last executing test programs: 5m52.199022185s ago: executing program 2 (id=350): socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 5m51.980854422s ago: executing program 2 (id=354): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="5c00000012006bab9a3fe3d86e17aa0a046b870af34f04001a001931a0e69ee517d2301f2febcf0eca707888d34460bc8c000000a705251e6182949a3651f60a", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x2002) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100), 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) 5m51.843729984s ago: executing program 2 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf77}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b954f95e59682cf5cbd902eb37", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m51.706971945s ago: executing program 2 (id=358): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791a480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 5m51.662173598s ago: executing program 2 (id=360): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f698", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x14800) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) close(0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 5m51.01604788s ago: executing program 2 (id=370): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x84800) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000004080)=""/4070, 0xfe6}, {&(0x7f0000000680)=""/219, 0xdb}, {&(0x7f0000000940)=""/176, 0xb0}, {&(0x7f0000000b00)=""/219, 0xdb}, {&(0x7f0000001d00)=""/4065, 0xfe1}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f0000000c00)=""/196, 0xc4}], 0xa}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5m50.626134992s ago: executing program 32 (id=370): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x84800) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000004080)=""/4070, 0xfe6}, {&(0x7f0000000680)=""/219, 0xdb}, {&(0x7f0000000940)=""/176, 0xb0}, {&(0x7f0000000b00)=""/219, 0xdb}, {&(0x7f0000001d00)=""/4065, 0xfe1}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f0000000c00)=""/196, 0xc4}], 0xa}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.6111159s ago: executing program 0 (id=3737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000008005cda000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.390969488s ago: executing program 0 (id=3740): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 1.380437529s ago: executing program 1 (id=3741): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) close(r3) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 1.280591287s ago: executing program 0 (id=3743): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x80010000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, 0x0) socket$kcm(0xa, 0x6, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={&(0x7f0000000340), 0x6e, &(0x7f0000000a00)=[{&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000500)=""/172, 0xac}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/221, 0xdd}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000840)=""/191, 0xbf}], 0x6, &(0x7f0000000b80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x8, &(0x7f0000000340), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 1.147009728s ago: executing program 4 (id=3744): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c60590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x3}, 0x0) 1.065961385s ago: executing program 3 (id=3745): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000740)="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", 0xafa}], 0x1}, 0x810) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000000)="669e29", 0x3}], 0x1}, 0x40089) 905.742427ms ago: executing program 4 (id=3746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 835.837663ms ago: executing program 3 (id=3747): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000440)="3a6107ce05dc35c982bb75d4635674d3ff033048eb0194337b1693f770806ca7f9a6831ea80c501011c0850332bfabfb1b26f2"}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) socketpair(0x26, 0x5, 0x5, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x5, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x20040840) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) 783.072507ms ago: executing program 4 (id=3748): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) 771.093158ms ago: executing program 1 (id=3749): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 751.13153ms ago: executing program 0 (id=3750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 659.023797ms ago: executing program 3 (id=3751): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) 653.340068ms ago: executing program 1 (id=3752): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 606.684832ms ago: executing program 4 (id=3753): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 549.356176ms ago: executing program 0 (id=3754): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c60590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x3}, 0x0) 519.866149ms ago: executing program 1 (id=3755): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000740)="47ea1334a40691333d8c64b43cc87c97694fc002f3dbb9c81c0eecc658bfc354c03452649dca86fa75a7bd2120ca4d1e231f7aae21ac7139fd02ffbcb23e5121122fc64c352184cc40bcc453bc87d0a4e05648d8ad9cfe1b1cd3596110bcbbb8a1c157682ded17c37b2e8f600c991597ccf7c8a39b44e2d732077159f609a539e539c9b1c6416594a6e61c59bed80d94beb103aae40e28319f52c76f75cde55a238c8c6a3edc98e04d8a2934915024f3cce8f040e0de1f9f4590265fe73ea256c14f2bb80fcc6b42251cbd6d24f17d05f1a79edc59be6deec0ceb03060a6d4a1c29b793ed3950df8d3122d31d5f7d4e1fca319688e5801d31fb79d1bfb963234682e4ef290e1abc316112045c93c6c5150a3dbd0ee0224c49fefaca9a817995ac4431cfc46875850c35363a81ff206dcbb5c3c7abcfaf07f0777a538b90683afa95e2217df08d666e9da13e4876734f55682c2c19b81bcecc84f85844af6c01a9a470dd13f339879e07622ceb474f487e7b282757c247d17837f01a88d62b8f28f4f68ecdd4b6e0eb8d23bceb59d8f20c62553a06947bfab16082011365b2ded20edd984262e586f6a365206a1aae82d1554dcab622d4c269e0a8445664b8fb227bdb0cf8a9c2ed52a94c0165070219bb4c53ed364048159a67929a1ec747d71eb66d8c3202ef8547efba11765a84099d9f1d3798ac00bb1061f7d317ab7f36c5d497208f8460647de619a65f9d23639bb86c3c6c37261fa643ab847e15b92b6abbe2ca4d578bf3e10e005d496335442990cbd1201bf5f1e4a1a2091718b2dd2532af79fd864bf506b4b8e8694db41069e0ac6268f2a0377c062c5cb230dd17be069b767c82db5f9792d03c24dc68e296a5b4a01acf9fcb587cc3c7b8d77c9b5bb39162040021ff3be41a12273da80db120afd8a984e856c10b88fed0d07bfa2508c7289c1ee130068db5bdd9807000e4368c68621244a7542c39862c35c6389ef6dbd0a997af1c7542d6b90de7be35ba9ef604b146d7360dd9beeb71ff6aa06d57d760414c999283fc3d3e879f9083b22ef11bdd1486097a6466b16e54b036425665b125623a1593b2f530f819eaac0544d8a53e617e64cd705c082a39c28f889e63fd3932eb4861722a7dc385f60835e4a9b85634366800cc011667a6bd516de134b91a80eb73230774bf688456c2a756c9286f8d937df080967891dc60fa934edfd57083bed1a89e0a78f078f5e211fbb3aa569ecf154e825d6acd9e621526d865790880549c008eb745c6d93548411f8b4d21b3081266a647a5a28f7892a393421dd926fb56e46249d165441fd1524134e0d0a7ddadc4fed5fa5d458219a56513905baba9e2aeb64914cd7b8e34a3b72e2392f1791744756d6f8f3966e73ab12db3d97827b2c33186aa355af17702b291edf4cd475b03060d40a43a7e72829fb7437ec2ab8cacef84d0cc1cd7918b90211be3fa3493f63c074b95b1051d27d041d15ef15ed11e1981b11f2c438ddbdc7baa3d815875b0041c39451b6d04cea370dbcb45b97e57caed8760fbb04af07b28cd552b4bfbe52aea8c6ad7cb2ca73e8748bccfe201641a26f605b5400ca30f8b4c1ca69355255412888ea9a460ae04c60101e292a0135eefa6de02d28ba5f2b995850e82394da297ce6e89b65a7ae09978c37db81ed72f8ea0e3569fe2835005bb10896e675d10cefc02325bddd7edc7a163abf77540953b0ac6c62818bf5a052e6feb66f25f628e01ec4a06d9f845292223b4e0a50b6e8784ad37471807da99c748c1cef8ce4c20577aa145167fd9db2dfcd5fd5dd8b8b3d6d1143b52b91ef82955b369ffa8d665b116925576886760dab39306a9e6dcf5152353e6cfac1de5031826276caaccf503b079dca0d5b34cccf6d713dc71fd3293d8d59f1f33cfbf4df0414f33e2ce7c4bdc212202a1563c4e3f9f30dfbeda6be2964583d0618fe3b5ba3b34bf81b012412fc844d89b16fcb47ef7ff04c74fc1e61e74b1da5547bd1c35385a936c2465575d8b64407cdaabc4167081b540c261f052c54c6db1441908f666fba89f7d98108d545133315335763ecf5b16f56789bf7508247dc99b981e4032c145f79e00089928db4ef124d31dbec487678116a844db218247f983825ae52bd7474b43043a1425d9eabb59f862fe3418b35b182d95ab9a72a767b4babbc5da83c25cbea3111c532de0b7ccbf53d4ffa608a5f1fb332c94d6f93da68af3cc2caa5b1f444c845e8a3b1170d9d1be7b4fe8fa9e31773a5ea1f0df636791418a4e2216d27f4dd6ce475821befb032e009bddfc13779f3868b3b2ad92d27220386423371bb615f193ab52abb0b35132a7090c42c91371217d634610a516b13a45c77daf08d38916f17b89707dc6237861fea6a26e49abd6431dd654cb95a800ef627c66d03b5eccd82de1f3ac488cc5c8e8685fb2c6639dc5dd510432bcaf421cd214806b07e018591978c2728fac9a00e2e2d494e734de1b7bb48131aaba681c310dc50a18e506ce918bfd38930c55c89d4abe76d9f3e790b4085d4ab10508ec5cab75c41a142fc807685a952f562e57cd5fc45797b979d7447bed3acceb2f3f3bf1f56b23f3e77d337edf3e66d8beb8acc1b5b9a6d8e9bb95a242ec0a912a704a38b746ce98e1dba3c860a94e859e27879bfadf86561efb09aa0130a72458e16a9b76d28938a5cace3a4b14f3ad25b33f1e0a0400db49558a6b0ec995b67968de75b71fce1721ab4a142bc3f1d3b8115993efac4b7751fc808acd303d1413c9b1329960da958807651087aaf7d3e79020322b313c2de5126bfe43738ffe46f0fda7fa0fd50783661aa5fc2b3f711e4a0bd6ebc02cedfe9d0af3ce1a3fabd1d25b865f090a4e92597fcc315bed6ed0d89de65e876c1937dc1aff4d31419c02bcb445da2c0eea814be1e739b0703743c8476390ed5dc99937fc7521f62d4da65119135762579042a2b2936d020ddaa9e3c6a3731c1378df190f7b6852c0b1bdea8ff41d08bdd0fd1f85805d9ce47d8f5e990d93cf6454347c5e4b301563fa5b78bb49e8a982a7726228fa61cdfffaf95887734178cdbc553a91b767f1aff779526d8a3d5e409529d3809bebd89b4431c941d903e886f875d39c29778365336df63370666eea2235a944b239c8336b14bf97ad461100030e3bca12a35a1d180c5bb3574de1573db1906507aef6c4c2a5500d40711d710684f6bc2b5b02ec79b6d5b7baefcf4943ef7a268b71944da80dd0890de4a8a4d081a02fc487c6f3ee5e3354f4c699d638e155be0eab85ce1764fb2503f8909facb05e9cf629f65fb25415ecc7cea8dd7622b2b0cef7b192c74e8933fda83ea725abce6733c507cc75e6eaf19bad8bf12a477094fcb40b5f168a5b253e7ae70ca561a117e2cb1e91ed59ebfa1ec1bdd3942c3be4b8d06f7b825228c88fa17052fc8eb6de06252eb91f3a354a8cde757cb53988a960f5ceca5ea026241343d4273a50cf85c387e679b5c48bf2091fd27178d419ac0cd2c618f35ae5823e5ffcb4f91d4f4355f2e0ec9c4c8f5b1e7fdf49a5ddcc660527a70742db4b69cd6b5ecca0834bfb73d134bd4e2b83c5b4503f24a2a1df1ad7ff4ce6948b1079a7672b36ab307ff4e3bbaea86171bf03126ebf4e2cd7f6b0b77f7faaeb8e7e75803602b7cb4b4d53f1822b84151862931f13dda82312cb04991159776e0c6fecd887fb96dc032da67ed9275d7499aa1f92f6a27d398f1b8a989fb2769d4e84d14023199528f6627fe23df59751c33e910f6a79d18df1538851934b55e5b5915f9b0c2f776ccc18b106af0dad21e36b3c1fe1f910a5af414a3b0833096302f0d8bd98f1fe5bce390411c3b6808849301a312c01a51449d64fe3607c5409146d8995c87436b5f52264dc2236b0647c163f6ae7d2a4275b3639a513e2ebe5e4d3f29c874d9baee07f83ddf6d79e709538d5971bbbf3e67413e7d75c7", 0xb00}], 0x1}, 0x810) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000000)="669e29", 0x3}], 0x1}, 0x40089) 410.716947ms ago: executing program 4 (id=3756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 410.332187ms ago: executing program 0 (id=3757): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) close(r3) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 362.792281ms ago: executing program 3 (id=3758): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 349.362692ms ago: executing program 1 (id=3759): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000440)="3a6107ce05dc35c982bb75d4635674d3ff033048eb0194337b1693f770806ca7f9a6831ea80c501011c0850332bfabfb1b26f2"}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) socketpair(0x26, 0x5, 0x5, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x5, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20040840) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) 250.38974ms ago: executing program 4 (id=3760): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x80010000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, 0x0) socket$kcm(0xa, 0x6, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={&(0x7f0000000340), 0x6e, &(0x7f0000000a00)=[{&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000500)=""/172, 0xac}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/221, 0xdd}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000840)=""/191, 0xbf}], 0x6, &(0x7f0000000b80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x8, &(0x7f0000000340), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 250.11246ms ago: executing program 3 (id=3761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000008005cda000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 33.648367ms ago: executing program 3 (id=3762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000600000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 1 (id=3763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): n0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.538301][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.551683][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.622390][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.631826][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.886214][ T5801] Bluetooth: hci2: command tx timeout [ 76.960045][ T5801] Bluetooth: hci0: command tx timeout [ 76.963479][ T5798] Bluetooth: hci1: command tx timeout [ 76.965527][ T5801] Bluetooth: hci3: command tx timeout [ 76.992363][ C0] hrtimer: interrupt took 67848 ns [ 77.502592][ T5899] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 78.974330][ T5801] Bluetooth: hci2: command tx timeout [ 79.039349][ T5798] Bluetooth: hci0: command tx timeout [ 79.045301][ T5801] Bluetooth: hci1: command tx timeout [ 79.050155][ T5798] Bluetooth: hci3: command tx timeout [ 83.927810][ T6012] pim6reg1: entered promiscuous mode [ 83.955589][ T6012] pim6reg1: entered allmulticast mode [ 84.253467][ T6025] syz.3.57[6025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.253725][ T6025] syz.3.57[6025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.295614][ T6025] syz.3.57[6025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.333641][ T6025] syz.3.57[6025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.782668][ T23] cfg80211: failed to load regulatory.db [ 88.351953][ T6107] netlink: 'syz.1.91': attribute type 21 has an invalid length. [ 88.369376][ T6107] netlink: 128 bytes leftover after parsing attributes in process `syz.1.91'. [ 88.402982][ T6107] netlink: 'syz.1.91': attribute type 5 has an invalid length. [ 88.426134][ T6107] netlink: 3 bytes leftover after parsing attributes in process `syz.1.91'. [ 91.933621][ T6250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.158'. [ 91.968036][ T6250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.158'. [ 91.989626][ T6250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.158'. [ 92.016976][ T6250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.158'. [ 92.060026][ T6255] warning: `syz.0.160' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.309037][ T6278] Zero length message leads to an empty skb [ 94.707334][ T6276] netlink: 'syz.0.168': attribute type 21 has an invalid length. [ 94.715590][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 94.739520][ T6280] netlink: 'syz.2.171': attribute type 21 has an invalid length. [ 94.747351][ T6280] netlink: 128 bytes leftover after parsing attributes in process `syz.2.171'. [ 94.777458][ T6280] netlink: 'syz.2.171': attribute type 5 has an invalid length. [ 94.803741][ T6280] netlink: 3 bytes leftover after parsing attributes in process `syz.2.171'. [ 94.996505][ T6286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.181'. [ 95.029540][ T6286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.181'. [ 95.052810][ T6286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.181'. [ 95.108681][ T6286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.181'. [ 95.171311][ T6290] netlink: 830 bytes leftover after parsing attributes in process `syz.3.175'. [ 95.454812][ T6302] netlink: 'syz.1.182': attribute type 21 has an invalid length. [ 95.471578][ T6302] netlink: 128 bytes leftover after parsing attributes in process `syz.1.182'. [ 95.496298][ T6302] netlink: 'syz.1.182': attribute type 5 has an invalid length. [ 95.507567][ T6302] netlink: 3 bytes leftover after parsing attributes in process `syz.1.182'. [ 95.539205][ T5798] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 95.789858][ T5798] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 96.259833][ T6328] netlink: 'syz.1.194': attribute type 21 has an invalid length. [ 96.298283][ T5798] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 96.329143][ T6328] netlink: 'syz.1.194': attribute type 5 has an invalid length. [ 96.448969][ T5798] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 96.897404][ T6349] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 97.476707][ T6349] syz.3.203 (6349) used greatest stack depth: 20008 bytes left [ 97.705045][ T6368] netlink: 'syz.3.208': attribute type 21 has an invalid length. [ 97.733503][ T6368] netlink: 'syz.3.208': attribute type 5 has an invalid length. [ 97.902990][ T5798] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 99.183900][ T6393] syzkaller0: entered promiscuous mode [ 99.204518][ T6393] syzkaller0: entered allmulticast mode [ 101.683134][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 102.212994][ T6418] validate_nla: 2 callbacks suppressed [ 102.213015][ T6418] netlink: 'syz.1.230': attribute type 21 has an invalid length. [ 102.227133][ T6418] __nla_validate_parse: 14 callbacks suppressed [ 102.227148][ T6418] netlink: 128 bytes leftover after parsing attributes in process `syz.1.230'. [ 102.263789][ T6418] netlink: 'syz.1.230': attribute type 5 has an invalid length. [ 102.287115][ T6418] netlink: 3 bytes leftover after parsing attributes in process `syz.1.230'. [ 102.398958][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 102.507039][ T6436] netlink: 'syz.2.239': attribute type 21 has an invalid length. [ 102.520084][ T6436] netlink: 128 bytes leftover after parsing attributes in process `syz.2.239'. [ 102.530317][ T6436] netlink: 'syz.2.239': attribute type 4 has an invalid length. [ 102.612090][ T5791] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 103.026667][ T6453] netlink: 'syz.1.245': attribute type 21 has an invalid length. [ 103.042135][ T6453] netlink: 128 bytes leftover after parsing attributes in process `syz.1.245'. [ 103.052449][ T6453] netlink: 'syz.1.245': attribute type 5 has an invalid length. [ 103.061318][ T6453] netlink: 3 bytes leftover after parsing attributes in process `syz.1.245'. [ 103.860638][ T6472] netlink: 'syz.1.254': attribute type 21 has an invalid length. [ 103.869745][ T6472] netlink: 128 bytes leftover after parsing attributes in process `syz.1.254'. [ 103.899043][ T6472] netlink: 'syz.1.254': attribute type 5 has an invalid length. [ 103.906950][ T6472] netlink: 3 bytes leftover after parsing attributes in process `syz.1.254'. [ 104.438283][ T6495] netlink: 'syz.0.263': attribute type 21 has an invalid length. [ 104.455688][ T6495] netlink: 128 bytes leftover after parsing attributes in process `syz.0.263'. [ 104.475074][ T6495] netlink: 'syz.0.263': attribute type 4 has an invalid length. [ 105.927168][ T5791] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 106.587172][ T5791] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 106.729993][ T6561] IPv6: Can't replace route, no match found [ 107.177027][ T5791] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 107.536545][ T5791] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 107.930115][ T6602] Driver unsupported XDP return value 0 on prog (id 158) dev N/A, expect packet loss! [ 108.464761][ T5791] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 108.692664][ T5791] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 108.729251][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 108.917563][ T6629] validate_nla: 1 callbacks suppressed [ 108.917582][ T6629] netlink: 'syz.0.323': attribute type 10 has an invalid length. [ 109.311001][ T5798] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 109.840304][ T5798] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 110.204116][ T6680] netlink: 14 bytes leftover after parsing attributes in process `syz.2.347'. [ 110.223605][ T6680] hsr_slave_0: left promiscuous mode [ 110.258548][ T6680] hsr_slave_1: left promiscuous mode [ 110.414765][ T5798] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 111.073781][ T5798] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 111.743532][ T2901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.789715][ T6735] netlink: 'syz.3.371': attribute type 21 has an invalid length. [ 111.801297][ T6735] netlink: 128 bytes leftover after parsing attributes in process `syz.3.371'. [ 111.822928][ T6735] netlink: 'syz.3.371': attribute type 5 has an invalid length. [ 111.843304][ T6735] netlink: 3 bytes leftover after parsing attributes in process `syz.3.371'. [ 111.968518][ T2901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.102186][ T2901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.244114][ T2901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.346224][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.357547][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.375278][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.385289][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.396149][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 112.405944][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.813000][ T5798] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 113.333046][ T6748] chnl_net:caif_netlink_parms(): no params data found [ 114.097166][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.104588][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.112851][ T6748] bridge_slave_0: entered allmulticast mode [ 114.120691][ T6748] bridge_slave_0: entered promiscuous mode [ 114.141920][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.149509][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.157500][ T6748] bridge_slave_1: entered allmulticast mode [ 114.178983][ T6748] bridge_slave_1: entered promiscuous mode [ 114.307843][ T6748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.417130][ T6748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.483730][ T5798] Bluetooth: hci2: command tx timeout [ 114.536353][ T6748] team0: Port device team_slave_0 added [ 114.579850][ T2901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.594868][ T2901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.616866][ T2901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.639641][ T2901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.661362][ T2901] bridge_slave_1: left allmulticast mode [ 114.667460][ T2901] bridge_slave_1: left promiscuous mode [ 114.680419][ T2901] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.722307][ T2901] bridge_slave_0: left allmulticast mode [ 114.728321][ T2901] bridge_slave_0: left promiscuous mode [ 114.758962][ T2901] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.813839][ T2901] veth1_macvtap: left promiscuous mode [ 114.828621][ T2901] veth0_macvtap: left promiscuous mode [ 114.842335][ T2901] veth1_vlan: left promiscuous mode [ 114.854913][ T2901] veth0_vlan: left promiscuous mode [ 115.950990][ T2901] team0 (unregistering): Port device team_slave_1 removed [ 116.005124][ T2901] team0 (unregistering): Port device team_slave_0 removed [ 116.048509][ T2901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.101268][ T2901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.565442][ T5798] Bluetooth: hci2: command tx timeout [ 116.624121][ T2901] bond0 (unregistering): Released all slaves [ 116.705832][ T6810] netlink: 763 bytes leftover after parsing attributes in process `syz.1.391'. [ 116.717975][ T6748] team0: Port device team_slave_1 added [ 116.963903][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.999082][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.056193][ T6748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.104375][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.120708][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.176852][ T6748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.447917][ T6748] hsr_slave_0: entered promiscuous mode [ 117.491241][ T6748] hsr_slave_1: entered promiscuous mode [ 118.237577][ T6748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.290404][ T6748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.325297][ T6748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.365885][ T6748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.639153][ T5798] Bluetooth: hci2: command tx timeout [ 118.720162][ T6897] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 118.737109][ T6897] syzkaller0: persist disabled [ 118.873585][ T6748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.917023][ T6748] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.976442][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.983792][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.095580][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.104245][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.171794][ T6748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.720183][ T5798] Bluetooth: hci2: command tx timeout [ 120.739253][ T6961] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.781946][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 120.961033][ T6748] veth0_vlan: entered promiscuous mode [ 121.002383][ T6748] veth1_vlan: entered promiscuous mode [ 121.095332][ T6748] veth0_macvtap: entered promiscuous mode [ 121.124440][ T6748] veth1_macvtap: entered promiscuous mode [ 121.196126][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.221200][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.246519][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.276387][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.300394][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.358822][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.410816][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.455668][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.513369][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.545937][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.577193][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.617346][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.663597][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.730150][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.784361][ T6981] netlink: 763 bytes leftover after parsing attributes in process `syz.0.431'. [ 121.858495][ T6748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.878862][ T6748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.887743][ T6748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.910218][ T6748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.209884][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.217928][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.311173][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.330825][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.350547][ T6997] netlink: 'syz.0.436': attribute type 21 has an invalid length. [ 122.374102][ T6997] netlink: 128 bytes leftover after parsing attributes in process `syz.0.436'. [ 122.384762][ T6997] netlink: 'syz.0.436': attribute type 5 has an invalid length. [ 122.416065][ T6997] netlink: 3 bytes leftover after parsing attributes in process `syz.0.436'. [ 122.730799][ T7003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.438'. [ 122.756669][ T7003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.438'. [ 122.807587][ T7004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.438'. [ 123.143958][ T5798] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 123.221789][ T7017] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 123.286297][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 124.227738][ T7048] netlink: 164 bytes leftover after parsing attributes in process `syz.1.448'. [ 125.555860][ T7097] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 125.649427][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 126.190581][ T7114] netlink: 'syz.1.464': attribute type 21 has an invalid length. [ 126.224913][ T7114] netlink: 128 bytes leftover after parsing attributes in process `syz.1.464'. [ 126.253229][ T7114] netlink: 'syz.1.464': attribute type 5 has an invalid length. [ 127.390286][ T7147] __nla_validate_parse: 1 callbacks suppressed [ 127.390337][ T7147] netlink: 176 bytes leftover after parsing attributes in process `syz.3.474'. [ 127.715423][ T7153] netlink: 'syz.4.476': attribute type 21 has an invalid length. [ 127.725900][ T7153] netlink: 128 bytes leftover after parsing attributes in process `syz.4.476'. [ 127.735825][ T7153] netlink: 'syz.4.476': attribute type 5 has an invalid length. [ 127.745453][ T7153] netlink: 3 bytes leftover after parsing attributes in process `syz.4.476'. [ 128.111889][ T7170] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.141773][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 128.613260][ T7186] netlink: 'syz.0.486': attribute type 21 has an invalid length. [ 128.622189][ T7186] netlink: 128 bytes leftover after parsing attributes in process `syz.0.486'. [ 128.633135][ T7186] netlink: 'syz.0.486': attribute type 5 has an invalid length. [ 128.641185][ T7186] netlink: 3 bytes leftover after parsing attributes in process `syz.0.486'. [ 129.540721][ T7211] netlink: 'syz.1.495': attribute type 21 has an invalid length. [ 129.567001][ T7211] netlink: 128 bytes leftover after parsing attributes in process `syz.1.495'. [ 129.588540][ T7211] netlink: 'syz.1.495': attribute type 5 has an invalid length. [ 129.613262][ T7211] netlink: 3 bytes leftover after parsing attributes in process `syz.1.495'. [ 130.343226][ T7244] netlink: 'syz.4.508': attribute type 21 has an invalid length. [ 130.351694][ T7244] netlink: 128 bytes leftover after parsing attributes in process `syz.4.508'. [ 130.362475][ T7244] netlink: 'syz.4.508': attribute type 5 has an invalid length. [ 130.370757][ T7244] netlink: 3 bytes leftover after parsing attributes in process `syz.4.508'. [ 131.058398][ T7257] netlink: 'syz.0.513': attribute type 10 has an invalid length. [ 131.100554][ T7257] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 131.107411][ T7257] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.184191][ T7257] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 131.416330][ T7266] netlink: 'syz.3.517': attribute type 21 has an invalid length. [ 132.008176][ T7286] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.852562][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.867084][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.391377][ T7474] validate_nla: 1 callbacks suppressed [ 138.391398][ T7474] netlink: 'syz.1.596': attribute type 21 has an invalid length. [ 138.415917][ T7474] __nla_validate_parse: 3 callbacks suppressed [ 138.415936][ T7474] netlink: 128 bytes leftover after parsing attributes in process `syz.1.596'. [ 138.467275][ T7474] netlink: 'syz.1.596': attribute type 5 has an invalid length. [ 138.499340][ T7474] netlink: 3 bytes leftover after parsing attributes in process `syz.1.596'. [ 