last executing test programs: 4.576502291s ago: executing program 2 (id=4180): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.389206326s ago: executing program 2 (id=4187): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.152422105s ago: executing program 2 (id=4191): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/101, 0x65}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) setsockopt$sock_attach_bpf(r0, 0x29, 0x7, &(0x7f0000000000)=r1, 0xc) 3.371613998s ago: executing program 2 (id=4202): mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071110200000000008510000002000000850000009e00000095003300000000009500a50500000000afffef6f61e1ad477346a7ddf1f815167013fcd1650c4684441d86691f3e2bf00b348729237f29dfaee7ac234ccb9c38a8a09a9f0ff46393b1d90a608b30b77bab0aed5ed69fff9256c1a5d1d907ad79c5e7a468813eee5fb7b6adbdf04d9a946072650bfe"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000007b000000720f00ff00e300003c00000000000000950000000000000018518dab6a26f2c998f6fe59b4100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x12) socketpair(0x1, 0x0, 0x0, &(0x7f0000000200)) 3.230881759s ago: executing program 2 (id=4207): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 3.163132535s ago: executing program 3 (id=4208): r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 3.135055707s ago: executing program 2 (id=4210): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110340000000000630000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/246, 0x6d, 0xf6, 0x0, 0x80}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x90) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 2.145262787s ago: executing program 3 (id=4216): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2, 0x5, @remote}, 0x10, 0x0}, 0x48800) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 1.971156191s ago: executing program 3 (id=4220): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 1.898051357s ago: executing program 4 (id=4221): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1e024}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.86605064s ago: executing program 3 (id=4222): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x100000, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair(0xa, 0x3, 0x3a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x7fe2, 0x5, 0x140}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000140)="dd18079527a0", &(0x7f0000000080)=""/155}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000180)={r3, &(0x7f0000000140)}, 0x20) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f06"], 0x3e) 1.844986591s ago: executing program 0 (id=4223): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 1.772829377s ago: executing program 4 (id=4224): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 1.48338189s ago: executing program 4 (id=4225): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.408647937s ago: executing program 0 (id=4227): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000b00)=""/4100, 0x1004}, {&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000001b40)=""/280, 0x118}, {&(0x7f0000000900)=""/195, 0xc3}, {&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000700)=""/250, 0xfa}, {&(0x7f0000000280)=""/89, 0x59}], 0x8}, 0x0) 1.186712025s ago: executing program 1 (id=4231): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 1.1160818s ago: executing program 1 (id=4232): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1.026743967s ago: executing program 1 (id=4233): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='T', 0x1}], 0x1}, 0x4dc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 937.686074ms ago: executing program 1 (id=4234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x37}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000540)="b88a0f00000000000000000088a8", 0xe}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xc, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x2c00) perf_event_open(&(0x7f00000000c0)={0x2, 0x73, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 574.764194ms ago: executing program 0 (id=4235): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 561.729065ms ago: executing program 3 (id=4236): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 529.391427ms ago: executing program 4 (id=4237): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x2, 0x0, 0x0) 454.952423ms ago: executing program 4 (id=4238): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0x41, 0x55, &(0x7f0000000180)="a06ad876d56a0064d082778c393848e47aafb9fdfba3fda2b4160fe5434f8788a443603e825bc86755a2eacec3", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180)}, 0x28) 428.210295ms ago: executing program 1 (id=4239): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c0000001e006bcd9e3fe3dc6e08000007000000000000007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 359.688941ms ago: executing program 0 (id=4240): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x4003}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000feff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)=r2}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)=0x5, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r5, &(0x7f0000000100), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000440), 0x12) 353.277752ms ago: executing program 4 (id=4241): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 200.136533ms ago: executing program 0 (id=4243): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='T', 0x1}], 0x1}, 0x4dc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 146.065108ms ago: executing program 1 (id=4244): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000b00)=""/4100, 0x1004}, {&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000001b40)=""/280, 0x118}, {&(0x7f0000000900)=""/195, 0xc3}, {&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000700)=""/250, 0xfa}, {&(0x7f0000000280)=""/89, 0x59}], 0x8}, 0x0) 81.090823ms ago: executing program 3 (id=4245): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000020850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='jbd2_handle_stats\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 0 (id=4246): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0xd, 0x0, 0x0, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) kernel console output (not intermixed with test programs): epth: 20024 bytes left [ 92.629826][ T3554] Bluetooth: hci4: unexpected event 0x30 length: 15 > 3 [ 94.415815][ T3552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.436537][ T3552] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.444560][ T3552] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.452472][ T3552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.461689][ T3552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.474971][ T3552] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.187632][ T4290] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.294'. [ 95.330663][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 95.517476][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.871114][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.119781][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.288569][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.298186][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.325260][ T4267] device bridge_slave_0 entered promiscuous mode [ 96.354189][ T4330] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.311'. [ 96.574779][ T3552] Bluetooth: hci5: command tx timeout [ 96.672766][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.840620][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.851212][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.865106][ T4267] device bridge_slave_1 entered promiscuous mode [ 97.242394][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.279103][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.304897][ T4358] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.323'. [ 97.470620][ T4267] team0: Port device team_slave_0 added [ 97.536673][ T4267] team0: Port device team_slave_1 added [ 97.922759][ T4370] netlink: 'syz.1.330': attribute type 29 has an invalid length. [ 98.050790][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.095158][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.163325][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.194564][ T4370] netlink: 'syz.1.330': attribute type 29 has an invalid length. [ 98.248525][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.273599][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.338888][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.366109][ T4371] netlink: 'syz.1.330': attribute type 29 has an invalid length. [ 98.654530][ T3552] Bluetooth: hci5: command tx timeout [ 99.251943][ T4384] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.336'. [ 99.388670][ T4267] device hsr_slave_0 entered promiscuous mode [ 99.400876][ T4267] device hsr_slave_1 entered promiscuous mode [ 99.421580][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.434274][ T4267] Cannot create hsr debugfs directory [ 99.734555][ T4400] netlink: 'syz.4.344': attribute type 3 has an invalid length. [ 99.795331][ T4400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.344'. [ 100.038105][ T4405] netlink: 'syz.4.346': attribute type 29 has an invalid length. [ 100.114952][ T4405] netlink: 'syz.4.346': attribute type 29 has an invalid length. [ 100.123846][ T4408] netlink: 'syz.4.346': attribute type 29 has an invalid length. [ 100.223726][ T4416] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.350'. [ 100.480529][ T4426] netlink: 'syz.2.356': attribute type 3 has an invalid length. [ 100.517130][ T4426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.356'. [ 100.783421][ T3552] Bluetooth: hci5: command tx timeout [ 101.125387][ T4437] netlink: 'syz.3.361': attribute type 29 has an invalid length. [ 101.157471][ T4437] netlink: 'syz.3.361': attribute type 29 has an invalid length. [ 102.253627][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.263600][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.359666][ T34] device hsr_slave_0 left promiscuous mode [ 102.369854][ T34] device hsr_slave_1 left promiscuous mode [ 102.376963][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.388902][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.399536][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.407604][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.419957][ T34] device bridge_slave_1 left promiscuous mode [ 102.427353][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.439312][ T34] device bridge_slave_0 left promiscuous mode [ 102.449119][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.477504][ T4452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.367'. [ 102.487852][ T34] device veth1_macvtap left promiscuous mode [ 102.501297][ T34] device veth0_macvtap left promiscuous mode [ 102.508201][ T34] device veth1_vlan left promiscuous mode [ 102.514781][ T34] device veth0_vlan left promiscuous mode [ 102.825879][ T3554] Bluetooth: hci5: command tx timeout [ 103.031993][ T34] team0 (unregistering): Port device team_slave_1 removed [ 103.065076][ T34] team0 (unregistering): Port device team_slave_0 removed [ 103.096805][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.127429][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.399373][ T34] bond0 (unregistering): Released all slaves [ 103.469885][ T4446] device bridge_slave_1 left promiscuous mode [ 103.478899][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.507904][ T4446] device bridge_slave_0 left promiscuous mode [ 103.514188][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.682997][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.495049][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.499896][ T4469] validate_nla: 2 callbacks suppressed [ 104.499914][ T4469] netlink: 'syz.3.372': attribute type 29 has an invalid length. [ 104.522476][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.558843][ T4469] netlink: 'syz.3.372': attribute type 29 has an invalid length. [ 104.575389][ T4472] netlink: 'syz.3.372': attribute type 29 has an invalid length. [ 104.592586][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.734200][ T4479] netlink: 'syz.3.377': attribute type 3 has an invalid length. [ 104.747591][ T4479] netlink: 132 bytes leftover after parsing attributes in process `syz.3.377'. [ 104.795208][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.854047][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.869373][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.920006][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.951507][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.963360][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.988352][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.995656][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.025502][ T4488] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.034783][ T4488] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.119308][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.130176][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.150254][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.171995][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.179231][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.201222][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.218797][ T4490] device bridge_slave_1 left promiscuous mode [ 105.235682][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.271375][ T4490] device bridge_slave_0 left promiscuous mode [ 105.290155][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.433839][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.447684][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.467292][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.491556][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.521185][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.575499][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.585188][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.604039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.640160][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.660452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.692506][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.097970][ T4503] netlink: 'syz.3.384': attribute type 29 has an invalid length. [ 106.147936][ T4503] netlink: 'syz.3.384': attribute type 29 has an invalid length. [ 106.187638][ T4504] netlink: 'syz.3.384': attribute type 29 has an invalid length. [ 