last executing test programs: 2.561914765s ago: executing program 2 (id=3555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x2f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) 1.457466548s ago: executing program 2 (id=3563): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1.457371428s ago: executing program 0 (id=3564): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1.424658939s ago: executing program 3 (id=3565): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x2, 0x0, 0x0, 0x13, 0x1, 0x2}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x1, 0x9}, 0x28) 1.3868198s ago: executing program 1 (id=3566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.321588781s ago: executing program 2 (id=3567): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a5b0500850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.311354772s ago: executing program 0 (id=3568): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 1.261214013s ago: executing program 3 (id=3569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x2cb6) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESHEX], 0xffdd) 1.018068388s ago: executing program 0 (id=3570): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 872.217071ms ago: executing program 1 (id=3571): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d00000000000000000000000a"], 0x0, 0x3e, 0x0, 0x1}, 0x28) 789.885083ms ago: executing program 0 (id=3572): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0xfffffffffffffe00}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), 0x0, 0x3, r2}, 0x38) 735.355284ms ago: executing program 3 (id=3573): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8650bf77ffef8b55}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 625.142546ms ago: executing program 1 (id=3574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x6}]}, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 484.14111ms ago: executing program 1 (id=3575): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) 437.66999ms ago: executing program 3 (id=3576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 412.855131ms ago: executing program 3 (id=3577): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400, 0x0, 0x0, 0x7, 0x0, 0x10001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000005c0)=""/249, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) 373.576571ms ago: executing program 2 (id=3578): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 313.642023ms ago: executing program 0 (id=3579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) 313.496213ms ago: executing program 1 (id=3580): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000050000009500000000000000c3492895246348bf79855db116f785cc6b65"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xffdd) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x18) 222.375355ms ago: executing program 2 (id=3581): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 135.031277ms ago: executing program 3 (id=3582): r0 = getpid() r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 33.561239ms ago: executing program 1 (id=3583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 33.410139ms ago: executing program 2 (id=3584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="200000000102"}) 0s ago: executing program 0 (id=3585): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd80"], 0x0, 0x86}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3e) kernel console output (not intermixed with test programs): netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.031138][T12927] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.038480][T12927] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.065942][T12968] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2318'. [ 709.073528][T12927] bridge_slave_0: entered allmulticast mode [ 709.100269][T12927] bridge_slave_0: entered promiscuous mode [ 709.118060][T12970] netlink: 'syz.3.2319': attribute type 10 has an invalid length. [ 709.180708][T12970] team0: Port device netdevsim0 added [ 709.364910][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.382953][T12927] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.398559][T12927] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.409010][T12927] bridge_slave_1: entered allmulticast mode [ 709.428580][T12927] bridge_slave_1: entered promiscuous mode [ 709.444804][T12973] netlink: 'syz.3.2319': attribute type 10 has an invalid length. [ 709.577241][T12973] team0: Port device netdevsim0 removed [ 709.603917][T12973] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 709.615479][T12754] Bluetooth: hci4: command tx timeout [ 709.711470][T12975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2319'. [ 709.783212][T12927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.812364][T12927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.896558][T12927] team0: Port device team_slave_0 added [ 709.993530][T12927] team0: Port device team_slave_1 added [ 710.130960][T12985] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2322'. [ 710.144720][T12980] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2322'. [ 710.160088][T12927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.167120][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.195734][T12927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.212834][T12927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.220910][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.249018][T12927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.690242][T12754] Bluetooth: hci4: command tx timeout [ 713.779045][T12754] Bluetooth: hci4: command tx timeout [ 714.590717][T12927] hsr_slave_0: entered promiscuous mode [ 714.600307][T12927] hsr_slave_1: entered promiscuous mode [ 714.608317][T12927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.616808][T12927] Cannot create hsr debugfs directory [ 714.638486][T13002] netlink: 'syz.3.2330': attribute type 10 has an invalid length. [ 714.669078][T13002] bond0: (slave netdevsim0): Releasing backup interface [ 714.685680][T13002] team0: Port device netdevsim0 added [ 714.701279][T13005] netlink: 'syz.3.2330': attribute type 10 has an invalid length. [ 714.724315][T13005] team0: Port device netdevsim0 removed [ 714.753952][T13005] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 714.778525][T13013] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2330'. [ 715.100849][T13029] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2332'. [ 715.358211][T13035] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2334'. [ 716.360534][T13033] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2334'. [ 719.497717][T13068] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 719.542739][T13068] team0: Port device netdevsim0 added [ 719.580109][T13069] netlink: 'syz.1.2339': attribute type 10 has an invalid length. [ 719.657832][T13069] team0: Port device netdevsim0 removed [ 719.718154][T13072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2339'. [ 720.142809][T13087] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2343'. [ 720.771575][T13090] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2344'. [ 720.829126][T13089] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2344'. [ 722.113661][T13097] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2346'. [ 722.137485][T13102] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2346'. [ 722.483430][T13109] netlink: 'syz.2.2350': attribute type 10 has an invalid length. [ 722.533065][T13109] team0: Port device netdevsim0 added [ 722.585589][T13109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2350'. [ 722.616290][T13113] netlink: 'syz.2.2350': attribute type 10 has an invalid length. [ 725.429248][T13113] team0: Port device netdevsim0 removed [ 725.654524][T12927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 725.691169][T12927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 725.746619][T13128] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2353'. [ 725.809144][T13125] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2353'. [ 725.820978][T13127] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2354'. [ 725.872021][T12927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 726.360476][T12927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 727.028510][ T42] hsr_slave_0: left promiscuous mode [ 727.061089][ T42] hsr_slave_1: left promiscuous mode [ 728.134478][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.146672][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.160963][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.168920][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.181076][ T42] hsr0: left allmulticast mode [ 730.186179][ T42] bridge0: port 3(hsr0) entered disabled state [ 730.209744][ T42] bridge_slave_1: left allmulticast mode [ 730.222450][ T42] bridge_slave_1: left promiscuous mode [ 730.228333][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.244700][ T42] bridge_slave_0: left allmulticast mode [ 730.257419][ T42] bridge_slave_0: left promiscuous mode [ 730.266738][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.299943][ T42] veth1_macvtap: left promiscuous mode [ 730.305550][ T42] veth0_macvtap: left promiscuous mode [ 730.313808][ T42] veth1_vlan: left promiscuous mode [ 730.319156][ T42] veth0_vlan: left promiscuous mode [ 731.758697][ T42] team0 (unregistering): Port device team_slave_1 removed [ 731.809450][ T42] team0 (unregistering): Port device team_slave_0 removed [ 732.368948][T13163] netlink: 'syz.3.2361': attribute type 10 has an invalid length. [ 732.418168][T13163] bond0: (slave netdevsim0): Releasing backup interface [ 732.443857][T13163] team0: Port device netdevsim0 added [ 732.466765][T13165] netlink: 'syz.3.2361': attribute type 10 has an invalid length. [ 732.481503][T13165] team0: Port device netdevsim0 removed [ 732.503503][T13165] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 732.537459][T13167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2361'. [ 732.787266][T13182] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2363'. [ 732.803180][T13179] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2363'. [ 732.916901][T12927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.019086][T12927] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.126860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.134194][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.155770][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.163116][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.195390][T13186] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2365'. [ 734.760551][T12927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.711204][T12927] veth0_vlan: entered promiscuous mode [ 737.767420][T12927] veth1_vlan: entered promiscuous mode [ 737.834370][T13236] netlink: 'syz.1.2371': attribute type 10 has an invalid length. [ 737.858161][T13236] team0: Port device netdevsim0 added [ 737.873331][T13236] netlink: 'syz.1.2371': attribute type 10 has an invalid length. [ 738.679599][T13236] team0: Port device netdevsim0 removed [ 738.704256][T13238] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2374'. [ 738.716462][T13237] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2374'. [ 738.738312][T13243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2371'. [ 738.780800][T12927] veth0_macvtap: entered promiscuous mode [ 738.825310][T12927] veth1_macvtap: entered promiscuous mode [ 738.900256][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.930071][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.945988][T13246] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2375'. [ 738.950347][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.990072][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.024380][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.053994][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.085406][T12927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.253357][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.303736][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.354632][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.390910][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.411494][T12927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.442591][T12927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.484340][T12927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.967274][T12927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.979312][T12927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.989012][T12927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.998658][T12927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.148785][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.175593][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.229396][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.245855][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.381137][T13270] netlink: 'syz.3.2382': attribute type 10 has an invalid length. [ 743.455976][T13270] bond0: (slave netdevsim0): Releasing backup interface [ 743.498384][T13270] team0: Port device netdevsim0 added [ 743.564650][T13274] netlink: 'syz.3.2382': attribute type 10 has an invalid length. [ 743.647354][T13274] team0: Port device netdevsim0 removed [ 743.684797][T13274] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 743.719206][T13272] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2305'. [ 743.740998][T13270] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2382'. [ 743.769704][T13280] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2384'. [ 743.816872][T13276] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2384'. [ 744.212311][T13286] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2386'. [ 744.388345][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 744.403688][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 744.427143][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 744.437159][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 744.451590][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 744.459349][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 744.634328][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.014624][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.498093][ T5791] Bluetooth: hci0: command tx timeout [ 747.037887][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.054817][T13309] netlink: 'syz.0.2392': attribute type 10 has an invalid length. [ 747.095904][T13309] team0: Port device netdevsim0 added [ 747.103334][T13310] netlink: 'syz.0.2392': attribute type 10 has an invalid length. [ 747.123352][T13310] team0: Port device netdevsim0 removed [ 747.144036][T13310] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 747.170858][T13314] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2393'. [ 747.210401][T13315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2392'. [ 747.242930][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.728325][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.740333][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.580119][ T5791] Bluetooth: hci0: command tx timeout [ 750.347296][T13326] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2395'. [ 750.474406][T13290] chnl_net:caif_netlink_parms(): no params data found [ 750.650304][ T5791] Bluetooth: hci0: command tx timeout [ 750.713510][T13339] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2397'. [ 