last executing test programs: 3m54.250899885s ago: executing program 32 (id=215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 3m53.98348199s ago: executing program 33 (id=183): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001380)='!\x00') ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) 3m53.962497029s ago: executing program 34 (id=214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 3m53.934252705s ago: executing program 35 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) close(0x3) 3m6.758366431s ago: executing program 36 (id=451): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2211, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c880}, 0x884) 2m56.932338364s ago: executing program 37 (id=537): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 2m51.399388646s ago: executing program 5 (id=673): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000039000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000640)}, 0x20) 2m51.24517869s ago: executing program 5 (id=675): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a08", 0x3a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 2m51.104132122s ago: executing program 5 (id=677): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2m50.966623261s ago: executing program 5 (id=679): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f9, &(0x7f0000000080)) 2m50.721022873s ago: executing program 5 (id=689): syz_clone(0x22a1080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m50.527841357s ago: executing program 5 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) 2m41.355589965s ago: executing program 38 (id=732): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x88) 2m35.296544588s ago: executing program 39 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) 2m16.979411138s ago: executing program 8 (id=921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r1 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8907, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 2m16.496062289s ago: executing program 8 (id=926): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x7}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2m15.900003044s ago: executing program 8 (id=933): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x54, &(0x7f0000000640)=r2, 0x4) 2m15.605757032s ago: executing program 8 (id=939): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x121402, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fb, &(0x7f0000000080)) 2m15.345026287s ago: executing program 8 (id=940): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000000cc0)=r2, 0x4) 2m15.232945617s ago: executing program 8 (id=943): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) 2m0.050024467s ago: executing program 40 (id=943): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) 1m4.901920232s ago: executing program 1 (id=1552): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xcdbe3ea5e06002db}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1m4.25596393s ago: executing program 1 (id=1561): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x65}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1m3.975070807s ago: executing program 1 (id=1564): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x2200871, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) 1m3.767363101s ago: executing program 1 (id=1568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m3.165806204s ago: executing program 1 (id=1574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m2.534205983s ago: executing program 0 (id=1578): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000ebcbd039e7cf713b0000950000eaffffff00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x8) 1m2.290214986s ago: executing program 0 (id=1582): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 1m2.114619229s ago: executing program 0 (id=1584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) close(0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 1m1.733339199s ago: executing program 0 (id=1586): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000e80)=""/261, 0x105}, {&(0x7f0000000b80)=""/129, 0x81}, {&(0x7f0000000040)=""/192, 0xc0}, {&(0x7f0000004000)=""/4137, 0x1029}, {&(0x7f00000009c0)=""/208, 0xd0}, {&(0x7f0000000d80)=""/204, 0xcc}, {&(0x7f0000000300)=""/294, 0x126}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000001a40)=""/4111, 0x100f}, {&(0x7f00000006c0)=""/167, 0xa7}], 0xa}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1m1.184188787s ago: executing program 4 (id=1590): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x7000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m0.964336244s ago: executing program 4 (id=1593): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000037000100feffffff00000000017c00000c008e0006"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c080) 1m0.572792274s ago: executing program 4 (id=1595): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, &(0x7f0000000000)) 1m0.333340953s ago: executing program 4 (id=1598): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m0.15271394s ago: executing program 4 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 59.851527124s ago: executing program 0 (id=1600): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002400810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) 59.755325225s ago: executing program 4 (id=1601): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x110c2300fe) 59.271397564s ago: executing program 41 (id=1601): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x110c2300fe) 59.245134564s ago: executing program 0 (id=1604): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) 59.054692846s ago: executing program 42 (id=1604): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) 57.130624041s ago: executing program 1 (id=1574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 56.470651849s ago: executing program 43 (id=1574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 7.2860272s ago: executing program 6 (id=2079): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f00000000c0), 0xb9) close(r0) 7.147374729s ago: executing program 6 (id=2082): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 6.989529534s ago: executing program 6 (id=2085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.892272807s ago: executing program 7 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000a0a01020600000000000000020000000900010073797a30"], 0x20}}, 0x4000804) 6.775354722s ago: executing program 9 (id=2089): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="40d2eca6c45597f807733387d719d17831c0ec03fff99a7a05256e650a8f5fb8f8a0135d", 0x24}, {0x0}], 0x2}, 0x400c0) sendmsg(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)='\t', 0x1}, {0x0}], 0x2, &(0x7f0000000b40)=ANY=[], 0x20}, 0x91) 6.644761734s ago: executing program 2 (id=2090): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x1, 0x0, 0x18, 0x0, 0x0, 0x10, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @in6=@mcast1, @in6=@mcast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf68}}]}, 0xc0}}, 0x20000000) socket(0x22, 0x2, 0x2) r1 = socket(0x22, 0x2, 0x1) close(r1) 6.617219947s ago: executing program 7 (id=2091): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 6.555505975s ago: executing program 9 (id=2094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) close(0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 6.440646453s ago: executing program 7 (id=2095): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) 6.401861582s ago: executing program 2 (id=2097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000080)=0x20, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f0000000240)=r1}, 0x20) 6.25071271s ago: executing program 9 (id=2098): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 6.071723897s ago: executing program 7 (id=2100): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 6.056997031s ago: executing program 6 (id=2101): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4f, 0x5, 0xd, 0x7, 0x0, 0x8, 0xd2dbd, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10}, 0x2, 0x9c, 0xfff, 0x8, 0x7, 0x5, 0xa, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 6.013749284s ago: executing program 2 (id=2102): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) 5.823638631s ago: executing program 9 (id=2104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.76876747s ago: executing program 2 (id=2106): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="3d62a4", 0x3}], 0x1}, 0x41) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000) 5.675699452s ago: executing program 7 (id=2107): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 5.65604747s ago: executing program 6 (id=2108): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000000)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], 0x0, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 5.556705586s ago: executing program 9 (id=2109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000700000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4080) 5.556430745s ago: executing program 2 (id=2110): bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="1d005f0078000000f63a15cb5a8c8a08bf4ab42f", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5.17452215s ago: executing program 7 (id=2111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.12185412s ago: executing program 6 (id=2112): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000070000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.550646509s ago: executing program 44 (id=2111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4.492786141s ago: executing program 2 (id=2114): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) 4.43214757s ago: executing program 45 (id=2114): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) 4.385123394s ago: executing program 46 (id=2112): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000070000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.375745178s ago: executing program 9 (id=2116): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, 0x0) 4.209835927s ago: executing program 47 (id=2116): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, 0x0) 452.896817ms ago: executing program 3 (id=2132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0xfd, 0xdd, 0xa}, 0x50) 375.539143ms ago: executing program 3 (id=2133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r0) 322.100426ms ago: executing program 3 (id=2134): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058) 144.890591ms ago: executing program 3 (id=2135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}}, 0x0) 55.366088ms ago: executing program 3 (id=2136): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5}, 0x2880, 0xc8, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8100072b00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 3 (id=2137): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x19, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) kernel console output (not intermixed with test programs): terface [ 119.316401][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.327795][ T1166] bond0 (unregistering): Released all slaves [ 119.350631][ T6470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 119.484234][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.631270][ T6468] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.687403][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.694626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.775490][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.785332][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.792751][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.885913][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.916182][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.939845][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.947063][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.029119][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.036293][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.089741][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.148796][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.242955][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.250313][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.263075][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.270320][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.343351][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.374175][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.381347][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.452532][ T1166] hsr_slave_0: left promiscuous mode [ 120.474909][ T1166] hsr_slave_1: left promiscuous mode [ 120.481072][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.504400][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.524924][ T51] Bluetooth: hci0: command tx timeout [ 120.525640][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.548186][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.572461][ T1166] hsr_slave_0: left promiscuous mode [ 120.579047][ T1166] hsr_slave_1: left promiscuous mode [ 120.586456][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.595075][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.609003][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.617805][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.628854][ T1166] hsr_slave_0: left promiscuous mode [ 120.635765][ T1166] hsr_slave_1: left promiscuous mode [ 120.641876][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.649376][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.658647][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.666694][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.705322][ T1166] veth1_macvtap: left promiscuous mode [ 120.710985][ T1166] veth0_macvtap: left promiscuous mode [ 120.716984][ T1166] veth1_vlan: left promiscuous mode [ 120.722259][ T1166] veth0_vlan: left promiscuous mode [ 120.730484][ T1166] veth1_macvtap: left promiscuous mode [ 120.736683][ T1166] veth0_macvtap: left promiscuous mode [ 120.742513][ T1166] veth1_vlan: left promiscuous mode [ 120.748765][ T1166] veth0_vlan: left promiscuous mode [ 120.756110][ T1166] veth1_macvtap: left promiscuous mode [ 120.761635][ T1166] veth0_macvtap: left promiscuous mode [ 120.768819][ T1166] veth1_vlan: left promiscuous mode [ 120.774775][ T1166] veth0_vlan: left promiscuous mode [ 121.004215][ T51] Bluetooth: hci2: command tx timeout [ 121.084500][ T51] Bluetooth: hci4: command tx timeout [ 121.089972][ T51] Bluetooth: hci3: command tx timeout [ 121.408639][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 121.446958][ T1166] team0 (unregistering): Port device C removed [ 122.084351][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 122.121000][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 122.779369][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 122.818937][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 123.162182][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.169471][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.425576][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.599339][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.029908][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.142177][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.511938][ T6468] veth0_vlan: entered promiscuous mode [ 124.571290][ T6468] veth1_vlan: entered promiscuous mode [ 124.731975][ T6472] veth0_vlan: entered promiscuous mode [ 124.806529][ T6468] veth0_macvtap: entered promiscuous mode [ 124.840865][ T6468] veth1_macvtap: entered promiscuous mode [ 124.879207][ T6472] veth1_vlan: entered promiscuous mode [ 124.969875][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.010208][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.043896][ T1102] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.057824][ T6466] veth0_vlan: entered promiscuous mode [ 125.069514][ T1102] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.078930][ T1102] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.108643][ T1166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.128128][ T6466] veth1_vlan: entered promiscuous mode [ 125.158079][ T6472] veth0_macvtap: entered promiscuous mode [ 125.206834][ T6472] veth1_macvtap: entered promiscuous mode [ 125.230962][ T6466] veth0_macvtap: entered promiscuous mode [ 125.250140][ T6466] veth1_macvtap: entered promiscuous mode [ 125.290727][ T6470] veth0_vlan: entered promiscuous mode [ 125.302195][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.312276][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.340820][ T6470] veth1_vlan: entered promiscuous mode [ 125.347250][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.370324][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.398474][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.426350][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.445480][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.451343][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.460880][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.471913][ T61] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.497814][ T61] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.525265][ T61] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.553249][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.567147][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.580010][ T6470] veth0_macvtap: entered promiscuous mode [ 125.602478][ T6470] veth1_macvtap: entered promiscuous mode [ 125.618781][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.656733][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.746305][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.765967][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.795668][ T6575] dvmrp0: tun_chr_ioctl cmd 2148553947 [ 125.827148][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.863179][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.947543][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.980963][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.020048][ T1142] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.031821][ T1142] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.110433][ T1142] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.121534][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.144447][ T1142] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.164647][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.414734][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.428940][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.520980][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.563610][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.678118][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.707478][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.863109][ T6595] tap0: tun_chr_ioctl cmd 2148553947 [ 127.050872][ T6601] openvswitch: netlink: VXLAN extension message has 10 unknown bytes. [ 127.322865][ T6612] netlink: 'syz.6.240': attribute type 10 has an invalid length. [ 127.355645][ T6612] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.240'. [ 127.787528][ T6624] tap0: tun_chr_ioctl cmd 1074812118 [ 127.806694][ T6628] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.245'. [ 127.961511][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.7.250'. [ 128.668663][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 129.778946][ T6694] netlink: 'syz.5.277': attribute type 29 has an invalid length. [ 129.839707][ T6694] netlink: 'syz.5.277': attribute type 29 has an invalid length. [ 129.867122][ T6694] netlink: 'syz.5.277': attribute type 29 has an invalid length. [ 130.117282][ T6703] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4 [ 130.698639][ T6725] netlink: 'syz.8.291': attribute type 10 has an invalid length. [ 130.734057][ T6725] netlink: 65015 bytes leftover after parsing attributes in process `syz.8.291'. [ 130.958412][ T6731] netlink: 60 bytes leftover after parsing attributes in process `syz.5.295'. [ 131.002087][ T6731] netlink: 60 bytes leftover after parsing attributes in process `syz.5.295'. [ 131.064881][ T6731] netlink: 60 bytes leftover after parsing attributes in process `syz.5.295'. [ 131.094530][ T6738] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.298'. [ 131.290744][ T6742] netlink: 60 bytes leftover after parsing attributes in process `syz.5.300'. [ 131.848819][ T6755] netlink: 'syz.8.305': attribute type 13 has an invalid length. [ 132.080884][ T6766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.085487][ T6764] netlink: 'syz.8.310': attribute type 6 has an invalid length. [ 132.756105][ T6786] __nla_validate_parse: 5 callbacks suppressed [ 132.756127][ T6786] netlink: 60 bytes leftover after parsing attributes in process `syz.8.321'. [ 132.864133][ T6788] netlink: 60 bytes leftover after parsing attributes in process `syz.8.321'. [ 132.955218][ T6786] netlink: 60 bytes leftover after parsing attributes in process `syz.8.321'. [ 133.399469][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.406473][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.735348][ T6796] netlink: 'syz.3.326': attribute type 10 has an invalid length. [ 133.746554][ T6796] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.326'. [ 134.497977][ T6824] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.535526][ T6827] openvswitch: netlink: Multiple metadata blocks provided [ 136.067982][ T6875] dummy0: mtu less than device minimum [ 136.557564][ T6886] netlink: 'syz.8.366': attribute type 21 has an invalid length. [ 136.588041][ T6886] netlink: 14565 bytes leftover after parsing attributes in process `syz.8.366'. [ 136.690522][ T6890] netlink: 'syz.7.367': attribute type 2 has an invalid length. [ 136.714028][ T6890] netlink: 'syz.7.367': attribute type 1 has an invalid length. [ 136.752584][ T6890] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.367'. [ 136.819256][ T6890] nbd: couldn't find device at index 65542 [ 138.745002][ T6926] netlink: 'syz.8.385': attribute type 1 has an invalid length. [ 139.078465][ T6938] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 139.088951][ T6937] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.391'. [ 139.140266][ T6938] netlink: 'syz.3.389': attribute type 2 has an invalid length. [ 139.156729][ T6938] netlink: 12374 bytes leftover after parsing attributes in process `syz.3.389'. [ 139.895526][ T6964] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.403'. [ 140.549491][ T6973] netlink: 'syz.7.406': attribute type 1 has an invalid length. [ 140.573871][ T6973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.820778][ T6981] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.409'. [ 140.852267][ T6982] netlink: 104 bytes leftover after parsing attributes in process `syz.8.410'. [ 142.094362][ T7004] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.418'. [ 142.222613][ T7003] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.418'. [ 142.302533][ T7009] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 142.323666][ T7006] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.418'. [ 142.411737][ T7011] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 142.440817][ T7011] syzkaller1: owner set to 778 [ 142.951838][ T7035] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.435'. [ 142.987140][ T7035] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 143.013565][ T7035] openvswitch: netlink: Message has 6324 unknown bytes. [ 143.038235][ T7039] netlink: 60 bytes leftover after parsing attributes in process `syz.8.437'. [ 143.382206][ T7051] netlink: 'syz.5.442': attribute type 29 has an invalid length. [ 143.574171][ T7057] sysfs: Unknown parameter 'subj_type' [ 143.656339][ T7060] netlink: 'syz.8.447': attribute type 9 has an invalid length. [ 144.168504][ T7076] netlink: 'syz.6.456': attribute type 2 has an invalid length. [ 144.207265][ T7076] __nla_validate_parse: 6 callbacks suppressed [ 144.207287][ T7076] netlink: 132 bytes leftover after parsing attributes in process `syz.6.456'. [ 145.556512][ T7098] netlink: 'syz.8.466': attribute type 21 has an invalid length. [ 145.575475][ T7098] netlink: 14548 bytes leftover after parsing attributes in process `syz.8.466'. [ 145.876526][ T7105] netlink: 'syz.8.471': attribute type 1 has an invalid length. [ 145.911516][ T7105] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.471'. [ 147.211535][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.488'. [ 147.433931][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.488'. [ 147.829580][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.488'. [ 148.104202][ T7170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.013059][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.507'. [ 149.071794][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.507'. [ 152.135081][ T7217] netlink: 'syz.5.514': attribute type 9 has an invalid length. [ 152.152415][ T7217] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.514'. [ 152.619529][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.521'. [ 152.946429][ T7239] netlink: 'syz.8.526': attribute type 2 has an invalid length. [ 152.986200][ T7242] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.525'. [ 153.520351][ T7260] netlink: 'syz.6.534': attribute type 29 has an invalid length. [ 153.595098][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.8.536'. [ 155.034929][ T7283] netlink: 60 bytes leftover after parsing attributes in process `syz.8.546'. [ 155.060252][ T7284] netlink: 60 bytes leftover after parsing attributes in process `syz.8.546'. [ 155.098150][ T7285] netlink: 60 bytes leftover after parsing attributes in process `syz.8.546'. [ 155.519422][ T7296] syz.5.551 uses obsolete (PF_INET,SOCK_PACKET) [ 156.664343][ T7311] netlink: 203516 bytes leftover after parsing attributes in process `syz.8.558'. [ 156.693930][ T7311] netlink: 6320 bytes leftover after parsing attributes in process `syz.8.558'. [ 157.614127][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.5.560'. [ 158.002471][ T7324] netlink: 60 bytes leftover after parsing attributes in process `syz.8.564'. [ 158.046607][ T7324] netlink: 60 bytes leftover after parsing attributes in process `syz.8.564'. [ 158.075336][ T7324] netlink: 60 bytes leftover after parsing attributes in process `syz.8.564'. [ 158.516278][ T7333] netlink: 56 bytes leftover after parsing attributes in process `syz.8.569'. [ 158.629526][ T7334] netlink: 7 bytes leftover after parsing attributes in process `syz.5.568'. [ 159.426104][ T7352] proc: Unknown parameter 'uid>00000000000000000000' [ 159.883615][ T5879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.896716][ T5879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.908710][ T5879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.920286][ T5879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.933340][ T5879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.201670][ T7380] netlink: 127868 bytes leftover after parsing attributes in process `syz.8.588'. [ 161.209170][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.459741][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.708882][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.964192][ T5879] Bluetooth: hci5: command tx timeout [ 164.053993][ T5879] Bluetooth: hci5: command tx timeout [ 164.960632][ T7360] chnl_net:caif_netlink_parms(): no params data found [ 164.972076][ T7395] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.595'. [ 164.992166][ T7395] netlink: 6320 bytes leftover after parsing attributes in process `syz.6.595'. [ 165.029317][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.285484][ T7400] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.596'. [ 165.321623][ T7399] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.596'. [ 165.452817][ T7405] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.596'. [ 165.693656][ T7414] proc: Unknown parameter 'uid>00000000000000000000' [ 165.694248][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.726552][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.744973][ T7360] bridge_slave_0: entered allmulticast mode [ 165.769704][ T7360] bridge_slave_0: entered promiscuous mode [ 165.818168][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.846788][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.858647][ T7360] bridge_slave_1: entered allmulticast mode [ 165.870022][ T7360] bridge_slave_1: entered promiscuous mode [ 165.908226][ T7417] netlink: 40227 bytes leftover after parsing attributes in process `syz.6.603'. [ 166.059192][ T7360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.124993][ T7360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.137306][ T5879] Bluetooth: hci5: command tx timeout [ 166.182436][ T1102] bridge_slave_1: left allmulticast mode [ 166.204203][ T1102] bridge_slave_1: left promiscuous mode [ 166.210061][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.271164][ T1102] bridge_slave_0: left allmulticast mode [ 166.296816][ T1102] bridge_slave_0: left promiscuous mode [ 166.302717][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.328753][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.606'. [ 166.354222][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.606'. [ 167.698881][ T7456] netlink: 64 bytes leftover after parsing attributes in process `syz.8.621'. [ 167.815553][ T7458] netlink: 'syz.6.622': attribute type 3 has an invalid length. [ 167.843622][ T7458] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.622'. [ 167.860253][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.889295][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.926105][ T1102] bond0 (unregistering): Released all slaves [ 168.106812][ T7360] team0: Port device team_slave_0 added [ 168.203583][ T5879] Bluetooth: hci5: command tx timeout [ 168.356709][ T7360] team0: Port device team_slave_1 added [ 168.650682][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.680869][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.834972][ T7360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.085270][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.112666][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.177160][ T7360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.434949][ T1102] hsr_slave_0: left promiscuous mode [ 169.503502][ T1102] hsr_slave_1: left promiscuous mode [ 169.509803][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.582985][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.671716][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.690944][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.826418][ T1102] veth1_macvtap: left promiscuous mode [ 169.832096][ T1102] veth0_macvtap: left promiscuous mode [ 169.853565][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.853777][ T1102] veth1_vlan: left promiscuous mode [ 169.871630][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.881719][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.882495][ T1102] veth0_vlan: left promiscuous mode [ 169.915623][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.934099][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.590241][ T7521] netlink: 'syz.6.650': attribute type 2 has an invalid length. [ 170.599598][ T7521] __nla_validate_parse: 2 callbacks suppressed [ 170.599618][ T7521] netlink: 132 bytes leftover after parsing attributes in process `syz.6.650'. [ 170.830994][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 170.909799][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 171.442196][ T7498] tap0: tun_chr_ioctl cmd 1074025677 [ 171.448291][ T7498] tap0: linktype set to 773 [ 171.469888][ T7529] netlink: 60 bytes leftover after parsing attributes in process `syz.5.654'. [ 171.700526][ T7534] netlink: 'syz.5.656': attribute type 29 has an invalid length. [ 171.757466][ T7537] netlink: 'syz.5.656': attribute type 29 has an invalid length. [ 171.822100][ T7360] hsr_slave_0: entered promiscuous mode [ 171.852947][ T7360] hsr_slave_1: entered promiscuous mode [ 171.898047][ T7538] netlink: 'syz.5.656': attribute type 29 has an invalid length. [ 172.099751][ T5879] Bluetooth: hci1: command tx timeout [ 172.413694][ T7542] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.659'. [ 173.013202][ T7559] openvswitch: netlink: IP tunnel dst address not specified [ 174.070059][ T7569] C: renamed from team_slave_0 (while UP) [ 174.123644][ T5879] Bluetooth: hci1: command tx timeout [ 174.142803][ T7360] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 174.192134][ T7360] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 174.278373][ T7574] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.672'. [ 174.308724][ T7360] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 174.376190][ T7499] chnl_net:caif_netlink_parms(): no params data found [ 174.418742][ T7582] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.675'. [ 174.483170][ T1102] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.549416][ T7360] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 174.619462][ T7586] netlink: 203516 bytes leftover after parsing attributes in process `syz.8.678'. [ 174.720214][ T1102] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.771766][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.6.680'. [ 174.817449][ T1102] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.024255][ T1102] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.092755][ T7600] netlink: 65015 bytes leftover after parsing attributes in process `syz.8.682'. [ 175.458092][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.485048][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.492494][ T7499] bridge_slave_0: entered allmulticast mode [ 175.531050][ T7499] bridge_slave_0: entered promiscuous mode [ 175.548991][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.573608][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.596539][ T7499] bridge_slave_1: entered allmulticast mode [ 175.618658][ T7499] bridge_slave_1: entered promiscuous mode [ 176.209023][ T5879] Bluetooth: hci1: command tx timeout [ 176.326583][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.359637][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.610246][ T7499] team0: Port device team_slave_0 added [ 176.630078][ T7499] team0: Port device team_slave_1 added [ 176.969305][ T1102] bridge_slave_1: left allmulticast mode [ 176.986977][ T1102] bridge_slave_1: left promiscuous mode [ 177.007577][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.045928][ T1102] bridge_slave_0: left allmulticast mode [ 177.051957][ T1102] bridge_slave_0: left promiscuous mode [ 177.073762][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.283809][ T5879] Bluetooth: hci1: command tx timeout [ 178.725797][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.773149][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.842978][ T1102] bond0 (unregistering): Released all slaves [ 178.886777][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.903639][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.978235][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.006068][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.013075][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.111074][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.262439][ T7659] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.707'. [ 179.336949][ T7660] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.707'. [ 179.556124][ T7499] hsr_slave_0: entered promiscuous mode [ 179.563136][ T7499] hsr_slave_1: entered promiscuous mode [ 179.585603][ T7499] debugfs: 'hsr0' already exists in 'hsr' [ 179.591454][ T7499] Cannot create hsr debugfs directory [ 179.624939][ T7360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.765266][ T1102] hsr_slave_0: left promiscuous mode [ 179.772196][ T1102] hsr_slave_1: left promiscuous mode [ 179.792208][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.814718][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.836234][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.844220][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.881438][ T1102] veth1_macvtap: left promiscuous mode [ 179.903693][ T1102] veth0_macvtap: left promiscuous mode [ 179.909494][ T1102] veth1_vlan: left promiscuous mode [ 179.920906][ T1102] veth0_vlan: left promiscuous mode [ 180.943251][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 180.998742][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 181.630096][ T7673] netlink: 'syz.8.713': attribute type 29 has an invalid length. [ 181.692709][ T7684] netlink: 60 bytes leftover after parsing attributes in process `syz.6.717'. [ 181.934191][ T7360] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.256343][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.263595][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.366598][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.374023][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.487836][ T7695] Â: renamed from pim6reg1 [ 182.520360][ T7703] netlink: 'syz.6.724': attribute type 29 has an invalid length. [ 182.547741][ T7704] netlink: 'syz.6.724': attribute type 29 has an invalid length. [ 182.638957][ T7703] netlink: 'syz.6.724': attribute type 29 has an invalid length. [ 182.738395][ T7706] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 182.754028][ T7706] syzkaller0: linktype set to 768 [ 183.127064][ T7499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.199451][ T7499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.276836][ T7499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.313333][ T7499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.586500][ T7360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.855819][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.093109][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.179235][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.262967][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.419581][ T7499] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.537228][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.582955][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.590408][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.670211][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.677525][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.082553][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.096697][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.112004][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.122871][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.132376][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.148779][ T13] bridge_slave_1: left allmulticast mode [ 185.171247][ T13] bridge_slave_1: left promiscuous mode [ 185.194622][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.219882][ T13] bridge_slave_0: left promiscuous mode [ 185.231188][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.807097][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.832132][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.843944][ T13] bond0 (unregistering): Released all slaves [ 185.868439][ T7360] veth0_vlan: entered promiscuous mode [ 185.903816][ T7752] tap0: tun_chr_ioctl cmd 1074025677 [ 185.921690][ T7752] tap0: linktype set to 769 [ 186.160491][ T7360] veth1_vlan: entered promiscuous mode [ 186.657571][ T7360] veth0_macvtap: entered promiscuous mode [ 186.707648][ T7499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.853182][ T7360] veth1_macvtap: entered promiscuous mode [ 186.918740][ T13] hsr_slave_0: left promiscuous mode [ 186.950859][ T13] hsr_slave_1: left promiscuous mode [ 186.960636][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.980932][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.994249][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.001704][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.038055][ T13] veth1_macvtap: left promiscuous mode [ 187.047953][ T13] veth0_macvtap: left promiscuous mode [ 187.057373][ T13] veth1_vlan: left promiscuous mode [ 187.062895][ T13] veth0_vlan: left promiscuous mode [ 187.175024][ T5879] Bluetooth: hci2: command tx timeout [ 187.830205][ T13] team0 (unregistering): Port device team_slave_1 removed [ 187.882278][ T13] team0 (unregistering): Port device team_slave_0 removed [ 188.505268][ T7773] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.747'. [ 188.573393][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.610599][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.675054][ T1102] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.690911][ T1102] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.728062][ T1142] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.770479][ T1142] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.817395][ T7745] chnl_net:caif_netlink_parms(): no params data found [ 188.880501][ T7499] veth0_vlan: entered promiscuous mode [ 189.008392][ T7499] veth1_vlan: entered promiscuous mode [ 189.130893][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.150736][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.177587][ T7782] wg0 speed is unknown, defaulting to 1000 [ 189.243867][ T5879] Bluetooth: hci2: command tx timeout [ 189.249398][ T7782] wg0 speed is unknown, defaulting to 1000 [ 189.334031][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.341383][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.349293][ T7745] bridge_slave_0: entered allmulticast mode [ 189.360910][ T7745] bridge_slave_0: entered promiscuous mode [ 189.369368][ T7782] wg0 speed is unknown, defaulting to 1000 [ 189.370436][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.383354][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.390920][ T7745] bridge_slave_1: entered allmulticast mode [ 189.416929][ T7745] bridge_slave_1: entered promiscuous mode [ 189.519375][ T7782] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.565967][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.588508][ T7499] veth0_macvtap: entered promiscuous mode [ 189.614626][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.621224][ T7782] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 189.628732][ T7745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.674065][ T7745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.702665][ T7499] veth1_macvtap: entered promiscuous mode [ 189.876777][ T7745] team0: Port device team_slave_0 added [ 189.908589][ T7745] team0: Port device team_slave_1 added [ 189.925238][ T7782] wg0 speed is unknown, defaulting to 1000 [ 189.929828][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.049420][ T7782] wg0 speed is unknown, defaulting to 1000 [ 190.050967][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.064085][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.123948][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.158305][ T7782] wg0 speed is unknown, defaulting to 1000 [ 190.179379][ T7499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.226217][ T7782] wg0 speed is unknown, defaulting to 1000 [ 190.226989][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.239951][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.285544][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.347723][ T7782] wg0 speed is unknown, defaulting to 1000 [ 190.383264][ T3534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.387008][ T7792] openvswitch: netlink: IP tunnel dst address not specified [ 190.415217][ T3534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.415267][ T3534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.415304][ T3534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.598327][ T7745] hsr_slave_0: entered promiscuous mode [ 190.635067][ T7745] hsr_slave_1: entered promiscuous mode [ 190.641700][ T7745] debugfs: 'hsr0' already exists in 'hsr' [ 190.700467][ T7745] Cannot create hsr debugfs directory [ 190.874750][ T7798] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.754'. [ 190.896656][ T7798] netlink: zone id is out of range [ 190.901880][ T7798] netlink: zone id is out of range [ 190.927641][ T7798] netlink: get zone limit has 8 unknown bytes [ 191.335981][ T5879] Bluetooth: hci2: command tx timeout [ 191.358171][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.367982][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.422179][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.445098][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.457103][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.708036][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.763770][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.890437][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.127617][ T7807] wg0 speed is unknown, defaulting to 1000 [ 192.213118][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.314366][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.342337][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.797337][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.319576][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.404664][ T5879] Bluetooth: hci2: command tx timeout [ 193.565279][ T5879] Bluetooth: hci0: command tx timeout [ 193.662846][ T7844] netlink: 'syz.0.772': attribute type 21 has an invalid length. [ 193.811838][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 194.403406][ T13] bridge_slave_1: left allmulticast mode [ 194.422203][ T13] bridge_slave_1: left promiscuous mode [ 194.437815][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.474932][ T13] bridge_slave_0: left allmulticast mode [ 194.480638][ T13] bridge_slave_0: left promiscuous mode [ 194.530488][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.543597][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.556423][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.195250][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.210298][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.223227][ T13] bond0 (unregistering): Released all slaves [ 195.260351][ T7887] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.792'. [ 195.285420][ T7887] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 195.444155][ T7807] chnl_net:caif_netlink_parms(): no params data found [ 195.643652][ T5879] Bluetooth: hci0: command tx timeout [ 195.964484][ T7745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.041433][ T7745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.190612][ T7745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.194458][ T7913] netlink: 196 bytes leftover after parsing attributes in process `syz.8.803'. [ 196.213586][ T7745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.296415][ T13] hsr_slave_0: left promiscuous mode [ 196.311792][ T13] hsr_slave_1: left promiscuous mode [ 196.329348][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.359552][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.371613][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.382099][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.446092][ T13] veth1_macvtap: left promiscuous mode [ 196.456718][ T13] veth0_macvtap: left promiscuous mode [ 196.463203][ T13] veth1_vlan: left promiscuous mode [ 196.477768][ T13] veth0_vlan: left promiscuous mode [ 196.486051][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.9.807'. [ 197.273244][ T13] team0 (unregistering): Port device team_slave_1 removed [ 197.311306][ T13] team0 (unregistering): Port device team_slave_0 removed [ 197.707519][ T7924] netlink: 'syz.0.808': attribute type 3 has an invalid length. [ 197.716221][ T7924] netlink: 152 bytes leftover after parsing attributes in process `syz.0.808'. [ 197.726776][ T5879] Bluetooth: hci0: command tx timeout [ 197.733055][ T7935] netlink: 44 bytes leftover after parsing attributes in process `syz.9.813'. [ 197.761262][ T7934] netlink: 44 bytes leftover after parsing attributes in process `syz.9.813'. [ 197.799822][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.811562][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.827713][ T7807] bridge_slave_0: entered allmulticast mode [ 197.839042][ T7807] bridge_slave_0: entered promiscuous mode [ 197.852617][ T7936] netlink: 44 bytes leftover after parsing attributes in process `syz.9.813'. [ 197.867535][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.880946][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.903168][ T7807] bridge_slave_1: entered allmulticast mode [ 197.927567][ T7807] bridge_slave_1: entered promiscuous mode [ 198.087037][ T7947] netlink: 'syz.8.815': attribute type 21 has an invalid length. [ 198.128981][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.148654][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.815'. [ 198.212128][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.327034][ T7940] wg0 speed is unknown, defaulting to 1000 [ 198.372924][ T7807] team0: Port device team_slave_0 added [ 198.436298][ T7807] team0: Port device team_slave_1 added [ 198.545503][ T7961] netlink: 'syz.8.820': attribute type 2 has an invalid length. [ 198.588675][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.597534][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.642344][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.672580][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.681090][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.709518][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.791792][ T7963] openvswitch: netlink: IP tunnel dst address not specified [ 199.026576][ T7807] hsr_slave_0: entered promiscuous mode [ 199.035163][ T7807] hsr_slave_1: entered promiscuous mode [ 199.041905][ T7807] debugfs: 'hsr0' already exists in 'hsr' [ 199.049388][ T7807] Cannot create hsr debugfs directory [ 199.243841][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.827'. [ 199.748996][ T7745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.804625][ T5879] Bluetooth: hci0: command tx timeout [ 199.999693][ T7994] openvswitch: netlink: IP tunnel dst address not specified [ 200.056302][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.241289][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.248622][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.323652][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.330904][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.991897][ T8005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.268054][ T7745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.498395][ T7745] veth0_vlan: entered promiscuous mode [ 201.599601][ T7807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.648246][ T7807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.683132][ T7745] veth1_vlan: entered promiscuous mode [ 201.731385][ T7807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.791564][ T7807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.919088][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.8.852'. [ 201.930338][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.852'. [ 201.940228][ T8035] netlink: 33 bytes leftover after parsing attributes in process `syz.8.852'. [ 201.951144][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.852'. [ 201.962954][ T8035] netlink: 33 bytes leftover after parsing attributes in process `syz.8.852'. [ 202.107205][ T8043] netlink: 148 bytes leftover after parsing attributes in process `syz.0.854'. [ 202.143006][ T7745] veth0_macvtap: entered promiscuous mode [ 202.180330][ T7745] veth1_macvtap: entered promiscuous mode [ 202.255526][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.299831][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.345813][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.402360][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.429472][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.488243][ T1102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.561199][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.672703][ T7807] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.708591][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.733650][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.759288][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.766528][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.840349][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.847642][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.909112][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.222808][ T7807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.275233][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.327109][ T7807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.456645][ T8092] netlink: 'syz.8.876': attribute type 9 has an invalid length. [ 204.488063][ T8092] netlink: 'syz.8.876': attribute type 11 has an invalid length. [ 204.499669][ T8092] netlink: 147436 bytes leftover after parsing attributes in process `syz.8.876'. [ 204.547529][ T7807] veth0_vlan: entered promiscuous mode [ 204.570488][ T8096] openvswitch: netlink: IP tunnel dst address not specified [ 204.585460][ T7807] veth1_vlan: entered promiscuous mode [ 204.712292][ T7807] veth0_macvtap: entered promiscuous mode [ 204.732618][ T7807] veth1_macvtap: entered promiscuous mode [ 204.777821][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.810137][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.872646][ T3534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.913133][ T1142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.942791][ T1142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.961719][ T1142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.249707][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.273042][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.341092][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.351255][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.605319][ T8125] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 205.681523][ T8127] netlink: 'syz.8.889': attribute type 2 has an invalid length. [ 206.167732][ T8137] netlink: 60 bytes leftover after parsing attributes in process `syz.8.893'. [ 206.226699][ T8140] netlink: 60 bytes leftover after parsing attributes in process `syz.8.893'. [ 206.246786][ T8137] netlink: 60 bytes leftover after parsing attributes in process `syz.8.893'. [ 206.526986][ T8142] Zero length message leads to an empty skb [ 206.545518][ T8142] netlink: 'syz.8.895': attribute type 2 has an invalid length. [ 206.553226][ T8142] netlink: 'syz.8.895': attribute type 1 has an invalid length. [ 206.604082][ T8142] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.895'. [ 206.614233][ T8142] nbd: couldn't find a device at index 16 [ 208.888356][ T8200] wg0 speed is unknown, defaulting to 1000 [ 209.306524][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.929'. [ 209.323682][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.9.929'. [ 209.342858][ T8224] netlink: 33 bytes leftover after parsing attributes in process `syz.9.929'. [ 209.364484][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.9.929'. [ 209.383362][ T8224] netlink: 33 bytes leftover after parsing attributes in process `syz.9.929'. [ 210.390086][ T8252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.942'. [ 224.925296][ T8286] netlink: 'syz.1.955': attribute type 10 has an invalid length. [ 224.963641][ T8286] netlink: 152 bytes leftover after parsing attributes in process `syz.1.955'. [ 225.024856][ T8286] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 226.175379][ T8306] netlink: 596 bytes leftover after parsing attributes in process `syz.9.963'. [ 226.685674][ T8317] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.969'. [ 226.702310][ T8314] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 226.719283][ T8315] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 226.890269][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.900384][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.915165][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.930412][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.939986][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.329163][ T61] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.454798][ T8320] wg0 speed is unknown, defaulting to 1000 [ 227.464935][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.9.979'. [ 227.559555][ T61] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.816775][ T61] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.958922][ T5991] wg0 speed is unknown, defaulting to 1000 [ 227.973568][ T5991] syz0: Port: 1 Link DOWN [ 228.096105][ T61] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.004081][ T5879] Bluetooth: hci3: command tx timeout [ 229.863319][ T61] bridge_slave_1: left allmulticast mode [ 229.891264][ T61] bridge_slave_1: left promiscuous mode [ 229.902334][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.963616][ T61] bridge_slave_0: left promiscuous mode [ 229.969593][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.988978][ T8403] netlink: 'syz.0.1006': attribute type 23 has an invalid length. [ 230.488066][ T8412] netlink: 'syz.0.1011': attribute type 9 has an invalid length. [ 230.516721][ T8413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1010'. [ 230.534886][ T8412] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.1011'. [ 230.892042][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.904945][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.916447][ T61] bond0 (unregistering): Released all slaves [ 231.084158][ T5879] Bluetooth: hci3: command tx timeout [ 231.202133][ T8320] chnl_net:caif_netlink_parms(): no params data found [ 231.422366][ T8428] netlink: 'syz.9.1017': attribute type 29 has an invalid length. [ 231.480772][ T8428] netlink: 'syz.9.1017': attribute type 3 has an invalid length. [ 231.517188][ T8428] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1017'. [ 233.163981][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.169329][ T5879] Bluetooth: hci3: command tx timeout [ 233.171195][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.180231][ T8320] bridge_slave_0: entered allmulticast mode [ 233.200422][ T8320] bridge_slave_0: entered promiscuous mode [ 233.223924][ T8447] wg0 speed is unknown, defaulting to 1000 [ 233.436562][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.445357][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.452757][ T8320] bridge_slave_1: entered allmulticast mode [ 233.461148][ T8320] bridge_slave_1: entered promiscuous mode [ 233.485653][ T8458] netlink: 'syz.0.1029': attribute type 29 has an invalid length. [ 233.520063][ T8465] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1031'. [ 233.598238][ T8320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.630283][ T8464] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1031'. [ 233.893694][ T61] hsr_slave_0: left promiscuous mode [ 234.284614][ T61] hsr_slave_1: left promiscuous mode [ 234.314307][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.338795][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.558014][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'. [ 234.625600][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.640222][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.717070][ T61] veth1_macvtap: left promiscuous mode [ 234.733035][ T61] veth0_macvtap: left promiscuous mode [ 234.747890][ T61] veth1_vlan: left promiscuous mode [ 234.767068][ T61] veth0_vlan: left promiscuous mode [ 235.245441][ T5879] Bluetooth: hci3: command tx timeout [ 235.520410][ T61] team0 (unregistering): Port device team_slave_1 removed [ 235.579262][ T61] team0 (unregistering): Port device C removed [ 236.071118][ T8320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.234687][ T8503] netlink: 'syz.9.1048': attribute type 39 has an invalid length. [ 236.420597][ T8320] team0: Port device team_slave_0 added [ 236.480835][ T8320] team0: Port device team_slave_1 added [ 236.659818][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.667685][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.737588][ T8320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.761929][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.770391][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.798143][ T8320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.985777][ T8519] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1055'. [ 236.994515][ T8320] hsr_slave_0: entered promiscuous mode [ 237.002313][ T8320] hsr_slave_1: entered promiscuous mode [ 237.009501][ T8320] debugfs: 'hsr0' already exists in 'hsr' [ 237.016588][ T8320] Cannot create hsr debugfs directory [ 238.584610][ T8558] netlink: 56429 bytes leftover after parsing attributes in process `syz.9.1074'. [ 239.216404][ T8320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.680695][ T8320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.685300][ T8587] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.1087'. [ 239.697303][ T8587] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1087'. [ 239.708525][ T8587] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.1087'. [ 239.773116][ T8320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.826346][ T8320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.859231][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1088'. [ 241.114066][ T8320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.173377][ T8320] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.554159][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.561440][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.577740][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.585202][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.170562][ T8652] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 242.219481][ T8656] netlink: 64967 bytes leftover after parsing attributes in process `syz.0.1111'. [ 242.628484][ T8320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.189457][ T8686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1123'. [ 243.295188][ T8686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1123'. [ 243.336798][ T8686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1123'. [ 243.841695][ T8704] netlink: 'syz.2.1129': attribute type 2 has an invalid length. [ 243.901974][ T8320] veth0_vlan: entered promiscuous mode [ 243.933068][ T8320] veth1_vlan: entered promiscuous mode [ 244.047800][ T8320] veth0_macvtap: entered promiscuous mode [ 244.094635][ T8320] veth1_macvtap: entered promiscuous mode [ 244.176383][ T8320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.220619][ T8320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.297139][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.323786][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.375404][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.404667][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.670478][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.696243][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.807881][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.836385][ T8725] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1139'. [ 244.842785][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.121469][ T8745] netlink: 'syz.9.1146': attribute type 29 has an invalid length. [ 245.132125][ T8745] netlink: 'syz.9.1146': attribute type 29 has an invalid length. [ 245.157850][ T8745] netlink: 'syz.9.1146': attribute type 29 has an invalid length. [ 245.227673][ T8745] netlink: 'syz.9.1146': attribute type 29 has an invalid length. [ 245.436855][ T8755] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1150'. [ 246.333880][ T8781] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1160'. [ 246.811290][ T8794] netlink: 'syz.0.1167': attribute type 2 has an invalid length. [ 246.860910][ T8794] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1167'. [ 250.619177][ T8887] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1207'. [ 251.167987][ T8900] netlink: 'syz.1.1213': attribute type 11 has an invalid length. [ 251.193782][ T8900] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1213'. [ 251.200015][ T8904] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1216'. [ 253.910129][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 254.003738][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 255.046092][ T8997] netlink: 40227 bytes leftover after parsing attributes in process `syz.9.1255'. [ 255.090504][ T8999] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.1256'. [ 255.121598][ T8999] netlink: 'syz.0.1256': attribute type 2 has an invalid length. [ 255.148316][ T8999] netlink: 62135 bytes leftover after parsing attributes in process `syz.0.1256'. [ 255.825443][ T9031] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1270'. [ 255.972239][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.979267][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.205904][ T9030] netlink: 'syz.0.1271': attribute type 39 has an invalid length. [ 256.596197][ T9044] netlink: 4096 bytes leftover after parsing attributes in process `syz.9.1276'. [ 257.046652][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1281'. [ 257.083515][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1281'. [ 257.427250][ T9068] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1286'. [ 257.735355][ T9077] netlink: 'syz.4.1292': attribute type 3 has an invalid length. [ 257.743242][ T9077] netlink: 'syz.4.1292': attribute type 2 has an invalid length. [ 257.757175][ T9077] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.1292'. [ 259.172634][ T9115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1307'. [ 259.241696][ T9115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1307'. [ 259.309071][ T9115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1307'. [ 259.669625][ T9129] netlink: 'syz.2.1312': attribute type 29 has an invalid length. [ 259.714096][ T9129] netlink: 'syz.2.1312': attribute type 29 has an invalid length. [ 259.758685][ T9129] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1312'. [ 260.311763][ T9155] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 260.312570][ T9152] netlink: 'syz.4.1325': attribute type 11 has an invalid length. [ 260.332980][ T9152] netlink: 'syz.4.1325': attribute type 11 has an invalid length. [ 260.558443][ T9161] netlink: 'syz.2.1329': attribute type 9 has an invalid length. [ 260.793965][ T9164] tc_dump_action: action bad kind [ 261.335503][ T9177] __nla_validate_parse: 5 callbacks suppressed [ 261.335528][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 261.660491][ T9182] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1338'. [ 262.733364][ T9202] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1346'. [ 264.402529][ T9248] veth1_macvtap: left promiscuous mode [ 264.444516][ T9248] macsec0: entered allmulticast mode [ 264.472407][ T9253] veth1_macvtap: entered promiscuous mode [ 264.480970][ T9253] veth1_macvtap: entered allmulticast mode [ 264.490050][ T9253] macsec0: entered promiscuous mode [ 264.844327][ T9267] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 264.890916][ T9267] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1373'. [ 264.944281][ T9270] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 265.044299][ T9270] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1373'. [ 265.083598][ T9265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.266574][ T9284] netlink: 'syz.9.1380': attribute type 21 has an invalid length. [ 267.490443][ T9330] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1398'. [ 267.790223][ T9338] veth1_macvtap: left promiscuous mode [ 267.832813][ T9338] macsec0: entered allmulticast mode [ 267.859625][ T9339] veth1_macvtap: entered promiscuous mode [ 267.868933][ T9339] veth1_macvtap: entered allmulticast mode [ 267.879429][ T9339] macsec0: entered promiscuous mode [ 268.482030][ T9358] netlink: 'syz.9.1408': attribute type 9 has an invalid length. [ 268.510956][ T9358] netlink: 211924 bytes leftover after parsing attributes in process `syz.9.1408'. [ 268.522439][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 269.385709][ T9379] netlink: 'syz.9.1419': attribute type 1 has an invalid length. [ 269.901793][ T9396] netlink: 'syz.4.1426': attribute type 49 has an invalid length. [ 270.287367][ T9408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1431'. [ 270.353767][ T9415] macsec0: entered promiscuous mode [ 270.363329][ T9414] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 270.392818][ T9415] macsec0: entered allmulticast mode [ 270.494192][ T9415] veth1_macvtap: entered allmulticast mode [ 270.512507][ T9411] veth1_macvtap: left allmulticast mode [ 270.531537][ T9411] veth1_macvtap: left promiscuous mode [ 270.541258][ T9411] macsec0: left promiscuous mode [ 271.017291][ T9431] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1443'. [ 271.040296][ T9431] netlink: 6200 bytes leftover after parsing attributes in process `syz.4.1443'. [ 271.064456][ T9431] netlink: 126 bytes leftover after parsing attributes in process `syz.4.1443'. [ 271.113967][ T9431] tc_dump_action: action bad kind [ 272.061946][ T9448] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1450'. [ 272.559883][ T9452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1452'. [ 272.565102][ T9454] veth1_macvtap: left promiscuous mode [ 272.590851][ T9454] macsec0: entered allmulticast mode [ 272.632056][ T9458] veth1_macvtap: entered promiscuous mode [ 272.652849][ T9458] veth1_macvtap: entered allmulticast mode [ 272.666356][ T9458] macsec0: entered promiscuous mode [ 273.407236][ T9481] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 273.447283][ T9481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.469439][ T9481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.492676][ T9481] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 273.663673][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 273.718358][ T9498] netlink: 'syz.9.1473': attribute type 29 has an invalid length. [ 273.783746][ T9498] netlink: 'syz.9.1473': attribute type 29 has an invalid length. [ 273.814477][ T9498] netlink: 500 bytes leftover after parsing attributes in process `syz.9.1473'. [ 273.860330][ T9498] unsupported nla_type 58 [ 274.690706][ T9524] netlink: 'syz.0.1486': attribute type 29 has an invalid length. [ 274.767024][ T9528] netlink: 'syz.0.1486': attribute type 29 has an invalid length. [ 274.814231][ T9524] netlink: 'syz.0.1486': attribute type 29 has an invalid length. [ 274.853269][ T9528] netlink: 'syz.0.1486': attribute type 29 has an invalid length. [ 275.220973][ T9541] netlink: 'syz.0.1494': attribute type 13 has an invalid length. [ 275.241917][ T9541] netlink: 'syz.0.1494': attribute type 17 has an invalid length. [ 275.508986][ T9541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.818132][ T9581] netlink: 'syz.0.1512': attribute type 3 has an invalid length. [ 276.845287][ T9581] netlink: 201332 bytes leftover after parsing attributes in process `syz.0.1512'. [ 278.037811][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1523'. [ 278.059660][ T9605] netlink: 15478 bytes leftover after parsing attributes in process `syz.4.1524'. [ 278.336237][ T9614] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.342933][ T9614] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.351101][ T9612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.369059][ T9612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.450942][ T9612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.500285][ T9612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.480456][ T9658] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1546'. [ 280.734255][ T9670] netlink: 'syz.4.1553': attribute type 21 has an invalid length. [ 280.742804][ T9670] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1553'. [ 280.792874][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'. [ 280.824247][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'. [ 280.847832][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'. [ 280.906429][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'. [ 281.361911][ T9690] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1560'. [ 281.724528][ T9703] netlink: 'syz.9.1566': attribute type 21 has an invalid length. [ 281.819851][ T9703] netlink: 176 bytes leftover after parsing attributes in process `syz.9.1566'. [ 282.501378][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.694514][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.812803][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.992641][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.536101][ T9737] __nla_validate_parse: 1 callbacks suppressed [ 283.536122][ T9737] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1583'. [ 283.645750][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 283.869786][ T49] bridge_slave_1: left allmulticast mode [ 283.918145][ T49] bridge_slave_1: left promiscuous mode [ 283.945667][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.087470][ T49] bridge_slave_0: left promiscuous mode [ 284.124836][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.293742][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1587'. [ 284.315447][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.326249][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.334991][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.347759][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.356010][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.522982][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.574915][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.600669][ T49] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 285.614120][ T49] bond0 (unregistering): Released all slaves [ 285.633116][ T9748] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1586'. [ 286.275152][ T49] hsr_slave_0: left promiscuous mode [ 286.281535][ T49] hsr_slave_1: left promiscuous mode [ 286.302145][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.326848][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.376340][ T49] veth1_macvtap: left allmulticast mode [ 286.382323][ T49] veth1_macvtap: left promiscuous mode [ 286.413729][ T49] veth0_macvtap: left promiscuous mode [ 286.419481][ T49] veth1_vlan: left promiscuous mode [ 286.434275][ T49] veth0_vlan: left promiscuous mode [ 286.459052][ T5879] Bluetooth: hci2: command tx timeout [ 286.750418][ T9793] netlink: 'syz.2.1606': attribute type 25 has an invalid length. [ 286.773710][ T9793] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1606'. [ 287.039696][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.065812][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.075954][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.117065][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.125919][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.348086][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.364461][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.372666][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.387641][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.397327][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.571196][ T49] team0 (unregistering): Port device team_slave_1 removed [ 287.616532][ T49] team0 (unregistering): Port device team_slave_0 removed [ 288.244565][ T9811] netlink: 'syz.9.1613': attribute type 7 has an invalid length. [ 288.686266][ T9813] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1614'. [ 288.703705][ T9813] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1614'. [ 289.173804][ T5879] Bluetooth: hci1: command tx timeout [ 289.471869][ T8593] tipc: Subscription rejected, illegal request [ 289.486114][ T5879] Bluetooth: hci3: command tx timeout [ 289.745467][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.755576][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.772899][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.809543][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.825034][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.996789][ T9797] chnl_net:caif_netlink_parms(): no params data found [ 290.025553][ T9837] netlink: 'syz.2.1622': attribute type 3 has an invalid length. [ 290.057473][ T9837] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1622'. [ 290.217864][ T9803] chnl_net:caif_netlink_parms(): no params data found [ 