138.775703][ T7486] netlink: 176 bytes leftover after parsing attributes in process `syz.4.599'. [ 139.368378][ T7515] netlink: 'syz.4.608': attribute type 21 has an invalid length. [ 139.385195][ T7515] netlink: 128 bytes leftover after parsing attributes in process `syz.4.608'. [ 139.396588][ T7515] netlink: 'syz.4.608': attribute type 5 has an invalid length. [ 139.421341][ T7515] netlink: 3 bytes leftover after parsing attributes in process `syz.4.608'. [ 140.038252][ T7533] netlink: 176 bytes leftover after parsing attributes in process `syz.0.612'. [ 140.610013][ T7552] netlink: 'syz.0.618': attribute type 21 has an invalid length. [ 140.617884][ T7552] netlink: 128 bytes leftover after parsing attributes in process `syz.0.618'. [ 140.672088][ T7552] netlink: 'syz.0.618': attribute type 5 has an invalid length. [ 140.694890][ T7552] netlink: 3 bytes leftover after parsing attributes in process `syz.0.618'. [ 141.127341][ T7561] syzkaller0: entered promiscuous mode [ 141.133468][ T7561] syzkaller0: entered allmulticast mode [ 143.778216][ T7579] netlink: 'syz.4.626': attribute type 10 has an invalid length. [ 143.788656][ T7579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.626'. [ 143.804859][ T7579] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 143.811937][ T7579] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.878931][ T7579] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 143.910411][ T7588] netlink: 'syz.0.630': attribute type 21 has an invalid length. [ 143.928984][ T7588] netlink: 128 bytes leftover after parsing attributes in process `syz.0.630'. [ 143.948901][ T7588] netlink: 'syz.0.630': attribute type 5 has an invalid length. [ 143.968861][ T7588] netlink: 3 bytes leftover after parsing attributes in process `syz.0.630'. [ 144.047254][ T7592] netlink: 188 bytes leftover after parsing attributes in process `syz.3.632'. [ 145.107123][ T5798] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 145.172523][ T7630] netlink: 'syz.1.643': attribute type 21 has an invalid length. [ 145.205330][ T7630] netlink: 128 bytes leftover after parsing attributes in process `syz.1.643'. [ 145.242829][ T7630] netlink: 'syz.1.643': attribute type 5 has an invalid length. [ 145.265438][ T7630] netlink: 3 bytes leftover after parsing attributes in process `syz.1.643'. [ 145.328471][ T7632] netlink: 188 bytes leftover after parsing attributes in process `syz.0.644'. [ 145.470601][ T7637] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 145.498416][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.647'. [ 145.544347][ T7637] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 145.567484][ T7637] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.619550][ T7637] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 147.339649][ T5798] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 148.164226][ T7695] netlink: 188 bytes leftover after parsing attributes in process `syz.0.658'. [ 148.500696][ T7707] netlink: 'syz.0.661': attribute type 10 has an invalid length. [ 148.544427][ T7707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.661'. [ 148.613922][ T5798] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 148.776552][ T7719] netlink: 'syz.1.665': attribute type 6 has an invalid length. [ 148.805777][ T7719] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 148.823650][ T7719] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.665'. [ 149.317659][ T7737] netlink: 176 bytes leftover after parsing attributes in process `syz.1.669'. [ 150.001921][ T5798] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 150.416167][ T7775] netlink: 'syz.4.679': attribute type 10 has an invalid length. [ 150.433160][ T7775] netlink: 40 bytes leftover after parsing attributes in process `syz.4.679'. [ 150.657132][ T7784] netlink: 'syz.3.683': attribute type 21 has an invalid length. [ 150.673753][ T7784] netlink: 128 bytes leftover after parsing attributes in process `syz.3.683'. [ 150.685738][ T7784] netlink: 'syz.3.683': attribute type 5 has an invalid length. [ 150.694509][ T7784] netlink: 3 bytes leftover after parsing attributes in process `syz.3.683'. [ 150.708261][ T5798] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 150.876575][ T7793] netlink: 176 bytes leftover after parsing attributes in process `syz.4.687'. [ 151.238113][ T7800] netlink: 'syz.3.691': attribute type 10 has an invalid length. [ 151.258919][ T7800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.691'. [ 151.386155][ T7806] netlink: 'syz.1.693': attribute type 21 has an invalid length. [ 151.401454][ T7806] netlink: 128 bytes leftover after parsing attributes in process `syz.1.693'. [ 151.425971][ T7806] netlink: 'syz.1.693': attribute type 5 has an invalid length. [ 151.435551][ T7806] netlink: 3 bytes leftover after parsing attributes in process `syz.1.693'. [ 151.474437][ T5798] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 151.676552][ T7816] netlink: 176 bytes leftover after parsing attributes in process `syz.3.698'. [ 152.234922][ T7829] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 152.562880][ T7835] netlink: 'syz.0.705': attribute type 21 has an invalid length. [ 152.608919][ T7835] netlink: 'syz.0.705': attribute type 5 has an invalid length. [ 152.706561][ T5798] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 152.770186][ T5798] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 153.409755][ T5798] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 153.503176][ T5798] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 154.566453][ T7878] __nla_validate_parse: 5 callbacks suppressed [ 154.566602][ T7878] netlink: 176 bytes leftover after parsing attributes in process `syz.3.724'. [ 154.663674][ T7880] validate_nla: 3 callbacks suppressed [ 154.663695][ T7880] netlink: 'syz.4.725': attribute type 10 has an invalid length. [ 154.681865][ T7880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.725'. [ 154.735528][ T7882] netlink: 'syz.1.726': attribute type 21 has an invalid length. [ 154.744317][ T7882] netlink: 128 bytes leftover after parsing attributes in process `syz.1.726'. [ 154.777361][ T5798] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 154.777540][ T7882] netlink: 'syz.1.726': attribute type 5 has an invalid length. [ 154.799559][ T5798] Bluetooth: hci3: command tx timeout [ 154.815437][ T7882] netlink: 3 bytes leftover after parsing attributes in process `syz.1.726'. [ 155.599062][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 156.254518][ T5798] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 156.301159][ T7911] netlink: 'syz.3.738': attribute type 21 has an invalid length. [ 156.354945][ T7911] netlink: 128 bytes leftover after parsing attributes in process `syz.3.738'. [ 156.389076][ T7911] netlink: 'syz.3.738': attribute type 5 has an invalid length. [ 156.397085][ T7911] netlink: 3 bytes leftover after parsing attributes in process `syz.3.738'. [ 156.584101][ T5798] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 156.692180][ T7925] netlink: 'syz.3.745': attribute type 10 has an invalid length. [ 156.708650][ T7925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.745'. [ 156.989688][ T5798] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 157.341482][ T7940] netlink: 'syz.3.751': attribute type 21 has an invalid length. [ 157.359237][ T7940] netlink: 128 bytes leftover after parsing attributes in process `syz.3.751'. [ 157.379322][ T7940] netlink: 'syz.3.751': attribute type 5 has an invalid length. [ 157.410935][ T7940] netlink: 3 bytes leftover after parsing attributes in process `syz.3.751'. [ 157.629301][ T5798] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 157.688902][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 158.214358][ T5798] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 158.336082][ T7957] netlink: 176 bytes leftover after parsing attributes in process `syz.0.758'. [ 158.664958][ T7967] netlink: 'syz.0.761': attribute type 10 has an invalid length. [ 158.688462][ T5798] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 158.736872][ T7968] netlink: 'syz.3.762': attribute type 21 has an invalid length. [ 159.094293][ T5798] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 159.581422][ T7986] syzkaller0: entered promiscuous mode [ 159.617213][ T5798] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 159.620180][ T7986] syzkaller0: entered allmulticast mode [ 159.813911][ T7993] validate_nla: 1 callbacks suppressed [ 159.813927][ T7993] netlink: 'syz.3.775': attribute type 21 has an invalid length. [ 159.844309][ T7993] __nla_validate_parse: 4 callbacks suppressed [ 159.844330][ T7993] netlink: 128 bytes leftover after parsing attributes in process `syz.3.775'. [ 159.909799][ T7993] netlink: 'syz.3.775': attribute type 5 has an invalid length. [ 159.938804][ T7993] netlink: 3 bytes leftover after parsing attributes in process `syz.3.775'. [ 160.059982][ T5798] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 160.269769][ T8010] netlink: 176 bytes leftover after parsing attributes in process `syz.1.781'. [ 160.727336][ T8024] netlink: 'syz.0.787': attribute type 21 has an invalid length. [ 160.736120][ T8024] netlink: 128 bytes leftover after parsing attributes in process `syz.0.787'. [ 160.745833][ T8024] netlink: 'syz.0.787': attribute type 5 has an invalid length. [ 160.755247][ T8024] netlink: 3 bytes leftover after parsing attributes in process `syz.0.787'. [ 160.917477][ T5798] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 161.146848][ T8033] netlink: 176 bytes leftover after parsing attributes in process `syz.3.792'. [ 161.524510][ T5798] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 161.827230][ T8045] netlink: 'syz.3.796': attribute type 21 has an invalid length. [ 161.874282][ T8045] netlink: 128 bytes leftover after parsing attributes in process `syz.3.796'. [ 161.949306][ T8045] netlink: 'syz.3.796': attribute type 5 has an invalid length. [ 162.017791][ T8045] netlink: 3 bytes leftover after parsing attributes in process `syz.3.796'. [ 162.045976][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.061607][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.135605][ T5798] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 162.279994][ T8050] bridge_slave_1: left allmulticast mode [ 162.359078][ T8050] bridge_slave_1: left promiscuous mode [ 162.370885][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.470349][ T8050] bridge_slave_0: left allmulticast mode [ 162.476634][ T8050] bridge_slave_0: left promiscuous mode [ 162.506926][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.689895][ T8054] netlink: 'syz.0.800': attribute type 10 has an invalid length. [ 162.710843][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.800'. [ 162.739773][ T8054] ipvlan1: entered promiscuous mode [ 162.749533][ T8054] ipvlan1: entered allmulticast mode [ 162.755552][ T8054] veth0_vlan: entered allmulticast mode [ 162.886820][ T8054] bridge0: port 3(ipvlan1) entered blocking state [ 162.902232][ T8054] bridge0: port 3(ipvlan1) entered disabled state [ 162.947287][ T8054] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 163.076542][ T8054] syz.0.800 (8054) used greatest stack depth: 17160 bytes left [ 163.270225][ T8073] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 163.278308][ T8073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.806'. [ 163.290346][ T8073] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 163.297455][ T8073] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.324989][ T8073] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 163.334980][ T8070] netlink: 'syz.4.807': attribute type 21 has an invalid length. [ 163.350927][ T8070] netlink: 'syz.4.807': attribute type 5 has an invalid length. [ 163.460395][ T5798] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 163.933455][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.950264][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.018213][ T8085] bridge_slave_1: left allmulticast mode [ 164.036176][ T8085] bridge_slave_1: left promiscuous mode [ 164.051230][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.152021][ T8085] bridge_slave_0: left allmulticast mode [ 164.164157][ T8085] bridge_slave_0: left promiscuous mode [ 164.188224][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.958046][ T5798] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 165.003749][ T8105] validate_nla: 2 callbacks suppressed [ 165.003768][ T8105] netlink: 'syz.3.820': attribute type 10 has an invalid length. [ 165.045892][ T8105] __nla_validate_parse: 6 callbacks suppressed [ 165.045909][ T8105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.820'. [ 166.007033][ T8123] netlink: 'syz.1.828': attribute type 21 has an invalid length. [ 166.017901][ T8123] netlink: 128 bytes leftover after parsing attributes in process `syz.1.828'. [ 166.030037][ T8123] netlink: 'syz.1.828': attribute type 5 has an invalid length. [ 166.038038][ T8123] netlink: 3 bytes leftover after parsing attributes in process `syz.1.828'. [ 167.289647][ T8146] netlink: 'syz.4.837': attribute type 21 has an invalid length. [ 167.335374][ T8146] netlink: 128 bytes leftover after parsing attributes in process `syz.4.837'. [ 167.361093][ T8146] netlink: 'syz.4.837': attribute type 5 has an invalid length. [ 167.377654][ T8146] netlink: 3 bytes leftover after parsing attributes in process `syz.4.837'. [ 168.372706][ T8169] netlink: 'syz.4.847': attribute type 21 has an invalid length. [ 168.383541][ T8169] netlink: 128 bytes leftover after parsing attributes in process `syz.4.847'. [ 168.399101][ T8169] netlink: 'syz.4.847': attribute type 5 has an invalid length. [ 168.427942][ T8169] netlink: 3 bytes leftover after parsing attributes in process `syz.4.847'. [ 169.075687][ T8192] netlink: 'syz.1.856': attribute type 10 has an invalid length. [ 169.085765][ T8192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.856'. [ 169.171492][ T8194] netlink: 'syz.1.857': attribute type 21 has an invalid length. [ 169.179703][ T8194] netlink: 128 bytes leftover after parsing attributes in process `syz.1.857'. [ 169.190148][ T8194] netlink: 'syz.1.857': attribute type 5 has an invalid length. [ 169.199437][ T8194] netlink: 3 bytes leftover after parsing attributes in process `syz.1.857'. [ 170.025437][ T8214] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 170.035493][ T8214] ipvlan1: entered promiscuous mode [ 170.042590][ T8214] ipvlan1: entered allmulticast mode [ 170.050714][ T8214] veth0_vlan: entered allmulticast mode [ 170.072330][ T8214] bridge0: port 3(ipvlan1) entered blocking state [ 170.086552][ T8214] bridge0: port 3(ipvlan1) entered disabled state [ 170.295562][ T8214] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 170.446300][ T8217] netlink: 'syz.1.867': attribute type 21 has an invalid length. [ 170.460124][ T8217] __nla_validate_parse: 1 callbacks suppressed [ 170.460145][ T8217] netlink: 128 bytes leftover after parsing attributes in process `syz.1.867'. [ 170.518165][ T8217] netlink: 'syz.1.867': attribute type 5 has an invalid length. [ 170.534663][ T8217] netlink: 3 bytes leftover after parsing attributes in process `syz.1.867'. [ 170.906389][ T8232] netlink: 14 bytes leftover after parsing attributes in process `syz.0.874'. [ 171.191494][ T8243] netlink: 'syz.1.878': attribute type 10 has an invalid length. [ 171.201109][ T8243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.878'. [ 171.700363][ T8261] netlink: 188 bytes leftover after parsing attributes in process `syz.1.886'. [ 171.909099][ T8268] netlink: 'syz.3.889': attribute type 10 has an invalid