106.391378][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.400320][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.440619][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.535834][ T4515] netlink: 'syz.2.389': attribute type 3 has an invalid length. [ 106.537305][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.543506][ T4515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.389'. [ 106.576161][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.666491][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.685748][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.716298][ T4267] device veth0_vlan entered promiscuous mode [ 106.724991][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.732964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.769750][ T4267] device veth1_vlan entered promiscuous mode [ 106.860751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.869843][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.906568][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.966205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.008525][ T4267] device veth0_macvtap entered promiscuous mode [ 107.034763][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.046181][ T4267] device veth1_macvtap entered promiscuous mode [ 107.156777][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.190626][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.222712][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.255391][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.274610][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.301051][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.321340][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.364443][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.398860][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.449811][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.469781][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.496906][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.523260][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.554481][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.587344][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.613901][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.639338][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.667006][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.697605][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.732373][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.764591][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.778563][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.800460][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.817398][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.835257][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.854029][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.131725][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.164483][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.197027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.234790][ T3631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.242934][ T3631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.296884][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.412983][ T4540] delete_channel: no stack [ 108.945412][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.954510][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.998296][ T4565] device bridge_slave_1 left promiscuous mode [ 109.040982][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.081753][ T4565] device bridge_slave_0 left promiscuous mode [ 109.093919][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.245042][ T4574] delete_channel: no stack [ 109.876172][ T4596] tun0: tun_chr_ioctl cmd 2147767520 [ 109.933478][ T4600] delete_channel: no stack [ 110.607160][ T4626] delete_channel: no stack [ 110.703792][ T4633] tun0: tun_chr_ioctl cmd 2147767520 [ 111.318573][ T4663] delete_channel: no stack [ 111.544870][ T4674] tun0: tun_chr_ioctl cmd 2147767520 [ 112.434962][ T4707] tun0: tun_chr_ioctl cmd 2147767520 [ 112.523059][ T4716] syz.2.474 uses obsolete (PF_INET,SOCK_PACKET) [ 113.163279][ T4743] tun0: tun_chr_ioctl cmd 2147767520 [ 114.022692][ T4791] netlink: 'syz.3.509': attribute type 21 has an invalid length. [ 114.857855][ T4826] netlink: 'syz.0.524': attribute type 21 has an invalid length. [ 115.457040][ T4866] netlink: 'syz.4.543': attribute type 21 has an invalid length. [ 116.207130][ T4895] netlink: 'syz.4.555': attribute type 21 has an invalid length. [ 117.159143][ T4930] netlink: 'syz.2.570': attribute type 21 has an invalid length. [ 121.842173][ T5128] sock: sock_set_timeout: `syz.1.660' (pid 5128) tries to set negative timeout [ 123.024297][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.032023][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.130892][ T5179] ÿÿÿÿÿÿ: renamed from bridge0 [ 129.019991][ T5406] netlink: 'syz.4.765': attribute type 21 has an invalid length. [ 129.941455][ T5434] netlink: 'syz.3.778': attribute type 21 has an invalid length. [ 131.144747][ T5480] netlink: 'syz.0.793': attribute type 21 has an invalid length. [ 131.492599][ T3552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.503555][ T3552] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.511469][ T3552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.522703][ T3552] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.545775][ T3552] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 131.554447][ T3552] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.229019][ T5487] chnl_net:caif_netlink_parms(): no params data found [ 132.283435][ T5515] netlink: 'syz.3.805': attribute type 21 has an invalid length. [ 132.516356][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.525367][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.534009][ T5487] device bridge_slave_0 entered promiscuous mode [ 132.555565][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.588479][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.639048][ T5487] device bridge_slave_1 entered promiscuous mode [ 132.814621][ T5487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.872357][ T5487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.907111][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.913476][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.076610][ T5487] team0: Port device team_slave_0 added [ 133.110715][ T5487] team0: Port device team_slave_1 added [ 133.241029][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.258508][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.332657][ T5487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.363741][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.398846][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.434012][ T5487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.544555][ T5555] netlink: 'syz.0.817': attribute type 21 has an invalid length. [ 133.614736][ T5487] device hsr_slave_0 entered promiscuous mode [ 133.624793][ T3552] Bluetooth: hci1: command tx timeout [ 133.706134][ T5487] device hsr_slave_1 entered promiscuous mode [ 133.733009][ T5487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.755300][ T5487] Cannot create hsr debugfs directory [ 134.236795][ T5487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.407762][ T5487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.602853][ T5487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.747624][ T5487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.126713][ T5487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.170151][ T5487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.211212][ T5487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.250005][ T5487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.694728][ T3552] Bluetooth: hci1: command tx timeout [ 135.909146][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.111105][ T5487] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.157920][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.175431][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.334155][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.353818][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.373895][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.381123][ T5616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.399331][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.419936][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.440042][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.447347][ T5616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.463033][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.483053][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.583913][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.625524][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.648123][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.723891][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.752538][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.769390][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.797715][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.829831][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.843979][ T5685] netlink: 'syz.4.869': attribute type 16 has an invalid length. [ 136.866794][ T5685] netlink: 168 bytes leftover after parsing attributes in process `syz.4.869'. [ 136.941490][ T5487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.977831][ T5487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.996644][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.013760][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.145095][ T5703] netlink: 'syz.4.878': attribute type 21 has an invalid length. [ 137.368052][ T34] device hsr_slave_0 left promiscuous mode [ 137.386978][ T34] device hsr_slave_1 left promiscuous mode [ 137.411856][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.423291][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.437728][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.445590][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.470351][ T34] device veth1_macvtap left promiscuous mode [ 137.476600][ T34] device veth0_macvtap left promiscuous mode [ 137.482797][ T34] device veth1_vlan left promiscuous mode [ 137.488915][ T34] device veth0_vlan left promiscuous mode [ 137.775868][ T3552] Bluetooth: hci1: command tx timeout [ 137.939926][ T34] team0 (unregistering): Port device team_slave_1 removed [ 137.972347][ T34] team0 (unregistering): Port device team_slave_0 removed [ 138.002464][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.041065][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.340797][ T34] bond0 (unregistering): Released all slaves [ 138.367658][ T5717] netlink: 'syz.1.884': attribute type 16 has an invalid length. [ 138.375942][ T5717] netlink: 168 bytes leftover after parsing attributes in process `syz.1.884'. [ 138.402701][ T5720] netlink: 'syz.0.885': attribute type 19 has an invalid length. [ 138.571627][ T5732] netlink: 'syz.4.891': attribute type 21 has an invalid length. [ 138.704252][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.727879][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.761636][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.840711][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.863258][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.908733][ T5747] netlink: 'syz.0.898': attribute type 16 has an invalid length. [ 138.944792][ T5747] netlink: 168 bytes leftover after parsing attributes in process `syz.0.898'. [ 139.023404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.062774][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.074089][ T5487] device veth0_vlan entered promiscuous mode [ 139.099225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.111912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.140256][ T5487] device veth1_vlan entered promiscuous mode [ 139.193763][ T5755] tap0: tun_chr_ioctl cmd 1074025675 [ 139.211648][ T5755] tap0: persist disabled [ 139.230899][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.250816][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.265243][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.294125][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.316451][ T5487] device veth0_macvtap entered promiscuous mode [ 139.350286][ T5759] netlink: 'syz.4.904': attribute type 21 has an invalid length. [ 139.376692][ T5487] device veth1_macvtap entered promiscuous mode [ 139.435295][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.444284][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.507030][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.564558][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.596319][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.628467][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.671308][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.703255][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.724474][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.772157][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.795594][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.808494][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.829281][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.854968][ T3552] Bluetooth: hci1: command tx timeout [ 139.860756][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.904587][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.914718][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.925500][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.943439][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.954857][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.968515][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.981307][ T5771] netlink: 'syz.0.911': attribute type 16 has an invalid length. [ 139.991982][ T5783] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.916'. [ 140.015145][ T5771] netlink: 168 bytes leftover after parsing attributes in process `syz.0.911'. [ 140.034700][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.054837][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.072117][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.091581][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.122120][ T5487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.138211][ T5487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.157099][ T5487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.176025][ T5487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.207305][ T5787] netlink: 'syz.4.918': attribute type 21 has an invalid length. [ 