290.752709][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.770048][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.777615][ T9797] bridge_slave_0: entered allmulticast mode [ 290.785732][ T9797] bridge_slave_0: entered promiscuous mode [ 290.798657][ T9858] netlink: 'syz.9.1630': attribute type 2 has an invalid length. [ 290.808539][ T9858] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1630'. [ 290.924821][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.957161][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.970029][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.978003][ T9797] bridge_slave_1: entered allmulticast mode [ 290.986799][ T9797] bridge_slave_1: entered promiscuous mode [ 291.080663][ T9862] netlink: 'syz.2.1631': attribute type 9 has an invalid length. [ 291.089414][ T9862] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1631'. [ 291.120230][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.181147][ T9797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.222277][ T9797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.244950][ T5879] Bluetooth: hci1: command tx timeout [ 291.480006][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.563851][ T5879] Bluetooth: hci3: command tx timeout [ 291.618984][ T9803] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.627004][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.636651][ T9803] bridge_slave_0: entered allmulticast mode [ 291.645142][ T9803] bridge_slave_0: entered promiscuous mode [ 291.736759][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.753830][ T9803] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.761811][ T9803] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.769560][ T9803] bridge_slave_1: entered allmulticast mode [ 291.781422][ T9803] bridge_slave_1: entered promiscuous mode [ 291.837137][ T9797] team0: Port device team_slave_0 added [ 291.886570][ T5879] Bluetooth: hci2: command tx timeout [ 291.916034][ T9803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.949507][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1639'. [ 291.970161][ T9797] team0: Port device team_slave_1 added [ 292.047012][ T9803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.089650][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.113526][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.165732][ T9797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.234299][ T9884] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.1641'. [ 292.254187][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.273668][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.371666][ T9797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.709043][ T9803] team0: Port device team_slave_0 added [ 292.785996][ T9797] hsr_slave_0: entered promiscuous mode [ 292.804375][ T9797] hsr_slave_1: entered promiscuous mode [ 292.811075][ T9797] debugfs: 'hsr0' already exists in 'hsr' [ 292.865501][ T9797] Cannot create hsr debugfs directory [ 293.209485][ T9803] team0: Port device team_slave_1 added [ 293.326328][ T5879] Bluetooth: hci1: command tx timeout [ 293.478072][ T9829] chnl_net:caif_netlink_parms(): no params data found [ 293.500468][ T9803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.520712][ T9803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.577311][ T9803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.608051][ T9803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.615931][ T9803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.649823][ T5879] Bluetooth: hci3: command tx timeout [ 293.663110][ T9803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.938489][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.963663][ T5879] Bluetooth: hci2: command tx timeout [ 294.186402][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.721399][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.416304][ T5879] Bluetooth: hci1: command tx timeout [ 295.732795][ T5879] Bluetooth: hci3: command tx timeout [ 295.863336][ T9803] hsr_slave_0: entered promiscuous mode [ 295.876876][ T9803] hsr_slave_1: entered promiscuous mode [ 295.893199][ T9803] debugfs: 'hsr0' already exists in 'hsr' [ 295.905156][ T9803] Cannot create hsr debugfs directory [ 295.962951][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.044084][ T5879] Bluetooth: hci2: command tx timeout [ 296.070298][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.078938][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.089187][ T9829] bridge_slave_0: entered allmulticast mode [ 296.098396][ T9829] bridge_slave_0: entered promiscuous mode [ 296.117948][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.130679][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.138701][ T9829] bridge_slave_1: entered allmulticast mode [ 296.147086][ T9829] bridge_slave_1: entered promiscuous mode [ 296.249541][ T9935] netlink: 'syz.2.1662': attribute type 2 has an invalid length. [ 296.262405][ T9935] netlink: 'syz.2.1662': attribute type 8 has an invalid length. [ 296.271452][ T9935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1662'. [ 296.368698][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.758147][ T9938] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1664'. [ 296.803666][ T9938] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1664'. [ 296.819723][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.191373][ T9829] team0: Port device team_slave_0 added [ 297.291096][ T9829] team0: Port device team_slave_1 added [ 297.435084][ T9952] netlink: 'syz.2.1671': attribute type 2 has an invalid length. [ 297.442914][ T9952] netlink: 'syz.2.1671': attribute type 8 has an invalid length. [ 297.484024][ T9952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1671'. [ 297.505991][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.554014][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.607452][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.777287][ T49] bridge_slave_1: left allmulticast mode [ 297.790110][ T49] bridge_slave_1: left promiscuous mode [ 297.803576][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.847590][ T49] bridge_slave_0: left allmulticast mode [ 297.873726][ T49] bridge_slave_0: left promiscuous mode [ 297.881516][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.944387][ T49] bridge_slave_1: left allmulticast mode [ 297.957494][ T49] bridge_slave_1: left promiscuous mode [ 297.978922][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.032640][ T49] bridge_slave_0: left allmulticast mode [ 298.045284][ T49] bridge_slave_0: left promiscuous mode [ 298.061236][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.139475][ T5879] Bluetooth: hci2: command tx timeout [ 298.318868][ T9958] netlink: 'syz.9.1674': attribute type 3 has an invalid length. [ 298.329900][ T9958] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.1674'. [ 298.652785][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.668137][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.678673][ T49] bond0 (unregistering): Released all slaves [ 298.966736][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.979139][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.989790][ T49] bond0 (unregistering): Released all slaves [ 299.011948][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.028243][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.077415][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.101152][ T9960] netlink: 211576 bytes leftover after parsing attributes in process `syz.2.1675'. [ 299.308128][ T9964] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 299.701355][ T9829] hsr_slave_0: entered promiscuous mode [ 299.716977][ T9829] hsr_slave_1: entered promiscuous mode [ 299.732683][ T9829] debugfs: 'hsr0' already exists in 'hsr' [ 299.739325][ T9829] Cannot create hsr debugfs directory [ 300.250908][ T9797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.268491][ T9797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.332050][ T9797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.377621][ T9797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.571564][ T49] hsr_slave_0: left promiscuous mode [ 300.579528][ T49] hsr_slave_1: left promiscuous mode [ 300.586573][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.595805][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.604264][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.611655][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.625315][ T49] hsr_slave_0: left promiscuous mode [ 300.631378][ T49] hsr_slave_1: left promiscuous mode [ 300.637792][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.645498][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.655932][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.663336][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.690084][ T49] veth1_macvtap: left allmulticast mode [ 300.695868][ T49] veth1_macvtap: left promiscuous mode [ 300.701391][ T49] veth0_macvtap: left promiscuous mode [ 300.707220][ T49] veth1_vlan: left promiscuous mode [ 300.712847][ T49] veth0_vlan: left promiscuous mode [ 300.719366][ T49] veth0_macvtap: left promiscuous mode [ 300.725741][ T49] veth1_vlan: left promiscuous mode [ 300.731046][ T49] veth0_vlan: left promiscuous mode [ 301.268943][ T49] team0 (unregistering): Port device team_slave_1 removed [ 301.313640][ T49] team0 (unregistering): Port device team_slave_0 removed [ 302.025892][ T49] team0 (unregistering): Port device team_slave_1 removed [ 302.069167][ T49] team0 (unregistering): Port device team_slave_0 removed [ 302.621117][ T9797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.667856][ T9797] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.692409][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.700157][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.737417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.744653][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.856007][ T9803] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 302.878060][ T9803] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.890592][ T9803] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.930756][ T9803] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 303.269945][ T9803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.307746][ T9797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.327386][ T9803] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.358869][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.366107][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.403038][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.410284][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.523357][ T9829] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.535639][ T9829] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.551833][ T9829] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.564965][ T9829] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.584733][ T9797] veth0_vlan: entered promiscuous mode [ 303.612385][ T9797] veth1_vlan: entered promiscuous mode [ 303.722649][ T9797] veth0_macvtap: entered promiscuous mode [ 303.748471][ T9797] veth1_macvtap: entered promiscuous mode [ 303.799936][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.815599][ T9829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.834678][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.873075][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.883140][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.910072][ T9829] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.925357][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.938437][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.972695][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.979995][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.996403][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.003793][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.096347][ T9803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.171695][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.194938][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.257241][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.269841][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.891549][ T9829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.998343][T10020] netlink: 830 bytes leftover after parsing attributes in process `syz.9.1682'. [ 305.038787][T10022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1683'. [ 305.130116][ T9803] veth0_vlan: entered promiscuous mode [ 305.178310][ T9803] veth1_vlan: entered promiscuous mode [ 305.358954][ T9803] veth0_macvtap: entered promiscuous mode [ 305.382598][T10025] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1684'. [ 305.456483][ T9803] veth1_macvtap: entered promiscuous mode [ 305.512775][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.605054][ T9803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.671794][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.710660][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.738437][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.762539][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.080568][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.141348][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.304220][ T8593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.324259][ T8593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.339723][ T9829] veth0_vlan: entered promiscuous mode [ 306.410218][ T9829] veth1_vlan: entered promiscuous mode [ 306.556270][T10051] netlink: 'syz.2.1695': attribute type 4 has an invalid length. [ 306.557353][ T9829] veth0_macvtap: entered promiscuous mode [ 306.584101][ T9829] veth1_macvtap: entered promiscuous mode [ 306.610850][T10051] netlink: 'syz.2.1695': attribute type 10 has an invalid length. [ 306.721809][T10051] team0: Port device dummy0 added [ 306.742797][T10055] netlink: 'syz.9.1696': attribute type 1 has an invalid length. [ 306.803573][T10055] netlink: 17 bytes leftover after parsing attributes in process `syz.9.1696'. [ 306.830814][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.957583][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.011007][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.050220][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.100875][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.135958][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.418196][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.464510][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.582187][ T8593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.611633][ T8593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.863239][T10088] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1711'. [ 309.285897][T10112] netlink: 'syz.7.1720': attribute type 11 has an invalid length. [ 309.312229][T10112] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1720'. [ 309.337634][ T5879] Bluetooth: hci2: unexpected event 0x3d length: 151 > 14 [ 309.353181][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 309.407616][T10118] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1722'. [ 309.449370][T10118] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1722'. [ 309.956003][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1732'. [ 