ 596.898877][T28595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10720'. [ 596.910442][T28595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10720'. [ 596.931594][T28595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10720'. [ 596.958707][T28597] netlink: 'syz.4.10721': attribute type 29 has an invalid length. [ 597.101739][T28601] netlink: 'syz.5.10723': attribute type 29 has an invalid length. [ 598.533714][T28656] xt_socket: unknown flags 0x20 [ 598.934947][T28684] proc: Bad value for 'gid' [ 600.718878][T28786] syzkaller0: tun_chr_ioctl cmd 35111 [ 601.036214][T27131] Bluetooth: hci0: command 0x0406 tx timeout [ 601.208728][T28808] __nla_validate_parse: 9 callbacks suppressed [ 601.208754][T28808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10822'. [ 601.280013][T28808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10822'. [ 601.597059][T28822] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 601.603642][T28822] syzkaller1: linktype set to 823 [ 601.868643][T28828] tap0: tun_chr_ioctl cmd 1074025678 [ 601.879014][T28830] netlink: 'syz.5.10832': attribute type 2 has an invalid length. [ 601.887269][T28828] tap0: group set to 0 [ 601.893046][T28830] netlink: 'syz.5.10832': attribute type 1 has an invalid length. [ 601.901636][T28830] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.10832'. [ 601.911710][T28830] nbd: illegal input index 65540 [ 602.050536][T28839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10835'. [ 602.413276][T28859] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.10846'. [ 602.628531][T28865] proc: Bad value for 'gid' [ 602.936652][T28880] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10856'. [ 602.959302][T28882] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.10857'. [ 603.184885][T28886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10859'. [ 603.244267][T28886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10859'. [ 603.350736][T28887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10859'. [ 603.811720][T28904] proc: Bad value for 'gid' [ 604.409253][T28918] netlink: 'syz.1.10872': attribute type 21 has an invalid length. [ 608.857876][T29025] __nla_validate_parse: 6 callbacks suppressed [ 608.857899][T29025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10923'. [ 608.887435][T29025] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10923'. [ 609.530019][T29042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10931'. [ 609.552676][T29042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10931'. [ 609.578519][T29042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10931'. [ 609.623630][T29047] netlink: 'syz.0.10934': attribute type 33 has an invalid length. [ 609.655101][T29047] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10934'. [ 609.747449][T29053] netlink: 'syz.1.10936': attribute type 3 has an invalid length. [ 609.778978][T29053] netlink: 'syz.1.10936': attribute type 1 has an invalid length. [ 609.799239][T29053] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.10936'. [ 610.091930][T29064] netlink: 'syz.0.10943': attribute type 21 has an invalid length. [ 610.103660][T29064] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.10943'. [ 610.875122][T29090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10954'. [ 610.900283][T29089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10954'. [ 612.638368][T29145] netlink: 'syz.0.10981': attribute type 3 has an invalid length. [ 620.680660][T29192] __nla_validate_parse: 9 callbacks suppressed [ 620.680685][T29192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11003'. [ 620.696789][T29195] cgroup2: Unknown parameter 'u' [ 620.959531][T27131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 620.975727][T27131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 620.985104][T27131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 620.994535][T27131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 621.003462][T27131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 621.392141][T29221] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.11015'. [ 622.078167][ T4170] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.118074][T29229] C: renamed from team_slave_0 (while UP) [ 622.140189][T29229] netlink: 'syz.2.11020': attribute type 3 has an invalid length. [ 622.157677][T29229] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 622.277533][ T4170] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.662494][ T4170] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.821219][ T4170] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.925043][T29251] netlink: 'syz.0.11029': attribute type 12 has an invalid length. [ 622.946513][T29251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11029'. [ 623.029943][ T5146] Bluetooth: hci3: command tx timeout [ 623.167143][T29204] chnl_net:caif_netlink_parms(): no params data found [ 623.415413][T29264] sit0: entered allmulticast mode [ 623.467764][T29204] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.490125][T29204] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.517941][T29204] bridge_slave_0: entered allmulticast mode [ 623.541276][T29204] bridge_slave_0: entered promiscuous mode [ 623.557105][T29265] sit0: entered promiscuous mode [ 623.828588][ T4170] bridge_slave_1: left allmulticast mode [ 623.852141][ T4170] bridge_slave_1: left promiscuous mode [ 623.873120][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.886716][ T4170] bridge_slave_0: left allmulticast mode [ 623.903045][ T4170] bridge_slave_0: left promiscuous mode [ 623.924795][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.098892][T29227] syz.1.11019: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 624.132185][T29227] CPU: 1 UID: 0 PID: 29227 Comm: syz.1.11019 Not tainted syzkaller #0 PREEMPT(full) [ 624.132219][T29227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 624.132243][T29227] Call Trace: [ 624.132252][T29227] [ 624.132263][T29227] dump_stack_lvl+0x189/0x250 [ 624.132299][T29227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.132324][T29227] ? __pfx__printk+0x10/0x10 [ 624.132348][T29227] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 624.132374][T29227] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 624.132400][T29227] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 624.132428][T29227] warn_alloc+0x214/0x310 [ 624.132463][T29227] ? __pfx_warn_alloc+0x10/0x10 [ 624.132502][T29227] ? __get_vm_area_node+0x28f/0x300 [ 624.132527][T29227] ? hash_netport4_resize+0x235/0x1b60 [ 624.132557][T29227] __vmalloc_node_range_noprof+0x690/0x12d0 [ 624.132582][T29227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.132634][T29227] ? alloc_pages_mpol+0x3cd/0x4a0 [ 624.132666][T29227] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 624.132697][T29227] ? rcu_is_watching+0x15/0xb0 [ 624.132741][T29227] ? hash_netport4_resize+0x235/0x1b60 [ 624.132765][T29227] __kvmalloc_node_noprof+0x674/0x910 [ 624.132793][T29227] ? hash_netport4_resize+0x235/0x1b60 [ 624.132829][T29227] hash_netport4_resize+0x235/0x1b60 [ 624.132852][T29227] ? hash_netport4_uadt+0xc97/0xf30 [ 624.132883][T29227] ? __pfx_hash_netport4_add+0x10/0x10 [ 624.132906][T29227] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 624.132942][T29227] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 624.132989][T29227] call_ad+0x44e/0xb00 [ 624.133030][T29227] ? __pfx_call_ad+0x10/0x10 [ 624.133078][T29227] ? __nla_parse+0x40/0x60 [ 624.133110][T29227] ip_set_ad+0x791/0x930 [ 624.133152][T29227] ? __pfx_ip_set_ad+0x10/0x10 [ 624.133229][T29227] nfnetlink_rcv_msg+0xb4d/0x1130 [ 624.133262][T29227] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 624.133316][T29227] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 624.133342][T29227] ? __schedule+0x17ae/0x4cc0 [ 624.133409][T29227] ? __pfx___schedule+0x10/0x10 [ 624.133466][T29227] netlink_rcv_skb+0x208/0x470 [ 624.133501][T29227] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 624.133533][T29227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.133580][T29227] ? bpf_lsm_capable+0x9/0x20 [ 624.133600][T29227] ? security_capable+0x7e/0x2e0 [ 624.133632][T29227] nfnetlink_rcv+0x282/0x2590 [ 624.133665][T29227] ? __dev_queue_xmit+0x27b/0x3b50 [ 624.133691][T29227] ? __dev_queue_xmit+0x1d79/0x3b50 [ 624.133738][T29227] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 624.133774][T29227] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.133798][T29227] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 624.133832][T29227] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.133867][T29227] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 624.133905][T29227] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 624.133954][T29227] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 624.133995][T29227] ? rcu_is_watching+0x15/0xb0 [ 624.134031][T29227] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 624.134062][T29227] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 624.134090][T29227] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.134131][T29227] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.134173][T29227] netlink_unicast+0x82f/0x9e0 [ 624.134214][T29227] ? __pfx_netlink_unicast+0x10/0x10 [ 624.134247][T29227] ? netlink_sendmsg+0x642/0xb30 [ 624.134278][T29227] ? skb_put+0x11b/0x210 [ 624.134317][T29227] netlink_sendmsg+0x805/0xb30 [ 624.134362][T29227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.134401][T29227] ? aa_sock_msg_perm+0xf1/0x1d0 [ 624.134428][T29227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.134458][T29227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.134493][T29227] __sock_sendmsg+0x21c/0x270 [ 624.134525][T29227] ____sys_sendmsg+0x505/0x830 [ 624.134568][T29227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.134618][T29227] ? import_iovec+0x74/0xa0 [ 624.134653][T29227] ___sys_sendmsg+0x21f/0x2a0 [ 624.134677][T29227] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.134766][T29227] ? __fget_files+0x2a/0x420 [ 624.134793][T29227] ? __fget_files+0x3a0/0x420 [ 624.134835][T29227] __x64_sys_sendmsg+0x19b/0x260 [ 624.134860][T29227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.134904][T29227] ? do_syscall_64+0xbe/0xfa0 [ 624.134930][T29227] do_syscall_64+0xfa/0xfa0 [ 624.134951][T29227] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.134974][T29227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.134995][T29227] ? clear_bhb_loop+0x60/0xb0 [ 624.135024][T29227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.135053][T29227] RIP: 0033:0x7fbe5538eec9 [ 624.135083][T29227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.135103][T29227] RSP: 002b:00007fbe56275038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.135127][T29227] RAX: ffffffffffffffda RBX: 00007fbe555e5fa0 RCX: 00007fbe5538eec9 [ 624.135144][T29227] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 624.135158][T29227] RBP: 00007fbe55411f91 R08: 0000000000000000 R09: 0000000000000000 [ 624.135173][T29227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.135186][T29227] R13: 