length. [ 171.916940][ T8268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.889'. [ 172.521665][ T8286] netlink: 188 bytes leftover after parsing attributes in process `syz.0.896'. [ 173.010115][ T8298] netlink: 'syz.0.901': attribute type 10 has an invalid length. [ 173.023466][ T8298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.901'. [ 173.934403][ T8327] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 173.943242][ T8327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.912'. [ 174.239135][ T5798] Bluetooth: hci0: Malformed LE Event: 0x0d [ 174.448501][ T8346] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 177.226464][ T8356] netlink: 'syz.3.923': attribute type 21 has an invalid length. [ 177.234612][ T8356] netlink: 128 bytes leftover after parsing attributes in process `syz.3.923'. [ 177.244787][ T8356] netlink: 'syz.3.923': attribute type 5 has an invalid length. [ 177.264476][ T8356] netlink: 3 bytes leftover after parsing attributes in process `syz.3.923'. [ 177.274894][ T8358] netlink: 188 bytes leftover after parsing attributes in process `syz.1.924'. [ 177.823745][ T8383] netlink: 'syz.0.934': attribute type 21 has an invalid length. [ 177.833533][ T8383] netlink: 128 bytes leftover after parsing attributes in process `syz.0.934'. [ 177.847567][ T8383] netlink: 'syz.0.934': attribute type 5 has an invalid length. [ 177.877979][ T8383] netlink: 3 bytes leftover after parsing attributes in process `syz.0.934'. [ 178.746046][ T8402] netlink: 'syz.0.943': attribute type 10 has an invalid length. [ 178.759222][ T8402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.943'. [ 178.983564][ T8411] netlink: 188 bytes leftover after parsing attributes in process `syz.4.947'. [ 179.376787][ T8426] netlink: 'syz.1.955': attribute type 10 has an invalid length. [ 179.399409][ T8426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.955'. [ 180.083052][ T8450] netlink: 'syz.3.965': attribute type 10 has an invalid length. [ 180.095946][ T8450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.965'. [ 181.510748][ T8496] netlink: 'syz.4.986': attribute type 39 has an invalid length. [ 182.145306][ T8510] netlink: 'syz.1.991': attribute type 10 has an invalid length. [ 182.176971][ T8510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.991'. [ 182.480494][ T8524] netlink: 188 bytes leftover after parsing attributes in process `syz.4.997'. [ 183.396732][ T8540] netlink: 'syz.0.1003': attribute type 39 has an invalid length. [ 183.733137][ T8549] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1006'. [ 184.390909][ T8565] netlink: 'syz.3.1012': attribute type 10 has an invalid length. [ 184.404245][ T8565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1012'. [ 184.698162][ T8573] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1016'. [ 185.599284][ T8595] netlink: 'syz.0.1024': attribute type 10 has an invalid length. [ 185.641491][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1024'. [ 186.035597][ T8605] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1029'. [ 186.955316][ T8622] netlink: 'syz.4.1036': attribute type 10 has an invalid length. [ 186.967455][ T8622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1036'. [ 187.306660][ T8635] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1041'. [ 187.800476][ T8648] netlink: 'syz.0.1048': attribute type 10 has an invalid length. [ 187.808547][ T8648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1048'. [ 188.717693][ T8660] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1052'. [ 189.274489][ T8676] netlink: 'syz.4.1060': attribute type 10 has an invalid length. [ 189.289037][ T8676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1060'. [ 189.365479][ T8678] netlink: 'syz.3.1061': attribute type 10 has an invalid length. [ 189.493848][ T8678] veth0_vlan: left promiscuous mode [ 189.507998][ T8678] veth0_vlan: entered promiscuous mode [ 189.534823][ T8678] team0: Device veth0_vlan failed to register rx_handler [ 189.612045][ T8680] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1062'. [ 190.596125][ T8700] netlink: 'syz.0.1071': attribute type 19 has an invalid length. [ 190.764274][ T8702] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 190.792802][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1070'. [ 191.087499][ T8717] netlink: 'syz.0.1077': attribute type 10 has an invalid length. [ 191.323375][ T8717] veth0_vlan: left promiscuous mode [ 191.361359][ T8717] veth0_vlan: entered promiscuous mode [ 191.383303][ T8717] team0: Device veth0_vlan failed to register rx_handler [ 191.789443][ T8731] netlink: 'syz.4.1081': attribute type 19 has an invalid length. [ 192.221326][ T8736] netlink: 'syz.3.1084': attribute type 10 has an invalid length. [ 192.253153][ T8736] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1084'. [ 193.240251][ T8754] netlink: 'syz.1.1092': attribute type 10 has an invalid length. [ 193.415312][ T8754] veth0_vlan: left promiscuous mode [ 193.499406][ T8754] veth0_vlan: entered promiscuous mode [ 193.523599][ T8754] team0: Device veth0_vlan failed to register rx_handler [ 194.057088][ T8779] netlink: 'syz.3.1103': attribute type 10 has an invalid length. [ 194.065859][ T8779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1103'. [ 194.838130][ T8799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1111'. [ 194.895250][ T8799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1111'. [ 195.114077][ T8802] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.1112'. [ 195.216658][ T8799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1111'. [ 195.301883][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.308439][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.392511][ T8807] netlink: 'syz.4.1114': attribute type 10 has an invalid length. [ 195.435563][ T8807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1114'. [ 196.939149][ T8836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1126'. [ 196.950887][ T8836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1126'. [ 197.216199][ T8836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1126'. [ 197.365888][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 197.376194][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 197.383878][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 197.443177][ T8844] netlink: 'syz.4.1129': attribute type 49 has an invalid length. [ 197.455864][ T8844] netlink: 'syz.4.1129': attribute type 49 has an invalid length. [ 201.400224][ T8934] netlink: 'syz.4.1168': attribute type 10 has an invalid length. [ 202.157024][ T8934] veth0_vlan: left promiscuous mode [ 202.290574][ T8934] veth0_vlan: entered promiscuous mode [ 202.349360][ T8934] team0: Device veth0_vlan failed to register rx_handler [ 209.863251][ T9121] netlink: 'syz.1.1253': attribute type 10 has an invalid length. [ 210.318290][ T9138] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 210.336020][ T9138] veth0_vlan: left promiscuous mode [ 210.363064][ T9138] veth0_vlan: entered promiscuous mode [ 210.389593][ T9138] team0: Device veth0_vlan failed to register rx_handler [ 210.839047][ T9151] delete_channel: no stack [ 211.192283][ T9169] netlink: 'syz.4.1274': attribute type 10 has an invalid length. [ 211.210789][ T9169] veth0_vlan: left promiscuous mode [ 211.231120][ T9169] veth0_vlan: entered promiscuous mode [ 211.284173][ T9169] team0: Device veth0_vlan failed to register rx_handler [ 212.284835][ T9204] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 212.330217][ T9204] veth0_vlan: left promiscuous mode [ 212.410097][ T9204] veth0_vlan: entered promiscuous mode [ 212.447743][ T9204] team0: Device veth0_vlan failed to register rx_handler [ 213.243936][ T9235] netlink: 'syz.0.1303': attribute type 10 has an invalid length. [ 213.353306][ T9235] veth0_vlan: left promiscuous mode [ 213.388017][ T9235] veth0_vlan: entered promiscuous mode [ 213.457658][ T9235] team0: Device veth0_vlan failed to register rx_handler [ 214.428370][ T9268] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1313'. [ 215.235722][ T9274] netlink: 'syz.4.1318': attribute type 10 has an invalid length. [ 215.256397][ T9274] veth0_vlan: left promiscuous mode [ 215.295581][ T9274] veth0_vlan: entered promiscuous mode [ 215.339538][ T9274] team0: Device veth0_vlan failed to register rx_handler [ 216.302061][ T9311] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1333'. [ 216.983406][ T9333] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1343'. [ 217.736120][ T9356] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1353'. [ 218.623111][ T9378] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1363'. [ 220.992631][ T9421] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1379'. [ 222.295107][ T9456] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1395'. [ 222.790553][ T9466] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1397'. [ 227.705586][ T9581] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1448'. [ 227.716065][ T9581] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 228.651875][ T9610] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1461'. [ 229.657940][ T9627] netlink: 'syz.1.1468': attribute type 3 has an invalid length. [ 229.683946][ T9627] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 230.922857][ T9660] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1478'. [ 231.432903][ T9670] netlink: 'syz.3.1482': attribute type 3 has an invalid length. [ 231.468874][ T9670] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 234.033035][ T9747] netlink: 'syz.4.1514': attribute type 3 has an invalid length. [ 234.050340][ T9747] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 234.262536][ T9755] netlink: 'syz.4.1517': attribute type 10 has an invalid length. [ 234.433169][ T9755] veth0_vlan: left promiscuous mode [ 234.473008][ T9755] veth0_vlan: entered promiscuous mode [ 234.523152][ T9755] team0: Device veth0_vlan failed to register rx_handler [ 238.335683][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 239.419048][ T9860] netlink: 'syz.0.1555': attribute type 10 has an invalid length. [ 239.462753][ T9860] veth0_vlan: left promiscuous mode [ 239.503555][ T9860] veth0_vlan: entered promiscuous mode [ 239.543206][ T9860] team0: Device veth0_vlan failed to register rx_handler [ 240.358488][ T9886] syz.3.1563[9886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.376724][ T9886] syz.3.1563[9886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.621154][ T9894] netlink: 'syz.3.1567': attribute type 10 has an invalid length. [ 240.733598][ T9894] veth0_vlan: left promiscuous mode [ 240.768178][ T9894] veth0_vlan: entered promiscuous mode [ 240.865213][ T9894] team0: Device veth0_vlan failed to register rx_handler [ 242.375557][ T9935] netlink: 'syz.0.1583': attribute type 10 has an invalid length. [ 242.434666][ T9935] veth0_vlan: left promiscuous mode [ 242.503227][ T9935] veth0_vlan: entered promiscuous mode [ 242.572083][ T9935] team0: Device veth0_vlan failed to register rx_handler [ 243.655572][ T9971] netlink: 'syz.3.1597': attribute type 10 has an invalid length. [ 243.692442][ T9971] veth0_vlan: left promiscuous mode [ 243.714110][ T9971] veth0_vlan: entered promiscuous mode [ 243.822799][ T9971] team0: Device veth0_vlan failed to register rx_handler [ 244.968026][T10014] netlink: 'syz.0.1615': attribute type 10 has an invalid length. [ 245.056928][T10014] veth0_vlan: left promiscuous mode [ 245.141574][T10014] veth0_vlan: entered promiscuous mode [ 245.167096][T10014] team0: Device veth0_vlan failed to register rx_handler [ 246.098049][T10059] netlink: 'syz.1.1633': attribute type 10 has an invalid length. [ 246.633846][T10059] veth0_vlan: left promiscuous mode [ 246.674620][T10059] veth0_vlan: entered promiscuous mode [ 246.726930][T10059] team0: Device veth0_vlan failed to register rx_handler [ 246.959957][T10071] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1637'. [ 247.051399][T10073] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1638'. [ 248.055163][T10119] IPv6: Can't replace route, no match found [ 248.705285][T10144] netlink: 'syz.4.1666': attribute type 10 has an invalid length. [ 248.740428][T10144] veth0_vlan: left promiscuous mode [ 248.777023][T10144] veth0_vlan: entered promiscuous mode [ 248.824299][T10144] team0: Device veth0_vlan failed to register rx_handler [ 249.136635][T10149] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1668'. [ 249.714229][T10178] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1679'. [ 249.864706][T10182] netlink: 'syz.0.1681': attribute type 10 has an invalid length. [ 250.424243][T10201] netlink: 'syz.3.1690': attribute type 10 has an invalid length. [ 250.503533][T10201] veth0_vlan: left promiscuous mode [ 250.631073][T10201] veth0_vlan: entered promiscuous mode [ 250.699543][T10201] team0: Device veth0_vlan failed to register rx_handler [ 251.696060][T10241] netlink: 'syz.1.1703': attribute type 10 has an invalid length. [ 251.731791][T10241] veth0_vlan: left promiscuous mode [ 251.750609][T10241] veth0_vlan: entered promiscuous mode [ 251.798479][T10241] team0: Device veth0_vlan failed to register rx_handler [ 251.923566][T10246] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 252.676509][T10270] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1714'. [ 252.761179][T10273] netlink: 'syz.0.1716': attribute type 10 has an invalid length. [ 252.776385][T10273] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.786147][T10273] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.796269][T10273] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.806210][T10273] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.893194][T10273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.903130][T10273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.923585][T10273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.933139][T10273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.972133][T10273] team0: Port device geneve1 added [ 253.634630][T10301] netlink: 'syz.3.1727': attribute type 10 has an invalid length. [ 253.662038][T10301] geneve0: entered promiscuous mode [ 253.713223][T10301] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 254.328193][T10327] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 254.383856][T10327] veth0_vlan: left promiscuous mode [ 254.414742][T10327] veth0_vlan: entered promiscuous mode [ 254.456129][T10327] team0: Device veth0_vlan failed to register rx_handler [ 255.174179][T10358] netlink: 'syz.1.1750': attribute type 10 has an invalid length. [ 255.231499][T10358] veth0_vlan: left promiscuous mode [ 255.265850][T10358] veth0_vlan: entered promiscuous mode [ 255.286166][T10358] team0: Device veth0_vlan failed to register rx_handler [ 256.463114][T10410] syz.1.1771: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 256.481505][T10410] CPU: 0 PID: 10410 Comm: syz.1.1771 Not tainted 6.6.101-syzkaller #0 [ 256.489726][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.499991][T10410] Call Trace: [ 256.503357][T10410] [ 256.506397][T10410] dump_stack_lvl+0x16c/0x230 [ 256.511198][T10410] ? show_regs_print_info+0x20/0x20 [ 256.516490][T10410] ? load_image+0x3b0/0x3b0 [ 256.521274][T10410] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 256.527875][T10410] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 256.534653][T10410] warn_alloc+0x210/0x300 [ 256.539091][T10410] ? stack_trace_save+0x9c/0xe0 [ 256.544042][T10410] ? zone_watermark_ok_safe+0x230/0x230 [ 256.549785][T10410] ? kasan_set_track+0x5f/0x70 [ 256.554633][T10410] ? kasan_set_track+0x4e/0x70 [ 256.559398][T10410] ? __kasan_kmalloc+0x8f/0xa0 [ 256.564173][T10410] ? xsk_init_queue+0xb0/0x110 [ 256.569123][T10410] ? xsk_setsockopt+0x4db/0x6f0 [ 256.574059][T10410] ? do_sock_setsockopt+0x175/0x1a0 [ 256.579290][T10410] ? __x64_sys_setsockopt+0x184/0x200 [ 256.584755][T10410] __vmalloc_node_range+0x126/0x1320 [ 256.590236][T10410] ? free_vm_area+0x50/0x50 [ 256.594842][T10410] vmalloc_user+0x74/0x80 [ 256.599315][T10410] ? xskq_create+0xbf/0x170 [ 256.604116][T10410] xskq_create+0xbf/0x170 [ 256.608487][T10410] xsk_init_queue+0xb0/0x110 [ 256.613232][T10410] xsk_setsockopt+0x4db/0x6f0 [ 256.617930][T10410] ? xsk_poll+0x670/0x670 [ 256.622275][T10410] ? __fget_files+0x28/0x4d0 [ 256.626921][T10410] ? aa_sock_opt_perm+0x74/0x100 [ 256.631871][T10410] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 256.637426][T10410] ? security_socket_setsockopt+0x7e/0xa0 [ 256.643148][T10410] ? xsk_poll+0x670/0x670 [ 256.647489][T10410] do_sock_setsockopt+0x175/0x1a0 [ 256.652805][T10410] ? __fdget+0x180/0x210 [ 256.657090][T10410] __x64_sys_setsockopt+0x184/0x200 [ 256.662480][T10410] do_syscall_64+0x55/0xb0 [ 256.666899][T10410] ? clear_bhb_loop+0x40/0x90 [ 256.671610][T10410] ? clear_bhb_loop+0x40/0x90 [ 256.676314][T10410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.682253][T10410] RIP: 0033:0x7fab4178ebe9 [ 256.686688][T10410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.706591][T10410] RSP: 002b:00007fab425a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.715095][T10410] RAX: ffffffffffffffda RBX: 00007fab419b5fa0 RCX: 00007fab4178ebe9 [ 256.723365][T10410] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 256.731571][T10410] RBP: 00007fab41811e19 R08: 0000000000000004 R09: 0000000000000000 [ 256.739962][T10410] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 256.748122][T10410] R13: 00007fab419b6038 R14: 00007fab419b5fa0 R15: 00007ffee49bfd08 [ 256.756464][T10410] [ 256.776709][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.783201][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.798838][T10410] Mem-Info: [ 256.802295][T10410] active_anon:5748 inactive_anon:0 isolated_anon:0 [ 256.802295][T10410] active_file:13237 inactive_file:39896 isolated_file:0 [ 256.802295][T10410] unevictable:768 dirty:156 writeback:0 [ 256.802295][T10410] slab_reclaimable:10437 slab_unreclaimable:95417 [ 256.802295][T10410] mapped:24062 shmem:1373 pagetables:651 [ 256.802295][T10410] sec_pagetables:0 bounce:0 [ 256.802295][T10410] kernel_misc_reclaimable:0 [ 256.802295][T10410] free:1342310 free_pcp:13443 free_cma:0 [ 256.855143][T10410] Node 0 active_anon:22992kB inactive_anon:0kB active_file:52948kB inactive_file:159384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96248kB dirty:624kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11720kB pagetables:2604kB sec_pagetables:0kB all_unreclaimable? no [ 256.895257][T10410] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 256.933001][T10410] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.970852][T10410] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 256.989043][T10410] Node 0 DMA32 free:1463152kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:22812kB inactive_anon:0kB active_file:52948kB inactive_file:158060kB unevictable:1536kB writepending:628kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:33548kB local_pcp:17144kB free_cma:0kB [ 257.049719][T10410] lowmem_reserve[]: 0 0 1 1 1 [ 257.055227][T10410] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 257.101806][T10410] lowmem_reserve[]: 0 0 0 0 0 [ 257.106747][T10410] Node 1 Normal free:3890720kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21120kB local_pcp:14016kB free_cma:0kB [ 257.147122][T10410] lowmem_reserve[]: 0 0 0 0 0 [ 257.152819][T10410] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 257.166503][T10410] Node 0 DMA32: 560*4kB (UME) 758*8kB (UME) 554*16kB (UME) 437*32kB (UME) 355*64kB (UME) 32*128kB (UM) 25*256kB (UM) 12*512kB (M) 6*1024kB (M) 3*2048kB (M) 337*4096kB (M) = 1463152kB [ 257.228970][T10410] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 257.245057][T10410] Node 1 Normal: 252*4kB (UE) 50*8kB (UE) 34*16kB (UE) 90*32kB (UE) 25*64kB (UME) 6*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3890720kB [ 257.320671][T10410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.338631][T10410] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.370433][T10410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.417547][T10410] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.460328][T10410] 55056 total pagecache pages [ 257.484713][T10410] 0 pages in swap cache [ 257.501506][T10410] Free swap = 124996kB [ 257.526444][T10410] Total swap = 124996kB [ 257.535911][T10410] 2097051 pages RAM [ 257.542347][T10410] 0 pages HighMem/MovableOnly [ 257.548550][T10410] 416137 pages reserved [ 257.555715][T10410] 0 pages cma reserved [ 258.503881][T10445] netlink: 'syz.0.1783': attribute type 10 has an invalid length. [ 258.537963][T10445] veth0_vlan: left promiscuous mode [ 258.566564][T10445] veth0_vlan: entered promiscuous mode [ 258.587109][T10445] team0: Device veth0_vlan failed to register rx_handler [ 259.699721][T10479] netlink: 'syz.4.1796': attribute type 10 has an invalid length. [ 259.728909][T10479] veth0_vlan: left promiscuous mode [ 259.753704][T10479] veth0_vlan: entered promiscuous mode [ 259.801715][T10479] team0: Device veth0_vlan failed to register rx_handler [ 260.806984][T10507] netlink: 'syz.4.1808': attribute type 10 has an invalid length. [ 260.883431][T10507] veth0_vlan: left promiscuous mode [ 260.944409][T10507] veth0_vlan: entered promiscuous mode [ 260.977229][T10507] team0: Device veth0_vlan failed to register rx_handler [ 261.817650][T10539] netlink: 'syz.4.1822': attribute type 10 has an invalid length. [ 261.856886][T10539] veth0_vlan: left promiscuous mode [ 261.878568][T10539] veth0_vlan: entered promiscuous mode [ 261.930354][T10539] team0: Device veth0_vlan failed to register rx_handler [ 263.081303][T10565] netlink: 'syz.4.1832': attribute type 10 has an invalid length. [ 263.137290][T10565] veth0_vlan: left promiscuous mode [ 263.180338][T10565] veth0_vlan: entered promiscuous mode [ 263.215557][T10565] team0: Device veth0_vlan failed to register rx_handler [ 263.633423][T10586] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1841'. [ 264.137450][T10598] netlink: 'syz.0.1845': attribute type 10 has an invalid length. [ 264.156614][T10598] veth0_vlan: left promiscuous mode [ 264.182492][T10598] veth0_vlan: entered promiscuous mode [ 264.200135][T10598] team0: Device veth0_vlan failed to register rx_handler [ 265.301589][T10632] netlink: 'syz.4.1858': attribute type 10 has an invalid length. [ 265.354672][T10632] veth0_vlan: left promiscuous mode [ 265.426679][T10632] veth0_vlan: entered promiscuous mode [ 265.520791][T10632] team0: Device veth0_vlan failed to register rx_handler [ 266.744482][T10669] netlink: 'syz.0.1874': attribute type 10 has an invalid length. [ 266.771286][T10669] veth0_vlan: left promiscuous mode [ 266.782463][T10669] veth0_vlan: entered promiscuous mode [ 266.801382][T10669] team0: Device veth0_vlan failed to register rx_handler [ 266.828547][T10674] netlink: 'syz.3.1876': attribute type 29 has an invalid length. [ 266.855656][T10674] netlink: 'syz.3.1876': attribute type 29 has an invalid length. [ 266.872924][T10674] netlink: 'syz.3.1876': attribute type 29 has an invalid length. [ 266.887008][T10674] netlink: 'syz.3.1876': attribute type 27 has an invalid length. [ 266.895179][T10674] netlink: 'syz.3.1876': attribute type 6 has an invalid length. [ 266.903467][T10674] netlink: 'syz.3.1876': attribute type 1 has an invalid length. [ 266.911688][T10674] netlink: 'syz.3.1876': attribute type 2 has an invalid length. [ 266.921206][T10674] netlink: 4062 bytes leftover after parsing attributes in process `syz.3.1876'. [ 267.845222][T10697] veth0_vlan: left promiscuous mode [ 267.868783][T10697] veth0_vlan: entered promiscuous mode [ 267.917832][T10697] team0: Device veth0_vlan failed to register rx_handler [ 268.688635][T10731] veth0_vlan: left promiscuous mode [ 268.712720][T10731] veth0_vlan: entered promiscuous mode [ 268.736540][T10731] team0: Device veth0_vlan failed to register rx_handler [ 269.069655][T10748] netlink: 4062 bytes leftover after parsing attributes in process `syz.4.1905'. [ 269.428496][T10761] validate_nla: 11 callbacks suppressed [ 269.428534][T10761] netlink: 'syz.3.1911': attribute type 10 has an invalid length. [ 269.482924][T10761] veth0_vlan: left promiscuous mode [ 269.524858][T10761] veth0_vlan: entered promiscuous mode [ 269.585123][T10761] team0: Device veth0_vlan failed to register rx_handler [ 270.209999][T10778] syzkaller0: create flow: hash 2815493243 index 1 [ 270.236615][ T59] syzkaller0: tun_net_xmit 76 [ 270.242868][ T59] syzkaller0: tun_net_xmit 48 [ 270.259392][ T5871] syzkaller0: tun_net_xmit 76 [ 270.337155][T10775] syzkaller0: delete flow: hash 2815493243 index 1 [ 272.569291][T10802] netlink: 'syz.4.1926': attribute type 10 has an invalid length. [ 272.594496][T10802] veth0_vlan: left promiscuous mode [ 272.619233][T10802] veth0_vlan: entered promiscuous mode [ 272.636971][T10802] team0: Device veth0_vlan failed to register rx_handler [ 274.341691][T10876] netlink: 'syz.0.1957': attribute type 10 has an invalid length. [ 274.377474][T10876] veth0_vlan: left promiscuous mode [ 274.402026][T10876] veth0_vlan: entered promiscuous mode [ 274.429617][T10876] team0: Device veth0_vlan failed to register rx_handler [ 277.416791][T11009] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 277.763078][T11018] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 277.800453][T11018] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 277.834323][T11018] netlink: 'syz.0.2020': attribute type 9 has an invalid length. [ 277.855365][T11018] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2020'. [ 278.208630][T11035] netlink: 'syz.4.2028': attribute type 1 has an invalid length. [ 278.223406][T11035] netlink: 'syz.4.2028': attribute type 4 has an invalid length. [ 278.236313][T11035] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2028'. [ 278.269408][T11037] netlink: 'syz.4.2028': attribute type 1 has an invalid length. [ 278.277297][T11037] netlink: 'syz.4.2028': attribute type 4 has an invalid length. [ 278.352228][T11037] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2028'. [ 280.093948][T11098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.244147][T11107] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 280.291984][T11107] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 280.348312][T11107] netlink: 'syz.1.2059': attribute type 9 has an invalid length. [ 280.356857][T11107] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2059'. [ 280.751665][T11123] delete_channel: no stack [ 281.124000][T11139] netlink: 'syz.1.2073': attribute type 1 has an invalid length. [ 281.158311][T11139] netlink: 'syz.1.2073': attribute type 4 has an invalid length. [ 281.178958][T11139] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2073'. [ 281.201558][T11145] netlink: 'syz.1.2073': attribute type 1 has an invalid length. [ 281.211501][T11145] netlink: 'syz.1.2073': attribute type 4 has an invalid length. [ 281.220031][T11145] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2073'. [ 282.229974][T11189] veth0_vlan: left promiscuous mode [ 282.250562][T11189] veth0_vlan: entered promiscuous mode [ 282.293766][T11189] team0: Device veth0_vlan failed to register rx_handler [ 283.072709][T11224] validate_nla: 1 callbacks suppressed [ 283.072741][T11224] netlink: 'syz.3.2110': attribute type 10 has an invalid length. [ 283.099344][T11224] veth0_vlan: left promiscuous mode [ 283.113809][T11224] veth0_vlan: entered promiscuous mode [ 283.134013][T11224] team0: Device veth0_vlan failed to register rx_handler [ 283.838433][T11248] syzkaller0: entered promiscuous mode [ 283.845996][T11248] syzkaller0: entered allmulticast mode [ 287.629284][T11324] netlink: 'syz.1.2150': attribute type 9 has an invalid length. [ 287.637432][T11324] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2150'. [ 287.684495][T11322] IPv6: Can't replace route, no match found [ 287.757195][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2149'. [ 288.155405][T11347] netlink: 'syz.0.2159': attribute type 10 has an invalid length. [ 288.212260][T11347] veth0_vlan: left promiscuous mode [ 288.235738][T11347] veth0_vlan: entered promiscuous mode [ 288.312006][T11347] team0: Device veth0_vlan failed to register rx_handler [ 288.590745][T11364] IPv6: Can't replace route, no match found [ 288.630082][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'. [ 288.999864][T11378] netlink: 'syz.1.2173': attribute type 10 has an invalid length. [ 289.056894][T11378] veth0_vlan: left promiscuous mode [ 289.079034][T11378] veth0_vlan: entered promiscuous mode [ 289.107176][T11378] team0: Device veth0_vlan failed to register rx_handler [ 289.505661][T11396] IPv6: Can't replace route, no match found [ 289.524455][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'. [ 290.243092][T11433] IPv6: Can't replace route, no match found [ 290.276883][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'. [ 290.720503][T11453] ªªªªªª: renamed from vlan0 [ 290.906707][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 291.642732][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 293.119347][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2231'. [ 294.128057][T11540] syzkaller0: entered promiscuous mode [ 294.138824][T11540] syzkaller0: entered allmulticast mode [ 294.151777][T11548] IPv6: Can't replace route, no match found [ 296.945789][T11578] IPv6: Can't replace route, no match found [ 296.974170][T11583] netlink: 'syz.1.2258': attribute type 10 has an invalid length. [ 297.008342][T11583] veth0_vlan: left promiscuous mode [ 297.032085][T11583] veth0_vlan: entered promiscuous mode [ 297.085962][T11583] team0: Device veth0_vlan failed to register rx_handler [ 297.423515][T11596] delete_channel: no stack [ 299.764963][T11605] netlink: 'syz.3.2268': attribute type 10 has an invalid length. [ 299.773241][T11605] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2268'. [ 299.793487][T11616] IPv6: Can't replace route, no match found [ 299.805392][T11618] netlink: 'syz.0.2272': attribute type 10 has an invalid length. [ 299.817301][T11618] veth0_vlan: left promiscuous mode [ 299.824774][T11618] veth0_vlan: entered promiscuous mode [ 299.839215][T11618] team0: Device veth0_vlan failed to register rx_handler [ 301.487251][T11652] IPv6: Can't replace route, no match found [ 301.533558][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'. [ 301.554893][T11654] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 301.634679][T11654] veth0_vlan: left promiscuous mode [ 301.704261][T11654] veth0_vlan: entered promiscuous mode [ 301.821089][T11654] team0: Device veth0_vlan failed to register rx_handler [ 303.370480][T11688] sit0: entered promiscuous mode [ 303.390428][T11688] sit0: entered allmulticast mode [ 303.618116][T11694] IPv6: Can't replace route, no match found [ 303.667275][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'. [ 303.797253][T11701] netlink: 'syz.4.2299': attribute type 10 has an invalid length. [ 303.852827][T11701] veth0_vlan: left promiscuous mode [ 303.895502][T11701] veth0_vlan: entered promiscuous mode [ 303.942262][T11701] team0: Device veth0_vlan failed to register rx_handler [ 305.769907][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.780768][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.789794][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.812953][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.826372][ T5791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 305.852828][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.062830][T11737] IPv6: Can't replace route, no match found [ 306.106502][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2311'. [ 306.299603][T11742] netlink: 'syz.4.2313': attribute type 10 has an invalid length. [ 306.334925][T11742] veth0_vlan: left promiscuous mode [ 306.362017][T11742] veth0_vlan: entered promiscuous mode [ 306.384032][T11742] team0: Device veth0_vlan failed to register rx_handler [ 307.001478][T11759] netlink: 'syz.4.2319': attribute type 10 has an invalid length. [ 307.017134][T11759] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2319'. [ 307.422268][T11733] chnl_net:caif_netlink_parms(): no params data found [ 307.828252][T11733] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.835915][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.844513][T11733] bridge_slave_0: entered allmulticast mode [ 307.853462][T11733] bridge_slave_0: entered promiscuous mode [ 307.864587][T11733] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.872200][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.879708][T11733] bridge_slave_1: entered allmulticast mode [ 307.887628][T11733] bridge_slave_1: entered promiscuous mode [ 307.920636][ T5791] Bluetooth: hci4: command tx timeout [ 308.065858][T11733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.122711][T11733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.196404][ T1092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.641996][ T1092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.688072][T11733] team0: Port device team_slave_0 added [ 308.705801][T11733] team0: Port device team_slave_1 added [ 308.791799][ T1092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.031344][ T1092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.067398][T11788] netlink: 'syz.4.2327': attribute type 10 has an invalid length. [ 309.091051][T11788] veth0_vlan: left promiscuous mode [ 309.109587][T11788] veth0_vlan: entered promiscuous mode [ 309.139943][T11788] team0: Device veth0_vlan failed to register rx_handler [ 309.194111][T11733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.242448][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.355006][T11733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.454316][T11733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.483779][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.734662][T11733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.015530][ T5791] Bluetooth: hci4: command tx timeout [ 310.244671][T11733] hsr_slave_0: entered promiscuous mode [ 310.261929][T11733] hsr_slave_1: entered promiscuous mode [ 310.273925][T11733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.286127][T11733] Cannot create hsr debugfs directory [ 312.094082][ T5791] Bluetooth: hci4: command tx timeout [ 312.319092][T11733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.358365][T11733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.543867][T11733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.567056][T11733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.609790][ T1092] hsr_slave_0: left promiscuous mode [ 313.619744][ T1092] hsr_slave_1: left promiscuous mode [ 313.659131][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.679726][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.716580][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.725039][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.756395][ T1092] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 313.783132][ T1092] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 313.858570][ T1092] veth1_vlan: left promiscuous mode [ 314.142005][ T1092] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 314.173863][ T5791] Bluetooth: hci4: command tx timeout [ 315.367619][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 315.488059][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 315.599243][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.717556][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.818425][ T1092] bond0 (unregistering): Released all slaves [ 316.868486][T11867] netlink: 'syz.0.2347': attribute type 10 has an invalid length. [ 316.898008][T11867] veth0_vlan: left promiscuous mode [ 316.955977][T11867] veth0_vlan: entered promiscuous mode [ 316.997043][T11867] team0: Device veth0_vlan failed to register rx_handler [ 317.454166][T11733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.566489][T11733] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.665784][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.673300][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.772232][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.779749][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.173463][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.180044][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.803541][T11733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.243134][T11733] veth0_vlan: entered promiscuous mode [ 319.283727][T11733] veth1_vlan: entered promiscuous mode [ 319.381495][T11733] veth0_macvtap: entered promiscuous mode [ 319.411488][T11733] veth1_macvtap: entered promiscuous mode [ 319.440155][T11917] netlink: 'syz.1.2358': attribute type 10 has an invalid length. [ 319.463619][T11917] veth0_vlan: left promiscuous mode [ 319.484881][T11917] veth0_vlan: entered promiscuous mode [ 319.492756][T11917] team0: Device veth0_vlan failed to register rx_handler [ 319.694820][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.715512][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.726830][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.738063][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.748074][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.760132][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.775368][T11733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.797579][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.826918][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.852363][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.879005][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.895724][T11733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.907489][T11733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.935060][T11733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.960551][T11733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.974330][T11733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.021638][T11733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.065948][T11733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.326831][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.357796][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.463131][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.495480][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.786783][T11958] netlink: 'syz.1.2370': attribute type 10 has an invalid length. [ 321.816110][T11958] veth0_vlan: left promiscuous mode [ 321.831740][T11958] veth0_vlan: entered promiscuous mode [ 321.870833][T11958] team0: Device veth0_vlan failed to register rx_handler [ 322.640058][T11977] syzkaller0: entered promiscuous mode [ 322.646611][T11977] syzkaller0: entered allmulticast mode [ 326.362220][T12004] netlink: 'syz.3.2386': attribute type 10 has an invalid length. [ 326.546547][T12004] veth0_vlan: left promiscuous mode [ 326.609767][T12004] veth0_vlan: entered promiscuous mode [ 326.650425][T12004] team0: Device veth0_vlan failed to register rx_handler [ 327.397838][T12026] IPv6: Can't replace route, no match found [ 327.434677][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'. [ 328.240927][T12043] netlink: 'syz.3.2398': attribute type 10 has an invalid length. [ 328.342177][T12043] veth0_vlan: left promiscuous mode [ 328.489575][T12043] veth0_vlan: entered promiscuous mode [ 328.575612][T12043] team0: Device veth0_vlan failed to register rx_handler [ 329.731350][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.750288][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.776508][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.798977][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.809360][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.816842][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.273102][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.533101][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.601802][T12068] netlink: 'syz.4.2408': attribute type 10 has an invalid length. [ 330.671552][T12068] veth0_vlan: left promiscuous mode [ 330.677948][T12068] veth0_vlan: entered promiscuous mode [ 330.691488][T12068] team0: Device veth0_vlan failed to register rx_handler [ 331.184094][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.304172][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.918888][ T5791] Bluetooth: hci0: command tx timeout [ 332.033586][T12055] chnl_net:caif_netlink_parms(): no params data found [ 333.388003][T12055] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.396306][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.406243][T12055] bridge_slave_0: entered allmulticast mode [ 333.417640][T12055] bridge_slave_0: entered promiscuous mode [ 333.435162][T12055] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.458899][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.479483][T12055] bridge_slave_1: entered allmulticast mode [ 333.499560][T12055] bridge_slave_1: entered promiscuous mode [ 333.854816][T12055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.901553][T12055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.011686][ T5791] Bluetooth: hci0: command tx timeout [ 334.235847][T12055] team0: Port device team_slave_0 added [ 334.261854][T12055] team0: Port device team_slave_1 added [ 334.803948][T12055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.865583][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.913095][T12055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.038423][T12055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.052348][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.084380][T12055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.388197][T12055] hsr_slave_0: entered promiscuous mode [ 335.415584][T12055] hsr_slave_1: entered promiscuous mode [ 335.432649][T12055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.442353][T12055] Cannot create hsr debugfs directory [ 335.920952][ T59] hsr_slave_0: left promiscuous mode [ 335.969766][ T59] hsr_slave_1: left promiscuous mode [ 335.994479][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.022066][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.079798][ T5791] Bluetooth: hci0: command tx timeout [ 336.166277][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.187627][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.214509][ T59] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 336.225135][ T59] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 336.282961][ T59] veth1_macvtap: left promiscuous mode [ 336.293605][ T59] veth0_macvtap: left promiscuous mode [ 336.302676][ T59] veth1_vlan: left promiscuous mode [ 336.999641][ T59] team0 (unregistering): Port device team_slave_1 removed [ 337.049214][ T59] team0 (unregistering): Port device team_slave_0 removed [ 337.105525][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.155974][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.688392][ T59] bond0 (unregistering): Released all slaves [ 337.799814][T12199] wg2: entered promiscuous mode [ 337.806494][T12199] wg2: entered allmulticast mode [ 338.169303][ T5791] Bluetooth: hci0: command tx timeout [ 341.102219][T12055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.485609][T12055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.528042][T12055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.570728][T12055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.917597][T12055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.979311][T12055] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.006159][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.014218][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.073053][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.080642][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.256115][T12055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.988165][T12055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.110096][T12295] netlink: 'syz.3.2464': attribute type 10 has an invalid length. [ 343.140660][T12295] veth0_vlan: left promiscuous mode [ 343.183035][T12295] veth0_vlan: entered promiscuous mode [ 343.202319][T12295] team0: Device veth0_vlan failed to register rx_handler [ 343.296115][T12055] veth0_vlan: entered promiscuous mode [ 343.324161][T12301] IPv6: Can't replace route, no match found [ 343.367486][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2466'. [ 343.385188][T12055] veth1_vlan: entered promiscuous mode [ 343.512470][T12055] veth0_macvtap: entered promiscuous mode [ 343.554896][T12055] veth1_macvtap: entered promiscuous mode [ 343.622506][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.652197][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.680169][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.692279][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.714494][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.726978][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.750563][T12055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.791647][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.831678][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.871003][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.894250][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.915597][T12055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.942527][T12055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.981901][T12055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.032747][T12055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.050798][T12055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.069081][T12055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.078027][T12055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.334368][ T2901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.363226][ T2901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.444560][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.457559][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.581346][T12336] tap0: tun_chr_ioctl cmd 2147767517 [ 345.201077][T12348] IPv6: Can't replace route, no match found [ 345.233216][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2479'. [ 345.643034][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.656982][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.667255][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.677278][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.698126][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.714325][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.790205][ T2928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.994382][ T2928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.154204][ T2928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.239060][T12379] ªªªªªª: renamed from vlan0 [ 346.389994][ T2928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.637259][T12390] wg2: entered promiscuous