310.274641][T10146] netlink: 'syz.9.1736': attribute type 21 has an invalid length. [ 310.560158][T10152] tap0: tun_chr_ioctl cmd 1074025675 [ 310.590073][T10152] tap0: persist enabled [ 310.610408][T10152] tap0: tun_chr_ioctl cmd 1074025675 [ 310.634114][T10152] tap0: persist enabled [ 310.684776][T10156] netlink: 'syz.9.1741': attribute type 4 has an invalid length. [ 310.729854][T10156] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1741'. [ 311.916603][T10184] netlink: 'syz.2.1754': attribute type 9 has an invalid length. [ 311.957637][T10184] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1754'. [ 312.365705][T10202] netlink: 1030 bytes leftover after parsing attributes in process `syz.9.1760'. [ 312.722073][T10217] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1768'. [ 312.902837][T10223] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1771'. [ 312.935115][T10225] netlink: 'syz.6.1772': attribute type 10 has an invalid length. [ 312.943128][T10225] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.1772'. [ 313.209176][T10234] netlink: 'syz.9.1777': attribute type 3 has an invalid length. [ 313.243603][T10234] netlink: 'syz.9.1777': attribute type 4 has an invalid length. [ 313.285999][T10234] netlink: 9067 bytes leftover after parsing attributes in process `syz.9.1777'. [ 313.852860][T10259] netlink: 'syz.9.1789': attribute type 29 has an invalid length. [ 313.888807][T10259] netlink: 'syz.9.1789': attribute type 29 has an invalid length. [ 313.918758][T10259] netlink: 'syz.9.1789': attribute type 29 has an invalid length. [ 313.948016][T10259] netlink: 'syz.9.1789': attribute type 29 has an invalid length. [ 314.301532][T10276] netlink: 'syz.6.1796': attribute type 25 has an invalid length. [ 314.363685][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 314.433600][T10278] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1797'. [ 314.476470][T10278] netlink: zone id is out of range [ 314.482111][T10280] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1798'. [ 314.513090][T10278] netlink: zone id is out of range [ 314.533503][T10278] netlink: zone id is out of range [ 314.544744][T10278] netlink: zone id is out of range [ 314.551622][T10278] netlink: zone id is out of range [ 314.557763][T10278] netlink: zone id is out of range [ 314.587801][T10278] netlink: zone id is out of range [ 314.609054][T10278] netlink: zone id is out of range [ 314.631350][T10278] netlink: zone id is out of range [ 314.638663][T10278] netlink: zone id is out of range [ 315.260082][T10306] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 316.421371][T10341] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1833'. [ 316.680658][T10350] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.1829'. [ 316.897842][T10358] netlink: 14453 bytes leftover after parsing attributes in process `syz.2.1831'. [ 317.315232][T10374] validate_nla: 4 callbacks suppressed [ 317.315255][T10374] netlink: 'syz.2.1841': attribute type 10 has an invalid length. [ 317.411327][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.421123][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.189397][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 319.899347][T10463] netlink: 'syz.6.1882': attribute type 39 has an invalid length. [ 320.416393][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 321.184109][T10485] wg0 speed is unknown, defaulting to 1000 [ 321.197247][T10485] wg0 speed is unknown, defaulting to 1000 [ 321.212781][T10485] wg0 speed is unknown, defaulting to 1000 [ 321.279458][T10485] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 321.362806][T10485] wg0 speed is unknown, defaulting to 1000 [ 321.406977][T10485] wg0 speed is unknown, defaulting to 1000 [ 321.422206][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1897'. [ 321.452560][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1897'. [ 321.470865][T10485] wg0 speed is unknown, defaulting to 1000 [ 321.512341][T10485] wg0 speed is unknown, defaulting to 1000 [ 321.552674][T10485] wg0 speed is unknown, defaulting to 1000 [ 324.714250][T10544] netlink: 'syz.3.1920': attribute type 29 has an invalid length. [ 324.740784][T10548] netlink: 'syz.3.1920': attribute type 29 has an invalid length. [ 324.777414][T10535] wg0 speed is unknown, defaulting to 1000 [ 324.778511][T10544] netlink: 'syz.3.1920': attribute type 29 has an invalid length. [ 324.831985][T10544] netlink: 'syz.3.1920': attribute type 29 has an invalid length. [ 325.351562][T10566] netlink: 'syz.9.1925': attribute type 10 has an invalid length. [ 325.437278][T10566] batman_adv: batadv0: Adding interface: team0 [ 325.457995][T10566] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.526998][T10566] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 328.472618][T10580] netlink: 'syz.6.1932': attribute type 1 has an invalid length. [ 328.555663][T10582] netlink: 'syz.3.1933': attribute type 10 has an invalid length. [ 328.603472][T10582] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1933'. [ 328.871108][T10595] netlink: 'syz.2.1937': attribute type 3 has an invalid length. [ 328.895712][T10595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1937'. [ 329.079965][T10600] netlink: 'syz.7.1940': attribute type 10 has an invalid length. [ 329.092314][T10600] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.1940'. [ 329.496285][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1948'. [ 330.057501][T10638] netlink: 65055 bytes leftover after parsing attributes in process `syz.9.1957'. [ 330.118714][T10638] tc_dump_action: action bad kind [ 330.404941][T10653] netlink: 'syz.6.1965': attribute type 27 has an invalid length. [ 330.435564][T10653] netlink: 'syz.6.1965': attribute type 1 has an invalid length. [ 330.465835][T10653] bridge0: port 1(bridge_slave_0) entered learning state [ 330.498092][T10655] netlink: 'syz.9.1964': attribute type 10 has an invalid length. [ 330.984519][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1969'. [ 331.561972][T10695] net_ratelimit: 16 callbacks suppressed [ 331.561999][T10695] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 331.574315][T10695] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 332.165520][T10723] netlink: 55631 bytes leftover after parsing attributes in process `syz.9.1994'. [ 332.199918][T10723] netlink: 6324 bytes leftover after parsing attributes in process `syz.9.1994'. [ 332.214019][T10723] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1994'. [ 334.147812][T10790] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2026'. [ 336.309623][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2050'. [ 336.542704][T10854] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2055'. [ 336.586652][T10851] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2055'. [ 336.602268][T10854] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2055'. [ 336.635473][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2055'. [ 336.651616][T10854] netlink: 128092 bytes leftover after parsing attributes in process `syz.6.2055'. [ 337.990803][T10889] openvswitch: netlink: IPv4 tun info is not correct [ 338.869190][T10919] wg0 speed is unknown, defaulting to 1000 [ 340.433329][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.629867][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.915793][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.137566][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.514020][ T12] bridge_slave_1: left allmulticast mode [ 341.519968][ T12] bridge_slave_1: left promiscuous mode [ 341.534189][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.635399][ T12] bridge_slave_0: left allmulticast mode [ 341.641194][ T12] bridge_slave_0: left promiscuous mode [ 341.663870][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.992765][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.005216][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.017988][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.083894][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.126175][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.223758][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.234528][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.243094][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.254958][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.269645][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.422642][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.444072][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.454040][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.465361][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.465388][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.482606][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.489663][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.490947][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.510352][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.521141][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.720347][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.739520][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.757681][ T12] bond0 (unregistering): Released all slaves [ 343.849678][T10985] wg0 speed is unknown, defaulting to 1000 [ 343.937436][T10993] wg0 speed is unknown, defaulting to 1000 [ 344.056957][T10991] wg0 speed is unknown, defaulting to 1000 [ 344.109280][T10989] wg0 speed is unknown, defaulting to 1000 [ 344.283664][ T5184] Bluetooth: hci0: command tx timeout [ 344.364570][ T5184] Bluetooth: hci2: command tx timeout [ 344.526604][ T5184] Bluetooth: hci3: command tx timeout [ 344.609473][ T5184] Bluetooth: hci4: command tx timeout [ 344.775240][T11014] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2129'. [ 344.918675][ T12] hsr_slave_0: left promiscuous mode [ 344.943106][ T12] hsr_slave_1: left promiscuous mode [ 344.951115][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.961842][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.970738][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.983708][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.001820][ T12] veth1_macvtap: left promiscuous mode [ 345.009128][ T12] veth0_macvtap: left promiscuous mode [ 345.015141][ T12] veth1_vlan: left promiscuous mode [ 345.020667][ T12] veth0_vlan: left promiscuous mode [ 345.451425][T11028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2135'. [ 345.594867][T11032] netlink: 'syz.3.2137': attribute type 21 has an invalid length. [ 345.659010][ T12] team0 (unregistering): Port device team_slave_1 removed [ 345.702224][ T12] team0 (unregistering): Port device team_slave_0 removed [ 346.226216][T10985] chnl_net:caif_netlink_parms(): no params data found [ 346.343168][T10993] chnl_net:caif_netlink_parms(): no params data found [ 346.364012][ T5184] Bluetooth: hci0: command tx timeout [ 346.376719][T10991] chnl_net:caif_netlink_parms(): no params data found [ 346.444712][ T5184] Bluetooth: hci2: command tx timeout [ 346.559078][T10989] chnl_net:caif_netlink_parms(): no params data found [ 346.604292][T10985] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.611632][T10985] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.619369][ T5184] Bluetooth: hci3: command tx timeout [ 346.626386][T10985] bridge_slave_0: entered allmulticast mode [ 346.634057][T10985] bridge_slave_0: entered promiscuous mode [ 346.683697][ T5184] Bluetooth: hci4: command tx timeout [ 346.685145][T10985] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.697540][T10985] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.704948][T10985] bridge_slave_1: entered allmulticast mode [ 346.712091][T10985] bridge_slave_1: entered promiscuous mode [ 346.821600][T10993] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.831221][T10993] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.839125][T10993] bridge_slave_0: entered allmulticast mode [ 346.848352][T10993] bridge_slave_0: entered promiscuous mode [ 346.858931][T10985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.880233][T10991] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.887605][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.895314][T10991] bridge_slave_0: entered allmulticast mode [ 346.902511][T10991] bridge_slave_0: entered promiscuous mode [ 346.911050][T10991] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.919473][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.927014][T10991] bridge_slave_1: entered allmulticast mode [ 346.935278][T10991] bridge_slave_1: entered promiscuous mode [ 346.943115][T10993] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.950802][T10993] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.959380][T10993] bridge_slave_1: entered allmulticast mode [ 346.968021][T10993] bridge_slave_1: entered promiscuous mode [ 346.978162][T10985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.132430][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.146839][T10993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.161705][T10985] team0: Port device team_slave_0 added [ 347.175425][T10985] team0: Port device team_slave_1 added [ 347.182569][T10989] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.190026][T10989] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.197708][T10989] bridge_slave_0: entered allmulticast mode [ 347.207381][T10989] bridge_slave_0: entered promiscuous mode [ 347.215641][T10989] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.222767][T10989] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.230986][T10989] bridge_slave_1: entered allmulticast mode [ 347.239789][T10989] bridge_slave_1: entered promiscuous mode [ 347.249078][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.275472][T10993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.392027][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.428311][ T5964] wg0 speed is unknown, defaulting to 1000 [ 347.436234][ T5964] syz0: Port: 1 Link DOWN [ 347.462626][T10989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.477574][T10989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.489538][T10991] team0: Port device team_slave_0 added [ 347.499304][T10993] team0: Port device team_slave_0 added [ 347.519727][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.538544][T10985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.546067][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.573229][T10985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.623084][T10991] team0: Port device team_slave_1 added [ 347.630940][T10993] team0: Port device team_slave_1 added [ 347.657504][T10985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.664990][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.692886][T10985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.719345][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.737218][T10989] team0: Port device team_slave_0 added [ 347.785434][T10989] team0: Port device team_slave_1 added [ 