140.283899][ T5791] tap0: tun_chr_ioctl cmd 1074025675 [ 140.309706][ T5791] tap0: persist disabled [ 140.444217][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.471976][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.514122][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.546853][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.561311][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.575969][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.783843][ T5817] netlink: 'syz.1.929': attribute type 16 has an invalid length. [ 140.810493][ T5817] netlink: 168 bytes leftover after parsing attributes in process `syz.1.929'. [ 140.846509][ T5819] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.932'. [ 141.017546][ T5826] tap0: tun_chr_ioctl cmd 1074025675 [ 141.044339][ T5826] tap0: persist disabled [ 141.606650][ T5856] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.949'. [ 141.812478][ T5861] tap0: tun_chr_ioctl cmd 1074025675 [ 141.828058][ T5861] tap0: persist disabled [ 142.248816][ T5887] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.966'. [ 142.438223][ T5895] validate_nla: 1 callbacks suppressed [ 142.438242][ T5895] netlink: 'syz.4.970': attribute type 29 has an invalid length. [ 142.482996][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 142.675593][ T5903] tap0: tun_chr_ioctl cmd 1074025675 [ 142.691330][ T5903] tap0: persist disabled [ 142.879734][ T5918] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.982'. [ 143.062612][ T5927] netlink: 'syz.2.986': attribute type 29 has an invalid length. [ 143.106182][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 144.791598][ T6004] netlink: 'syz.1.1018': attribute type 29 has an invalid length. [ 144.824487][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 145.386442][ T6039] netlink: 'syz.4.1040': attribute type 29 has an invalid length. [ 145.394325][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 145.723996][ T6054] netlink: 212904 bytes leftover after parsing attributes in process `syz.1.1049'. [ 146.283259][ T6083] netlink: 212904 bytes leftover after parsing attributes in process `syz.0.1064'. [ 146.499719][ T6095] netlink: 'syz.1.1069': attribute type 2 has an invalid length. [ 146.528851][ T6095] netlink: 'syz.1.1069': attribute type 1 has an invalid length. [ 146.555032][ T6095] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1069'. [ 146.578884][ T6098] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.1071'. [ 147.190024][ T6126] netlink: 'syz.2.1084': attribute type 2 has an invalid length. [ 147.204550][ T6126] netlink: 'syz.2.1084': attribute type 1 has an invalid length. [ 147.230513][ T6129] netlink: 'syz.3.1086': attribute type 4 has an invalid length. [ 147.272698][ T6129] __nla_validate_parse: 3 callbacks suppressed [ 147.272718][ T6129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1086'. [ 147.491852][ T6143] netlink: 212904 bytes leftover after parsing attributes in process `syz.1.1093'. [ 147.821891][ T6158] netlink: 'syz.0.1100': attribute type 2 has an invalid length. [ 147.861636][ T6158] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 147.910396][ T6163] netlink: 'syz.2.1102': attribute type 4 has an invalid length. [ 147.912817][ T6160] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.1101'. [ 147.924522][ T6158] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1100'. [ 147.953386][ T6163] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1102'. [ 148.120138][ T6171] netlink: 212904 bytes leftover after parsing attributes in process `syz.1.1108'. [ 148.144949][ T6176] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.1107'. [ 148.348486][ T3552] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 148.427647][ T6191] netlink: 'syz.2.1116': attribute type 4 has an invalid length. [ 148.462559][ T6191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1116'. [ 148.508897][ T6196] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.1118'. [ 148.639126][ T6204] netlink: 'syz.4.1122': attribute type 2 has an invalid length. [ 148.654930][ T6204] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 148.669228][ T6204] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1122'. [ 149.212226][ T6228] netlink: 'syz.4.1131': attribute type 4 has an invalid length. [ 149.475221][ T6241] netlink: 'syz.1.1138': attribute type 2 has an invalid length. [ 149.490917][ T6241] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 149.815709][ T6262] netlink: 'syz.4.1147': attribute type 4 has an invalid length. [ 152.691007][ T6395] __nla_validate_parse: 8 callbacks suppressed [ 152.691026][ T6395] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1207'. [ 153.199889][ T6418] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1215'. [ 153.291069][ T6423] validate_nla: 20 callbacks suppressed [ 153.291088][ T6423] netlink: 'syz.3.1217': attribute type 29 has an invalid length. [ 153.308027][ T6423] netlink: 'syz.3.1217': attribute type 29 has an invalid length. [ 153.328461][ T6425] netlink: 'syz.2.1220': attribute type 29 has an invalid length. [ 153.338790][ T6423] netlink: 'syz.3.1217': attribute type 29 has an invalid length. [ 153.350751][ T6427] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1219'. [ 153.378572][ T6423] netlink: 'syz.3.1217': attribute type 29 has an invalid length. [ 153.394779][ T6423] netlink: 'syz.3.1217': attribute type 29 has an invalid length. [ 154.096537][ T6455] netlink: 'syz.4.1232': attribute type 33 has an invalid length. [ 154.131483][ T6455] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1232'. [ 154.169011][ T6456] netlink: 'syz.2.1233': attribute type 29 has an invalid length. [ 154.203224][ T6458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1234'. [ 154.339640][ T6466] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1236'. [ 154.640932][ T6486] netlink: 'syz.2.1247': attribute type 29 has an invalid length. [ 154.708336][ T6488] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1248'. [ 154.970727][ T6498] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1253'. [ 156.763580][ T6528] netlink: 'syz.3.1264': attribute type 29 has an invalid length. [ 156.950737][ T6540] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1269'. [ 159.129790][ T6566] netlink: 'syz.1.1281': attribute type 29 has an invalid length. [ 162.539107][ T6713] device syzkaller0 entered promiscuous mode [ 164.611322][ T6748] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.1357'. [ 166.129106][ T6784] device syzkaller0 entered promiscuous mode [ 166.194250][ T6801] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.1375'. [ 169.091621][ T6833] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.1390'. [ 169.161359][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1391'. [ 169.878754][ T6854] device syzkaller0 entered promiscuous mode [ 170.897233][ T3554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.906969][ T3554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.921256][ T3554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.929597][ T3554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.947397][ T3556] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.955468][ T3556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.259727][ T6883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1408'. [ 172.679063][ T6896] netlink: 'syz.4.1416': attribute type 2 has an invalid length. [ 172.687809][ T6896] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1416'. [ 172.831887][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.904297][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 172.974914][ T3556] Bluetooth: hci0: command tx timeout [ 172.998068][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.441938][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.560728][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.349620][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.358370][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.367954][ T6876] device bridge_slave_0 entered promiscuous mode [ 174.377165][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.384564][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.393208][ T6876] device bridge_slave_1 entered promiscuous mode [ 174.595209][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.619283][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1433'. [ 174.696801][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.965139][ T6876] team0: Port device team_slave_0 added [ 175.006547][ T6876] team0: Port device team_slave_1 added [ 175.054588][ T3556] Bluetooth: hci0: command tx timeout [ 175.085770][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.095834][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.123096][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.137017][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.154431][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.172343][ T6967] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1443'. [ 175.190492][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.202723][ T6961] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.224856][ T6961] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1441'. [ 175.846549][ T6876] device hsr_slave_0 entered promiscuous mode [ 175.882296][ T6876] device hsr_slave_1 entered promiscuous mode [ 175.889365][ T6876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.906491][ T6876] Cannot create hsr debugfs directory [ 175.912567][ T6991] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.927995][ T6991] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1455'. [ 176.113776][ T7003] netlink: 'syz.2.1460': attribute type 6 has an invalid length. [ 176.593317][ T7034] netlink: 'syz.0.1474': attribute type 6 has an invalid length. [ 176.605371][ T7033] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.623895][ T7033] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1473'. [ 177.134636][ T3556] Bluetooth: hci0: command tx timeout [ 177.212896][ T55] device hsr_slave_0 left promiscuous mode [ 177.262907][ T55] device hsr_slave_1 left promiscuous mode [ 177.280930][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.323162][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.378332][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.434947][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.488227][ T55] device bridge_slave_1 left promiscuous mode [ 177.535160][ T55] ÿÿÿÿÿÿ: port 2(bridge_slave_1) entered disabled state [ 177.611859][ T55] device bridge_slave_0 left promiscuous mode [ 177.673539][ T55] ÿÿÿÿÿÿ: port 1(bridge_slave_0) entered disabled state [ 177.859176][ T55] device veth1_macvtap left promiscuous mode [ 177.884553][ T55] device veth0_macvtap left promiscuous mode [ 177.890876][ T55] device veth1_vlan left promiscuous mode [ 177.905103][ T55] device veth0_vlan left promiscuous mode [ 178.491691][ T55] team0 (unregistering): Port device team_slave_1 removed [ 178.522518][ T55] team0 (unregistering): Port device team_slave_0 removed [ 178.554478][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.585393][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.863944][ T55] bond0 (unregistering): Released all slaves [ 178.929504][ T7061] netlink: 'syz.2.1486': attribute type 6 has an invalid length. [ 179.007557][ T7069] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.022172][ T7069] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1490'. [ 179.142119][ T6876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.181478][ T6876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.212051][ T6876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.214856][ T3556] Bluetooth: hci0: command tx timeout [ 179.258575][ T6876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.449557][ T7089] netlink: 'syz.2.1499': attribute type 6 has an invalid length. [ 179.935735][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.314069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.377141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.458023][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.595323][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.621416][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.630824][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.638016][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.652182][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.663563][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.678592][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.685884][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.722277][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.771465][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.824225][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.840671][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.861237][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.888516][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.923643][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.948191][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.991829][ T7111] netlink: 'syz.0.1509': attribute type 22 has an invalid length. [ 181.007568][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 181.041527][ T7115] netlink: 'syz.3.1511': attribute type 6 has an invalid length. [ 181.063712][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.085527][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.094302][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.133581][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.172466][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.229847][ T7127] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1517'. [ 182.232208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.255294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.305841][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.362389][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.387937][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.438398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.449099][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.471046][ T6876] device veth0_vlan entered promiscuous mode [ 182.481876][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.501669][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.533262][ T6876] device veth1_vlan entered promiscuous mode [ 182.575382][ T7148] netlink: 'syz.4.1525': attribute type 22 has an invalid length. [ 182.583600][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 