751.119555][T13290] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.149538][T13290] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.177385][T13290] bridge_slave_0: entered allmulticast mode [ 751.202380][T13290] bridge_slave_0: entered promiscuous mode [ 751.329916][T13290] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.338998][T13290] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.356899][T13290] bridge_slave_1: entered allmulticast mode [ 751.373102][T13290] bridge_slave_1: entered promiscuous mode [ 751.461009][T13353] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2402'. [ 751.481310][T13352] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2402'. [ 751.561866][T13290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.604284][T13290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.239969][T13368] netlink: 'syz.1.2403': attribute type 10 has an invalid length. [ 752.262504][T13368] team0: Port device netdevsim0 added [ 752.294068][T13369] netlink: 'syz.1.2403': attribute type 10 has an invalid length. [ 752.730127][ T5791] Bluetooth: hci0: command tx timeout [ 753.781492][T13369] team0: Port device netdevsim0 removed [ 753.842807][T13368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2403'. [ 754.012980][T13290] team0: Port device team_slave_0 added [ 754.021388][T13374] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2404'. [ 754.034869][T13290] team0: Port device team_slave_1 added [ 757.900209][T13394] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2413'. [ 757.998704][T13290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.029124][T13290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.109937][T13290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.159209][T13290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.179867][T13290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.242564][T13290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.340106][T13426] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2414'. [ 763.160621][T13425] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2411'. [ 763.236379][T13290] hsr_slave_0: entered promiscuous mode [ 763.249380][T13290] hsr_slave_1: entered promiscuous mode [ 766.275935][T13455] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2417'. [ 767.610145][T13468] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2420'. [ 767.650899][T13472] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2420'. [ 767.883647][T13483] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2428'. [ 770.998239][T13497] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2423'. [ 771.222508][T13507] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2426'. [ 772.842303][T13290] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 772.873990][T13290] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 772.922165][T13290] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 772.972715][T13523] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2431'. [ 773.049448][T13290] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 773.091372][T13526] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2431'. [ 773.150522][T13528] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2432'. [ 773.190751][T13523] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2431'. [ 773.366933][T13534] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2434'. [ 773.412462][T13534] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2434'. [ 773.589459][T13290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.662219][T13290] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.699321][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.707724][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.736487][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.743784][T13402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.784483][T13543] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2435'. [ 773.823340][T13542] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2435'. [ 774.571776][T13290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.800937][T13290] veth0_vlan: entered promiscuous mode [ 774.831931][T13290] veth1_vlan: entered promiscuous mode [ 774.931173][T13290] veth0_macvtap: entered promiscuous mode [ 774.957743][T13290] veth1_macvtap: entered promiscuous mode [ 775.017834][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.050167][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.069875][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.090287][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.110286][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.130240][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.150337][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.179979][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.191758][T13290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.229060][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.259870][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.290117][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.310211][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.330040][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.350030][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.370146][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.399858][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.432094][T13290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.455501][T13290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.479966][T13290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.488892][T13290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.520022][T13290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.473007][T13578] netlink: 'syz.1.2440': attribute type 10 has an invalid length. [ 776.489401][T13578] team0: Port device netdevsim0 added [ 776.526035][ T12] hsr_slave_0: left promiscuous mode [ 777.314012][ T12] hsr_slave_1: left promiscuous mode [ 778.738965][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.751736][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.764208][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.773568][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.785713][ T12] hsr0: left allmulticast mode [ 778.792117][ T12] bridge0: port 3(hsr0) entered disabled state [ 778.822627][ T12] bridge_slave_1: left allmulticast mode [ 778.828656][ T12] bridge_slave_1: left promiscuous mode [ 778.847114][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.866311][ T12] bridge_slave_0: left allmulticast mode [ 778.876078][ T12] bridge_slave_0: left promiscuous mode [ 778.885131][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.916148][ T12] veth1_macvtap: left promiscuous mode [ 778.923229][ T12] veth0_macvtap: left promiscuous mode [ 778.928977][ T12] veth1_vlan: left promiscuous mode [ 778.934811][ T12] veth0_vlan: left promiscuous mode [ 779.662975][ T12] team0 (unregistering): Port device team_slave_1 removed [ 779.723849][ T12] team0 (unregistering): Port device team_slave_0 removed [ 780.307121][T13578] netlink: 'syz.1.2440': attribute type 10 has an invalid length. [ 780.330387][T13578] team0: Port device netdevsim0 removed [ 780.528873][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.586732][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.763617][T13614] __nla_validate_parse: 1 callbacks suppressed [ 780.763653][T13614] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2443'. [ 780.824653][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.848153][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.642804][T13656] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2445'. [ 782.720846][T13654] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2453'. [ 782.752209][T13658] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2444'. [ 782.848577][T13662] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2444'. [ 782.862158][T13658] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2444'. [ 782.879332][T13664] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2448'. [ 782.894589][T13663] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2448'. [ 783.228677][T13668] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2450'. [ 783.743994][T13673] netlink: 'syz.0.2451': attribute type 10 has an invalid length. [ 783.844414][T13673] bond0: (slave netdevsim0): Releasing backup interface [ 783.885525][T13673] team0: Port device netdevsim0 added [ 784.073760][T13674] netlink: 'syz.0.2451': attribute type 10 has an invalid length. [ 784.140149][T13674] team0: Port device netdevsim0 removed [ 784.190587][T13674] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 787.297356][T13694] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2458'. [ 787.316050][T13693] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2458'. [ 787.513286][T13703] netlink: 'syz.3.2461': attribute type 10 has an invalid length. [ 787.529224][T13703] bond0: (slave netdevsim0): Releasing backup interface [ 787.546701][T13703] team0: Port device netdevsim0 added [ 788.367562][T13703] netlink: 'syz.3.2461': attribute type 10 has an invalid length. [ 788.395684][T13703] team0: Port device netdevsim0 removed [ 788.413403][T13703] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 788.423259][T13706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2461'. [ 788.595331][T13711] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2462'. [ 788.747879][T13713] netlink: 'syz.2.2464': attribute type 10 has an invalid length. [ 788.790825][T13713] team0: Port device netdevsim0 added [ 788.799381][T13716] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2463'. [ 788.803248][T13717] netlink: 'syz.2.2464': attribute type 10 has an invalid length. [ 788.876163][T13717] team0: Port device netdevsim0 removed [ 788.891841][T13717] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 788.969311][T13713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2464'. [ 789.139956][T13723] netlink: 'syz.2.2465': attribute type 10 has an invalid length. [ 789.175892][T13723] bond0: (slave netdevsim0): Releasing backup interface [ 789.189348][T13723] team0: Port device netdevsim0 added [ 789.245281][T13724] netlink: 'syz.2.2465': attribute type 10 has an invalid length. [ 789.321732][T13724] team0: Port device netdevsim0 removed [ 789.332141][T13724] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 789.475163][T13732] netlink: 'syz.1.2469': attribute type 10 has an invalid length. [ 789.529568][T13732] team0: Port device netdevsim0 added [ 789.551532][T13730] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2467'. [ 789.562934][T13735] netlink: 'syz.1.2469': attribute type 10 has an invalid length. [ 789.596723][T13735] team0: Port device netdevsim0 removed [ 789.610196][T13736] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2470'. [ 789.625969][T13734] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2470'. [ 789.760204][T13732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2469'. [ 794.584473][T13771] __nla_validate_parse: 5 callbacks suppressed [ 794.584512][T13771] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2482'. [ 794.709023][T13776] netlink: 'syz.3.2483': attribute type 10 has an invalid length. [ 794.759237][T13777] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2485'. [ 794.776267][T13776] bond0: (slave netdevsim0): Releasing backup interface [ 794.871913][T13776] team0: Port device netdevsim0 added [ 794.878676][T13780] netlink: 'syz.3.2483': attribute type 10 has an invalid length. [ 797.763848][T13780] team0: Port device netdevsim0 removed [ 797.784485][T13780] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 797.810364][T13776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2483'. [ 797.981334][T13789] netlink: 'syz.1.2495': attribute type 10 has an invalid length. [ 798.004681][T13789] team0: Port device netdevsim0 added [ 798.036915][T13789] netlink: 'syz.1.2495': attribute type 10 has an invalid length. [ 798.079297][T13789] team0: Port device netdevsim0 removed [ 798.158627][T13789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2495'. [ 798.205801][T13794] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2488'. [ 798.219466][T13792] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2488'. [ 799.052055][T13801] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2491'. [ 799.614921][T13815] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2496'. [ 800.075199][T13817] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2497'. [ 800.403455][T13819] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2498'. [ 800.848864][T13827] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2500'. [ 800.883164][T13822] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2500'. [ 800.925112][T13828] netlink: 'syz.2.2502': attribute type 10 has an invalid length. [ 800.977646][T13828] bond0: (slave netdevsim0): Releasing backup interface [ 800.995797][T13828] team0: Port device netdevsim0 added [ 801.025764][T13831] netlink: 'syz.2.2502': attribute type 10 has an invalid length. [ 801.064387][T13831] team0: Port device netdevsim0 removed [ 801.101129][T13831] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 801.115094][T13830] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2503'. [ 801.127356][T13833] netlink: 'syz.1.2504': attribute type 10 has an invalid length. [ 801.142514][T13833] team0: Port device netdevsim0 added [ 801.160536][T13837] netlink: 'syz.1.2504': attribute type 10 has an invalid length. [ 801.183917][T13837] team0: Port device netdevsim0 removed [ 801.244976][T13828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2502'. [ 802.457620][T13837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2504'. [ 802.612231][T13849] syzkaller0: entered promiscuous mode [ 802.618939][T13849] syzkaller0: entered allmulticast mode [ 803.043810][T13857] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2509'. [ 805.333442][T13858] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2508'. [ 805.408888][T13862] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2511'. [ 805.568416][T13868] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2512'. [ 805.705110][T13872] netlink: 'syz.3.2515': attribute type 10 has an invalid length. [ 805.734344][T13872] bond0: (slave netdevsim0): Releasing backup interface [ 805.751572][T13869] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2513'. [ 805.797339][T13872] team0: Port device netdevsim0 added [ 805.804300][T13864] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2512'. [ 805.848233][T13873] netlink: 'syz.3.2515': attribute type 10 has an invalid length. [ 805.900306][T13873] team0: Port device netdevsim0 removed [ 805.918005][T13873] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 806.912884][T13879] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 806.938935][T13879] bond0: (slave netdevsim0): Releasing backup interface [ 806.953529][T13879] team0: Port device netdevsim0 added [ 806.976559][T13881] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 807.001948][T13881] team0: Port device netdevsim0 removed [ 807.015707][T13881] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 807.039140][T13866] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2514'. [ 807.048860][T13884] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2517'. [ 807.353198][T13891] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2520'. [ 807.553643][T13897] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2521'. [ 809.135432][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.141924][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.577209][T13906] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2532'. [ 