00007fbe555e6038 R14: 00007fbe555e5fa0 R15: 00007ffcb87f3fd8 [ 624.135225][T29227] [ 624.651701][T29227] Mem-Info: [ 624.657471][T29227] active_anon:5295 inactive_anon:0 isolated_anon:0 [ 624.657471][T29227] active_file:19206 inactive_file:40093 isolated_file:0 [ 624.657471][T29227] unevictable:768 dirty:223 writeback:0 [ 624.657471][T29227] slab_reclaimable:11331 slab_unreclaimable:133155 [ 624.657471][T29227] mapped:24038 shmem:1364 pagetables:1228 [ 624.657471][T29227] sec_pagetables:0 bounce:0 [ 624.657471][T29227] kernel_misc_reclaimable:0 [ 624.657471][T29227] free:1283391 free_pcp:15164 free_cma:0 [ 624.703640][T29227] Node 0 active_anon:21380kB inactive_anon:0kB active_file:76824kB inactive_file:160164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96152kB dirty:892kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12144kB pagetables:4764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 624.736144][T29227] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 624.766495][T29227] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 624.802135][T29227] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 624.807984][T29227] Node 0 DMA32 free:1216064kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22380kB inactive_anon:0kB active_file:76824kB inactive_file:160164kB unevictable:1536kB writepending:892kB zspages:0kB present:3129332kB managed:2561624kB mlocked:0kB bounce:0kB free_pcp:52136kB local_pcp:18228kB free_cma:0kB [ 624.841580][T29227] lowmem_reserve[]: 0 0 1 1 1 [ 624.846375][T29227] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 624.877295][T29227] lowmem_reserve[]: 0 0 0 0 0 [ 624.882177][T29227] Node 1 Normal free:3902140kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8288kB local_pcp:1984kB free_cma:0kB [ 624.914404][T29227] lowmem_reserve[]: 0 0 0 0 0 [ 624.919183][T29227] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 624.932210][T29227] Node 0 DMA32: 3430*4kB (UME) 1398*8kB (UM) 936*16kB (UME) 714*32kB (UME) 335*64kB (UME) 183*128kB (UME) 204*256kB (UM) 135*512kB (UM) 84*1024kB (UME) 6*2048kB (UM) 217*4096kB (UM) = 1216072kB [ 624.951690][T29227] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 624.964425][T29227] Node 1 Normal: 201*4kB (UME) 59*8kB (UME) 46*16kB (UME) 201*32kB (UME) 65*64kB (UME) 13*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (ME) 0*2048kB 948*4096kB (M) = 3902140kB [ 624.982805][T29227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.992450][T29227] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 625.001811][T29227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 625.011417][T29227] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 625.020807][T29227] 60659 total pagecache pages [ 625.025530][T29227] 0 pages in swap cache [ 625.029894][T29227] Free swap = 124996kB [ 625.034082][T29227] Total swap = 124996kB [ 625.038308][T29227] 2097051 pages RAM [ 625.042245][T29227] 0 pages HighMem/MovableOnly [ 625.046948][T29227] 424555 pages reserved [ 625.051406][T29227] 0 pages cma reserved [ 625.454549][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11046'. [ 625.471977][T27131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 625.472081][T29290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11046'. [ 625.487810][T27131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 625.498573][T27131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 625.507696][T27131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 625.517259][T27131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 625.652330][ T4170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.665610][ T4170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.678184][ T4170] bond0 (unregistering): Released all slaves [ 625.767329][T29300] pimreg: tun_chr_ioctl cmd 1074025675 [ 625.782185][T29300] pimreg: persist disabled [ 626.052439][T29308] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.11053'. [ 626.542337][T29319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11056'. [ 626.591381][T29319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11056'. [ 627.172753][ T4170] hsr_slave_0: left promiscuous mode [ 627.241292][T27131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 627.252094][ T4170] hsr_slave_1: left promiscuous mode [ 627.258303][T27131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 627.267106][ T4170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.276290][T27131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 627.292440][T27131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 627.300263][ T4170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.300340][T27131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 627.324527][ T4170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.369815][ T4170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.414810][ T4170] veth1_macvtap: left promiscuous mode [ 627.420882][ T4170] veth0_macvtap: left promiscuous mode [ 627.426657][ T4170] veth1_vlan: left promiscuous mode [ 627.432265][ T4170] veth0_vlan: left promiscuous mode [ 627.602780][T27131] Bluetooth: hci0: command tx timeout [ 627.927090][ T4170] team0 (unregistering): Port device team_slave_1 removed [ 627.967943][ T4170] team0 (unregistering): Port device team_slave_0 removed [ 628.417525][T29338] : entered promiscuous mode [ 628.430115][T29339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11061'. [ 628.443257][T29345] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.11063'. [ 