182.691145][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.700180][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.729202][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.756789][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.789815][ T6876] device veth0_macvtap entered promiscuous mode [ 182.813007][ T6876] device veth1_macvtap entered promiscuous mode [ 182.888557][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.916808][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.953138][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.982458][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.014411][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.083785][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.119966][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.189986][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.258585][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.334124][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.352672][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.388859][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.433768][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.494067][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.544169][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.603007][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.654170][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.695203][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.731293][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.761918][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.805952][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.817616][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.833188][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.859692][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.913160][ T7182] netlink: 'syz.3.1541': attribute type 22 has an invalid length. [ 183.943307][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 183.967333][ T6876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.976719][ T6876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.001899][ T6876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.022194][ T6876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.182877][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.223116][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.243517][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.302691][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.321733][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.375787][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.685185][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 185.714931][ T7250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.173276][ T7274] netlink: 'syz.2.1582': attribute type 16 has an invalid length. [ 186.204754][ T7274] netlink: 'syz.2.1582': attribute type 3 has an invalid length. [ 186.232064][ T7274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1582'. [ 187.557327][ T7313] netlink: 'syz.1.1598': attribute type 16 has an invalid length. [ 187.603588][ T7313] netlink: 'syz.1.1598': attribute type 3 has an invalid length. [ 187.637961][ T7313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1598'. [ 188.133908][ T7318] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 188.191736][ T7318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.032721][ T7354] netlink: 'syz.3.1615': attribute type 16 has an invalid length. [ 189.080329][ T7354] netlink: 'syz.3.1615': attribute type 3 has an invalid length. [ 189.123863][ T7354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1615'. [ 190.347035][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 190.363293][ T7371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.413177][ T7401] netlink: 'syz.3.1632': attribute type 16 has an invalid length. [ 190.425644][ T7401] netlink: 'syz.3.1632': attribute type 3 has an invalid length. [ 190.442543][ T7401] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1632'. [ 191.071568][ T7431] netlink: 'syz.1.1646': attribute type 16 has an invalid length. [ 191.092586][ T7431] netlink: 'syz.1.1646': attribute type 3 has an invalid length. [ 191.101069][ T7431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1646'. [ 191.294575][ T3550] Bluetooth: hci4: command 0x0406 tx timeout [ 191.294802][ T3552] Bluetooth: hci2: command 0x0406 tx timeout [ 191.701362][ T7454] netlink: 121244 bytes leftover after parsing attributes in process `syz.0.1655'. [ 192.029297][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.072601][ T7439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.808877][ T7472] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.926978][ T7472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.305410][ T7494] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.1672'. [ 193.328511][ T7494] netlink: 'syz.3.1672': attribute type 1 has an invalid length. [ 193.388555][ T7498] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 193.396726][ T7472] syz.4.1662 (7472) used greatest stack depth: 18616 bytes left [ 193.424141][ T7498] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1674'. [ 194.121893][ T7528] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.1686'. [ 194.139373][ T7528] netlink: 'syz.1.1686': attribute type 1 has an invalid length. [ 194.332926][ T7535] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 194.398891][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.398949][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.583808][ T7540] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 194.612453][ T7540] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1692'. [ 194.752291][ T7535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.105605][ T7575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.173454][ T7575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.256378][ T7592] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.1713'. [ 196.307286][ T7592] netlink: 'syz.0.1713': attribute type 1 has an invalid length. [ 196.553073][ T7605] netlink: 121244 bytes leftover after parsing attributes in process `syz.1.1719'. [ 197.081812][ T7621] tun0: tun_chr_ioctl cmd 1074812117 [ 197.130786][ T7624] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.1727'. [ 197.164704][ T7624] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 197.493049][ T7644] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.1736'. [ 197.704906][ T7637] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 197.742885][ T7637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.925082][ T7656] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.210213][ T7656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.479682][ T7663] tun0: tun_chr_ioctl cmd 1074812117 [ 198.883171][ T7680] netlink: 'syz.2.1750': attribute type 1 has an invalid length. [ 198.910172][ T7680] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1750'. [ 199.312021][ T7696] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 199.396737][ T7696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.544105][ T7699] tun0: tun_chr_ioctl cmd 1074812117 [ 200.063126][ T7715] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1765'. [ 200.359772][ T7730] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1772'. [ 200.378554][ T7731] tun0: tun_chr_ioctl cmd 1074812117 [ 200.837594][ T7749] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1779'. [ 201.041554][ T7757] netlink: 'syz.1.1781': attribute type 10 has an invalid length. [ 201.167393][ T7757] bond0: (slave bond_slave_0): Releasing backup interface [ 201.259607][ T7765] tun0: tun_chr_ioctl cmd 1074812117 [ 201.556060][ T7779] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1794'. [ 201.942894][ T7793] netlink: 'syz.0.1801': attribute type 10 has an invalid length. [ 202.083018][ T7793] bond0: (slave bond_slave_0): Releasing backup interface [ 202.849130][ T7805] tun0: tun_chr_ioctl cmd 1074812117 [ 202.891462][ T7809] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 203.015767][ T7809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.091277][ T7816] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1809'. [ 203.549899][ T7840] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.1820'. [ 203.719330][ T7838] device syzkaller0 entered promiscuous mode [ 205.526229][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 205.541679][ T7852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.220805][ T7889] device syzkaller0 entered promiscuous mode [ 206.261272][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 206.419785][ T7894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.774079][ T7908] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1847'. [ 206.817557][ T7908] netlink: 'syz.1.1847': attribute type 1 has an invalid length. [ 206.825775][ T7908] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1847'. [ 207.934938][ T7915] netlink: 'syz.1.1849': attribute type 10 has an invalid length. [ 208.919605][ T7954] device syzkaller0 entered promiscuous mode [ 209.336970][ T7971] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1869'. [ 209.346578][ T7971] netlink: 'syz.3.1869': attribute type 1 has an invalid length. [ 209.365825][ T7971] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1869'. [ 213.588771][ T8112] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1924'. [ 213.757826][ T8122] delete_channel: no stack [ 213.764566][ T8122] delete_channel: no stack [ 216.894721][ T3556] Bluetooth: hci5: command 0x0406 tx timeout [ 221.057403][ T8339] netlink: 'syz.0.2017': attribute type 29 has an invalid length. [ 221.073738][ T8341] delete_channel: no stack [ 221.079112][ T8341] delete_channel: no stack [ 222.974729][ T8339] netlink: 'syz.0.2017': attribute type 29 has an invalid length. [ 222.996410][ T8359] netlink: 121244 bytes leftover after parsing attributes in process `syz.1.2027'. [ 223.161218][ T8368] delete_channel: no stack [ 223.183068][ T8368] delete_channel: no stack [ 223.199123][ T8370] netlink: 'syz.4.2032': attribute type 1 has an invalid length. [ 223.208077][ T8370] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2032'. [ 223.792387][ T8397] delete_channel: no stack [ 223.871637][ T8397] delete_channel: no stack [ 224.071265][ T8412] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 224.079302][ T8412] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2050'. [ 224.740754][ T8437] delete_channel: no stack [ 224.764616][ T8437] delete_channel: no stack [ 225.321099][ T8449] netlink: 'syz.1.2064': attribute type 1 has an invalid length. [ 225.362794][ T8449] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2064'. [ 227.140095][ T8487] delete_channel: no stack [ 227.145453][ T8487] delete_channel: no stack [ 227.529123][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 227.549103][ T8442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.263779][ T8539] netlink: 'syz.0.2105': attribute type 3 has an invalid length. [ 229.278160][ T8539] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2105'. [ 230.103516][ T8572] netlink: 'syz.4.2118': attribute type 3 has an invalid length. [ 230.144778][ T8572] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2118'. [ 230.410661][ T8579] team0: Port device team_slave_0 removed [ 230.432236][ T8579] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 230.583891][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 230.732117][ T8584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.030672][ T8604] netlink: 'syz.4.2133': attribute type 3 has an invalid length. [ 231.054678][ T8604] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2133'. [ 234.179336][ T8674] team0: Port device team_slave_0 removed [ 234.200651][ T8674] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 235.585953][ T8688] netlink: 64951 bytes leftover after parsing attributes in process `syz.0.2166'. [ 236.006304][ T8720] team0: Port device team_slave_0 removed [ 236.032619][ T8720] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 236.511748][ T8755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2195'. [ 236.658835][ T8764] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 237.036648][ T8794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2212'. [ 239.693695][ T8957] netlink: 'syz.2.2285': attribute type 21 has an invalid length. [ 239.706973][ T8957] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2285'. [ 239.717278][ T8957] netlink: 'syz.2.2285': attribute type 4 has an invalid length. [ 239.731146][ T8957] netlink: 'syz.2.2285': attribute type 5 has an invalid length. [ 239.739144][ T8957] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2285'. [ 240.240331][ T8989] netlink: 'syz.1.2301': attribute type 21 has an invalid length. [ 240.281956][ T8989] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2301'. [ 240.307517][ T8989] netlink: 'syz.1.2301': attribute type 4 has an invalid length. [ 240.326692][ T8989] netlink: 'syz.1.2301': attribute type 5 has an invalid length. [ 240.338847][ T8989] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2301'. [ 240.442218][ T8998] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 240.782463][ T9025] netlink: 'syz.0.2317': attribute type 21 has an invalid length. [ 240.790893][ T9025] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2317'. [ 240.806121][ T9025] netlink: 'syz.0.2317': attribute type 4 has an invalid length. [ 240.848121][ T9025] netlink: 'syz.0.2317': attribute type 5 has an invalid length. [ 240.859932][ T9025] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2317'. [ 240.928004][ T9034] netlink: 'syz.1.2318': attribute type 21 has an invalid length. [ 240.949050][ T9034] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2318'. [ 241.100493][ T9042] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 241.298245][ T9060] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2333'. [ 241.332597][ T9060] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2333'. [ 241.563502][ T9078] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2337'. [ 241.879539][ T9094] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2348'. [ 241.920796][ T9094] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2348'. [ 242.359841][ T9125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2362'. [ 242.981734][ T5329] wlan1: Trigger new scan to find an IBSS to join [ 243.366248][ T9150] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2372'. [ 243.441630][ T9151] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.196338][ T9197] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.974792][ T11] wlan1: Trigger new scan to find an IBSS to join [ 245.934818][ T11] wlan1: Trigger new scan to find an IBSS to join [ 245.948799][ T55] wlan1: Trigger new scan to find an IBSS to join [ 246.904672][ T11] wlan1: Trigger new scan to find an IBSS to join [ 247.934911][ T3631] wlan1: Creating new IBSS network, BSSID aa:7f:6e:2b:e2:5f [ 248.409385][ T9360] validate_nla: 13 callbacks suppressed [ 248.409406][ T9360] netlink: 'syz.4.2462': attribute type 21 has an invalid length. [ 248.451011][ T9360] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.506461][ T9360] IPv6: Can't replace route, no match found [ 248.904459][ T11] wlan1: Trigger new scan to find an IBSS to join [ 249.287710][ T9390] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 249.344131][ T9390] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 249.388002][ T9392] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 249.409701][ T9395] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 249.432213][ T9392] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 249.832525][ T55] wlan1: Creating new IBSS network, BSSID 5a:75:0b:cd:80:1a [ 250.271724][ T9435] __nla_validate_parse: 1 callbacks suppressed [ 250.271745][ T9435] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2493'. [ 250.666362][ T9446] netlink: 'syz.4.2498': attribute type 21 has an invalid length. [ 250.730111][ T9446] IPv6: Can't replace route, no match found [ 250.975157][ T11] wlan1: Trigger new scan to find an IBSS to join [ 250.989082][ T1180] wlan1: Trigger new scan to find an IBSS to join [ 251.367594][ T9477] netlink: 'syz.2.2512': attribute type 21 has an invalid length. [ 251.421045][ T9477] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.464463][ T9477] IPv6: Can't replace route, no match found [ 251.808807][ T9493] netlink: 'syz.0.2519': attribute type 29 has an invalid length. [ 251.827533][ T9493] netlink: 'syz.0.2519': attribute type 29 has an invalid length. [ 251.875057][ T55] wlan1: Creating new IBSS network, BSSID a6:55:f9:09:a8:22 [ 252.368516][ T9512] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.392028][ T9512] IPv6: Can't replace route, no match found [ 252.894673][ T1180] wlan1: Creating new IBSS network, BSSID d6:14:ad:c5:d1:0a [ 253.192402][ T9550] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.2545'. [ 255.244890][ T9620] device syzkaller0 entered promiscuous mode [ 255.519738][ T9639] validate_nla: 9 callbacks suppressed [ 255.519757][ T9639] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 255.779316][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.787980][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.037604][ T9665] netlink: 'syz.2.2599': attribute type 1 has an invalid length. [ 256.051554][ T9667] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.2598'. [ 256.116933][ T9672] netlink: 'syz.3.2601': attribute type 28 has an invalid length. [ 256.149424][ T9672] netlink: 'syz.3.2601': attribute type 29 has an invalid length. [ 256.164485][ T9672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2601'. [ 256.533795][ T9702] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 256.603031][ T9700] Zero length message leads to an empty skb [ 257.144215][ T9736] netlink: 'syz.1.2629': attribute type 1 has an invalid length. [ 257.827325][ T9777] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 257.854506][ T3554] Bluetooth: hci1: command 0x0406 tx timeout [ 258.325727][ T9805] netlink: 'syz.4.2659': attribute type 1 has an invalid length. [ 260.174235][ T9903] netlink: 'syz.4.2703': attribute type 13 has an invalid length. [ 260.199071][ T9903] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2703'. [ 260.828508][ T9918] netlink: 'syz.4.2710': attribute type 10 has an invalid length. [ 260.842360][ T9918] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2710'. [ 260.851440][ T9918] device lo entered promiscuous mode [ 260.857036][ T9918] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 261.034208][ T9936] netlink: 'syz.0.2717': attribute type 13 has an invalid length. [ 261.042304][ T9936] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2717'. [ 261.335794][ T9954] netlink: 'syz.0.2727': attribute type 10 has an invalid length. [ 261.375010][ T9954] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2727'. [ 261.427107][ T9954] device lo entered promiscuous mode [ 261.524779][ T9954] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 261.688344][ T9970] netlink: 'syz.1.2734': attribute type 13 has an invalid length. [ 261.722687][ T9970] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2734'. [ 262.060599][ T9995] netlink: 'syz.4.2746': attribute type 21 has an invalid length. [ 262.071855][ T9995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2746'. [ 262.094256][ T9995] netlink: 'syz.4.2746': attribute type 1 has an invalid length. [ 262.102868][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 262.266408][T10005] netlink: 131996 bytes leftover after parsing attributes in process `syz.0.2751'. [ 262.412808][T10010] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2752'. [ 262.439165][T10010] netlink: 18430 bytes leftover after parsing attributes in process `syz.2.2752'. [ 262.636348][T10023] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2757'. [ 262.812706][T10031] netlink: 'syz.1.2761': attribute type 21 has an invalid length. [ 262.847262][T10031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2761'. [ 262.863664][T10031] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 262.882250][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2761'. [ 263.028895][T10046] netlink: 'syz.4.2769': attribute type 10 has an invalid length. [ 263.060217][T10046] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 263.373849][T10065] netlink: 'syz.2.2776': attribute type 13 has an invalid length. [ 263.698309][T10086] device lo entered promiscuous mode [ 263.713819][T10086] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 267.809937][T10164] __nla_validate_parse: 26 callbacks suppressed [ 267.809959][T10164] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.2814'. [ 267.860936][T10164] validate_nla: 16 callbacks suppressed [ 267.860954][T10164] netlink: 'syz.2.2814': attribute type 1 has an invalid length. [ 268.238736][T10180] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2822'. [ 268.801549][T10210] raw_sendmsg: syz.3.2834 forgot to set AF_INET. Fix it! [ 270.167868][T10294] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2873'. [ 271.260975][T10324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 271.267976][T10324] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 271.384667][T10330] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.2890'. [ 271.419803][T10327] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2888'. [ 271.426738][T10330] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 271.844531][T10333] netlink: 131996 bytes leftover after parsing attributes in process `syz.3.2892'. [ 274.079052][T10361] netlink: 'syz.4.2900': attribute type 11 has an invalid length. [ 274.131503][T10361] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2900'. [ 274.209559][T10364] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 274.216888][T10364] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 274.245774][T10366] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2903'. [ 274.363435][T10372] netlink: 'syz.3.2906': attribute type 9 has an invalid length. [ 274.699984][T10393] netlink: 'syz.3.2915': attribute type 11 has an invalid length. [ 274.716432][T10393] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2915'. [ 274.807935][ T3552] Bluetooth: hci1: Malformed Event: 0x2f [ 274.886639][T10399] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 274.893124][T10399] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 274.982648][T10406] netlink: 'syz.2.2923': attribute type 9 has an invalid length. [ 275.240198][ T3552] Bluetooth: hci4: Malformed Event: 0x2f [ 275.325806][T10431] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 275.332344][T10431] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 275.519059][T10443] netlink: 'syz.3.2936': attribute type 19 has an invalid length. [ 275.544613][T10443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2936'. [ 275.586711][T10443] netlink: 'syz.3.2936': attribute type 9 has an invalid length. [ 275.624252][T10443] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.2936'. [ 275.675764][T10454] netlink: 'syz.2.2943': attribute type 9 has an invalid length. [ 275.939208][ T3552] Bluetooth: hci0: Malformed Event: 0x2f [ 276.267837][T10468] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 276.274440][T10468] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 276.640781][T10485] netlink: 'syz.4.2957': attribute type 9 has an invalid length. [ 276.980708][T10502] netlink: 'syz.3.2962': attribute type 19 has an invalid length. [ 277.004552][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2962'. [ 277.046750][T10502] netlink: 'syz.3.2962': attribute type 9 has an invalid length. [ 277.082252][T10502] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.2962'. [ 277.289163][T10517] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2971'. [ 277.736636][T10535] device syzkaller0 entered promiscuous mode [ 277.991796][T10552] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2986'. [ 279.198275][ T3554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.218747][ T3554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.227444][ T3554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.244078][ T3554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.255623][ T3556] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.267270][ T3556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.826419][ T3556] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 279.828384][ T55] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 279.919272][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.976903][T10577] validate_nla: 3 callbacks suppressed [ 279.976923][T10577] netlink: 'syz.3.2994': attribute type 19 has an invalid length. [ 280.001269][T10577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2994'. [ 280.081271][T10580] netlink: 'syz.3.2994': attribute type 9 has an invalid length. [ 280.108978][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.112116][T10580] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.2994'. [ 280.305282][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.423982][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.606188][T10560] chnl_net:caif_netlink_parms(): no params data found [ 280.882815][T10620] bridge0: port 3(bond0) entered blocking state [ 280.890722][T10620] bridge0: port 3(bond0) entered disabled state [ 280.908187][T10620] device bond0 entered promiscuous mode [ 280.913796][T10620] device bond_slave_1 entered promiscuous mode [ 280.938491][T10620] bridge0: port 3(bond0) entered blocking state [ 280.944917][T10620] bridge0: port 3(bond0) entered forwarding state [ 280.954106][T10622] netlink: 'syz.4.3013': attribute type 21 has an invalid length. [ 280.962506][T10622] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3013'. [ 280.996138][T10624] device bond0 left promiscuous mode [ 281.001495][T10624] device bond_slave_1 left promiscuous mode [ 281.008173][T10624] bridge0: port 3(bond0) entered disabled state [ 281.060890][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.068463][T10560] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.085529][T10560] device bridge_slave_0 entered promiscuous mode [ 281.129633][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.145217][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.153629][T10560] device bridge_slave_1 entered promiscuous mode [ 281.281752][ T3556] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 281.289198][T10560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.295407][ T3556] Bluetooth: hci1: command tx timeout [ 281.323171][T10560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.580852][T10560] team0: Port device team_slave_0 added [ 281.718620][T10560] team0: Port device team_slave_1 added [ 281.883975][ T3631] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.903314][T10560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.973362][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.014928][T10560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.223798][T10560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.241748][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.278169][T10560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.293430][T10678] netlink: 'syz.3.3033': attribute type 21 has an invalid length. [ 282.476127][ T3556] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 282.529843][T10691] netlink: 'syz.0.3040': attribute type 29 has an invalid length. [ 282.552459][T10560] device hsr_slave_0 entered promiscuous mode [ 282.587023][T10560] device hsr_slave_1 entered promiscuous mode [ 282.597529][T10560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.610526][T10560] Cannot create hsr debugfs directory [ 282.618750][T10691] netlink: 'syz.0.3040': attribute type 29 has an invalid length. [ 282.673626][T10695] netlink: 'syz.0.3040': attribute type 29 has an invalid length. [ 282.701099][ T11] device hsr_slave_0 left promiscuous mode [ 282.738417][ T11] device hsr_slave_1 left promiscuous mode [ 282.807636][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.815554][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.823917][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.831651][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.841659][ T11] device bridge_slave_1 left promiscuous mode [ 282.851361][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.864045][ T11] device bridge_slave_0 left promiscuous mode [ 282.878260][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.904086][ T11] device veth1_macvtap left promiscuous mode [ 282.910240][ T11] device veth0_macvtap left promiscuous mode [ 282.918418][ T11] device veth1_vlan left promiscuous mode [ 282.924498][ T11] device veth0_vlan left promiscuous mode [ 283.343323][ T11] team0 (unregistering): Port device team_slave_1 removed [ 283.376926][ T3556] Bluetooth: hci1: command tx timeout [ 283.409041][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.450520][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.757384][ T11] bond0 (unregistering): Released all slaves [ 283.825321][T10704] bridge0: port 3(bond0) entered blocking state [ 283.831689][T10704] bridge0: port 3(bond0) entered disabled state [ 283.840367][T10704] device bond0 entered promiscuous mode [ 283.846245][T10704] device bond_slave_0 entered promiscuous mode [ 283.852765][T10704] device bond_slave_1 entered promiscuous mode [ 