810.769381][T13909] syzkaller0: entered promiscuous mode [ 810.775167][T13909] syzkaller0: entered allmulticast mode [ 813.776229][T13920] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2523'. [ 815.823675][T13916] netlink: 'syz.2.2525': attribute type 10 has an invalid length. [ 815.865445][T13916] bond0: (slave netdevsim0): Releasing backup interface [ 815.893349][T13916] team0: Port device netdevsim0 added [ 815.899982][T13921] netlink: 'syz.2.2525': attribute type 10 has an invalid length. [ 815.931196][T13921] team0: Port device netdevsim0 removed [ 815.957409][T13921] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 815.966896][T13923] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2524'. [ 816.207579][T13931] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2528'. [ 816.342760][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 817.040376][T13933] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2527'. [ 817.246799][T13938] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2533'. [ 820.346674][T13945] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2535'. [ 820.465283][T13948] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2536'. [ 820.542257][T13951] netlink: 'syz.2.2537': attribute type 10 has an invalid length. [ 820.578466][T13951] bond0: (slave netdevsim0): Releasing backup interface [ 820.598999][T13951] team0: Port device netdevsim0 added [ 820.632864][T13953] netlink: 'syz.2.2537': attribute type 10 has an invalid length. [ 820.665383][T13954] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2538'. [ 820.710893][T13953] team0: Port device netdevsim0 removed [ 820.731820][T13953] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 821.100623][T13953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2537'. [ 821.149694][T13961] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2540'. [ 821.217056][T13959] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2540'. [ 823.884323][T13965] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2542'. [ 824.127473][T13969] netlink: 'syz.1.2544': attribute type 10 has an invalid length. [ 824.139399][T13969] team0: Port device netdevsim0 added [ 824.160060][T13972] netlink: 'syz.1.2544': attribute type 10 has an invalid length. [ 824.203543][T13972] team0: Port device netdevsim0 removed [ 824.218124][T13974] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2551'. [ 824.277197][T13969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2544'. [ 824.294953][T13968] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2551'. [ 824.299306][T13971] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2543'. [ 824.839958][T13983] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2555'. [ 824.875236][T13980] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2555'. [ 827.978765][T13993] __nla_validate_parse: 1 callbacks suppressed [ 827.978805][T13993] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2549'. [ 827.999620][T13991] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2548'. [ 828.051146][T13995] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2560'. [ 828.065150][T13997] netlink: 'syz.2.2550': attribute type 10 has an invalid length. [ 828.092129][T13997] bond0: (slave netdevsim0): Releasing backup interface [ 828.104626][T13997] team0: Port device netdevsim0 added [ 828.169710][T13997] netlink: 'syz.2.2550': attribute type 10 has an invalid length. [ 828.213230][T13997] team0: Port device netdevsim0 removed [ 828.229288][T13997] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 828.285683][T13997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2550'. [ 828.373006][T14002] netlink: 'syz.3.2552': attribute type 10 has an invalid length. [ 828.402605][T14002] bond0: (slave netdevsim0): Releasing backup interface [ 828.416890][T14002] team0: Port device netdevsim0 added [ 828.430364][T14004] netlink: 'syz.3.2552': attribute type 10 has an invalid length. [ 828.461585][T14004] team0: Port device netdevsim0 removed [ 828.475407][T14004] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 828.546441][T14002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2552'. [ 828.561314][T14006] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2562'. [ 828.579645][T14005] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2562'. [ 828.679633][T14008] netlink: 'syz.3.2554': attribute type 10 has an invalid length. [ 828.707555][T14008] bond0: (slave netdevsim0): Releasing backup interface [ 828.989588][T14019] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2556'. [ 829.775017][T14008] team0: Port device netdevsim0 added [ 829.787895][T14011] netlink: 'syz.3.2554': attribute type 10 has an invalid length. [ 830.409093][T14011] team0: Port device netdevsim0 removed [ 830.443816][T14011] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 830.477864][T14015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2554'. [ 830.655699][T14023] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2558'. [ 831.556695][T14037] netlink: 'syz.3.2566': attribute type 10 has an invalid length. [ 831.675107][T14037] bond0: (slave netdevsim0): Releasing backup interface [ 831.690442][T12754] Bluetooth: hci4: command 0x0406 tx timeout [ 831.827250][T14037] team0: Port device netdevsim0 added [ 831.873732][T14041] netlink: 'syz.3.2566': attribute type 10 has an invalid length. [ 831.940854][T14041] team0: Port device netdevsim0 removed [ 832.003182][T14041] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 832.440584][T12754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 832.452254][T12754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 832.461064][T12754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 832.470447][T12754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 832.478650][T12754] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 832.486628][T12754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 833.026091][T14052] chnl_net:caif_netlink_parms(): no params data found [ 833.148857][T14052] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.164417][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.172381][T14052] bridge_slave_0: entered allmulticast mode [ 833.181110][T14052] bridge_slave_0: entered promiscuous mode [ 833.193981][T14052] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.201453][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.209120][T14052] bridge_slave_1: entered allmulticast mode [ 833.217484][T14052] bridge_slave_1: entered promiscuous mode [ 833.264776][T14052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.278283][T14052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.343991][T14052] team0: Port device team_slave_0 added [ 833.363028][T14052] team0: Port device team_slave_1 added [ 833.443296][T14052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.456643][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.490266][T14052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.509366][T14052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.517007][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.546450][T14052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.089702][T14052] hsr_slave_0: entered promiscuous mode [ 835.136295][T14052] hsr_slave_1: entered promiscuous mode [ 835.157923][T14052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.190064][T14052] Cannot create hsr debugfs directory [ 835.323034][T14065] netlink: 'syz.3.2570': attribute type 10 has an invalid length. [ 835.344635][T14065] bond0: (slave netdevsim0): Releasing backup interface [ 835.358610][T14065] team0: Port device netdevsim0 added [ 835.368034][T14064] __nla_validate_parse: 5 callbacks suppressed [ 835.368069][T14064] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2571'. [ 835.389643][T14066] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2572'. [ 835.414696][T14067] netlink: 'syz.3.2570': attribute type 10 has an invalid length. [ 835.440641][T14067] team0: Port device netdevsim0 removed [ 835.449106][T14067] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 835.462248][T12754] Bluetooth: hci3: command tx timeout [ 835.487761][T14065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2570'. [ 835.608348][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.634968][T14073] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2573'. [ 835.816696][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.945751][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.027092][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.383586][T14078] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2575'. [ 836.401313][T14075] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2575'. [ 836.411720][T14081] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2576'. [ 837.061907][T14087] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2585'. [ 837.123941][T14092] netlink: 'syz.0.2578': attribute type 10 has an invalid length. [ 837.177093][T14092] bond0: (slave netdevsim0): Releasing backup interface [ 837.216467][T14092] team0: Port device netdevsim0 added [ 837.229182][T14093] netlink: 'syz.0.2578': attribute type 10 has an invalid length. [ 837.283278][T14093] team0: Port device netdevsim0 removed [ 837.322808][T14093] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 837.540573][T12754] Bluetooth: hci3: command tx timeout [ 837.571078][T14092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2578'. [ 837.768829][T14089] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2579'. [ 837.931741][T14105] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 837.980896][T14105] bond0: (slave netdevsim0): Releasing backup interface [ 838.036032][T14105] team0: Port device netdevsim0 added [ 838.117898][T14109] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 838.222329][T14109] team0: Port device netdevsim0 removed [ 838.259663][T14109] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 838.689602][T14122] netlink: 'syz.0.2591': attribute type 10 has an invalid length. [ 838.776709][T14122] bond0: (slave netdevsim0): Releasing backup interface [ 838.796800][T14122] team0: Port device netdevsim0 added [ 838.879988][T14123] netlink: 'syz.0.2591': attribute type 10 has an invalid length. [ 838.896939][T14123] team0: Port device netdevsim0 removed [ 838.940940][T14123] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 838.981838][T14052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 839.007678][T14052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 839.065803][T14052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 839.247740][T14052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 839.609987][T12754] Bluetooth: hci3: command tx timeout [ 840.342303][T14149] FAULT_INJECTION: forcing a failure. [ 840.342303][T14149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.378083][T14149] CPU: 0 PID: 14149 Comm: syz.0.2590 Not tainted syzkaller #0 [ 840.385645][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 840.395771][T14149] Call Trace: [ 840.399105][T14149] [ 840.402099][T14149] dump_stack_lvl+0x18c/0x250 [ 840.406864][T14149] ? show_regs_print_info+0x20/0x20 [ 840.412138][T14149] ? load_image+0x420/0x420 [ 840.416763][T14149] ? __lock_acquire+0x7d80/0x7d80 [ 840.421862][T14149] ? snprintf+0xe9/0x140 [ 840.426184][T14149] should_fail_ex+0x394/0x4c0 [ 840.430963][T14149] _copy_to_user+0x2f/0xa0 [ 840.437057][T14149] simple_read_from_buffer+0xe7/0x150 [ 840.442512][T14149] proc_fail_nth_read+0x1e8/0x260 [ 840.447605][T14149] ? proc_fault_inject_write+0x360/0x360 [ 840.453320][T14149] ? fsnotify_perm+0x271/0x5e0 [ 840.458176][T14149] ? proc_fault_inject_write+0x360/0x360 [ 840.463918][T14149] vfs_read+0x298/0x990 [ 840.468171][T14149] ? kernel_read+0x1e0/0x1e0 [ 840.472845][T14149] ? __fget_files+0x28/0x460 [ 840.477520][T14149] ? __fget_files+0x3fc/0x460 [ 840.482295][T14149] ? __fdget_pos+0x2a3/0x330 [ 840.486979][T14149] ? ksys_read+0x74/0x260 [ 840.491368][T14149] ksys_read+0x151/0x260 [ 840.495662][T14149] ? vfs_write+0x9a0/0x9a0 [ 840.500224][T14149] ? lockdep_hardirqs_on+0x98/0x150 [ 840.505494][T14149] do_syscall_64+0x55/0xb0 [ 840.509958][T14149] ? clear_bhb_loop+0x40/0x90 [ 840.514683][T14149] ? clear_bhb_loop+0x40/0x90 [ 840.519409][T14149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.525360][T14149] RIP: 0033:0x7f8ac4f5d68e [ 840.529819][T14149] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 840.549571][T14149] RSP: 002b:00007f8ac5ecdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 840.558064][T14149] RAX: ffffffffffffffda RBX: 00007f8ac5ece6c0 RCX: 00007f8ac4f5d68e [ 840.566335][T14149] RDX: 000000000000000f RSI: 00007f8ac5ece0a0 RDI: 0000000000000005 [ 840.574341][T14149] RBP: 00007f8ac5ece090 R08: 0000000000000000 R09: 0000000000000000 [ 840.582436][T14149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.590634][T14149] R13: 00007f8ac5216038 R14: 00007f8ac5215fa0 R15: 00007ffd80a39e38 [ 840.598721][T14149] [ 840.886465][T14157] netlink: 'syz.2.2594': attribute type 10 has an invalid length. [ 840.936688][T14157] bond0: (slave netdevsim0): Releasing backup interface [ 840.949100][T14157] team0: Port device netdevsim0 added [ 840.985840][T14161] netlink: 'syz.2.2594': attribute type 10 has an invalid length. [ 841.007930][T14161] team0: Port device netdevsim0 removed [ 841.026866][T14161] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 841.102878][T14161] __nla_validate_parse: 6 callbacks suppressed [ 841.102944][T14161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2594'. [ 841.194733][T14052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.254590][T14052] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.323842][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.331195][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.367766][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.375261][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.438558][T14165] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2598'. [ 841.690556][T12754] Bluetooth: hci3: command tx timeout [ 841.898791][T14171] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2599'. [ 841.951116][T14170] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2599'. [ 842.070851][T14166] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2596'. [ 842.394407][T14175] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2600'. [ 842.493356][T14177] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2601'. [ 842.867190][T14186] netlink: 'syz.0.2604': attribute type 10 has an invalid length. [ 842.903624][T14186] bond0: (slave netdevsim0): Releasing backup interface [ 842.921841][T14186] team0: Port device netdevsim0 added [ 842.952813][T14187] netlink: 'syz.0.2604': attribute type 10 has an invalid length. [ 842.996194][T14187] team0: Port device netdevsim0 removed [ 843.008141][T14187] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 843.064654][T14052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.082764][T14186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2604'. [ 843.104603][T14189] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2605'. [ 843.488414][T14195] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2607'. [ 843.632223][ T42] hsr_slave_0: left promiscuous mode [ 843.652976][ T42] hsr_slave_1: left promiscuous mode [ 843.696508][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.704328][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.714059][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.729944][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.748264][ T42] hsr0: left allmulticast mode [ 843.760060][ T42] bridge0: port 3(hsr0) entered disabled state [ 843.791844][ T42] bridge_slave_1: left allmulticast mode [ 843.803711][ T42] bridge_slave_1: left promiscuous mode [ 843.822951][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.833996][ T42] bridge_slave_0: left allmulticast mode [ 843.839720][ T42] bridge_slave_0: left promiscuous mode [ 843.848208][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.879077][ T42] veth1_macvtap: left promiscuous mode [ 843.886096][ T42] veth0_macvtap: left promiscuous mode [ 843.895595][ T42] veth1_vlan: left promiscuous mode [ 843.903189][ T42] veth0_vlan: left promiscuous mode [ 844.749373][ T42] team0 (unregistering): Port device team_slave_1 removed [ 844.805340][ T42] team0 (unregistering): Port device team_slave_0 removed [ 845.357530][T14204] netlink: 'syz.2.2609': attribute type 10 has an invalid length. [ 845.393095][T14204] bond0: (slave netdevsim0): Releasing backup interface [ 845.411964][T14204] team0: Port device netdevsim0 added [ 845.440271][T14206] netlink: 'syz.2.2609': attribute type 10 has an invalid length. [ 845.482691][T14206] team0: Port device netdevsim0 removed [ 845.512686][T14206] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 845.603248][T14052] veth0_vlan: entered promiscuous mode [ 845.624116][T14213] netlink: 'syz.3.2610': attribute type 21 has an invalid length. [ 845.673513][T14052] veth1_vlan: entered promiscuous mode [ 845.769668][T14052] veth0_macvtap: entered promiscuous mode [ 845.823179][T14052] veth1_macvtap: entered promiscuous mode [ 846.414685][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.450300][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.463367][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.476892][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.488410][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 846.512098][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.526024][T14052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.536544][T14226] netlink: 'syz.3.2614': attribute type 10 has an invalid length. [ 846.555051][T14225] netlink: 'syz.3.2614': attribute type 10 has an invalid length. [ 846.599091][T14225] bond0: (slave netdevsim0): Releasing backup interface [ 846.619722][T14225] team0: Port device netdevsim0 added [ 846.643465][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.659221][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.669370][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.694357][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.716045][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 846.728622][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 846.750004][T14052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.762776][T14225] __nla_validate_parse: 4 callbacks suppressed [ 846.762796][T14225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2614'. [ 846.780911][T14230] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2617'. [ 846.796283][T14231] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2615'. [ 846.823296][T14052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.834827][T14052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.843787][T14052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.855414][T14052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.269481][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.305563][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.391264][T14238] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2619'. [ 847.406595][T14237] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2619'. [ 847.423529][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.434611][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.446646][T14240] netlink: 'syz.3.2620': attribute type 10 has an invalid length. [ 847.479554][T14241] netlink: 'syz.3.2620': attribute type 10 has an invalid length. [ 847.504937][T14241] team0: Port device netdevsim0 removed [ 847.515075][T14241] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 847.610407][T14240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2620'. [ 847.666455][T14245] netlink: 'syz.1.2565': attribute type 10 has an invalid length. [ 847.693895][T14245] team0: Port device netdevsim0 added [ 847.732501][T14247] netlink: 'syz.1.2565': attribute type 10 has an invalid length. [ 847.784889][T14247] team0: Port device netdevsim0 removed [ 847.867260][T14247] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 847.911759][T14251] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2623'. [ 847.940995][T14252] netlink: 'syz.2.2624': attribute type 2 has an invalid length. [ 848.109232][T14245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2565'. [ 848.131968][T14254] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 848.187416][T14254] bond0: (slave netdevsim0): Releasing backup interface [ 848.204607][T14254] team0: Port device netdevsim0 added [ 848.226978][T14256] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 848.258506][T14256] team0: Port device netdevsim0 removed [ 848.286542][T14256] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 848.373035][T14254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2625'. [ 848.389354][T14261] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2627'. [ 848.675877][T14270] netlink: 'syz.3.2636': attribute type 10 has an invalid length. [ 848.711967][T14270] bond0: (slave netdevsim0): Releasing backup interface [ 848.734467][T14270] team0: Port device netdevsim0 added [ 849.456665][T14290] bond0: (slave netdevsim0): Releasing backup interface [ 849.470734][T14290] team0: Port device netdevsim0 added [ 849.506917][T14292] team0: Port device netdevsim0 removed [ 849.522258][T14292] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 849.967145][T14298] bond0: (slave netdevsim0): Releasing backup interface [ 849.985785][T14298] team0: Port device netdevsim0 added [ 850.238222][T14310] FAULT_INJECTION: forcing a failure. [ 850.238222][T14310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.259576][T14310] CPU: 1 PID: 14310 Comm: syz.1.2645 Not tainted syzkaller #0 [ 850.267138][T14310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 850.277255][T14310] Call Trace: [ 850.280591][T14310] [ 850.283587][T14310] dump_stack_lvl+0x18c/0x250 [ 850.288343][T14310] ? show_regs_print_info+0x20/0x20 [ 850.293600][T14310] ? load_image+0x420/0x420 [ 850.298171][T14310] ? __might_fault+0xaa/0x120 [ 850.302886][T14310] ? __lock_acquire+0x7d80/0x7d80 [ 850.307945][T14310] ? unix_ioctl+0x259/0x640 [ 850.312622][T14310] should_fail_ex+0x394/0x4c0 [ 850.317354][T14310] _copy_from_user+0x2f/0xe0 [ 850.321982][T14310] sock_do_ioctl+0x190/0x310 [ 850.326694][T14310] ? sock_show_fdinfo+0xb0/0xb0 [ 850.331683][T14310] sock_ioctl+0x5be/0x7e0 [ 850.336078][T14310] ? sock_poll+0x3e0/0x3e0 [ 850.340539][T14310] ? bpf_lsm_file_ioctl+0x9/0x10 [ 850.345510][T14310] ? security_file_ioctl+0x80/0xa0 [ 850.350656][T14310] ? sock_poll+0x3e0/0x3e0 [ 850.355124][T14310] __se_sys_ioctl+0xfd/0x170 [ 850.359789][T14310] do_syscall_64+0x55/0xb0 [ 850.364288][T14310] ? clear_bhb_loop+0x40/0x90 [ 850.369004][T14310] ? clear_bhb_loop+0x40/0x90 [ 850.373718][T14310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.379738][T14310] RIP: 0033:0x7f3a9179ce59 [ 850.384204][T14310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.403880][T14310] RSP: 002b:00007f3a9257f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 850.412335][T14310] RAX: ffffffffffffffda RBX: 00007f3a91a15fa0 RCX: 00007f3a9179ce59 [ 850.420342][T14310] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 850.428428][T14310] RBP: 00007f3a9257f090 R08: 0000000000000000 R09: 0000000000000000 [ 850.436432][T14310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.444439][T14310] R13: 00007f3a91a16038 R14: 00007f3a91a15fa0 R15: 00007ffc0b6821e8 [ 850.452464][T14310] [ 851.171296][T14325] bond0: (slave netdevsim0): Releasing backup interface [ 851.201924][T14325] team0: Port device netdevsim0 added [ 851.789132][T14344] __nla_validate_parse: 13 callbacks suppressed [ 851.789174][T14344] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2657'. [ 851.852298][T14346] FAULT_INJECTION: forcing a failure. [ 851.852298][T14346] name failslab, interval 1, probability 0, space 0, times 0 [ 851.901183][T14346] CPU: 0 PID: 14346 Comm: syz.1.2658 Not tainted syzkaller #0 [ 851.908745][T14346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 851.918941][T14346] Call Trace: [ 851.922274][T14346] [ 851.925285][T14346] dump_stack_lvl+0x18c/0x250 [ 851.930038][T14346] ? show_regs_print_info+0x20/0x20 [ 851.935291][T14346] ? load_image+0x420/0x420 [ 851.939857][T14346] ? __lock_acquire+0x7d80/0x7d80 [ 851.944947][T14346] ? verify_lock_unused+0x140/0x140 [ 851.950215][T14346] should_fail_ex+0x394/0x4c0 [ 851.954969][T14346] should_failslab+0x9/0x20 [ 851.959540][T14346] slab_pre_alloc_hook+0x59/0x300 [ 851.964647][T14346] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 851.970364][T14346] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 851.976006][T14346] __kmem_cache_alloc_node+0x53/0x250 [ 851.981497][T14346] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 851.987132][T14346] __kmalloc+0xa7/0x240 [ 851.991419][T14346] bpf_prog_test_run_skb+0x242/0x18f0 [ 851.996855][T14346] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 852.003248][T14346] ? lockdep_hardirqs_on+0x98/0x150 [ 852.008516][T14346] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 852.014757][T14346] ? cpu_online+0x60/0x60 [ 852.019158][T14346] bpf_prog_test_run+0x31f/0x390 [ 852.024169][T14346] __sys_bpf+0x49d/0x890 [ 852.028495][T14346] ? bpf_link_show_fdinfo+0x390/0x390 [ 852.033938][T14346] ? __x64_sys_bpf+0x1d/0x90 [ 852.038580][T14346] __x64_sys_bpf+0x7c/0x90 [ 852.043038][T14346] do_syscall_64+0x55/0xb0 [ 852.047495][T14346] ? clear_bhb_loop+0x40/0x90 [ 852.052203][T14346] ? clear_bhb_loop+0x40/0x90 [ 852.056909][T14346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.062863][T14346] RIP: 0033:0x7f3a9179ce59 [ 852.067310][T14346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.087416][T14346] RSP: 002b:00007f3a9257f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 852.095865][T14346] RAX: ffffffffffffffda RBX: 00007f3a91a15fa0 RCX: 00007f3a9179ce59 [ 852.103869][T14346] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 852.111875][T14346] RBP: 00007f3a9257f090 R08: 0000000000000000 R09: 0000000000000000 [ 852.119882][T14346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.127893][T14346] R13: 00007f3a91a16038 R14: 00007f3a91a15fa0 R15: 00007ffc0b6821e8 [ 852.135906][T14346] [ 854.575401][T14357] validate_nla: 4 callbacks suppressed [ 854.575455][T14357] netlink: 'syz.3.2662': attribute type 10 has an invalid length. [ 854.615014][T14357] team0: Port device netdevsim0 removed [ 854.644528][T14357] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 854.716388][T14357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2662'. [ 854.821145][T14366] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2664'. [ 854.849424][T14364] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2665'. [ 854.862852][T14367] netlink: 'syz.0.2666': attribute type 10 has an invalid length. [ 854.940323][T14362] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2664'. [ 854.962421][T14368] netlink: 'syz.0.2666': attribute type 10 has an invalid length. [ 854.978122][T14368] team0: Port device netdevsim0 removed [ 855.003812][T14368] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 855.258503][T14368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2666'. [ 858.290981][T14379] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 858.358504][T14379] bond0: (slave netdevsim0): Releasing backup interface [ 858.382309][T14378] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2677'. [ 858.411982][T14379] team0: Port device netdevsim0 added [ 859.300973][T14386] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 859.325856][T14386] team0: Port device netdevsim0 removed [ 859.345812][T14386] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 859.395719][T14390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2669'. [ 859.596437][T14402] netlink: 'syz.3.2675': attribute type 10 has an invalid length. [ 859.618300][T14402] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2675'. [ 859.798326][T14408] netlink: 'syz.3.2678': attribute type 10 has an invalid length. [ 859.837617][T14407] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2679'. [ 862.809155][T14408] bond0: (slave netdevsim0): Releasing backup interface [ 862.821908][T14408] team0: Port device netdevsim0 added [ 862.828061][T14411] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2676'. [ 862.840623][T14412] netlink: 'syz.3.2678': attribute type 10 has an invalid length. [ 862.865550][T14412] team0: Port device netdevsim0 removed [ 862.891184][T14412] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 862.958052][T14417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2678'. [ 863.066632][T14420] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2681'. [ 863.136617][T14423] FAULT_INJECTION: forcing a failure. [ 863.136617][T14423] name failslab, interval 1, probability 0, space 0, times 0 [ 863.150267][T14423] CPU: 1 PID: 14423 Comm: syz.2.2682 Not tainted syzkaller #0 [ 863.157792][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 863.167903][T14423] Call Trace: [ 863.171215][T14423] [ 863.174176][T14423] dump_stack_lvl+0x18c/0x250 [ 863.178904][T14423] ? show_regs_print_info+0x20/0x20 [ 863.184138][T14423] ? load_image+0x420/0x420 [ 863.188681][T14423] should_fail_ex+0x394/0x4c0 [ 863.193404][T14423] should_failslab+0x9/0x20 [ 863.197950][T14423] slab_pre_alloc_hook+0x59/0x300 [ 863.203023][T14423] kmem_cache_alloc+0x5a/0x2c0 [ 863.207829][T14423] ? sctp_get_port_local+0x69f/0x15d0 [ 863.213355][T14423] sctp_get_port_local+0x69f/0x15d0 [ 863.218617][T14423] ? sctp_bind_addr_match+0x30/0x2a0 [ 863.223941][T14423] ? sctp_do_bind+0x8f0/0x8f0 [ 863.228666][T14423] ? sctp_bind_addr_match+0x30/0x2a0 [ 863.233998][T14423] ? sctp_bind_addr_match+0x30/0x2a0 [ 863.239313][T14423] ? sctp_bind_addr_match+0x284/0x2a0 [ 863.244725][T14423] sctp_do_bind+0x4c0/0x8f0 [ 863.249269][T14423] ? sctp_setsockopt_bindx+0xd0/0x420 [ 863.254773][T14423] sctp_setsockopt_bindx+0x25b/0x420 [ 863.260106][T14423] sctp_setsockopt+0x7ea/0x11e0 [ 863.265008][T14423] ? sock_common_recvmsg+0x190/0x190 [ 863.270386][T14423] do_sock_setsockopt+0x175/0x1a0 [ 863.275470][T14423] ? __fdget+0x180/0x210 [ 863.279755][T14423] __x64_sys_setsockopt+0x182/0x200 [ 863.285007][T14423] do_syscall_64+0x55/0xb0 [ 863.289458][T14423] ? clear_bhb_loop+0x40/0x90 [ 863.294172][T14423] ? clear_bhb_loop+0x40/0x90 [ 863.298893][T14423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.304828][T14423] RIP: 0033:0x7f48c9d9ce59 [ 863.309281][T14423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.328926][T14423] RSP: 002b:00007f48cad06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 863.337488][T14423] RAX: ffffffffffffffda RBX: 00007f48ca015fa0 RCX: 00007f48c9d9ce59 [ 863.345490][T14423] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000005 [ 863.353487][T14423] RBP: 00007f48cad06090 R08: 0000000000000010 R09: 0000000000000000 [ 863.361577][T14423] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.369577][T14423] R13: 00007f48ca016038 R14: 00007f48ca015fa0 R15: 00007ffd196ce058 [ 863.377619][T14423] [ 863.906268][T14436] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2687'. [ 