628.567497][T29354] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11066'. [ 628.577813][T29349] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 628.765761][T29288] chnl_net:caif_netlink_parms(): no params data found [ 628.863682][T29361] netlink: 'syz.4.11068': attribute type 27 has an invalid length. [ 628.970435][T29364] netlink: 'syz.0.11069': attribute type 2 has an invalid length. [ 628.978460][T29364] netlink: 'syz.0.11069': attribute type 1 has an invalid length. [ 628.998066][T29364] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.11069'. [ 629.019515][T29364] nbd: couldn't find device at index 16 [ 629.209030][T29374] netlink: 'syz.0.11071': attribute type 3 has an invalid length. [ 629.233528][T29374] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.11071'. [ 629.260964][T29288] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.281115][T29288] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.292051][T29288] bridge_slave_0: entered allmulticast mode [ 629.306765][T29288] bridge_slave_0: entered promiscuous mode [ 629.321401][T29288] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.339289][T29288] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.359506][T27131] Bluetooth: hci3: command tx timeout [ 629.366758][T29288] bridge_slave_1: entered allmulticast mode [ 629.382936][T29288] bridge_slave_1: entered promiscuous mode [ 629.557829][T29288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.603070][T29288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.676797][T27131] Bluetooth: hci0: command tx timeout [ 629.681489][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.688592][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.772872][T29288] team0: Port device team_slave_0 added [ 629.803674][T29288] team0: Port device team_slave_1 added [ 629.908255][T29288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.920721][T29288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.949867][T29288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.058357][ T4170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.117985][T29288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.130822][T29288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.169551][T29288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.326948][ T4170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.493953][T29420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11084'. [ 630.661208][ T4170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.727742][T29288] hsr_slave_0: entered promiscuous mode [ 630.751571][T29288] hsr_slave_1: entered promiscuous mode [ 630.761530][T29288] debugfs: 'hsr0' already exists in 'hsr' [ 630.767320][T29288] Cannot create hsr debugfs directory [ 630.785039][T29331] chnl_net:caif_netlink_parms(): no params data found [ 630.843382][ T4170] batman_adv: batadv0: Removing interface: netdevsim0 [ 630.858533][ T4170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.430143][T27131] Bluetooth: hci3: command tx timeout [ 631.475317][T29331] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.499641][T29331] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.523951][T29331] bridge_slave_0: entered allmulticast mode [ 631.556313][T29331] bridge_slave_0: entered promiscuous mode [ 631.749812][T27131] Bluetooth: hci0: command tx timeout [ 631.841623][T29331] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.848828][T29331] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.880824][T29331] bridge_slave_1: entered allmulticast mode [ 631.889221][T29331] bridge_slave_1: entered promiscuous mode [ 632.035914][ T4170] bridge_slave_1: left allmulticast mode [ 632.044633][ T4170] bridge_slave_1: left promiscuous mode [ 632.071409][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.108676][ T4170] bridge_slave_0: left allmulticast mode [ 632.124211][ T4170] bridge_slave_0: left promiscuous mode [ 632.139998][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.173873][ T4170] bridge_slave_0: left allmulticast mode [ 632.179593][ T4170] bridge_slave_0: left promiscuous mode [ 632.190701][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.657269][ T4170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.668836][ T4170] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 632.679191][ T4170] bond0 (unregistering): Released all slaves [ 632.765037][ T4170] bond0 (unregistering): Released all slaves [ 632.783443][T29331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.812181][T29495] tap0: tun_chr_ioctl cmd 1074025677 [ 632.817812][T29495] tap0: linktype set to 774 [ 632.824979][T29503] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.11113'. [ 632.842973][T29331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.065598][T29331] team0: Port device team_slave_0 added [ 633.112321][T29331] team0: Port device team_slave_1 added [ 633.286191][T29331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.300343][T29331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.351218][T29331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.391578][T29331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.398590][T29331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.445757][T29331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.521469][T27131] Bluetooth: hci3: command tx timeout [ 633.736499][T29288] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 633.830291][T27131] Bluetooth: hci0: command tx timeout [ 634.457367][T29331] hsr_slave_0: entered promiscuous mode [ 634.464791][T29331] hsr_slave_1: entered promiscuous