283.860608][T10704] bridge0: port 3(bond0) entered blocking state [ 283.867040][T10704] bridge0: port 3(bond0) entered forwarding state [ 283.880854][T10709] device bond0 left promiscuous mode [ 283.886378][T10709] device bond_slave_0 left promiscuous mode [ 283.892433][T10709] device bond_slave_1 left promiscuous mode [ 283.898990][T10709] bridge0: port 3(bond0) entered disabled state [ 284.112294][T10723] netlink: 'syz.4.3049': attribute type 1 has an invalid length. [ 284.123590][ T3556] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 284.138642][T10723] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.3049'. [ 284.362648][T10733] netlink: 'syz.1.3054': attribute type 29 has an invalid length. [ 284.387775][T10733] netlink: 'syz.1.3054': attribute type 29 has an invalid length. [ 284.936604][T10752] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.3062'. [ 285.175361][T10560] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.212816][T10560] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.286937][T10560] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.346148][T10560] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.454536][ T3556] Bluetooth: hci1: command tx timeout [ 285.486474][T10766] validate_nla: 2 callbacks suppressed [ 285.486492][T10766] netlink: 'syz.0.3066': attribute type 29 has an invalid length. [ 285.540084][T10766] netlink: 'syz.0.3066': attribute type 29 has an invalid length. [ 285.632845][T10560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.666732][T10766] netlink: 'syz.0.3066': attribute type 29 has an invalid length. [ 285.727868][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.745757][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.758153][T10560] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.801545][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.812702][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.848061][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.855399][ T5614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.941472][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.957074][T10782] netlink: 'syz.4.3074': attribute type 1 has an invalid length. [ 286.013990][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.014500][T10782] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.3074'. [ 286.061905][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.130967][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.138188][ T5616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.165907][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.304444][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.392901][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.413693][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.452788][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.513778][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.536872][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.683889][T10806] netlink: 'syz.4.3081': attribute type 29 has an invalid length. [ 286.823608][T10797] device syzkaller0 entered promiscuous mode [ 286.838546][T10809] netlink: 'syz.1.3082': attribute type 16 has an invalid length. [ 286.849481][T10806] netlink: 'syz.4.3081': attribute type 29 has an invalid length. [ 286.869637][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.881747][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.891945][T10809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3082'. [ 286.915891][T10807] netlink: 'syz.4.3081': attribute type 29 has an invalid length. [ 286.941632][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.957405][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.983520][T10560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.133631][T10809] netlink: 'syz.1.3082': attribute type 39 has an invalid length. [ 287.534499][ T3552] Bluetooth: hci1: command tx timeout [ 287.703995][ T3556] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13 [ 288.936133][T10837] netlink: 'syz.4.3093': attribute type 29 has an invalid length. [ 289.125568][T10847] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3097'. [ 289.129111][T10560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.152030][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.161566][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.254093][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.265489][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.537596][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.558473][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.585612][T10560] device veth0_vlan entered promiscuous mode [ 289.607789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.615566][ T3556] Bluetooth: hci5: unexpected event 0x23 length: 15 > 13 [ 289.625130][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.668737][T10560] device veth1_vlan entered promiscuous mode [ 289.771907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.787565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.803632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.814594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.826220][T10560] device veth0_macvtap entered promiscuous mode [ 289.833729][T10867] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3104'. [ 289.870947][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.911857][T10560] device veth1_macvtap entered promiscuous mode [ 289.964019][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.983633][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.995670][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.006428][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.016396][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.028870][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.039056][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.054571][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.066570][T10560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.111361][T10871] device syzkaller0 entered promiscuous mode [ 290.130812][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.145478][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.277372][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.278289][T10887] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3112'. [ 290.294080][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.325673][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.341685][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.351892][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.363648][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.373787][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.385553][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.398651][T10560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.733286][T10887] validate_nla: 6 callbacks suppressed [ 291.733306][T10887] netlink: 'syz.4.3112': attribute type 39 has an invalid length. [ 291.747809][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.772974][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.805877][T10560] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.824952][T10560] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.845135][T10560] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.860439][T10560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.048642][ T7338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.071376][ T7338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.122388][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.143876][ T7338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.163075][ T7338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.192518][ T3552] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13 [ 292.193512][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.209250][T10913] netlink: 'syz.3.3123': attribute type 4 has an invalid length. [ 292.237770][T10913] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.3123'. [ 292.727900][T10940] netlink: 'syz.1.3136': attribute type 4 has an invalid length. [ 292.765097][T10940] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.3136'. [ 293.166674][T10960] netlink: 'syz.4.3144': attribute type 3 has an invalid length. [ 293.190800][T10960] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3144'. [ 293.313442][T10969] netlink: 'syz.4.3144': attribute type 21 has an invalid length. [ 293.325775][T10974] netlink: 'syz.0.3150': attribute type 4 has an invalid length. [ 293.338729][T10969] netlink: 'syz.4.3144': attribute type 1 has an invalid length. [ 293.347133][T10974] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.3150'. [ 293.694677][ T3556] Bluetooth: hci0: command 0x0406 tx timeout [ 293.778907][T10995] netlink: 'syz.3.3160': attribute type 29 has an invalid length. [ 293.866612][T10995] netlink: 'syz.3.3160': attribute type 29 has an invalid length. [ 293.893270][T10998] netlink: 'syz.3.3160': attribute type 29 has an invalid length. [ 294.004795][T11006] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.3163'. [ 294.320795][T11016] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3168'. [ 294.543217][T11023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3171'. [ 294.574140][T11023] batman_adv: batadv0: Adding interface: vlan1 [ 294.580957][T11023] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.609389][T11023] batman_adv: batadv0: Interface activated: vlan1 [ 294.745818][T11033] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3173'. [ 294.804937][T11025] device sit0 entered promiscuous mode [ 295.167252][T11053] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3182'. [ 295.300346][T11060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3185'. [ 295.335597][T11060] batman_adv: batadv0: Adding interface: vlan1 [ 295.341824][T11060] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.378238][T11060] batman_adv: batadv0: Interface activated: vlan1 [ 295.598462][T11076] device veth1_macvtap left promiscuous mode [ 295.624491][T11076] device macsec0 entered promiscuous mode [ 295.647738][T11083] device veth1_macvtap entered promiscuous mode [ 295.883680][T11094] batman_adv: batadv0: Interface deactivated: vlan1 [ 296.089057][T11101] tun0: tun_chr_ioctl cmd 21731 [ 296.135760][T11094] device veth0_vlan left promiscuous mode [ 296.142359][T11094] device veth0_vlan entered promiscuous mode [ 296.177685][T11094] batman_adv: batadv0: Interface activated: vlan1 [ 296.198338][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.233330][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.248041][ T5615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.820998][T11141] device veth1_macvtap left promiscuous mode [ 296.893118][T11141] device macsec0 entered promiscuous mode [ 296.992320][T11146] device veth1_macvtap entered promiscuous mode [ 297.389392][T11160] validate_nla: 13 callbacks suppressed [ 297.389413][T11160] netlink: 'syz.3.3225': attribute type 28 has an invalid length. [ 297.420401][T11160] __nla_validate_parse: 3 callbacks suppressed [ 297.420422][T11160] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3225'. [ 297.481853][T11165] tun0: tun_chr_ioctl cmd 21731 [ 297.534479][T11153] device veth0_vlan left promiscuous mode [ 297.555215][T11153] device veth0_vlan entered promiscuous mode [ 297.600840][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.626306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.651763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.017733][ T3552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.027288][ T3552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.041096][ T3552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.058248][ T5329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.286258][ T3552] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.299892][ T3552] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 298.320645][ T3552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.440995][ T5329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.536375][ T5329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.643533][T11197] device veth1_macvtap left promiscuous mode [ 298.653346][T11197] device macsec0 entered promiscuous mode [ 298.842406][ T5329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.906671][T11198] netlink: 'syz.4.3241': attribute type 28 has an invalid length. [ 298.926358][T11198] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3241'. [ 299.007801][T11202] device veth1_macvtap entered promiscuous mode [ 299.458468][T11180] chnl_net:caif_netlink_parms(): no params data found [ 299.512199][T11227] netlink: 'syz.4.3251': attribute type 10 has an invalid length. [ 299.530946][T11227] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3251'. [ 299.855341][T11246] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3256'. [ 299.897052][T11250] batman_adv: batadv0: Interface deactivated: vlan1 [ 300.093452][T11259] device vxcan1 entered promiscuous mode [ 300.099900][T11259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.121322][T11180] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.132070][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.148377][T11180] device bridge_slave_0 entered promiscuous mode [ 300.234724][T11253] tun0: tun_chr_ioctl cmd 21731 [ 300.250043][T11180] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.262940][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.282643][T11180] device bridge_slave_1 entered promiscuous mode [ 300.301962][T11265] device veth0_vlan left promiscuous mode [ 300.311782][T11265] device veth0_vlan entered promiscuous mode [ 300.329858][T11265] batman_adv: batadv0: Interface activated: vlan1 [ 300.414709][ T3556] Bluetooth: hci3: command tx timeout [ 300.476602][T11277] netlink: 'syz.4.3270': attribute type 27 has an invalid length. [ 300.484746][T11277] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3270'. [ 300.517479][T11180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.602432][T11180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.699783][T11180] team0: Port device team_slave_0 added [ 300.741748][T11180] team0: Port device team_slave_1 added [ 300.776170][T11180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.783386][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.861209][T11180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.919229][T11180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.946032][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.001163][T11180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.027659][T11295] device vxcan1 entered promiscuous mode [ 301.033876][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.199321][T11307] netlink: 