864.697043][T14440] netlink: 'syz.1.2688': attribute type 10 has an invalid length. [ 864.710818][T14442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2688'. [ 864.972537][T14448] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2689'. [ 865.012183][T14445] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2689'. [ 867.540137][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 868.055540][T14460] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2692'. [ 868.236609][T14463] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2696'. [ 868.715849][T14474] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2699'. [ 870.574937][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.583445][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.038058][T14507] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2710'. [ 871.216021][T14514] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2712'. [ 871.261122][T14515] FAULT_INJECTION: forcing a failure. [ 871.261122][T14515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.299289][T14515] CPU: 0 PID: 14515 Comm: syz.0.2711 Not tainted syzkaller #0 [ 871.306848][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 871.316966][T14515] Call Trace: [ 871.320349][T14515] [ 871.323338][T14515] dump_stack_lvl+0x18c/0x250 [ 871.328088][T14515] ? show_regs_print_info+0x20/0x20 [ 871.333373][T14515] ? load_image+0x420/0x420 [ 871.338028][T14515] ? __might_fault+0xaa/0x120 [ 871.343031][T14515] ? __lock_acquire+0x7d80/0x7d80 [ 871.348134][T14515] ? __virt_addr_valid+0x10c/0x380 [ 871.353333][T14515] should_fail_ex+0x394/0x4c0 [ 871.358092][T14515] _copy_from_user+0x2f/0xe0 [ 871.362740][T14515] vmemdup_user+0xac/0x1e0 [ 871.367220][T14515] map_lookup_elem+0x28a/0x7f0 [ 871.372041][T14515] ? bpf_lsm_bpf+0x9/0x10 [ 871.376429][T14515] __sys_bpf+0x438/0x890 [ 871.380731][T14515] ? bpf_link_show_fdinfo+0x390/0x390 [ 871.386166][T14515] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 871.392495][T14515] __x64_sys_bpf+0x7c/0x90 [ 871.396966][T14515] do_syscall_64+0x55/0xb0 [ 871.401456][T14515] ? clear_bhb_loop+0x40/0x90 [ 871.406185][T14515] ? clear_bhb_loop+0x40/0x90 [ 871.410924][T14515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.416898][T14515] RIP: 0033:0x7f8ac4f9ce59 [ 871.421383][T14515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.441049][T14515] RSP: 002b:00007f8ac5ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 871.449697][T14515] RAX: ffffffffffffffda RBX: 00007f8ac5215fa0 RCX: 00007f8ac4f9ce59 [ 871.457766][T14515] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000001 [ 871.465794][T14515] RBP: 00007f8ac5ece090 R08: 0000000000000000 R09: 0000000000000000 [ 871.473823][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.481854][T14515] R13: 00007f8ac5216038 R14: 00007f8ac5215fa0 R15: 00007ffd80a39e38 [ 871.489908][T14515] [ 873.593761][T14549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2725'. [ 875.486503][T14547] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2724'. [ 875.830604][T14560] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2728'. [ 876.099634][T14571] FAULT_INJECTION: forcing a failure. [ 876.099634][T14571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.114581][T14571] CPU: 1 PID: 14571 Comm: syz.2.2733 Not tainted syzkaller #0 [ 876.122131][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 876.132238][T14571] Call Trace: [ 876.135568][T14571] [ 876.138552][T14571] dump_stack_lvl+0x18c/0x250 [ 876.143306][T14571] ? show_regs_print_info+0x20/0x20 [ 876.148563][T14571] ? load_image+0x420/0x420 [ 876.153137][T14571] ? __might_fault+0xaa/0x120 [ 876.157875][T14571] ? __lock_acquire+0x7d80/0x7d80 [ 876.162951][T14571] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 876.168657][T14571] should_fail_ex+0x394/0x4c0 [ 876.173419][T14571] _copy_from_user+0x2f/0xe0 [ 876.178080][T14571] wext_handle_ioctl+0xc8/0x1e0 [ 876.183115][T14571] ? call_commit_handler+0xf0/0xf0 [ 876.188398][T14571] sock_ioctl+0x15d/0x7e0 [ 876.192978][T14571] ? sock_poll+0x3e0/0x3e0 [ 876.197472][T14571] ? bpf_lsm_file_ioctl+0x9/0x10 [ 876.202464][T14571] ? security_file_ioctl+0x80/0xa0 [ 876.207627][T14571] ? sock_poll+0x3e0/0x3e0 [ 876.212121][T14571] __se_sys_ioctl+0xfd/0x170 [ 876.216752][T14571] do_syscall_64+0x55/0xb0 [ 876.221206][T14571] ? clear_bhb_loop+0x40/0x90 [ 876.225912][T14571] ? clear_bhb_loop+0x40/0x90 [ 876.230625][T14571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.236579][T14571] RIP: 0033:0x7f48c9d9ce59 [ 876.241027][T14571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.260687][T14571] RSP: 002b:00007f48cad06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.269138][T14571] RAX: ffffffffffffffda RBX: 00007f48ca015fa0 RCX: 00007f48c9d9ce59 [ 876.277170][T14571] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 876.285183][T14571] RBP: 00007f48cad06090 R08: 0000000000000000 R09: 0000000000000000 [ 876.293197][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.301285][T14571] R13: 00007f48ca016038 R14: 00007f48ca015fa0 R15: 00007ffd196ce058 [ 876.309311][T14571] [ 876.980220][T14577] netlink: 'syz.1.2735': attribute type 10 has an invalid length. [ 877.070826][T14577] bond0: (slave netdevsim0): Releasing backup interface [ 877.131444][T14577] team0: Port device netdevsim0 added [ 877.149961][T14579] netlink: 'syz.1.2735': attribute type 10 has an invalid length. [ 877.182806][T14584] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2736'. [ 877.286103][T14579] team0: Port device netdevsim0 removed [ 877.360608][T14579] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 877.420123][T14583] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2737'. [ 877.500794][T14577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2735'. [ 878.131413][T14599] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2742'. [ 880.791583][T14603] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2743'. [ 881.610817][T14613] netlink: 'syz.3.2747': attribute type 10 has an invalid length. [ 881.650758][T14613] bond0: (slave netdevsim0): Releasing backup interface [ 881.668033][T14613] team0: Port device netdevsim0 added [ 881.675807][T14615] netlink: 'syz.3.2747': attribute type 10 has an invalid length. [ 881.731157][T14615] team0: Port device netdevsim0 removed [ 881.739618][T14615] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 881.779126][T14619] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2747'. [ 881.811153][T14621] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2749'. [ 881.972732][T14626] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2751'. [ 881.994024][T14629] netlink: 'syz.3.2753': attribute type 10 has an invalid length. [ 882.027888][T14629] bond0: (slave netdevsim0): Releasing backup interface [ 882.140244][T14629] team0: Port device netdevsim0 added [ 882.161478][T14631] netlink: 'syz.3.2753': attribute type 10 has an invalid length. [ 882.674044][T14638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2754'. [ 882.964614][T14631] team0: Port device netdevsim0 removed [ 882.983455][T14631] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 883.021437][T14635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2753'. [ 885.266273][T14654] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2759'. [ 885.518661][T14658] netlink: 'syz.0.2761': attribute type 10 has an invalid length. [ 885.570547][T14658] bond0: (slave netdevsim0): Releasing backup interface [ 885.602288][T14658] team0: Port device netdevsim0 added [ 885.615682][T14662] netlink: 'syz.0.2761': attribute type 10 has an invalid length. [ 885.637964][T14662] team0: Port device netdevsim0 removed [ 885.649403][T14662] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 885.667261][T14661] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2762'. [ 885.735392][T14665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2761'. [ 887.114958][T14678] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2775'. [ 887.151007][T14680] netlink: 'syz.2.2767': attribute type 10 has an invalid length. [ 887.215151][T14682] netlink: 'syz.2.2767': attribute type 10 has an invalid length. [ 887.247330][T14682] team0: Port device netdevsim0 removed [ 887.264689][T14682] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 887.315554][T14686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2767'. [ 887.768127][T14701] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2772'. [ 888.227864][T14694] netlink: 'syz.3.2771': attribute type 10 has an invalid length. [ 888.270212][T14694] bond0: (slave netdevsim0): Releasing backup interface [ 888.319204][T14694] team0: Port device netdevsim0 added [ 888.326567][T14705] FAULT_INJECTION: forcing a failure. [ 888.326567][T14705] name failslab, interval 1, probability 0, space 0, times 0 [ 888.340112][T14705] CPU: 0 PID: 14705 Comm: syz.2.2773 Not tainted syzkaller #0 [ 888.347648][T14705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 888.357758][T14705] Call Trace: [ 888.361074][T14705] [ 888.364042][T14705] dump_stack_lvl+0x18c/0x250 [ 888.368795][T14705] ? show_regs_print_info+0x20/0x20 [ 888.374034][T14705] ? load_image+0x420/0x420 [ 888.378576][T14705] ? rt6_remove_exception+0x270/0x270 [ 888.384084][T14705] should_fail_ex+0x394/0x4c0 [ 888.388808][T14705] should_failslab+0x9/0x20 [ 888.393353][T14705] slab_pre_alloc_hook+0x59/0x300 [ 888.398431][T14705] kmem_cache_alloc+0x5a/0x2c0 [ 888.403237][T14705] ? dst_alloc+0x105/0x170 [ 888.407786][T14705] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 888.413971][T14705] dst_alloc+0x105/0x170 [ 888.418285][T14705] ip6_rt_cache_alloc+0x3b0/0xa20 [ 888.423388][T14705] ? rt6_find_cached_rt+0x270/0x270 [ 888.428647][T14705] ? ip6_pol_route+0x171/0x1230 [ 888.433564][T14705] ip6_pol_route+0xffa/0x1230 [ 888.438300][T14705] ? ip6_pol_route+0x171/0x1230 [ 888.443305][T14705] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 888.448993][T14705] fib6_rule_lookup+0x226/0x580 [ 888.454008][T14705] ? skb_header_pointer+0x120/0x120 [ 888.459263][T14705] ? fib6_lookup+0x2d0/0x2d0 [ 888.463914][T14705] ? tomoyo_profile+0x11/0x50 [ 888.468647][T14705] ? tomoyo_write_log2+0x24f/0x910 [ 888.473811][T14705] ? read_lock_is_recursive+0x20/0x20 [ 888.479237][T14705] ? dev_get_by_index_rcu+0xee/0x110 [ 888.484573][T14705] ip6_route_output_flags+0x364/0x5d0 [ 888.490003][T14705] ? ip6_route_output_flags+0x2e/0x5d0 [ 888.495530][T14705] ip6_dst_lookup_tail+0x1a5/0x1660 [ 888.500887][T14705] ? ip6_dst_lookup+0x60/0x60 [ 888.505703][T14705] ? txopt_get+0x7a/0x3f0 [ 888.510071][T14705] ? txopt_get+0x7a/0x3f0 [ 888.514445][T14705] ? txopt_get+0x344/0x3f0 [ 888.518920][T14705] ? fl6_sock_lookup+0xc0/0xc0 [ 888.523747][T14705] ip6_dst_lookup_flow+0x48/0xe0 [ 888.528741][T14705] rawv6_sendmsg+0xd53/0x1740 [ 888.533474][T14705] ? compat_rawv6_ioctl+0x70/0x70 [ 888.538586][T14705] ? aa_sk_perm+0x83c/0x970 [ 888.543170][T14705] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 888.549638][T14705] ? inet_sendmsg+0x7e/0x2a0 [ 888.554301][T14705] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 888.559647][T14705] ? inet_send_prepare+0x250/0x250 [ 888.564869][T14705] ____sys_sendmsg+0x61b/0x980 [ 888.569697][T14705] ? __asan_memset+0x22/0x40 [ 888.574336][T14705] ? __sys_sendmsg_sock+0x30/0x30 [ 888.579398][T14705] ? __import_iovec+0x5f2/0x850 [ 888.584294][T14705] ? import_iovec+0x73/0xa0 [ 888.588830][T14705] ___sys_sendmsg+0x2a6/0x360 [ 888.593553][T14705] ? __sys_sendmsg+0x2b0/0x2b0 [ 888.598387][T14705] ? trace_call_bpf+0xc3/0x6c0 [ 888.603297][T14705] __se_sys_sendmsg+0x1d0/0x2c0 [ 888.608187][T14705] ? perf_trace_preemptirq_template+0x269/0x330 [ 888.614498][T14705] ? __x64_sys_sendmsg+0x80/0x80 [ 888.619519][T14705] ? lockdep_hardirqs_on+0x98/0x150 [ 888.624773][T14705] do_syscall_64+0x55/0xb0 [ 888.629235][T14705] ? clear_bhb_loop+0x40/0x90 [ 888.633938][T14705] ? clear_bhb_loop+0x40/0x90 [ 888.638649][T14705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.644586][T14705] RIP: 0033:0x7f48c9d9ce59 [ 888.649033][T14705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.669031][T14705] RSP: 002b:00007f48cad06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.677487][T14705] RAX: ffffffffffffffda RBX: 00007f48ca015fa0 RCX: 00007f48c9d9ce59 [ 888.685644][T14705] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 888.693682][T14705] RBP: 00007f48cad06090 R08: 0000000000000000 R09: 0000000000000000 [ 888.701693][T14705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.709706][T14705] R13: 00007f48ca016038 R14: 00007f48ca015fa0 R15: 00007ffd196ce058 [ 888.717750][T14705] [ 888.750586][T14698] netlink: 'syz.3.2771': attribute type 10 has an invalid length. [ 888.794886][T14698] team0: Port device netdevsim0 removed [ 888.818006][T14698] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 888.828948][T14702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2771'. [ 889.059679][T14716] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2777'. [ 889.264936][T14720] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2778'. [ 889.275179][T14717] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2779'. [ 889.288970][T14711] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2778'. [ 889.310311][T14726] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2782'. [ 889.322194][T14724] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2782'. [ 889.593020][T14733] netlink: 'syz.0.2784': attribute type 10 has an invalid length. [ 890.651577][T14733] bond0: (slave netdevsim0): Releasing backup interface [ 890.665394][T14733] team0: Port device netdevsim0 added [ 890.687797][T14735] netlink: 'syz.0.2784': attribute type 10 has an invalid length. [ 890.738344][T14735] team0: Port device netdevsim0 removed [ 890.762783][T14735] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 890.778164][T14739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2784'. [ 890.834370][T14746] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 890.862319][T14746] bond0: (slave netdevsim0): Releasing backup interface [ 890.893024][T14746] team0: Port device netdevsim0 added [ 890.899234][T14749] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 890.974506][T14749] team0: Port device netdevsim0 removed [ 891.015490][T14749] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 891.098459][T14752] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2788'. [ 893.277470][T14786] netlink: 'syz.1.2800': attribute type 10 has an invalid length. [ 893.315304][T14786] bond0: (slave netdevsim0): Releasing backup interface [ 893.353738][T14786] team0: Port device netdevsim0 added [ 893.367393][T14790] __nla_validate_parse: 5 callbacks suppressed [ 893.367433][T14790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2800'. [ 893.385977][T14787] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2799'. [ 893.400983][T14788] netlink: 'syz.1.2800': attribute type 10 has an invalid length. [ 893.422529][T14788] team0: Port device netdevsim0 removed [ 893.444729][T14788] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 893.459042][T14784] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.2799'. [ 894.096705][T14804] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2805'. [ 894.139441][T14804] ksmbd: Unknown IPC event: 0, ignore. [ 894.238465][T14799] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2804'. [ 894.854554][T14810] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2808'. [ 895.871880][T14815] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2807'. [ 895.923864][T14813] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2807'. [ 896.066085][T14826] netlink: 