mode [ 634.485286][T29331] debugfs: 'hsr0' already exists in 'hsr' [ 634.502011][T29331] Cannot create hsr debugfs directory [ 634.524672][T29288] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 634.564371][T29551] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.11133'. [ 634.565035][T29288] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 634.747087][T29288] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 635.038730][T29551] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!' already exists in 'ieee80211' [ 635.278999][ T4170] hsr_slave_0: left promiscuous mode [ 635.301680][ T4170] hsr_slave_1: left promiscuous mode [ 635.308083][ T4170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.317489][ T4170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.336526][ T4170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.359998][ T4170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.370731][T29564] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11139'. [ 635.419593][ T4170] veth1_macvtap: left promiscuous mode [ 635.427566][ T4170] veth0_macvtap: left promiscuous mode [ 635.435648][ T4170] veth1_vlan: left promiscuous mode [ 635.442035][ T4170] veth0_vlan: left promiscuous mode [ 635.589901][T27131] Bluetooth: hci3: command tx timeout [ 636.048249][ T4170] team0 (unregistering): Port device team_slave_1 removed [ 636.090687][ T4170] team0 (unregistering): Port device C removed [ 636.612399][T29573] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 636.618189][T29573] dvmrp1: linktype set to 773 [ 636.991050][T29605] netlink: 'syz.1.11154': attribute type 2 has an invalid length. [ 637.000264][T29605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11154'. [ 637.090755][T29331] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 637.648233][T29331] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 637.662682][T29331] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 637.694956][T29331] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 637.779024][T29288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.931930][T29288] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.025226][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.032692][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.095528][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.102835][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.198719][T29624] syzkaller1: tun_chr_ioctl cmd 21731 [ 638.323005][T29626] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11161'. [ 638.349009][T29331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.384181][T29626] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11161'. [ 638.401562][T29627] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11161'. [ 638.459244][T29331] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.504337][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.511604][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.562133][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.569356][ T4170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.045404][T29288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.135577][T29331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.157699][T29655] netlink: 'syz.4.11169': attribute type 12 has an invalid length. [ 639.177186][T29655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11169'. [ 639.440695][T29665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11172'. [ 639.723509][T29288] veth0_vlan: entered promiscuous mode [ 639.762761][T29288] veth1_vlan: entered promiscuous mode [ 639.883535][T29288] veth0_macvtap: entered promiscuous mode [ 639.936437][T29288] veth1_macvtap: entered promiscuous mode [ 640.035270][T29288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.082070][T29691] netlink: 'syz.0.11180': attribute type 11 has an invalid length. [ 640.113394][T29288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.137459][T29331] veth0_vlan: entered promiscuous mode [ 640.190720][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.218217][T29331] veth1_vlan: entered promiscuous mode [ 640.254848][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.296523][T29696] netlink: 'syz.0.11183': attribute type 2 has an invalid length. [ 640.299691][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.329886][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.338761][T29696] netlink: 'syz.0.11183': attribute type 1 has an invalid length. [ 640.362503][T29696] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.11183'. [ 640.381382][T29696] nbd: couldn't find a device at index 149 [ 640.521811][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.542285][T29331] veth0_macvtap: entered promiscuous mode [ 640.560370][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.593237][T29331] veth1_macvtap: entered promiscuous mode [ 640.637107][T29706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11187'. [ 640.694543][T29708] netlink: 'syz.4.11188': attribute type 4 has an invalid length. [ 640.697921][T29331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.755105][T29331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.771050][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.799192][ T1161] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.823258][ T1161] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.832534][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.886054][ T1161] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.901469][ T1161] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.106485][T17771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.149619][T17771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.237202][T29723] netlink: 'syz.4.11195': attribute type 2 has an invalid length. [ 641.245751][T29723] netlink: 119 bytes leftover after parsing attributes in process `syz.4.11195'. [ 641.421692][ T4545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.445192][ T4545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.528117][T29730] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11197'. [ 641.765182][T29742] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 641.789522][T29742] syzkaller1: owner set to 778 [ 641.812950][T29748] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11204'. [ 644.088447][T29820] netlink: 'syz.4.11235': attribute type 39 has an invalid length. [ 644.238016][T29829] __nla_validate_parse: 2 callbacks suppressed [ 644.238046][T29829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11240'. [ 645.181039][T29870] netlink: 'syz.7.11259': attribute type 27 has an invalid length. [ 645.200321][T29870] netlink: 2418 bytes leftover after parsing attributes in process `syz.7.11259'. [ 645.432168][T29881] dvmrp0: tun_chr_ioctl cmd 2148553947 [ 645.698282][T29898] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11271'. [ 645.719765][T29898] netlink: 46 bytes leftover after parsing attributes in process `syz.7.11271'. [ 645.769572][T29898] netlink: 46 bytes leftover after parsing attributes in process `syz.7.11271'. [ 646.135755][T29909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11278'. [ 646.312439][T29915] netlink: 'syz.4.11281': attribute type 8 has an invalid length. [ 646.342546][T29915] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 647.982230][T29948] netlink: 64019 bytes leftover after parsing attributes in process `syz.1.11297'. [ 650.821041][T30009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11321'. [ 650.892148][T30012] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11324'. [ 650.903986][T30012] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11324'. [ 650.916063][T30012] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11324'. [ 651.008675][T30016] netlink: 'syz.8.11326': attribute type 11 has an invalid length. [ 651.042868][T30016] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.11326'. [ 651.588288][T30048] netlink: 'syz.1.11342': attribute type 2 has an invalid length. [ 651.599528][T30048] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11342'. [ 651.611469][T30048] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 651.689469][T30055] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11345'. [ 651.828117][T30061] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11346'. [ 652.988848][T30106] netlink: 'syz.4.11367': attribute type 29 has an invalid length. [ 653.021084][T30106] netlink: 'syz.4.11367': attribute type 29 has an invalid length. [ 653.057478][T30106] netlink: 'syz.4.11367': attribute type 29 has an invalid length. [ 653.244735][T30114] macvlan1: entered promiscuous mode [ 653.251569][T30114] macvlan1: entered allmulticast mode [ 653.276180][T30114] veth1_vlan: entered allmulticast mode [ 653.527146][T30126] netlink: 'syz.0.11378': attribute type 10 has an invalid length. [ 653.552324][T30126] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.11378'. [ 653.642776][T30130] netlink: 16255 bytes leftover after parsing attributes in process `syz.7.11380'. [ 653.979864][T30139] tap0: tun_chr_ioctl cmd 1074812118 [ 658.071004][T30183] __nla_validate_parse: 1 callbacks suppressed [ 658.071029][T30183] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11400'. [ 658.463046][T30202] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 658.661178][T30205] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11409'. [ 658.674547][T30206] netlink: 'syz.1.11408': attribute type 2 has an invalid length. [ 658.690837][T30209] netlink: 'syz.7.11411': attribute type 4 has an invalid length. [ 658.694678][T30206] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.11408'. [ 659.253116][T30232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11422'. [ 659.339290][T30237] sit0: entered allmulticast mode [ 659.372891][T30237] sit0: entered promiscuous mode [ 659.769769][T30256] C: renamed from team_slave_0 (while UP) [ 659.803328][T30256] netlink: 'syz.8.11433': attribute type 8 has an invalid length. [ 659.835388][T30256] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 660.047545][T30267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11439'. [ 660.092797][T30272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11440'. [ 660.093084][T30267] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11439'. [ 660.313584][T30278] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11445'. [ 660.529634][T30287] netlink: 'syz.1.11448': attribute type 4 has an invalid length. [ 660.809726][T30298] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.11451'. [ 660.844085][T30298] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.11451'. [ 661.241433][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.472476][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.786951][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.042031][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.468486][ T13] bridge_slave_1: left allmulticast mode [ 662.509731][ T13] bridge_slave_1: left promiscuous mode [ 662.516313][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.620915][ T13] bridge_slave_0: left promiscuous mode [ 662.640550][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 662.652437][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 662.661432][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 662.670399][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 662.690191][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 662.701808][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.866822][T27131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 662.877626][T27131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 662.886930][T27131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 662.897248][T27131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 662.925424][T27131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 663.041730][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 663.082675][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 663.107349][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 663.130641][T30325] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 663.142698][T30326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 663.144769][T30325] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.153294][T30326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 663.169458][T30325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.194732][T30325] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.212568][T30325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.357546][ T13] : left promiscuous mode [ 663.954234][T30319] chnl_net:caif_netlink_parms(): no params data found [ 664.276910][T30319] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.288197][T30319] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.297080][T30319] bridge_slave_0: entered allmulticast mode [ 664.307075][T30319] bridge_slave_0: entered promiscuous mode [ 664.372245][T30319] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.381607][T30319] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.393445][T30319] bridge_slave_1: entered allmulticast mode [ 664.404400][T30319] bridge_slave_1: entered promiscuous mode [ 664.599569][T30319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.750811][T30319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.796529][ T5837] Bluetooth: hci0: command tx timeout [ 664.814784][ T13] hsr_slave_0: left promiscuous mode [ 664.827085][ T13] hsr_slave_1: left promiscuous mode [ 664.834589][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.846074][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.857065][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.865758][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.882451][ T13] veth1_vlan: left promiscuous mode [ 664.888159][ T13] •]ôÉX: left promiscuous mode [ 665.029869][ T5837] Bluetooth: hci1: command tx timeout [ 665.196610][ T5837] Bluetooth: hci2: command tx timeout [ 665.270047][ T5837] Bluetooth: hci3: command tx timeout [ 665.757888][T30319] team0: Port device team_slave_0 added [ 665.768991][T30319] team0: Port device team_slave_1 added [ 665.847364][T30314] chnl_net:caif_netlink_parms(): no params data found [ 665.948035][T30319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.955486][T30319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.984970][T30319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.046911][T30319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.055129][T30319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.086261][T30319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.176247][T30323] chnl_net:caif_netlink_parms(): no params data found [ 666.244206][T30319] hsr_slave_0: entered promiscuous mode [ 666.251568][T30319] hsr_slave_1: entered promiscuous mode [ 666.271948][T30314] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.281255][T30314] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.289217][T30314] bridge_slave_0: entered allmulticast mode [ 666.297794][T30314] bridge_slave_0: entered promiscuous mode [ 666.308264][T30314] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.318215][T30314] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.328382][T30314] bridge_slave_1: entered allmulticast mode [ 666.338568][T30314] bridge_slave_1: entered promiscuous mode [ 666.503817][T30314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.535146][T30314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.646217][T30323] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.655328][T30323] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.656542][ T13] ------------[ cut here ]------------ [ 666.664142][T30323] bridge_slave_0: entered allmulticast mode [ 666.669847][ T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 666.669898][ T13] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 666.669966][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 666.669993][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 666.670009][ T13] Workqueue: netns cleanup_net [ 666.670043][ T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 666.670067][ T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b 4d 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 3a 14 f8 e8 f4 9c ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e6 9c ce f7 90 0f 0b 90 e9 60 fe ff ff [ 666.670087][ T13] RSP: 0018:ffffc90000127878 EFLAGS: 00010293 [ 666.681324][T30323] bridge_slave_0: entered promiscuous mode [ 666.686623][ T13] RAX: ffffffff89f1a6fc RBX: ffff888030a32480 RCX: ffff88801c2c0000 [ 666.686648][ T13] RDX: 0000000000000000 RSI: ffffffff8d9d1510 