347.807707][T10993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.816124][T10993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.842586][T10993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.857560][T10993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.864674][T10993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.890823][T10993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.916106][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.945675][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.952751][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.980408][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.002018][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.009161][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.036131][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.067284][T10989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.075191][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.103329][T10989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.159374][T10985] hsr_slave_0: entered promiscuous mode [ 348.166847][T10985] hsr_slave_1: entered promiscuous mode [ 348.174201][T10985] debugfs: 'hsr0' already exists in 'hsr' [ 348.180132][T10985] Cannot create hsr debugfs directory [ 348.187011][T10989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.195595][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.225143][T10989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.312257][T10993] hsr_slave_0: entered promiscuous mode [ 348.319235][T10993] hsr_slave_1: entered promiscuous mode [ 348.326684][T10993] debugfs: 'hsr0' already exists in 'hsr' [ 348.333133][T10993] Cannot create hsr debugfs directory [ 348.378001][T10991] hsr_slave_0: entered promiscuous mode [ 348.385262][T10991] hsr_slave_1: entered promiscuous mode [ 348.391652][T10991] debugfs: 'hsr0' already exists in 'hsr' [ 348.397617][T10991] Cannot create hsr debugfs directory [ 348.443837][ T5184] Bluetooth: hci0: command tx timeout [ 348.523500][ T5184] Bluetooth: hci2: command tx timeout [ 348.542247][T10989] hsr_slave_0: entered promiscuous mode [ 348.548765][T10989] hsr_slave_1: entered promiscuous mode [ 348.555500][T10989] debugfs: 'hsr0' already exists in 'hsr' [ 348.561329][T10989] Cannot create hsr debugfs directory [ 348.683879][ T5184] Bluetooth: hci3: command tx timeout [ 348.737089][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.763686][ T5184] Bluetooth: hci4: command tx timeout [ 348.911131][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.025595][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.115776][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.317272][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.393062][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.501325][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.533122][T10985] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 349.567195][T10985] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 349.592706][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.609705][T10985] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 349.624125][T10985] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 349.820768][ T12] bridge_slave_1: left allmulticast mode [ 349.829336][ T12] bridge_slave_1: left promiscuous mode [ 349.835485][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.848929][ T12] bridge_slave_0: left promiscuous mode [ 349.856424][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.868665][ T12] bridge_slave_1: left allmulticast mode [ 349.875864][ T12] bridge_slave_1: left promiscuous mode [ 349.881558][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.891149][ T12] bridge_slave_0: left promiscuous mode [ 349.897464][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.909787][ T12] bridge_slave_1: left allmulticast mode [ 349.917129][ T12] bridge_slave_1: left promiscuous mode [ 349.922854][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.932491][ T12] bridge_slave_0: left allmulticast mode [ 349.939162][ T12] bridge_slave_0: left promiscuous mode [ 349.945795][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.389732][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.401333][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.414255][ T12] bond0 (unregistering): Released all slaves [ 350.526972][ T5876] Bluetooth: hci0: command tx timeout [ 350.604085][ T5876] Bluetooth: hci2: command tx timeout [ 350.748485][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.759413][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.769210][ T5876] Bluetooth: hci3: command tx timeout [ 350.779884][ T12] bond0 (unregistering): Released all slaves [ 350.848288][ T5876] Bluetooth: hci4: command tx timeout [ 351.101502][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.113971][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.126743][ T12] bond0 (unregistering): Released all slaves [ 351.350193][T10985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.407576][T10985] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.459355][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.466643][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.492519][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.499714][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.911899][T10991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.927155][T10991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.940558][T10991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.983161][T10991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.075527][T10985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.132428][ T12] hsr_slave_0: left promiscuous mode [ 352.141655][ T12] hsr_slave_1: left promiscuous mode [ 352.152751][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.160752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.172396][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.180239][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.188710][ T12] batman_adv: batadv0: Removing interface: team0 [ 352.201194][ T12] hsr_slave_0: left promiscuous mode [ 352.207913][ T12] hsr_slave_1: left promiscuous mode [ 352.224716][ T12] hsr_slave_0: left promiscuous mode [ 352.230862][ T12] hsr_slave_1: left promiscuous mode [ 352.237356][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.246747][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.256051][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.263904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.299513][ T12] veth1_macvtap: left promiscuous mode [ 352.305281][ T12] veth0_macvtap: left promiscuous mode [ 352.310905][ T12] veth1_vlan: left promiscuous mode [ 352.316950][ T12] veth0_vlan: left promiscuous mode [ 352.322950][ T12] veth1_macvtap: left allmulticast mode [ 352.328823][ T12] veth1_macvtap: left promiscuous mode [ 352.334626][ T12] veth0_macvtap: left promiscuous mode [ 352.340238][ T12] veth1_vlan: left promiscuous mode [ 352.345731][ T12] veth0_vlan: left promiscuous mode [ 352.352445][ T12] veth1_macvtap: left promiscuous mode [ 352.358056][ T12] veth0_macvtap: left promiscuous mode [ 352.363884][ T12] veth1_vlan: left promiscuous mode [ 352.369273][ T12] veth0_vlan: left promiscuous mode [ 353.006221][ T12] team0 (unregistering): Port device team_slave_1 removed [ 353.054719][ T12] team0 (unregistering): Port device team_slave_0 removed [ 353.813728][ T12] team0 (unregistering): Port device team_slave_1 removed [ 353.859058][ T12] team0 (unregistering): Port device team_slave_0 removed [ 354.130072][ T12] team0 (unregistering): Port device dummy0 removed [ 354.580103][ T12] team0 (unregistering): Port device team_slave_1 removed [ 354.621406][ T12] team0 (unregistering): Port device team_slave_0 removed [ 355.330241][T10991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.427109][T10991] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.486567][T10993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 355.509635][T10993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 355.534593][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.542200][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.556997][T10993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 355.593112][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.600329][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.624990][T10993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 355.750175][T10985] veth0_vlan: entered promiscuous mode [ 355.799931][T10985] veth1_vlan: entered promiscuous mode [ 355.832823][T10989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.873309][T10989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.911379][T10989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.951120][T10989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.064021][T10985] veth0_macvtap: entered promiscuous mode [ 356.117773][T10985] veth1_macvtap: entered promiscuous mode [ 356.161486][ T12] ------------[ cut here ]------------ [ 356.167870][ T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0 [ 356.177655][ T12] Modules linked in: [ 356.181998][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 356.192082][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.202581][ T12] Workqueue: netns cleanup_net [ 356.208012][ T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 356.213841][ T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb 6d 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 39 28 e1 f7 e8 04 fb 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 f6 fa 9c f7 90 0f 0b 90 e9 60 fe ff ff [ 356.234048][ T12] RSP: 0018:ffffc90000117898 EFLAGS: 00010293 [ 356.240541][ T12] RAX: ffffffff8a22c3fc RBX: ffff888057150000 RCX: ffff88801ce95a00 [ 356.248678][ T12] RDX: 0000000000000000 RSI: ffffffff8dba9339 RDI: ffff88801ce95a00 [ 356.256907][ T12] RBP: ffffc900001179b0 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486 [ 356.265156][ T12] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: ffffffff8f632bc0 [ 356.273469][ T12] R13: 1ffff92000022f40 R14: ffff888057151480 R15: dffffc0000000000 [ 356.277162][T10993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.281751][ T12] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 356.298312][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.305388][ T12] CR2: 00007f99fe6cfa40 CR3: 000000003085c000 CR4: 00000000003526f0 [ 356.314070][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.318093][T10989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.322250][ T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 356.337424][ T12] Call Trace: [ 356.340926][ T12] [ 356.344097][ T12] xfrm_net_exit+0x2d/0x70 [ 356.348556][ T12] ops_undo_list+0x49a/0x990 [ 356.351617][T10985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.353280][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 356.366462][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 356.371803][ T12] cleanup_net+0x4c5/0x800 [ 356.377199][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 356.382257][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.387641][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 356.393710][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 356.400010][ T12] process_scheduled_works+0xae1/0x17b0 [ 356.402561][T10993] 8021q: adding VLAN 0 to HW filter on device team0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 356.406190][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.418710][ T12] worker_thread+0x8a0/0xda0 [ 356.423664][ T12] kthread+0x70e/0x8a0 [ 356.427801][ T12] ? __pfx_worker_thread+0x10/0x10 [ 356.433042][ T12] ? __pfx_kthread+0x10/0x10 [ 356.437835][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.443080][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.448960][ T12] ? __pfx_kthread+0x10/0x10 [ 356.453752][ T12] ret_from_fork+0x436/0x7d0 [ 356.459291][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 356.464927][ T12] ? __switch_to_asm+0x39/0x70 [ 356.471775][ T12] ? __switch_to_asm+0x33/0x70 [ 356.476794][ T12] ? __pfx_kthread+0x10/0x10 [ 356.481865][ T12] ret_from_fork_asm+0x1a/0x30 [ 356.486768][ T12] [ 356.489821][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 356.497228][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 356.506539][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.516702][ T12] Workqueue: netns cleanup_net [ 356.521482][ T12] Call Trace: [ 356.524766][ T12] [ 356.527794][ T12] dump_stack_lvl+0x99/0x250 [ 356.532417][ T12] ? __asan_memcpy+0x40/0x70 [ 356.537133][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.542382][ T12] ? __pfx__printk+0x10/0x10 [ 356.547037][ T12] vpanic+0x281/0x750 [ 356.551176][ T12] ? __pfx__printk+0x10/0x10 [ 356.555962][ T12] ? __pfx_vpanic+0x10/0x10 [ 356.560562][ T12] ? is_bpf_text_address+0x292/0x2b0 [ 356.566131][ T12] panic+0xb9/0xc0 [ 356.569944][ T12] ? __pfx_panic+0x10/0x10 [ 356.574402][ T12] __warn+0x31b/0x4b0 [ 356.578431][ T12] ? xfrm_state_fini+0x26d/0x2f0 [ 356.583406][ T12] ? xfrm_state_fini+0x26d/0x2f0 [ 356.588505][ T12] report_bug+0x2be/0x4f0 [ 356.592866][ T12] ? xfrm_state_fini+0x26d/0x2f0 [ 356.598104][ T12] ? xfrm_state_fini+0x26d/0x2f0 [ 356.603094][ T12] ? xfrm_state_fini+0x26f/0x2f0 [ 356.608136][ T12] handle_bug+0x84/0x160 [ 356.612392][ T12] exc_invalid_op+0x1a/0x50 [ 356.616965][ T12] asm_exc_invalid_op+0x1a/0x20 [ 356.621822][ T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 356.627385][ T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb 6d 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 39 28 e1 f7 e8 04 fb 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 f6 fa 9c f7 90 0f 0b 90 e9 60 fe ff ff [ 356.647345][ T12] RSP: 0018:ffffc90000117898 EFLAGS: 00010293 [ 356.653426][ T12] RAX: ffffffff8a22c3fc RBX: ffff888057150000 RCX: ffff88801ce95a00 [ 356.661682][ T12] RDX: 0000000000000000 RSI: ffffffff8dba9339 RDI: ffff88801ce95a00 [ 356.669688][ T12] RBP: ffffc900001179b0 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486 [ 356.678071][ T12] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: ffffffff8f632bc0 [ 356.686356][ T12] R13: 1ffff92000022f40 R14: ffff888057151480 R15: dffffc0000000000 [ 356.694376][ T12] ? xfrm_state_fini+0x26c/0x2f0 [ 356.699522][ T12] ? xfrm_state_fini+0x26c/0x2f0 [ 356.704743][ T12] xfrm_net_exit+0x2d/0x70 [ 356.709253][ T12] ops_undo_list+0x49a/0x990 [ 356.713888][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 356.719041][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 356.724373][ T12] cleanup_net+0x4c5/0x800 [ 356.728805][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 356.733753][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.738962][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 356.744877][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 356.750646][ T12] process_scheduled_works+0xae1/0x17b0 [ 356.756399][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.762397][ T12] worker_thread+0x8a0/0xda0 [ 356.767111][ T12] kthread+0x70e/0x8a0 [ 356.771296][ T12] ? __pfx_worker_thread+0x10/0x10 [ 356.776409][ T12] ? __pfx_kthread+0x10/0x10 [ 356.781012][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.786261][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.791656][ T12] ? __pfx_kthread+0x10/0x10 [ 356.796286][ T12] ret_from_fork+0x436/0x7d0 [ 356.800926][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 356.806177][ T12] ? __switch_to_asm+0x39/0x70 [ 356.810963][ T12] ? __switch_to_asm+0x33/0x70 [ 356.815910][ T12] ? __pfx_kthread+0x10/0x10 [ 356.820640][ T12] ret_from_fork_asm+0x1a/0x30 [ 356.825546][ T12] [ 356.828935][ T12] Kernel Offset: disabled [ 356.833479][ T12] Rebooting in 86400 seconds..