'syz.0.2811': attribute type 10 has an invalid length. [ 896.115209][T14826] bond0: (slave netdevsim0): Releasing backup interface [ 896.150744][T14826] team0: Port device netdevsim0 added [ 896.184259][T14831] netlink: 'syz.0.2811': attribute type 10 has an invalid length. [ 896.342706][T14831] team0: Port device netdevsim0 removed [ 896.373366][T14831] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 896.397182][T14837] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2811'. [ 896.436817][T14834] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2815'. [ 896.448796][T14834] bridge_slave_1: default FDB implementation only supports local addresses [ 896.715690][T14844] ksmbd: Unknown IPC event: 0, ignore. [ 898.019456][T14859] netlink: 'syz.0.2822': attribute type 10 has an invalid length. [ 898.155810][T14859] bond0: (slave netdevsim0): Releasing backup interface [ 898.175033][T14859] team0: Port device netdevsim0 added [ 898.212189][T14860] netlink: 'syz.0.2822': attribute type 10 has an invalid length. [ 898.242666][T14860] team0: Port device netdevsim0 removed [ 898.290479][T14860] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 898.305191][T14867] netlink: 'syz.2.2825': attribute type 10 has an invalid length. [ 898.387191][T14867] bond0: (slave netdevsim0): Releasing backup interface [ 898.437414][T14867] team0: Port device netdevsim0 added [ 898.454395][T14870] netlink: 'syz.2.2825': attribute type 10 has an invalid length. [ 898.478532][T14876] __nla_validate_parse: 2 callbacks suppressed [ 898.478575][T14876] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2827'. [ 898.519262][T14870] team0: Port device netdevsim0 removed [ 898.541873][T14870] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 898.573110][T14875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2825'. [ 898.600538][T14881] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2829'. [ 899.080843][T14896] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2833'. [ 899.105327][T14893] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2833'. [ 899.355385][T14906] netlink: 'syz.2.2839': attribute type 10 has an invalid length. [ 899.548025][T14906] bond0: (slave netdevsim0): Releasing backup interface [ 899.597476][T14906] team0: Port device netdevsim0 added [ 899.612203][T14907] netlink: 'syz.2.2839': attribute type 10 has an invalid length. [ 899.666425][T14907] team0: Port device netdevsim0 removed [ 899.687286][T14907] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 899.700031][T14913] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2840'. [ 899.720541][T14914] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2839'. [ 899.744539][T14911] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2840'. [ 900.145384][T14923] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2845'. [ 900.265048][T14931] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.2846'. [ 901.081444][T14946] netlink: 'syz.2.2853': attribute type 10 has an invalid length. [ 901.140883][T14946] bond0: (slave netdevsim0): Releasing backup interface [ 901.200676][T14946] team0: Port device netdevsim0 added [ 901.214550][T14949] netlink: 'syz.2.2853': attribute type 10 has an invalid length. [ 901.340580][T14949] team0: Port device netdevsim0 removed [ 901.373550][T14949] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 902.488500][T14973] ksmbd: Unknown IPC event: 0, ignore. [ 903.595089][T14989] __nla_validate_parse: 9 callbacks suppressed [ 903.595109][T14989] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2866'. [ 903.627954][T14986] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2866'. [ 903.662978][T14991] netlink: 'syz.2.2868': attribute type 10 has an invalid length. [ 903.683790][T14991] bond0: (slave netdevsim0): Releasing backup interface [ 903.705179][T14991] team0: Port device netdevsim0 added [ 903.751605][T14994] netlink: 'syz.2.2868': attribute type 10 has an invalid length. [ 903.792142][T14994] team0: Port device netdevsim0 removed [ 903.844307][T14994] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 903.877203][T14998] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2871'. [ 903.888583][T14997] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2871'. [ 904.063581][T14991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2868'. [ 904.451998][T15004] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2874'. [ 905.053474][T15006] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2875'. [ 905.337759][T15009] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2876'. [ 905.573392][T15018] netlink: 'syz.2.2880': attribute type 10 has an invalid length. [ 905.637300][T15018] bond0: (slave netdevsim0): Releasing backup interface [ 905.688197][T15018] team0: Port device netdevsim0 added [ 905.717109][T15019] netlink: 'syz.2.2880': attribute type 10 has an invalid length. [ 905.759396][T15019] team0: Port device netdevsim0 removed [ 905.947422][T15019] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 905.991752][T15018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2880'. [ 906.188663][T15026] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2882'. [ 907.024751][T15046] netlink: 'syz.2.2891': attribute type 10 has an invalid length. [ 909.836902][T15046] bond0: (slave netdevsim0): Releasing backup interface [ 909.853083][T15046] team0: Port device netdevsim0 added [ 909.859524][T15050] netlink: 'syz.2.2891': attribute type 10 has an invalid length. [ 909.888489][T15050] team0: Port device netdevsim0 removed [ 909.903623][T15050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 909.925229][T15053] __nla_validate_parse: 2 callbacks suppressed [ 909.925246][T15053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2891'. [ 909.944022][T15055] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2894'. [ 910.105051][T15061] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2895'. [ 910.141222][T15058] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.2895'. [ 910.334940][T15069] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2900'. [ 911.342193][T15079] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2904'. [ 911.353733][T15079] bridge_slave_1: default FDB implementation only supports local addresses [ 911.526390][T15084] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2906'. [ 911.540721][T15084] bridge_slave_1: default FDB implementation only supports local addresses [ 911.907293][T15096] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2910'. [ 911.941793][T15095] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.2910'. [ 912.942980][T15103] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2913'. [ 914.190972][T15119] bridge_slave_1: default FDB implementation only supports local addresses [ 914.250045][T15107] ksmbd: Unknown IPC event: 0, ignore. [ 915.844356][T15145] __nla_validate_parse: 6 callbacks suppressed [ 915.844375][T15145] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2929'. [ 915.861451][T15145] bridge_slave_1: default FDB implementation only supports local addresses [ 916.006106][T15149] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2931'. [ 916.021963][T15149] ksmbd: Unknown IPC event: 0, ignore. [ 916.047863][T15147] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2930'. [ 916.984475][T15155] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2934'. [ 917.471264][T15162] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2936'. [ 918.092263][T15166] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2938'. [ 918.422380][T15179] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2944'. [ 918.552089][T15181] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2945'. [ 918.580285][T15181] ksmbd: Unknown IPC event: 0, ignore. [ 919.654577][T15196] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2949'. [ 920.482892][T15203] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2952'. [ 921.358315][T15213] __nla_validate_parse: 2 callbacks suppressed [ 921.358374][T15213] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2958'. [ 921.390522][T15213] ksmbd: Unknown IPC event: 0, ignore. [ 921.397872][T15215] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2957'. [ 922.233805][T15230] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2963'. [ 923.295530][T15241] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2968'. [ 923.562950][T15245] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2969'. [ 923.580611][T15245] ksmbd: Unknown IPC event: 0, ignore. [ 923.717691][T15250] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2970'. [ 924.475904][T15266] netlink: 'syz.0.2977': attribute type 10 has an invalid length. [ 924.504619][T15266] bond0: (slave netdevsim0): Releasing backup interface [ 924.535090][T15266] team0: Port device netdevsim0 added [ 924.550874][T15270] netlink: 'syz.0.2977': attribute type 10 has an invalid length. [ 924.573573][T15270] team0: Port device netdevsim0 removed [ 924.816058][T15270] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 925.000893][T15266] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2977'. [ 925.424518][T15273] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2978'. [ 926.141407][T15297] netlink: 'syz.0.2989': attribute type 10 has an invalid length. [ 926.222041][T15297] bond0: (slave netdevsim0): Releasing backup interface [ 926.226626][T15296] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2988'. [ 926.253764][T15297] team0: Port device netdevsim0 added [ 926.287742][T15300] netlink: 'syz.0.2989': attribute type 10 has an invalid length. [ 926.325409][T15300] team0: Port device netdevsim0 removed [ 926.337365][T15300] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 926.847329][T15300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2989'. [ 927.323442][T15310] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2994'. [ 928.351093][T15329] netlink: 'syz.1.3002': attribute type 10 has an invalid length. [ 928.376542][T15329] bond0: (slave netdevsim0): Releasing backup interface [ 928.403017][T15329] team0: Port device netdevsim0 added [ 928.440724][T15332] netlink: 'syz.1.3002': attribute type 10 has an invalid length. [ 928.489640][T15332] team0: Port device netdevsim0 removed [ 928.527128][T15332] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 928.549192][T15329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3002'. [ 928.672241][T15336] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3004'. [ 928.690234][T15336] ksmbd: Unknown IPC event: 0, ignore. [ 930.755088][T15362] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3014'. [ 930.786189][T15364] netlink: 'syz.2.3015': attribute type 10 has an invalid length. [ 930.826974][T15364] bond0: (slave netdevsim0): Releasing backup interface [ 930.847404][T15364] team0: Port device netdevsim0 added [ 930.861167][T15368] netlink: 'syz.2.3015': attribute type 10 has an invalid length. [ 930.887029][T15368] team0: Port device netdevsim0 removed [ 930.913942][T15368] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 931.349991][T15368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3015'. [ 931.624771][T15372] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3018'. [ 931.658950][T15372] ksmbd: Unknown IPC event: 0, ignore. [ 932.605839][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.612496][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.339667][T15406] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3029'. [ 933.383816][T15406] ksmbd: Unknown IPC event: 0, ignore. [ 933.431166][T15408] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3030'. [ 933.693522][T15416] netlink: 'syz.0.3034': attribute type 10 has an invalid length. [ 933.795998][T15416] veth0_vlan: left promiscuous mode [ 933.821048][T15416] veth0_vlan: entered promiscuous mode [ 933.878743][T15416] team0: Device veth0_vlan failed to register rx_handler [ 935.325770][T15450] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3047'. [ 937.103257][T15481] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3060'. [ 937.897006][T15487] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3062'. [ 937.920027][T15487] ksmbd: Unknown IPC event: 0, ignore. [ 937.927464][T15483] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3061'. [ 938.744316][T15508] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3073'. [ 939.532410][T15518] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3075'. [ 939.969422][T15520] netlink: 'syz.3.3076': attribute type 4 has an invalid length. [ 939.994679][T15520] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3076'. [ 941.711022][T15539] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.3083'. [ 941.799434][T15541] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.3083'. [ 941.964917][T15544] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3084'. [ 942.987402][T15546] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3085'. [ 943.122818][T15553] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3088'. [ 943.140290][T15553] ksmbd: Unknown IPC event: 0, ignore. [ 943.272685][T15559] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3090'. [ 944.258919][T15572] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3094'. [ 944.292042][T15571] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3094'. [ 944.627215][T15585] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3099'. [ 945.227959][T15581] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3097'. [ 945.413801][T15596] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3103'. [ 945.449328][T15584] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3098'. [ 945.458383][T15595] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3103'. [ 945.649330][T15603] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3105'. [ 945.733050][T15600] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3105'. [ 946.638761][T15614] netlink: 'syz.2.3110': attribute type 10 has an invalid length. [ 946.662654][T15614] bond0: (slave netdevsim0): Releasing backup interface [ 946.689514][T15614] team0: Port device netdevsim0 added [ 946.934418][T15618] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3112'. [ 948.024904][T15623] ksmbd: Unknown IPC event: 0, ignore. [ 949.911736][T15661] netlink: 'syz.2.3127': attribute type 10 has an invalid length. [ 949.957839][T15661] netlink: 'syz.2.3127': attribute type 10 has an invalid length. [ 949.968208][T15661] team0: Port device netdevsim0 removed [ 949.984138][T15661] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 950.025169][T15661] __nla_validate_parse: 4 callbacks suppressed [ 950.025208][T15661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3127'. [ 950.282440][T15672] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3130'. [ 950.306407][T15669] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3130'. [ 951.553306][T15691] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 951.599027][T15691] bond0: (slave netdevsim0): Releasing backup interface [ 951.640811][T15691] team0: Port device netdevsim0 added [ 951.647141][T15695] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 951.744462][T15695] team0: Port device netdevsim0 removed [ 951.756936][T15695] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 951.780419][T15700] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.3141'. [ 951.794754][T15691] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3139'. [ 951.814026][T15698] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.3141'. [ 952.053836][T15709] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3146'. [ 953.377060][T15732] netlink: 'syz.2.3152': attribute type 