RDI: ffff88801c2c0000 [ 666.686665][ T13] RBP: ffffc90000127990 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 666.686682][ T13] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffffffff8f5da8c0 [ 666.686705][ T13] R13: 1ffff92000024f3c R14: ffff888030a33940 R15: dffffc0000000000 [ 666.686723][ T13] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 666.686743][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 666.686759][ T13] CR2: 00007f8507d17d60 CR3: 0000000077392000 CR4: 00000000003526f0 [ 666.686780][ T13] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 666.686796][ T13] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 666.686811][ T13] Call Trace: [ 666.686821][ T13] [ 666.686836][ T13] xfrm_net_exit+0x2d/0x70 [ 666.686869][ T13] ops_undo_list+0x49a/0x990 [ 666.860312][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 666.865680][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 666.871516][ T13] cleanup_net+0x4d8/0x820 [ 666.876347][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 666.881784][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.887395][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 666.890240][ T5837] Bluetooth: hci0: command tx timeout [ 666.893868][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 666.906467][ T13] process_scheduled_works+0xae1/0x17b0 [ 666.912609][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 666.919958][ T13] worker_thread+0x8a0/0xda0 [ 666.926100][ T13] kthread+0x711/0x8a0 [ 666.930594][ T13] ? __pfx_worker_thread+0x10/0x10 [ 666.936651][ T13] ? __pfx_kthread+0x10/0x10 [ 666.942882][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.948686][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.954316][ T13] ? __pfx_kthread+0x10/0x10 [ 666.959806][ T13] ret_from_fork+0x4bc/0x870 [ 666.965277][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 666.970793][ T13] ? __switch_to_asm+0x39/0x70 [ 666.976232][ T13] ? __switch_to_asm+0x33/0x70 [ 666.982952][ T13] ? __pfx_kthread+0x10/0x10 [ 666.988155][ T13] ret_from_fork_asm+0x1a/0x30 [ 666.993102][ T13] [ 666.997064][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 667.005531][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 667.015904][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 667.027420][ T13] Workqueue: netns cleanup_net [ 667.032643][ T13] Call Trace: [ 667.036083][ T13] [ 667.039877][ T13] dump_stack_lvl+0x99/0x250 [ 667.058108][ T13] ? __asan_memcpy+0x40/0x70 [ 667.062951][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.068658][ T13] ? __pfx__printk+0x10/0x10 [ 667.074013][ T13] vpanic+0x237/0x6d0 [ 667.078524][ T13] ? __pfx_vpanic+0x10/0x10 [ 667.083423][ T13] panic+0xb9/0xc0 [ 667.087752][ T13] ? __pfx_panic+0x10/0x10 [ 667.092860][ T13] __warn+0x31b/0x4b0 [ 667.097173][ T13] ? xfrm_state_fini+0x26d/0x2f0 [ 667.102536][ T13] ? xfrm_state_fini+0x26d/0x2f0 [ 667.107611][ T13] report_bug+0x2be/0x4f0 [ 667.112842][ T13] ? xfrm_state_fini+0x26d/0x2f0 [ 667.117831][ T13] ? xfrm_state_fini+0x26d/0x2f0 [ 667.122998][ T13] ? xfrm_state_fini+0x26f/0x2f0 [ 667.128186][ T13] handle_bug+0x84/0x160 [ 667.132873][ T13] exc_invalid_op+0x1a/0x50 [ 667.137840][ T13] asm_exc_invalid_op+0x1a/0x20 [ 667.143093][ T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 667.148763][ T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b 4d 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 3a 14 f8 e8 f4 9c ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e6 9c ce f7 90 0f 0b 90 e9 60 fe ff ff [ 667.168878][ T13] RSP: 0018:ffffc90000127878 EFLAGS: 00010293 [ 667.175331][ T13] RAX: ffffffff89f1a6fc RBX: ffff888030a32480 RCX: ffff88801c2c0000 [ 667.183729][ T13] RDX: 0000000000000000 RSI: ffffffff8d9d1510 RDI: ffff88801c2c0000 [ 667.192290][ T13] RBP: ffffc90000127990 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 667.202503][ T13] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffffffff8f5da8c0 [ 667.211222][ T13] R13: 1ffff92000024f3c R14: ffff888030a33940 R15: dffffc0000000000 [ 667.219873][ T13] ? xfrm_state_fini+0x26c/0x2f0 [ 667.225496][ T13] ? xfrm_state_fini+0x26c/0x2f0 [ 667.231804][ T13] xfrm_net_exit+0x2d/0x70 [ 667.237055][ T13] ops_undo_list+0x49a/0x990 [ 667.242298][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 667.248875][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 667.254669][ T13] cleanup_net+0x4d8/0x820 [ 667.259585][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 667.265206][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.271006][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 667.279391][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 667.286009][ T13] process_scheduled_works+0xae1/0x17b0 [ 667.292264][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 667.298855][ T13] worker_thread+0x8a0/0xda0 [ 667.303816][ T13] kthread+0x711/0x8a0 [ 667.308190][ T13] ? __pfx_worker_thread+0x10/0x10 [ 667.313897][ T13] ? __pfx_kthread+0x10/0x10 [ 667.319255][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.324933][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.330741][ T13] ? __pfx_kthread+0x10/0x10 [ 667.335747][ T13] ret_from_fork+0x4bc/0x870 [ 667.341601][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 667.346956][ T13] ? __switch_to_asm+0x39/0x70 [ 667.352302][ T13] ? __switch_to_asm+0x33/0x70 [ 667.357369][ T13] ? __pfx_kthread+0x10/0x10 [ 667.362490][ T13] ret_from_fork_asm+0x1a/0x30 [ 667.367424][ T13] [ 667.370909][ T13] Kernel Offset: disabled [ 667.375664][ T13] Rebooting in 86400 seconds..