'syz.1.3280': attribute type 27 has an invalid length. [ 301.212140][T11180] device hsr_slave_0 entered promiscuous mode [ 301.223160][T11180] device hsr_slave_1 entered promiscuous mode [ 301.231071][T11307] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3280'. [ 301.241491][T11180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.264142][T11180] Cannot create hsr debugfs directory [ 301.413868][T11310] device veth1_macvtap left promiscuous mode [ 301.461650][T11316] device veth1_macvtap entered promiscuous mode [ 301.978544][T11333] device vxcan1 entered promiscuous mode [ 301.987752][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.162227][ T5329] device hsr_slave_0 left promiscuous mode [ 302.170499][ T5329] device hsr_slave_1 left promiscuous mode [ 302.189593][ T5329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.201816][ T5329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.219559][ T5329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.229589][ T5329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.287646][ T5329] device veth1_macvtap left promiscuous mode [ 302.293899][ T5329] device veth0_macvtap left promiscuous mode [ 302.303259][T11345] netlink: 'syz.1.3294': attribute type 27 has an invalid length. [ 302.310295][ T5329] device veth1_vlan left promiscuous mode [ 302.319476][T11345] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3294'. [ 302.322037][ T5329] device veth0_vlan left promiscuous mode [ 302.494596][ T3556] Bluetooth: hci3: command tx timeout [ 302.822815][ T5329] team0 (unregistering): Port device team_slave_1 removed [ 302.878895][ T5329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.228512][ T5329] bond0 (unregistering): Released all slaves [ 303.517162][T11363] device veth1_macvtap left promiscuous mode [ 303.572418][T11369] device veth1_macvtap entered promiscuous mode [ 303.628862][T11370] netlink: 'syz.1.3306': attribute type 27 has an invalid length. [ 303.682675][T11370] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3306'. [ 303.779577][T11377] device vxcan1 entered promiscuous mode [ 303.790370][T11377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.141954][T11180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.187486][T11180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 304.230219][T11180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 304.259309][T11180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.515461][T11180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.571877][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.579353][ T3556] Bluetooth: hci3: command tx timeout [ 304.605430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.617743][T11180] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.630726][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.640848][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.650025][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.652536][T11398] netlink: 'syz.4.3319': attribute type 27 has an invalid length. [ 304.657209][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.674594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.683262][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.705976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.712284][T11398] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3319'. [ 304.725145][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.732379][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.767493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.785613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.799634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.820971][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.848162][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.875896][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.901083][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.921947][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.932535][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.949094][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.978120][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.002870][T11180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.212562][T11419] netlink: 'syz.1.3328': attribute type 29 has an invalid length. [ 305.286744][T11419] netlink: 'syz.1.3328': attribute type 29 has an invalid length. [ 305.357656][T11424] netlink: 'syz.1.3328': attribute type 29 has an invalid length. [ 305.421227][T11428] netlink: 'syz.1.3328': attribute type 29 has an invalid length. [ 305.447191][T11419] netlink: 'syz.1.3328': attribute type 29 has an invalid length. [ 305.674492][T11438] netlink: 'syz.1.3334': attribute type 10 has an invalid length. [ 305.843621][T11438] team0: Port device vlan0 added [ 305.955425][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.963022][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.025600][T11180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.111106][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.150008][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.208057][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.235261][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.275317][T11180] device veth0_vlan entered promiscuous mode [ 306.300673][T11180] device veth1_vlan entered promiscuous mode [ 306.425941][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.445212][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.459233][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.470436][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.620208][T11180] device veth0_macvtap entered promiscuous mode [ 306.640664][T11180] device veth1_macvtap entered promiscuous mode [ 306.655034][ T3556] Bluetooth: hci3: command tx timeout [ 306.672705][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.698173][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.750622][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.776548][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.787210][T11468] netlink: 'syz.4.3347': attribute type 10 has an invalid length. [ 306.866934][T11468] team0: Port device vlan0 added [ 306.910077][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.944716][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.959828][ T3552] Bluetooth: hci4: unexpected event 0x35 length: 15 > 6 [ 306.974333][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.025216][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.056637][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.091830][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.120079][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.153884][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.197642][T11180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.244336][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.275486][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.345818][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.384308][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.418164][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.452835][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.491334][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.511778][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.521931][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.539400][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.579931][T11180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.609742][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.631074][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.646845][T11180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.666845][T11180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.684692][T11180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.702200][T11180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.939311][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.964681][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.008636][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.030367][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.066481][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.084141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.273604][ T3552] Bluetooth: hci4: unexpected event 0x35 length: 15 > 6 [ 308.373905][T11541] netlink: 'syz.0.3378': attribute type 29 has an invalid length. [ 309.035240][T11585] validate_nla: 4 callbacks suppressed [ 309.035260][T11585] netlink: 'syz.0.3397': attribute type 10 has an invalid length. [ 309.208342][T11585] team0: Port device vlan0 added [ 309.486030][ T3552] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 309.676238][T11628] netlink: 'syz.4.3419': attribute type 10 has an invalid length. [ 310.047114][ T3552] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 310.446837][T11667] bridge0: port 3(bond0) entered blocking state [ 310.476186][T11667] bridge0: port 3(bond0) entered disabled state [ 310.484160][ T3552] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 310.504218][T11667] device bond0 entered promiscuous mode [ 310.521519][T11667] device bond_slave_0 entered promiscuous mode [ 310.543361][T11667] device bond_slave_1 entered promiscuous mode [ 310.595513][T11667] bridge0: port 3(bond0) entered blocking state [ 310.602497][T11667] bridge0: port 3(bond0) entered forwarding state [ 310.693363][T11671] device bond0 left promiscuous mode [ 310.725982][T11671] device bond_slave_0 left promiscuous mode [ 310.754818][T11671] device bond_slave_1 left promiscuous mode [ 310.792031][T11671] bridge0: port 3(bond0) entered disabled state [ 311.369155][T11699] tap0: tun_chr_ioctl cmd 1074025692 [ 311.519910][T11706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3453'. [ 311.534744][ T3552] Bluetooth: hci0: command 0x0406 tx timeout [ 311.569405][T11706] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3453'. [ 311.634765][ T3556] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 312.042746][T11743] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3469'. [ 312.104476][ T3556] Bluetooth: hci3: command tx timeout [ 312.140600][T11747] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3469'. [ 312.494722][ T3552] Bluetooth: hci4: command 0x0406 tx timeout [ 312.504987][T11759] netlink: 4723 bytes leftover after parsing attributes in process `syz.4.3477'. [ 312.676033][T11777] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3487'. [ 312.741699][T11780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3487'. [ 312.969984][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3489'. [ 313.673943][T11808] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3498'. [ 313.697482][ T3556] Bluetooth: hci2: command 0x0406 tx timeout [ 315.657954][T11823] netlink: 'syz.1.3503': attribute type 21 has an invalid length. [ 316.422731][T11868] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.3525'. [ 317.095748][T11898] __nla_validate_parse: 1 callbacks suppressed [ 317.095770][T11898] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.3537'. [ 317.130239][T11898] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3537'. [ 317.226891][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.233248][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.275147][T11912] netlink: 'syz.2.3544': attribute type 10 has an invalid length. [ 317.332767][T11912] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 317.800980][T11932] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.3554'. [ 317.824481][T11932] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3554'. [ 318.098948][T11946] netlink: 'syz.4.3561': attribute type 29 has an invalid length. [ 318.142294][T11946] netlink: 'syz.4.3561': attribute type 29 has an invalid length. [ 318.167544][T11950] netlink: 'syz.2.3563': attribute type 10 has an invalid length. [ 318.223413][T11952] netlink: 'syz.4.3561': attribute type 29 has an invalid length. [ 318.246176][T11946] netlink: 'syz.4.3561': attribute type 29 has an invalid length. [ 318.264199][T11946] netlink: 'syz.4.3561': attribute type 29 has an invalid length. [ 318.700652][T11980] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3574'. [ 318.880863][T11988] netlink: 'syz.4.3578': attribute type 10 has an invalid length. [ 318.986886][T11988] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 319.035151][T11998] netlink: 'syz.2.3581': attribute type 4 has an invalid length. [ 319.074872][T11998] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3581'. [ 319.214134][T12001] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.3582'. [ 319.261492][T11995] can: request_module (can-proto-0) failed. [ 319.287646][T12001] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3582'. [ 319.480558][T12009] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 319.932020][T12031] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 320.090603][T12040] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3598'. [ 320.273419][T12039] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 320.323148][T12036] can: request_module (can-proto-0) failed. [ 320.850712][T12073] validate_nla: 6 callbacks suppressed [ 320.850736][T12073] netlink: 'syz.2.3612': attribute type 10 has an invalid length. [ 320.999293][T12075] netlink: 'syz.3.3614': attribute type 29 has an invalid length. [ 321.022321][T12075] netlink: 'syz.3.3614': attribute type 29 has an invalid length. [ 321.047317][T12079] netlink: 'syz.3.3614': attribute type 29 has an invalid length. [ 321.080749][T12075] netlink: 'syz.3.3614': attribute type 29 has an invalid length. [ 321.105151][T12081] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 321.114996][T12075] netlink: 'syz.3.3614': attribute type 29 has an invalid length. [ 321.159077][T12079] netlink: 'syz.3.3614': attribute type 29 has an invalid length. [ 321.371963][T12091] netlink: 'syz.0.3618': attribute type 4 has an invalid length. [ 321.410899][T12091] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3618'. [ 321.754109][T12085] can: request_module (can-proto-0) failed. [ 322.254479][T12112] netlink: 'syz.2.3630': attribute type 9 has an invalid length. [ 322.262323][T12112] netlink: 'syz.2.3630': attribute type 8 has an invalid length. [ 322.402722][T12121] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.412619][T12187] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.554680][T12194] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3670'. [ 323.589117][T12194] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.902709][T12219] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.067812][T12226] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3685'. [ 