10 has an invalid length. [ 953.442852][T15732] bond0: (slave netdevsim0): Releasing backup interface [ 953.471102][T15732] team0: Port device netdevsim0 added [ 953.478963][T15736] netlink: 'syz.2.3152': attribute type 10 has an invalid length. [ 953.515364][T15736] team0: Port device netdevsim0 removed [ 953.559665][T15736] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 953.584821][T15732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3152'. [ 953.599050][T15739] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3155'. [ 953.618250][T15738] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3155'. [ 953.892059][T15743] netlink: 'syz.1.3166': attribute type 10 has an invalid length. [ 953.945694][T15743] bond0: (slave netdevsim0): Releasing backup interface [ 953.969296][T15743] team0: Port device netdevsim0 added [ 953.983848][T15746] netlink: 'syz.1.3166': attribute type 10 has an invalid length. [ 954.012706][T15746] team0: Port device netdevsim0 removed [ 954.059319][T15746] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 955.017650][T15780] netlink: 'syz.1.3172': attribute type 10 has an invalid length. [ 955.086444][T15780] bond0: (slave netdevsim0): Releasing backup interface [ 955.102631][T15780] team0: Port device netdevsim0 added [ 955.115246][T15785] netlink: 'syz.1.3172': attribute type 10 has an invalid length. [ 955.305868][T15785] team0: Port device netdevsim0 removed [ 955.347774][T15785] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 955.360142][T15789] __nla_validate_parse: 3 callbacks suppressed [ 955.360180][T15789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3172'. [ 955.712046][T15803] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.3180'. [ 955.749943][T15800] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.3180'. [ 956.826223][T15824] netlink: 'syz.2.3188': attribute type 10 has an invalid length. [ 956.881233][T15824] bond0: (slave netdevsim0): Releasing backup interface [ 956.906255][T15824] team0: Port device netdevsim0 added [ 956.916639][T15825] netlink: 'syz.2.3188': attribute type 10 has an invalid length. [ 956.955344][T15825] team0: Port device netdevsim0 removed [ 956.982936][T15825] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 957.007443][T15824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3188'. [ 957.058133][T15832] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3190'. [ 957.074029][T15829] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3190'. [ 957.446514][T15839] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3200'. [ 957.458216][T15834] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3200'. [ 957.860414][T15856] netlink: 'syz.3.3201': attribute type 10 has an invalid length. [ 958.666740][T15856] bond0: (slave netdevsim0): Releasing backup interface [ 958.682257][T15856] team0: Port device netdevsim0 added [ 958.688605][T15858] netlink: 'syz.3.3201': attribute type 10 has an invalid length. [ 958.711029][T15858] team0: Port device netdevsim0 removed [ 958.728925][T15858] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 958.747297][T15866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3201'. [ 958.833176][T15869] netlink: 'syz.0.3203': attribute type 10 has an invalid length. [ 958.866553][T15869] bond0: (slave netdevsim0): Releasing backup interface [ 958.911353][T15869] team0: Port device netdevsim0 added [ 959.094685][T15878] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3206'. [ 959.689959][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 959.938525][T15900] netlink: 'syz.3.3214': attribute type 10 has an invalid length. [ 959.985066][T15900] bond0: (slave netdevsim0): Releasing backup interface [ 960.015894][T15900] team0: Port device netdevsim0 added [ 960.046349][T15902] netlink: 'syz.3.3214': attribute type 10 has an invalid length. [ 960.094412][T15902] team0: Port device netdevsim0 removed [ 960.118115][T15902] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 960.415649][T15914] __nla_validate_parse: 3 callbacks suppressed [ 960.415668][T15914] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3217'. [ 960.465206][T15909] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3217'. [ 960.482587][T15913] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3219'. [ 961.257184][T15927] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3225'. [ 961.768120][T15932] netlink: 'syz.3.3227': attribute type 10 has an invalid length. [ 961.886878][T15932] bond0: (slave netdevsim0): Releasing backup interface [ 961.906095][T15932] team0: Port device netdevsim0 added [ 961.917566][T15933] netlink: 'syz.3.3227': attribute type 10 has an invalid length. [ 961.955734][T15933] team0: Port device netdevsim0 removed [ 961.979230][T15933] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 962.008999][T15937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3227'. [ 962.046348][T15942] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.3229'. [ 962.070956][T15940] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.3229'. [ 962.443465][T15958] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3234'. [ 962.485622][T15954] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3234'. [ 962.808608][T15965] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3239'. [ 963.271191][T15976] netlink: 'syz.0.3242': attribute type 10 has an invalid length. [ 963.353327][T15976] netlink: 'syz.0.3242': attribute type 10 has an invalid length. [ 963.421827][T15976] team0: Port device netdevsim0 removed [ 963.443872][T15976] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 967.976811][T16018] netlink: 'syz.3.3258': attribute type 10 has an invalid length. [ 968.052632][T16018] bond0: (slave netdevsim0): Releasing backup interface [ 968.205552][T16018] team0: Port device netdevsim0 added [ 968.543500][T16042] __nla_validate_parse: 7 callbacks suppressed [ 968.543546][T16042] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3267'. [ 968.556549][T16047] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3265'. [ 968.618389][T16040] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3265'. [ 971.777790][T16062] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3273'. [ 972.432148][T16075] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3279'. [ 973.088916][T16079] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3278'. [ 973.144309][T16078] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3278'. [ 975.660337][T16100] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3286'. [ 976.059135][T16112] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3290'. [ 976.073866][T16109] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3290'. [ 976.084735][T16103] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3287'. [ 976.747169][T16115] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3292'. [ 979.853642][T16130] netlink: 'syz.3.3298': attribute type 10 has an invalid length. [ 980.045032][T16142] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3300'. [ 980.071378][T16134] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3300'. [ 980.418763][T16150] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3304'. [ 983.563960][T16167] netlink: 'syz.1.3309': attribute type 10 has an invalid length. [ 983.593221][T16167] bond0: (slave netdevsim0): Releasing backup interface [ 983.627953][T16167] team0: Port device netdevsim0 added [ 983.907115][T16175] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3314'. [ 983.931829][T16179] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3313'. [ 983.968941][T16176] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3313'. [ 984.729936][T16195] netlink: 'syz.1.3321': attribute type 10 has an invalid length. [ 987.645095][T16195] team0: Port device netdevsim0 removed [ 987.666594][T16195] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 987.679397][T16199] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3321'. [ 987.867974][T16204] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3331'. [ 988.739506][T16219] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3326'. [ 988.764319][T16217] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3326'. [ 989.120721][T16229] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3330'. [ 989.827644][T16241] netlink: 'syz.3.3333': attribute type 10 has an invalid length. [ 989.967857][T16244] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3337'. [ 990.708084][T16251] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3338'. [ 990.776525][T16249] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3338'. [ 991.524358][T16263] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3349'. [ 992.052505][T16270] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3343'. [ 992.764685][T16283] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3348'. [ 993.435714][T16291] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3351'. [ 993.464577][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.475508][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.498529][T16289] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3351'. [ 993.924939][T16298] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3353'. [ 994.714842][T16303] netlink: 'syz.0.3354': attribute type 10 has an invalid length. [ 994.727060][T16303] bond0: (slave netdevsim0): Releasing backup interface [ 994.753112][T16303] team0: Port device netdevsim0 added [ 995.295630][T16320] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3361'. [ 995.949315][T16324] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3363'. [ 996.498788][T16330] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3364'. [ 996.976790][T16327] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.3364'. [ 996.996931][T16334] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3366'. [ 997.818021][T16346] netlink: 'syz.1.3372': attribute type 10 has an invalid length. [ 997.865772][T16346] bond0: (slave netdevsim0): Releasing backup interface [ 998.035024][T16346] team0: Port device netdevsim0 added [ 998.226129][T16361] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3375'. [ 998.256820][T16357] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3375'. [ 998.292844][T16360] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3376'. [ 998.308996][T16346] syz.1.3372 (16346) used greatest stack depth: 18536 bytes left [ 999.514158][T16368] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3378'. [ 1000.031273][T16379] netlink: 'syz.0.3383': attribute type 10 has an invalid length. [ 1000.161967][T16388] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1001.409861][T16407] netlink: 'syz.3.3389': attribute type 10 has an invalid length. [ 1001.605870][T16409] __nla_validate_parse: 2 callbacks suppressed [ 1001.605915][T16409] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1002.429828][T16423] netlink: 'syz.3.3396': attribute type 10 has an invalid length. [ 1002.535934][T16426] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1002.554234][T16425] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1002.833804][T16434] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3401'. [ 1003.870061][T16441] netlink: 'syz.2.3402': attribute type 10 has an invalid length. [ 1003.882675][T16441] bond0: (slave netdevsim0): Releasing backup interface [ 1003.902991][T16441] team0: Port device netdevsim0 added [ 1004.156521][T16452] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3407'. [ 1005.154035][T16462] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3409'. [ 1005.166076][T16461] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3409'. [ 1005.408613][T16466] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3410'. [ 1008.046448][T16485] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1009.246967][T16493] netlink: 'syz.1.3417': attribute type 10 has an invalid length. [ 1009.436145][T16490] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3419'. [ 1009.706518][T16500] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1009.751394][T16497] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1010.120159][T16504] netlink: 'syz.1.3422': attribute type 10 has an invalid length. [ 1010.135059][T16511] netlink: 'syz.2.3424': attribute type 10 has an invalid length. [ 1010.204711][T16510] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1013.658722][T16526] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1014.498736][T16527] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1014.639007][T16531] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3432'. [ 1014.800689][T16537] netlink: 'syz.1.3435': attribute type 10 has an invalid length. [ 1014.847105][T16537] team0: Port device netdevsim0 removed [ 1014.878121][T16537] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1014.892314][T16538] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1014.921659][T16533] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1015.076381][T16537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3435'. [ 1018.048898][T16551] netlink: 'syz.0.3437': attribute type 10 has an invalid length. [ 1019.239376][T16568] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3444'. [ 1019.535419][T16564] netlink: 'syz.3.3439': attribute type 10 has an invalid length. [ 1019.641020][T16567] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3443'. [ 1019.807606][T16574] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3445'. [ 1019.826006][T16573] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3445'. [ 1019.910330][T16578] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1020.404639][T16576] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3446'. [ 1021.319235][T16592] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3453'. [ 1021.414944][T16598] netlink: 'syz.3.3453': attribute type 39 has an invalid length. [ 1021.569278][T16595] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3452'. [ 1022.672141][T16596] netlink: 'syz.0.3454': attribute type 10 has an invalid length. [ 1022.712640][T16607] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3456'. [ 1023.056102][T16612] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3457'. [ 1024.432465][T16636] __nla_validate_parse: 2 callbacks suppressed [ 1024.432495][T16636] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3465'. [ 1024.558662][T16642] netlink: 'syz.2.3465': attribute type 39 has an invalid length. [ 1025.566367][T16638] netlink: 'syz.3.3466': attribute type 10 has an invalid length. [ 1025.580957][T16651] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3469'. [ 1025.597469][T16653] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3469'. [ 1025.768606][T16658] FAULT_INJECTION: forcing a failure. [ 1025.768606][T16658] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.788752][T16656] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1025.792877][T16658] CPU: 1 PID: 16658 Comm: syz.3.3471 Not tainted syzkaller #0 [ 1025.805677][T16658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1025.815796][T16658] Call Trace: [ 1025.819174][T16658] [ 1025.822163][T16658] dump_stack_lvl+0x18c/0x250 [ 1025.826944][T16658] ? show_regs_print_info+0x20/0x20 [ 1025.832500][T16658] ? load_image+0x420/0x420 [ 1025.837095][T16658] ? __might_sleep+0xe0/0xe0 [ 1025.841741][T16658] ? __lock_acquire+0x7d80/0x7d80 [ 1025.846816][T16658] should_fail_ex+0x394/0x4c0 [ 1025.851540][T16658] should_failslab+0x9/0x20 [ 1025.856096][T16658] slab_pre_alloc_hook+0x59/0x300 [ 1025.861189][T16658] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1025.866949][T16658] kmem_cache_alloc+0x5a/0x2c0 [ 1025.871751][T16658] ? getname_flags+0xbb/0x500 [ 1025.876537][T16658] getname_flags+0xbb/0x500 [ 1025.881142][T16658] do_sys_openat2+0xda/0x1d0 [ 1025.885772][T16658] ? do_sys_open+0xe0/0xe0 [ 1025.890231][T16658] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1025.896434][T16658] __x64_sys_openat+0x139/0x160 [ 1025.901322][T16658] do_syscall_64+0x55/0xb0 [ 1025.905778][T16658] ? clear_bhb_loop+0x40/0x90 [ 1025.910488][T16658] ? clear_bhb_loop+0x40/0x90 [ 1025.915235][T16658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1025.921181][T16658] RIP: 0033:0x7ff0ba15d68e [ 1025.925636][T16658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1025.945487][T16658] RSP: 002b:00007ff0bb066ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1025.953980][T16658] RAX: ffffffffffffffda RBX: 00007ff0bb0676c0 RCX: 00007ff0ba15d68e [ 1025.961997][T16658] RDX: 0000000000000002 RSI: 00007ff0bb066f90 RDI: ffffffffffffff9c [ 1025.970015][T16658] RBP: 00007ff0bb067090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.978206][T16658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.986218][T16658] R13: 00007ff0ba416038 R14: 00007ff0ba415fa0 R15: 00007ffd4d7657a8 [ 1025.994259][T16658] [ 1029.431708][T16686] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1029.519390][T16684] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1029.852648][T16690] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3481'. [ 1030.259084][T16692] netlink: 'syz.0.3481': attribute type 39 has an invalid length. [ 1030.464517][T16699] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3484'. [ 1030.530847][T16697] netlink: 'syz.2.3483': attribute type 10 has an invalid length. [ 1033.883435][T16704] netlink: 'syz.3.3485': attribute type 10 has an invalid length. [ 1034.253395][T16720] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1034.307995][T16712] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1035.428444][T16738] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3498'. [ 1035.692064][T16737] netlink: 'syz.0.3496': attribute type 10 has an invalid length. [ 1036.343289][T16748] netlink: 'syz.1.3499': attribute type 10 has an invalid length. [ 1036.374019][T16748] bond0: (slave netdevsim0): Releasing backup interface [ 1036.427853][T16748] team0: Port device netdevsim0 added [ 1036.560180][T16759] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3504'. [ 1036.576790][T16754] netlink: 'syz.2.3503': attribute type 10 has an invalid length. [ 1036.600781][T16757] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3504'. [ 1037.377109][T16772] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3510'. [ 1037.770729][T16774] netlink: 'syz.1.3508': attribute type 10 has an invalid length. [ 1037.778794][T16776] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3509'. [ 1037.792860][T16770] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3509'. [ 1038.254813][T16787] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3522'. [ 1038.646289][T16799] netlink: 'syz.3.3514': attribute type 10 has an invalid length. [ 1038.827779][T16804] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3518'. [ 1038.884972][T16801] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3518'. [ 1039.779430][T16815] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3523'. [ 1040.005420][T16812] netlink: 'syz.1.3520': attribute type 10 has an invalid length. [ 1040.016189][T16817] netlink: 'syz.3.3521': attribute type 10 has an invalid length. [ 1041.093280][T16834] __nla_validate_parse: 2 callbacks suppressed [ 1041.093301][T16834] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3528'. [ 1041.752338][T16845] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1041.779439][T16844] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1042.455631][T16852] netlink: 'syz.2.3535': attribute type 10 has an invalid length. [ 1042.717362][T16868] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1043.879589][T16882] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3546'. [ 1043.917886][T16878] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3546'. [ 1044.181593][T16891] netlink: 'syz.0.3549': attribute type 10 has an invalid length. [ 1045.034585][T16901] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1045.837569][T16904] syzkaller0: entered promiscuous mode [ 1045.850482][T16904] syzkaller0: entered allmulticast mode [ 1045.963758][T16914] syzkaller0: entered promiscuous mode [ 1045.977936][T16914] syzkaller0: entered allmulticast mode [ 1047.541126][T16963] ================================================================== [ 1047.549347][T16963] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 1047.557286][T16963] Write of size 32 at addr ffff88801ee63b38 by task syz.1.3583/16963 [ 1047.565398][T16963] [ 1047.567837][T16963] CPU: 1 PID: 16963 Comm: syz.1.3583 Not tainted syzkaller #0 [ 1047.575394][T16963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1047.585532][T16963] Call Trace: [ 1047.588860][T16963] [ 1047.591836][T16963] dump_stack_lvl+0x18c/0x250 [ 1047.596577][T16963] ? read_lock_is_recursive+0x20/0x20 [ 1047.602017][T16963] ? show_regs_print_info+0x20/0x20 [ 1047.607272][T16963] ? load_image+0x420/0x420 [ 1047.611834][T16963] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1047.617438][T16963] ? __virt_addr_valid+0x10c/0x380 [ 1047.622603][T16963] ? __virt_addr_valid+0x10c/0x380 [ 1047.627777][T16963] ? __virt_addr_valid+0x10c/0x380 [ 1047.632951][T16963] print_report+0xa8/0x210 [ 1047.637426][T16963] ? __bpf_get_stackid+0x6c7/0x900 [ 1047.642644][T16963] kasan_report+0x117/0x150 [ 1047.647204][T16963] ? __bpf_get_stackid+0x6c7/0x900 [ 1047.652380][T16963] kasan_check_range+0x241/0x290 [ 1047.657469][T16963] ? __bpf_get_stackid+0x6c7/0x900 [ 1047.662653][T16963] __asan_memcpy+0x40/0x70 [ 1047.667134][T16963] __bpf_get_stackid+0x6c7/0x900 [ 1047.672141][T16963] bpf_get_stackid_pe+0x2f0/0x410 [ 1047.677250][T16963] bpf_prog_7c99200ca08d4ddc+0x33/0x48 [ 1047.682773][T16963] bpf_overflow_handler+0x1fc/0x510 [ 1047.688081][T16963] ? bpf_overflow_handler+0xde/0x510 [ 1047.693426][T16963] ? tp_perf_event_destroy+0x20/0x20 [ 1047.698761][T16963] ? mark_lock+0x94/0x320 [ 1047.703123][T16963] ? verify_lock_unused+0x140/0x140 [ 1047.708409][T16963] ? __perf_event_account_interrupt+0x187/0x280 [ 1047.714714][T16963] __perf_event_overflow+0x461/0x660 [ 1047.720119][T16963] perf_swevent_overflow+0x274/0x340 [ 1047.725474][T16963] ? perf_event_switch_output+0x790/0x790 [ 1047.731262][T16963] ? rcu_is_watching+0x15/0xb0 [ 1047.736100][T16963] perf_swevent_event+0x45c/0x570 [ 1047.741185][T16963] ? perf_tp_event+0x1550/0x1550 [ 1047.746196][T16963] ___perf_sw_event+0x4ab/0x730 [ 1047.751107][T16963] ? vma_end_read+0x18/0x170 [ 1047.755756][T16963] ? ___perf_sw_event+0x19e/0x730 [ 1047.760839][T16963] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1047.767342][T16963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1047.773392][T16963] ? __lock_acquire+0x7d80/0x7d80 [ 1047.778490][T16963] ? lock_chain_count+0x20/0x20 [ 1047.783502][T16963] __perf_sw_event+0x139/0x270 [ 1047.788331][T16963] do_user_addr_fault+0x1242/0x12d0 [ 1047.793598][T16963] ? lock_chain_count+0x20/0x20 [ 1047.798512][T16963] ? rcu_is_watching+0x15/0xb0 [ 1047.803383][T16963] exc_page_fault+0x64/0x100 [ 1047.808035][T16963] asm_exc_page_fault+0x26/0x30 [ 1047.812950][T16963] RIP: 0033:0x7ffc0b719a21 [ 1047.817418][T16963] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 1047.837086][T16963] RSP: 002b:00007f3a9257eff0 EFLAGS: 00010203 [ 1047.843211][T16963] RAX: 001cf52545cdbf6c RBX: 00007ffc0b7150b0 RCX: 0000000000000018 [ 1047.851237][T16963] RDX: 000000001d4ade79 RSI: 00007f3a9257f0b0 RDI: 7fffffffffffffff [ 1047.859254][T16963] RBP: 00007f3a9257f030 R08: 0000000000000417 R09: 0000000000745d1e [ 1047.867288][T16963] R10: 0000021cb7cec78a R11: 0000000000032326 R12: 0000000000000010 [ 1047.875317][T16963] R13: 00007f3a91a16038 R14: 00007ffc0b715080 R15: 0000000000032326 [ 1047.883361][T16963] [ 1047.886423][T16963] [ 1047.888782][T16963] Allocated by task 16963: [ 1047.893304][T16963] kasan_set_track+0x4e/0x70 [ 1047.897960][T16963] __kasan_kmalloc+0x8f/0xa0 [ 1047.902607][T16963] __kmalloc_node+0xb6/0x240 [ 1047.907264][T16963] bpf_map_area_alloc+0x5e/0x110 [ 1047.912274][T16963] prealloc_elems_and_freelist+0x86/0x1c0 [ 1047.918061][T16963] stack_map_alloc+0x32b/0x4b0 [ 1047.922883][T16963] map_create+0x877/0x12f0 [ 1047.927454][T16963] __sys_bpf+0x651/0x890 [ 1047.931781][T16963] __x64_sys_bpf+0x7c/0x90 [ 1047.936266][T16963] do_syscall_64+0x55/0xb0 [ 1047.940784][T16963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1047.946837][T16963] [ 1047.949204][T16963] Last potentially related work creation: [ 1047.954955][T16963] kasan_save_stack+0x3e/0x60 [ 1047.959695][T16963] __kasan_record_aux_stack+0xaf/0xc0 [ 1047.965131][T16963] call_rcu+0x153/0x900 [ 1047.969352][T16963] __nf_register_net_hook+0x787/0x910 [ 1047.974865][T16963] nf_register_net_hook+0xb2/0x190 [ 1047.980043][T16963] nf_register_net_hooks+0x44/0x1b0 [ 1047.985317][T16963] ebt_register_table+0xd12/0x10e0 [ 1047.990586][T16963] find_inlist_lock_noload+0x16a/0x250 [ 1047.996114][T16963] do_ebt_get_ctl+0x2d6/0x1d30 [ 1048.000939][T16963] nf_getsockopt+0x262/0x280 [ 1048.005654][T16963] ip_getsockopt+0x19f/0x230 [ 1048.010323][T16963] do_sock_getsockopt+0x379/0x450 [ 1048.015407][T16963] __x64_sys_getsockopt+0x1d6/0x280 [ 1048.020664][T16963] do_syscall_64+0x55/0xb0 [ 1048.025134][T16963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1048.031103][T16963] [ 1048.033465][T16963] The buggy address belongs to the object at ffff88801ee63b00 [ 1048.033465][T16963] which belongs to the cache kmalloc-cg-96 of size 96 [ 1048.047736][T16963] The buggy address is located 56 bytes inside of [ 1048.047736][T16963] allocated 80-byte region [ffff88801ee63b00, ffff88801ee63b50) [ 1048.061921][T16963] [ 1048.064290][T16963] The buggy address belongs to the physical page: [ 1048.070831][T16963] page:ffffea00007b98c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ee63 [ 1048.081042][T16963] memcg:ffff88802cd57a01 [ 1048.085413][T16963] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1048.093451][T16963] page_type: 0xffffffff() [ 1048.097926][T16963] raw: 00fff00000000800 ffff888017c4db40 0000000000000000 dead000000000001 [ 1048.106563][T16963] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802cd57a01 [ 1048.115199][T16963] page dumped because: kasan: bad access detected [ 1048.121737][T16963] page_owner tracks the page as allocated [ 1048.127491][T16963] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 2822108769, free_ts 0 [ 1048.144220][T16963] post_alloc_hook+0x1c1/0x200 [ 1048.149074][T16963] get_page_from_freelist+0x2181/0x22a0 [ 1048.154770][T16963] __alloc_pages+0x1f0/0x460 [ 1048.159415][T16963] alloc_page_interleave+0x24/0x1e0 [ 1048.164670][T16963] alloc_slab_page+0x5d/0x180 [ 1048.169413][T16963] new_slab+0x87/0x2d0 [ 1048.173542][T16963] ___slab_alloc+0xc5c/0x12f0 [ 1048.178295][T16963] __kmem_cache_alloc_node+0x11f/0x250 [ 1048.183855][T16963] __kmalloc+0xa7/0x240 [ 1048.188063][T16963] __register_sysctl_table+0x71/0x1210 [ 1048.193587][T16963] net_sysctl_init+0x20/0x80 [ 1048.198334][T16963] sock_init+0x10/0xf0 [ 1048.202486][T16963] do_one_initcall+0x242/0x790 [ 1048.207346][T16963] do_initcall_level+0x13d/0x1f0 [ 1048.212377][T16963] do_initcalls+0x69/0xd0 [ 1048.216762][T16963] kernel_init_freeable+0x3d9/0x560 [ 1048.222030][T16963] page_owner free stack trace missing [ 1048.227455][T16963] [ 1048.229814][T16963] Memory state around the buggy address: [ 1048.235647][T16963] ffff88801ee63a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1048.243754][T16963] ffff88801ee63a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1048.251867][T16963] >ffff88801ee63b00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1048.259984][T16963] ^ [ 1048.266712][T16963] ffff88801ee63b80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1048.274827][T16963] ffff88801ee63c00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1048.282932][T16963] ================================================================== [ 1048.291096][T16963] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1048.298336][T16963] CPU: 1 PID: 16963 Comm: syz.1.3583 Not tainted syzkaller #0 [ 1048.305885][T16963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1048.316076][T16963] Call Trace: [ 1048.319405][T16963] [ 1048.322437][T16963] dump_stack_lvl+0x18c/0x250 [ 1048.327177][T16963] ? show_regs_print_info+0x20/0x20 [ 1048.332451][T16963] ? load_image+0x420/0x420 [ 1048.337032][T16963] panic+0x2ca/0x720 [ 1048.341000][T16963] ? __lock_acquire+0x7d80/0x7d80 [ 1048.346081][T16963] ? bpf_jit_dump+0xd0/0xd0 [ 1048.350660][T16963] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1048.356613][T16963] ? _raw_spin_unlock+0x40/0x40 [ 1048.361538][T16963] ? __bpf_get_stackid+0x6c7/0x900 [ 1048.366737][T16963] check_panic_on_warn+0x84/0xa0 [ 1048.371778][T16963] ? __bpf_get_stackid+0x6c7/0x900 [ 1048.376956][T16963] end_report+0x6f/0x130 [ 1048.381350][T16963] kasan_report+0x128/0x150 [ 1048.385914][T16963] ? __bpf_get_stackid+0x6c7/0x900 [ 1048.391096][T16963] kasan_check_range+0x241/0x290 [ 1048.396095][T16963] ? __bpf_get_stackid+0x6c7/0x900 [ 1048.401268][T16963] __asan_memcpy+0x40/0x70 [ 1048.405766][T16963] __bpf_get_stackid+0x6c7/0x900 [ 1048.410871][T16963] bpf_get_stackid_pe+0x2f0/0x410 [ 1048.415992][T16963] bpf_prog_7c99200ca08d4ddc+0x33/0x48 [ 1048.421521][T16963] bpf_overflow_handler+0x1fc/0x510 [ 1048.426802][T16963] ? bpf_overflow_handler+0xde/0x510 [ 1048.432170][T16963] ? tp_perf_event_destroy+0x20/0x20 [ 1048.437521][T16963] ? mark_lock+0x94/0x320 [ 1048.441911][T16963] ? verify_lock_unused+0x140/0x140 [ 1048.447182][T16963] ? __perf_event_account_interrupt+0x187/0x280 [ 1048.453489][T16963] __perf_event_overflow+0x461/0x660 [ 1048.458882][T16963] perf_swevent_overflow+0x274/0x340 [ 1048.464289][T16963] ? perf_event_switch_output+0x790/0x790 [ 1048.470081][T16963] ? rcu_is_watching+0x15/0xb0 [ 1048.474926][T16963] perf_swevent_event+0x45c/0x570 [ 1048.480026][T16963] ? perf_tp_event+0x1550/0x1550 [ 1048.485035][T16963] ___perf_sw_event+0x4ab/0x730 [ 1048.489945][T16963] ? vma_end_read+0x18/0x170 [ 1048.494599][T16963] ? ___perf_sw_event+0x19e/0x730 [ 1048.499675][T16963] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1048.506179][T16963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1048.512231][T16963] ? __lock_acquire+0x7d80/0x7d80 [ 1048.517339][T16963] ? lock_chain_count+0x20/0x20 [ 1048.522256][T16963] __perf_sw_event+0x139/0x270 [ 1048.527088][T16963] do_user_addr_fault+0x1242/0x12d0 [ 1048.532363][T16963] ? lock_chain_count+0x20/0x20 [ 1048.537279][T16963] ? rcu_is_watching+0x15/0xb0 [ 1048.542112][T16963] exc_page_fault+0x64/0x100 [ 1048.546779][T16963] asm_exc_page_fault+0x26/0x30 [ 1048.551711][T16963] RIP: 0033:0x7ffc0b719a21 [ 1048.556195][T16963] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 1048.575870][T16963] RSP: 002b:00007f3a9257eff0 EFLAGS: 00010203 [ 1048.582001][T16963] RAX: 001cf52545cdbf6c RBX: 00007ffc0b7150b0 RCX: 0000000000000018 [ 1048.590051][T16963] RDX: 000000001d4ade79 RSI: 00007f3a9257f0b0 RDI: 7fffffffffffffff [ 1048.598120][T16963] RBP: 00007f3a9257f030 R08: 0000000000000417 R09: 0000000000745d1e [ 1048.606175][T16963] R10: 0000021cb7cec78a R11: 0000000000032326 R12: 0000000000000010 [ 1048.614212][T16963] R13: 00007f3a91a16038 R14: 00007ffc0b715080 R15: 0000000000032326 [ 1048.622270][T16963] [ 1048.625923][T16963] Kernel Offset: disabled [ 1048.630275][T16963] Rebooting in 86400 seconds..