mode [ 346.666080][T12390] wg2: entered allmulticast mode [ 346.930417][T12403] tap0: tun_chr_ioctl cmd 2147767517 [ 347.216978][T12365] chnl_net:caif_netlink_parms(): no params data found [ 347.460227][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2497'. [ 347.759409][ T5791] Bluetooth: hci1: command tx timeout [ 347.818310][T12442] syz.1.2502[12442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.818519][T12442] syz.1.2502[12442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.986032][T12365] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.039045][T12365] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.046837][T12365] bridge_slave_0: entered allmulticast mode [ 348.064630][T12365] bridge_slave_0: entered promiscuous mode [ 348.108988][T12365] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.121579][T12365] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.143159][T12365] bridge_slave_1: entered allmulticast mode [ 348.160528][T12365] bridge_slave_1: entered promiscuous mode [ 348.388010][T12365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.432510][T12365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.717905][T12365] team0: Port device team_slave_0 added [ 348.745644][T12466] wg2: entered promiscuous mode [ 348.751324][T12466] wg2: entered allmulticast mode [ 348.763172][T12365] team0: Port device team_slave_1 added [ 348.873545][T12365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.890054][T12365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.933254][T12365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.003605][T12365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.020157][T12365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.051462][T12365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.301270][T12365] hsr_slave_0: entered promiscuous mode [ 349.320903][T12365] hsr_slave_1: entered promiscuous mode [ 349.337594][T12365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.362821][T12365] Cannot create hsr debugfs directory [ 349.631302][ T2928] hsr_slave_0: left promiscuous mode [ 349.651745][ T2928] hsr_slave_1: left promiscuous mode [ 349.662192][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.683952][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.705561][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.728909][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.754907][ T2928] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 349.768836][ T2928] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 349.797648][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.815886][ T2928] bridge_slave_0: left allmulticast mode [ 349.835722][ T2928] bridge_slave_0: left promiscuous mode [ 349.842034][ T5791] Bluetooth: hci1: command tx timeout [ 349.868903][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.945949][ T2928] veth1_macvtap: left promiscuous mode [ 349.952245][ T2928] veth0_macvtap: left promiscuous mode [ 349.958383][ T2928] veth1_vlan: left promiscuous mode [ 350.174780][ T2928] team0 (unregistering): Port device geneve1 removed [ 350.632995][ T2928] team0 (unregistering): Port device team_slave_1 removed [ 350.685801][ T2928] team0 (unregistering): Port device team_slave_0 removed [ 350.739536][ T2928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.789246][ T2928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.380945][ T2928] bond0 (unregistering): Released all slaves [ 351.919638][ T5791] Bluetooth: hci1: command tx timeout [ 352.657577][T12365] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.722844][T12365] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.755415][T12365] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.781709][T12365] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.002797][T12365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.079330][T12365] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.146708][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.154023][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.172061][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.179398][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.215876][T12586] IPv6: Can't replace route, no match found [ 353.333967][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 353.720820][T12616] syz.3.2560[12616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.721051][T12616] syz.3.2560[12616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.865404][T12365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.000716][ T5791] Bluetooth: hci1: command tx timeout [ 354.036313][T12365] veth0_vlan: entered promiscuous mode [ 354.052246][T12365] veth1_vlan: entered promiscuous mode [ 354.162139][T12365] veth0_macvtap: entered promiscuous mode [ 354.201049][T12365] veth1_macvtap: entered promiscuous mode [ 354.280612][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.318718][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.328602][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.359854][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.371583][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.382780][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.396544][T12365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.408515][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.432196][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.442618][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.453654][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.464027][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.476291][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.491021][T12365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.542362][T12365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.563482][T12365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.576647][T12365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.586592][T12365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.612943][T12648] syz.1.2570[12648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.613181][T12648] syz.1.2570[12648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.808309][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.839007][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.914005][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.941042][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.072581][T12665] netlink: 'syz.0.2476': attribute type 10 has an invalid length. [ 355.189373][T12665] veth0_vlan: left promiscuous mode [ 355.238511][T12665] veth0_vlan: entered promiscuous mode [ 355.283777][T12665] team0: Device veth0_vlan failed to register rx_handler [ 355.525431][T12680] syz.3.2579[12680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.525671][T12680] syz.3.2579[12680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.939156][T12704] netlink: 'syz.1.2590': attribute type 10 has an invalid length. [ 356.125156][T12704] veth0_vlan: left promiscuous mode [ 356.144019][T12704] veth0_vlan: entered promiscuous mode [ 356.158041][T12704] team0: Device veth0_vlan failed to register rx_handler [ 356.641773][T12736] netlink: 'syz.1.2605': attribute type 10 has an invalid length. [ 356.654984][T12736] veth0_vlan: left promiscuous mode [ 356.663078][T12736] veth0_vlan: entered promiscuous mode [ 356.695294][T12736] team0: Device veth0_vlan failed to register rx_handler [ 356.984725][T12749] netlink: 'syz.0.2611': attribute type 10 has an invalid length. [ 357.025631][T12749] team0: Port device dummy0 added [ 357.395404][T12769] netlink: 'syz.4.2621': attribute type 10 has an invalid length. [ 357.406043][T12769] veth0_vlan: left promiscuous mode [ 357.412572][T12769] veth0_vlan: entered promiscuous mode [ 357.430721][T12769] team0: Device veth0_vlan failed to register rx_handler [ 357.444641][T12770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2620'. [ 357.496371][T12770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2620'. [ 357.507514][T12767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2620'. [ 357.607842][T12773] IPv6: Can't replace route, no match found [ 357.652527][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2622'. [ 357.982022][T12794] netlink: 'syz.3.2632': attribute type 10 has an invalid length. [ 357.992889][T12794] veth0_vlan: left promiscuous mode [ 358.000124][T12794] veth0_vlan: entered promiscuous mode [ 358.025908][T12794] team0: Device veth0_vlan failed to register rx_handler [ 358.655914][T12823] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 358.685087][T12823] veth0_vlan: left promiscuous mode [ 358.694785][T12823] veth0_vlan: entered promiscuous mode [ 358.705306][T12823] team0: Device veth0_vlan failed to register rx_handler [ 359.210787][T12846] IPv6: Can't replace route, no match found [ 359.262627][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 359.896071][T12874] IPv6: Can't replace route, no match found [ 359.913630][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2671'. [ 360.526226][T12907] IPv6: Can't replace route, no match found [ 360.576712][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'. [ 361.410819][T12948] tap0: tun_chr_ioctl cmd 2147767521 [ 361.785220][T12967] IPv6: Can't replace route, no match found [ 361.829965][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'. [ 363.217583][T13003] IPv6: Can't replace route, no match found [ 363.252449][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2727'. [ 363.348073][T13011] netlink: 16530 bytes leftover after parsing attributes in process `syz.3.2733'. [ 363.475190][T13015] IPv6: Can't replace route, no match found [ 363.520196][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 364.247875][T13049] IPv6: Can't replace route, no match found [ 364.282123][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'. [ 365.033698][T13087] netlink: 'syz.4.2768': attribute type 28 has an invalid length. [ 365.084600][T13093] sit0: entered promiscuous mode [ 365.098485][T13093] sit0: entered allmulticast mode [ 365.598744][T13112] IPv6: Can't replace route, no match found [ 365.653087][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2778'. [ 366.288803][T13136] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2788'. [ 366.365218][ T1092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.379157][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.396269][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.406163][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.418755][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.423005][T13136] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2788'. [ 366.427669][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 366.443853][T13133] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2788'. [ 366.453880][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.462629][T13142] IPv6: Can't replace route, no match found [ 366.498533][ T1092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.514581][T13139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2788'. [ 366.541071][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2790'. [ 366.611207][ T1092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.703804][T13145] netlink: 'syz.3.2791': attribute type 28 has an invalid length. [ 366.818917][ T1092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.272971][T13166] IPv6: Can't replace route, no match found [ 367.331571][T13141] chnl_net:caif_netlink_parms(): no params data found [ 367.392425][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2800'. [ 367.673994][T13178] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2805'. [ 367.705558][T13176] netlink: 'syz.1.2804': attribute type 28 has an invalid length. [ 367.999461][T13141] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.015621][T13141] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.028959][T13141] bridge_slave_0: entered allmulticast mode [ 368.046821][T13141] bridge_slave_0: entered promiscuous mode [ 368.068889][T13141] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.086908][T13141] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.107237][T13141] bridge_slave_1: entered allmulticast mode [ 368.121377][T13141] bridge_slave_1: entered promiscuous mode [ 368.402098][T13141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.426079][T13141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.566581][ T5801] Bluetooth: hci2: command tx timeout [ 368.733456][T13141] team0: Port device team_slave_0 added [ 368.855182][T13141] team0: Port device team_slave_1 added [ 368.968279][T13227] IPv6: Can't replace route, no match found [ 368.982312][T13141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.993148][T13141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.021526][T13141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.118836][T13141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.139935][T13141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.208787][T13141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.253898][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2819'. [ 369.491798][T13141] hsr_slave_0: entered promiscuous mode [ 369.523326][T13141] hsr_slave_1: entered promiscuous mode [ 369.535771][T13141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.547555][T13141] Cannot create hsr debugfs directory [ 369.970056][ T1092] hsr_slave_0: left promiscuous mode [ 369.976697][ T1092] hsr_slave_1: left promiscuous mode [ 370.024872][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.037681][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.054947][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.078866][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.106457][ T1092] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 370.122280][ T1092] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 370.139560][ T1092] bridge_slave_1: left allmulticast mode [ 370.155512][ T1092] bridge_slave_1: left promiscuous mode [ 370.166371][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.188889][ T1092] bridge_slave_0: left allmulticast mode [ 370.194717][ T1092] bridge_slave_0: left promiscuous mode [ 370.216391][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.268383][ T1092] veth1_macvtap: left promiscuous mode [ 370.274274][ T1092] veth0_macvtap: left promiscuous mode [ 370.289067][ T1092] veth1_vlan: left promiscuous mode [ 370.350281][T13284] netlink: 'syz.3.2835': attribute type 28 has an invalid length. [ 370.363661][T13284] netlink: 'syz.3.2835': attribute type 4 has an invalid length. [ 370.372457][T13284] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2835'. [ 370.649331][ T5801] Bluetooth: hci2: command tx timeout [ 370.935042][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 370.985477][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 371.038323][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.094116][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.599449][ T1092] bond0 (unregistering): Released all slaves [ 371.674597][T13271] IPv6: Can't replace route, no match found [ 371.685102][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2832'. [ 372.720338][ T5801] Bluetooth: hci2: command tx timeout [ 372.992183][T13141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.019828][T13141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.046922][T13141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.094192][T13319] IPv6: Can't replace route, no match found [ 373.149823][T13141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.242191][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'. [ 