324.093024][T12226] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.408087][T12242] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3691'. [ 324.601821][T12240] can: request_module (can-proto-0) failed. [ 324.773101][T12253] netlink: 121244 bytes leftover after parsing attributes in process `syz.1.3696'. [ 324.919649][T12260] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3698'. [ 325.598607][T12286] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3709'. [ 325.794687][T12282] can: request_module (can-proto-0) failed. [ 325.932094][T12296] validate_nla: 23 callbacks suppressed [ 325.932117][T12296] netlink: 'syz.0.3713': attribute type 21 has an invalid length. [ 325.959069][T12296] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3713'. [ 325.978324][T12296] netlink: 'syz.0.3713': attribute type 21 has an invalid length. [ 325.994444][T12296] IPv6: NLM_F_CREATE should be specified when creating new route [ 326.023196][T12301] netlink: 121244 bytes leftover after parsing attributes in process `syz.2.3717'. [ 326.393797][T12326] netlink: 'syz.0.3726': attribute type 4 has an invalid length. [ 326.432088][T12326] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3726'. [ 326.586346][T12323] can: request_module (can-proto-0) failed. [ 326.664629][T12332] netlink: 121244 bytes leftover after parsing attributes in process `syz.3.3731'. [ 326.673937][T12333] netlink: 'syz.2.3730': attribute type 21 has an invalid length. [ 326.741150][T12333] netlink: 'syz.2.3730': attribute type 21 has an invalid length. [ 326.764100][T12333] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.891939][T12417] netlink: 'syz.3.3772': attribute type 21 has an invalid length. [ 328.360440][T12433] device syzkaller0 entered promiscuous mode [ 330.212040][T12448] netlink: 'syz.2.3786': attribute type 21 has an invalid length. [ 330.603197][T12483] netlink: 'syz.2.3804': attribute type 21 has an invalid length. [ 331.151571][T12526] __nla_validate_parse: 3 callbacks suppressed [ 331.151593][T12526] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3822'. [ 331.205855][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3822'. [ 332.001080][T12562] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3837'. [ 332.037774][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3837'. [ 332.524524][T12599] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3853'. [ 332.549270][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3853'. [ 332.803316][T12610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3861'. [ 335.351121][T12730] netlink: 'syz.2.3915': attribute type 21 has an invalid length. [ 335.929076][T12767] netlink: 'syz.1.3930': attribute type 21 has an invalid length. [ 336.007935][T12771] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3933'. [ 336.017447][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 336.564173][T12795] netlink: 'syz.1.3944': attribute type 21 has an invalid length. [ 336.766758][T12801] device syzkaller0 entered promiscuous mode [ 337.549963][T12836] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3961'. [ 338.819667][T12818] device sit0 entered promiscuous mode [ 338.961944][T12867] IPv6: NLM_F_REPLACE set, but no existing node found! [ 339.066584][T12866] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3974'. [ 339.384015][T12896] netlink: 'syz.4.3987': attribute type 21 has an invalid length. [ 339.406025][T12899] IPv6: NLM_F_REPLACE set, but no existing node found! [ 339.419973][T12897] netlink: 'syz.3.3986': attribute type 1 has an invalid length. [ 339.464455][T12897] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3986'. [ 339.822198][T12913] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3993'. [ 339.930175][T12923] netlink: 'syz.4.3999': attribute type 21 has an invalid length. [ 339.971438][T12925] IPv6: NLM_F_REPLACE set, but no existing node found! [ 340.046508][T12931] netlink: 'syz.2.4003': attribute type 1 has an invalid length. [ 340.070200][T12931] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4003'. [ 340.433582][T12956] IPv6: NLM_F_REPLACE set, but no existing node found! [ 340.480499][T12951] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4012'. [ 340.811492][T12983] IPv6: NLM_F_REPLACE set, but no existing node found! [ 341.075480][T12992] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4034'. [ 342.820192][T13084] device syzkaller0 entered promiscuous mode [ 344.732542][T13120] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4096'. [ 344.866514][ T3556] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 344.888508][T13137] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4104'. [ 345.750666][T13162] device syzkaller0 entered promiscuous mode [ 345.782532][T13167] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4117'. [ 347.133930][T13173] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4118'. [ 347.269166][T13195] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4130'. [ 347.276876][ T3556] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 347.341178][T13198] netlink: 'syz.0.4132': attribute type 2 has an invalid length. [ 347.356593][T13198] netlink: 'syz.0.4132': attribute type 1 has an invalid length. [ 347.384213][T13198] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4132'. [ 347.833324][T13212] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4139'. [ 348.404798][T13225] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4145'. [ 348.460718][T13228] netlink: 'syz.4.4146': attribute type 2 has an invalid length. [ 348.484412][T13228] netlink: 'syz.4.4146': attribute type 1 has an invalid length. [ 348.508761][T13228] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.4146'. [ 348.765895][T13248] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4155'. [ 349.027323][T13265] netlink: 'syz.0.4164': attribute type 2 has an invalid length. [ 349.068136][T13265] netlink: 'syz.0.4164': attribute type 1 has an invalid length. [ 349.506156][T13297] netlink: 'syz.2.4180': attribute type 2 has an invalid length. [ 349.513950][T13297] netlink: 'syz.2.4180': attribute type 1 has an invalid length. [ 350.616585][T13341] netlink: 'syz.0.4200': attribute type 29 has an invalid length. [ 350.617440][T13338] netlink: 'syz.3.4198': attribute type 2 has an invalid length. [ 350.689779][ T3556] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 350.702906][T13338] __nla_validate_parse: 4 callbacks suppressed [ 350.702926][T13338] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4198'. [ 351.360956][ T3552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.376214][ T3552] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.385380][ T3552] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.393409][ T3552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.402636][ T3552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 351.410880][ T3552] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.645789][T13368] chnl_net:caif_netlink_parms(): no params data found [ 352.023123][T13368] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.064482][T13368] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.094898][T13368] device bridge_slave_0 entered promiscuous mode [ 352.560740][T13368] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.569575][T13368] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.588456][T13368] device bridge_slave_1 entered promiscuous mode [ 352.675007][T13408] validate_nla: 6 callbacks suppressed [ 352.675029][T13408] netlink: 'syz.0.4227': attribute type 29 has an invalid length. [ 353.372048][T13408] netlink: 'syz.0.4227': attribute type 29 has an invalid length. [ 353.393728][T13412] netlink: 'syz.0.4227': attribute type 29 has an invalid length. [ 353.455263][ T3554] Bluetooth: hci5: command tx timeout [ 353.472905][ T7338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.496170][T13368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.519812][T13368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.600849][ T7338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.832171][ T7338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.893651][T13368] team0: Port device team_slave_0 added [ 353.905371][T13443] netlink: 'syz.1.4244': attribute type 29 has an invalid length. [ 353.924839][T13443] netlink: 'syz.1.4244': attribute type 29 has an invalid length. [ 353.977913][ T7338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.022936][T13368] team0: Port device team_slave_1 added [ 354.029355][T13443] netlink: 'syz.1.4244': attribute type 29 has an invalid length. [ 354.056700][T13445] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 354.064572][T13445] #PF: supervisor instruction fetch in kernel mode SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 354.071099][T13445] #PF: error_code(0x0010) - not-present page [ 354.077189][T13445] PGD 64ae2067 P4D 64ae2067 PUD 64ade067 PMD 0 [ 354.083503][T13445] Oops: 0010 [#1] PREEMPT SMP KASAN [ 354.088737][T13445] CPU: 1 PID: 13445 Comm: syz.3.4245 Not tainted 6.1.97-syzkaller #0 [ 354.096839][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 354.106922][T13445] RIP: 0010:0x0 [ 354.110410][T13445] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 354.117779][T13445] RSP: 0018:ffffc90003457358 EFLAGS: 00010246 [ 354.123864][T13445] RAX: 1ffffffff16e363f RBX: ffffffff8b71b1f8 RCX: 0000000000000001 [ 354.131857][T13445] RDX: ffffc90003457400 RSI: 0000000000000001 RDI: ffff88807e06a000 [ 354.139839][T13445] RBP: ffffc900034574d0 R08: ffffffff85a856f1 R09: ffffed100fc0d408 [ 354.147814][T13445] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 354.155790][T13445] R13: ffff88807e06a000 R14: ffffc90003457438 R15: ffffc90003457438 [ 354.163762][T13445] FS: 00007f2ab10fc6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 354.172710][T13445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.179299][T13445] CR2: ffffffffffffffd6 CR3: 0000000063399000 CR4: 00000000003506e0 [ 354.187454][T13445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.195507][T13445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 354.203764][T13445] Call Trace: [ 354.207047][T13445] [ 354.210047][T13445] ? __die_body+0x5e/0xa0 [ 354.214511][T13445] ? page_fault_oops+0x7fe/0xaa0 [ 354.219556][T13445] ? mark_lock+0x9a/0x340 [ 354.223921][T13445] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 354.229482][T13445] ? rcu_is_watching+0x11/0xb0 [ 354.234251][T13445] ? is_errata93+0xc0/0x240 [ 354.238767][T13445] ? exc_page_fault+0x3d1/0x620 [ 354.243626][T13445] ? asm_exc_page_fault+0x22/0x30 [ 354.248669][T13445] ? bond_get_slave_by_id+0x251/0x560 [ 354.254055][T13445] bond_xdp_xmit+0x3fd/0x650 [ 354.258661][T13445] ? bond_xdp_xmit+0xa7/0x650 [ 354.263348][T13445] ? bond_xdp+0x950/0x950 [ 354.267687][T13445] ? __alloc_pages+0x36f/0x770 [ 354.272464][T13445] bq_xmit_all+0xdb8/0x1210 [ 354.276979][T13445] ? rcu_read_lock_held+0x40/0x40 [ 354.282101][T13445] ? dev_map_enqueue_multi+0xf8d/0x1100 [ 354.287657][T13445] ? dev_map_enqueue+0x340/0x340 [ 354.292608][T13445] ? __dev_flush+0x1c0/0x1c0 [ 354.297224][T13445] ? rcu_is_watching+0x11/0xb0 [ 354.302016][T13445] ? trace_xdp_redirect+0xc3/0x2d0 [ 354.307154][T13445] __dev_flush+0xc9/0x1c0 [ 354.311500][T13445] xdp_do_flush+0xa/0x20 [ 354.315751][T13445] bpf_test_run_xdp_live+0x1650/0x1ea0 [ 354.321228][T13445] ? stack_trace_save+0x113/0x1c0 [ 354.326278][T13445] ? __lock_acquire+0x125b/0x1f80 [ 354.331312][T13445] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 354.336967][T13445] ? xdp_convert_md_to_buff+0x330/0x330 [ 354.342530][T13445] ? __might_fault+0xa1/0x110 [ 354.347230][T13445] ? __might_sleep+0xb0/0xb0 [ 354.351842][T13445] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 354.358119][T13445] ? __might_fault+0xa1/0x110 [ 354.362818][T13445] ? __might_fault+0xbd/0x110 [ 354.367503][T13445] ? _copy_from_user+0x109/0x170 [ 354.372444][T13445] ? bpf_test_init+0x15a/0x180 [ 354.377214][T13445] ? xdp_convert_md_to_buff+0x5b/0x330 [ 354.382680][T13445] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 354.388068][T13445] ? dev_put+0x80/0x80 [ 354.392147][T13445] ? dev_put+0x80/0x80 [ 354.396231][T13445] bpf_prog_test_run+0x32f/0x3a0 [ 354.401195][T13445] __sys_bpf+0x3eb/0x6c0 [ 354.405450][T13445] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 354.410853][T13445] ? print_irqtrace_events+0x210/0x210 [ 354.416338][T13445] ? print_irqtrace_events+0x210/0x210 [ 354.421815][T13445] ? syscall_enter_from_user_mode+0x2e/0x230 [ 354.427802][T13445] ? lockdep_hardirqs_on+0x94/0x130 [ 354.433004][T13445] __x64_sys_bpf+0x78/0x90 [ 354.437449][T13445] do_syscall_64+0x3b/0xb0 [ 354.441875][T13445] ? clear_bhb_loop+0x45/0xa0 [ 354.446582][T13445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.452485][T13445] RIP: 0033:0x7f2ab0375bd9 [ 354.456903][T13445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.476522][T13445] RSP: 002b:00007f2ab10fc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.484954][T13445] RAX: ffffffffffffffda RBX: 00007f2ab0503f60 RCX: 00007f2ab0375bd9 [ 354.492949][T13445] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 354.500920][T13445] RBP: 00007f2ab03e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 354.508894][T13445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.516864][T13445] R13: 000000000000000b R14: 00007f2ab0503f60 R15: 00007ffe0d4ff4f8 [ 354.524858][T13445] [ 354.527896][T13445] Modules linked in: [ 354.531802][T13445] CR2: 0000000000000000 [ 354.535959][T13445] ---[ end trace 0000000000000000 ]--- [ 354.541505][T13445] RIP: 0010:0x0 [ 354.544971][T13445] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 354.552420][T13445] RSP: 0018:ffffc90003457358 EFLAGS: 00010246 [ 354.558488][T13445] RAX: 1ffffffff16e363f RBX: ffffffff8b71b1f8 RCX: 0000000000000001 [ 354.566464][T13445] RDX: ffffc90003457400 RSI: 0000000000000001 RDI: ffff88807e06a000 [ 354.574446][T13445] RBP: ffffc900034574d0 R08: ffffffff85a856f1 R09: ffffed100fc0d408 [ 354.582421][T13445] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 354.590394][T13445] R13: ffff88807e06a000 R14: ffffc90003457438 R15: ffffc90003457438 [ 354.598366][T13445] FS: 00007f2ab10fc6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 354.607302][T13445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.613900][T13445] CR2: ffffffffffffffd6 CR3: 0000000063399000 CR4: 00000000003506e0 [ 354.622065][T13445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.630045][T13445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 354.638106][T13445] Kernel panic - not syncing: Fatal exception in interrupt [ 354.645538][T13445] Kernel Offset: disabled [ 354.649871][T13445] Rebooting in 86400 seconds..