373.494754][T13141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.560577][T13141] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.576550][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.584225][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.638695][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.645893][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.295561][T13141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.436883][T13378] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2860'. [ 374.798836][ T5801] Bluetooth: hci2: command tx timeout [ 375.110988][T13141] veth0_vlan: entered promiscuous mode [ 375.177113][T13141] veth1_vlan: entered promiscuous mode [ 375.287775][T13141] veth0_macvtap: entered promiscuous mode [ 375.307671][T13141] veth1_macvtap: entered promiscuous mode [ 375.363589][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.409151][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.424493][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.438586][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.453733][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.472985][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.500644][T13141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.543624][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.579619][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.594494][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.607355][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.619947][T13141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.635133][T13141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.654542][T13141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.694115][T13141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.709987][T13141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.727691][T13141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.744678][T13141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.975310][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.998518][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.041897][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.099428][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.296755][T13448] IPv6: Can't replace route, no match found [ 376.335031][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2884'. [ 376.500321][T13446] syzkaller0: entered promiscuous mode [ 376.519496][T13446] syzkaller0: entered allmulticast mode [ 379.611663][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.618177][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.506176][T13495] IPv6: Can't replace route, no match found [ 380.530226][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2895'. [ 381.160149][T13514] wg2: entered promiscuous mode [ 381.175915][T13514] wg2: entered allmulticast mode [ 381.553296][T13532] wg2: left promiscuous mode [ 381.558388][T13532] wg2: left allmulticast mode [ 381.671017][T13534] wg2: entered promiscuous mode [ 381.686365][T13534] wg2: entered allmulticast mode [ 381.712671][T13539] IPv6: Can't replace route, no match found [ 381.725693][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 382.169882][ T5801] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 382.633776][T13580] IPv6: Can't replace route, no match found [ 382.685292][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 382.958126][T13587] wg2: entered promiscuous mode [ 382.981060][T13587] wg2: entered allmulticast mode [ 383.490692][T13609] IPv6: Can't replace route, no match found [ 383.541773][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 384.017395][T13626] wg2: left promiscuous mode [ 384.026082][T13626] wg2: left allmulticast mode [ 384.110473][T13626] wg2: entered promiscuous mode [ 384.128780][T13626] wg2: entered allmulticast mode [ 384.189638][T13632] IPv6: Can't replace route, no match found [ 384.215147][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2945'. [ 384.297606][T13636] syzkaller0: entered promiscuous mode [ 384.303819][T13636] syzkaller0: entered allmulticast mode [ 386.760171][T13657] netlink: 'syz.4.2954': attribute type 3 has an invalid length. [ 386.783314][T13657] netlink: 'syz.4.2954': attribute type 1 has an invalid length. [ 386.807464][T13657] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2954'. [ 386.831537][T13661] IPv6: Can't replace route, no match found [ 386.856801][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'. [ 388.721506][T13753] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2973'. [ 390.960843][T13845] IPv6: Can't replace route, no match found [ 391.008582][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3006'. [ 391.745983][T13880] IPv6: Can't replace route, no match found [ 391.791336][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 391.956635][T13889] ipvlan0: entered promiscuous mode [ 391.964133][T13889] ipvlan0: entered allmulticast mode [ 391.972844][T13889] veth0_vlan: entered allmulticast mode [ 392.464740][T13909] IPv6: Can't replace route, no match found [ 392.516438][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3034'. [ 393.522815][T13941] ipvlan0: entered promiscuous mode [ 393.560570][T13941] ipvlan0: entered allmulticast mode [ 393.566526][T13941] veth0_vlan: entered allmulticast mode [ 394.312960][T13974] ipvlan0: entered promiscuous mode [ 394.327356][T13974] ipvlan0: entered allmulticast mode [ 394.335528][T13974] veth0_vlan: entered allmulticast mode [ 396.409959][T14021] bridge_slave_1: left allmulticast mode [ 396.416144][T14021] bridge_slave_1: left promiscuous mode [ 396.422480][T14021] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.479843][T14021] bridge_slave_0: left allmulticast mode [ 396.491372][T14021] bridge_slave_0: left promiscuous mode [ 396.503707][T14021] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.010953][T14084] IPv6: Can't replace route, no match found [ 399.051515][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'. [ 399.660059][T14110] IPv6: Can't replace route, no match found [ 399.681932][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'. [ 400.040042][T14131] netlink: 'syz.1.3137': attribute type 3 has an invalid length. [ 400.048176][T14131] netlink: 'syz.1.3137': attribute type 1 has an invalid length. [ 400.073571][T14131] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3137'. [ 400.316903][T14143] bridge_slave_1: left allmulticast mode [ 400.328424][T14143] bridge_slave_1: left promiscuous mode [ 400.349021][T14143] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.369171][T14143] bridge_slave_0: left allmulticast mode [ 400.379061][T14143] bridge_slave_0: left promiscuous mode [ 400.385012][T14143] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.527335][T14141] IPv6: Can't replace route, no match found [ 400.539460][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3142'. [ 401.243710][T14177] IPv6: Can't replace route, no match found [ 401.289210][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3157'. [ 401.865959][T14204] IPv6: Can't replace route, no match found [ 401.901399][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 402.427027][T14230] netlink: 'syz.3.3183': attribute type 10 has an invalid length. [ 402.487960][T14230] team0: Device veth1_macvtap failed to register rx_handler [ 402.559798][T14234] IPv6: Can't replace route, no match found [ 402.620774][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3185'. [ 402.783124][T14244] netlink: 'syz.4.3189': attribute type 10 has an invalid length. [ 402.797307][T14244] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3189'. [ 402.817580][T14244] team0: entered promiscuous mode [ 402.823573][T14244] team_slave_0: entered promiscuous mode [ 402.830566][T14244] team_slave_1: entered promiscuous mode [ 402.851682][T14244] bridge0: port 3(team0) entered blocking state [ 402.874680][T14244] bridge0: port 3(team0) entered disabled state [ 402.882920][T14244] team0: entered allmulticast mode [ 402.899872][T14244] team_slave_0: entered allmulticast mode [ 402.909975][T14244] team_slave_1: entered allmulticast mode [ 402.933025][T14244] bridge0: port 3(team0) entered blocking state [ 402.939797][T14244] bridge0: port 3(team0) entered listening state [ 403.135021][T14259] netlink: 'syz.0.3196': attribute type 10 has an invalid length. [ 403.203853][T14259] team0: Device veth1_macvtap failed to register rx_handler [ 404.761185][T14337] IPv6: Can't replace route, no match found [ 404.792042][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3236'. [ 405.318945][T14364] IPv6: Can't replace route, no match found [ 405.350928][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3249'. [ 405.835824][T14389] IPv6: Can't replace route, no match found [ 405.867735][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 408.140085][T14475] IPv6: Can't replace route, no match found [ 408.160737][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3302'. [ 413.150576][T14567] macsec0: entered promiscuous mode [ 413.156000][T14567] macsec0: entered allmulticast mode [ 413.161971][T14567] veth1_macvtap: entered allmulticast mode [ 415.781642][T14633] IPv6: Can't replace route, no match found [ 415.867229][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3375'. [ 416.691497][T14659] syz.4.3388[14659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.691735][T14659] syz.4.3388[14659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.255296][T14687] syz.1.3401[14687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.284954][T14687] syz.1.3401[14687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.000043][ C1] bridge0: port 3(team0) entered learning state [ 418.224991][T14722] syz.3.3418[14722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.225223][T14722] syz.3.3418[14722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.821352][T14839] sit0: entered allmulticast mode [ 422.979817][T14839] sit0: entered promiscuous mode [ 426.251655][T14919] IPv6: Can't replace route, no match found [ 426.311124][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'. [ 427.567930][T14954] IPv6: Can't replace route, no match found [ 427.735262][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3522'. [ 430.017246][T14979] IPv6: Can't replace route, no match found [ 430.029562][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3533'. [ 432.665995][T15015] IPv6: Can't replace route, no match found [ 432.673067][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'. [ 432.881436][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 433.202018][T15040] IPv6: Can't replace route, no match found [ 433.229429][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3558'. [ 433.358865][ C1] bridge0: port 3(team0) entered forwarding state [ 433.366063][ C1] bridge0: topology change detected, propagating [ 437.911971][T15071] IPv6: Can't replace route, no match found [ 437.918671][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3572'. [ 439.487226][T15112] IPv6: Can't replace route, no match found [ 439.535184][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3586'. [ 440.050981][T15129] wg2: left promiscuous mode [ 440.068147][T15129] wg2: left allmulticast mode [ 441.043109][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.052631][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.109231][T15153] IPv6: Can't replace route, no match found [ 441.174692][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 442.865679][T15186] IPv6: Can't replace route, no match found [ 442.873198][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3615'. [ 445.280451][T15212] veth1_macvtap: left allmulticast mode [ 445.286758][T15212] veth1_macvtap: left promiscuous mode [ 445.305453][T15212] macsec0: left allmulticast mode [ 445.391530][T15214] syz.1.3637[15214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.391783][T15214] syz.1.3637[15214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.958867][T15223] IPv6: Can't replace route, no match found [ 447.979746][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3631'. [ 448.632814][T15250] IPv6: Can't replace route, no match found [ 448.820902][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3644'. [ 449.421092][T15276] IPv6: Can't replace route, no match found [ 449.476072][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3657'. [ 453.371969][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 455.484070][T15351] IPv6: Can't replace route, no match found [ 455.494273][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3684'. [ 456.136954][T15382] IPv6: Can't replace route, no match found [ 456.217247][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 458.153296][T15416] IPv6: Can't replace route, no match found [ 458.166468][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3711'. [ 460.686770][T15458] IPv6: Can't replace route, no match found [ 460.722994][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3729'. [ 461.657209][T15491] IPv6: Can't replace route, no match found [ 461.730341][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3743'. [ 462.531292][T15525] IPv6: Can't replace route, no match found [ 462.567111][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3760'. [ 462.636009][T15535] [ 462.639013][T15535] ============================= [ 462.644075][T15535] WARNING: suspicious RCU usage [ 462.649491][T15535] 6.6.101-syzkaller #0 Not tainted [ 462.654806][T15535] ----------------------------- [ 462.660148][T15535] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 462.668949][T15535] [ 462.668949][T15535] other info that might help us debug this: [ 462.668949][T15535] [ 462.679330][T15535] [ 462.679330][T15535] rcu_scheduler_active = 2, debug_locks = 1 [ 462.687681][T15535] 1 lock held by syz.1.3763/15535: [ 462.692979][T15535] #0: ffffffff8cd2fd40 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 462.703726][T15535] [ 462.703726][T15535] stack backtrace: [ 462.710507][T15535] CPU: 1 PID: 15535 Comm: syz.1.3763 Not tainted 6.6.101-syzkaller #0 [ 462.718952][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.729237][T15535] Call Trace: [ 462.732628][T15535] [ 462.735593][T15535] dump_stack_lvl+0x16c/0x230 [ 462.740572][T15535] ? show_regs_print_info+0x20/0x20 [ 462.746058][T15535] ? load_image+0x3b0/0x3b0 [ 462.750692][T15535] lockdep_rcu_suspicious+0x1e1/0x300 [ 462.756821][T15535] get_callchain_entry+0x2a9/0x3c0 [ 462.762412][T15535] get_perf_callchain+0xa3/0x4b0 [ 462.767381][T15535] ? put_callchain_entry+0xb0/0xb0 [ 462.772598][T15535] ? plist_add+0x3d8/0x490 [ 462.777230][T15535] __bpf_get_stack+0x2d7/0x510 [ 462.782012][T15535] ? stack_map_get_build_id_offset+0x720/0x720 [ 462.788187][T15535] ? __cant_sleep+0x210/0x210 [ 462.793402][T15535] ? bpf_prog_d43750871481577d+0x45/0x49 [ 462.799123][T15535] bpf_get_stack_raw_tp+0x1a9/0x210 [ 462.804542][T15535] bpf_prog_d43750871481577d+0x45/0x49 [ 462.810035][T15535] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 462.815512][T15535] bpf_prog_test_run_syscall+0x311/0x490 [ 462.821417][T15535] ? sock_gen_cookie+0x60/0x60 [ 462.826306][T15535] ? sock_gen_cookie+0x60/0x60 [ 462.831117][T15535] bpf_prog_test_run+0x321/0x390 [ 462.836416][T15535] __sys_bpf+0x440/0x800 [ 462.840995][T15535] ? bpf_link_show_fdinfo+0x350/0x350 [ 462.846722][T15535] ? lock_chain_count+0x20/0x20 [ 462.851621][T15535] __x64_sys_bpf+0x7c/0x90 [ 462.856144][T15535] do_syscall_64+0x55/0xb0 [ 462.860743][T15535] ? clear_bhb_loop+0x40/0x90 [ 462.865513][T15535] ? clear_bhb_loop+0x40/0x90 [ 462.870389][T15535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.876649][T15535] RIP: 0033:0x7f4a3338ebe9 [ 462.881162][T15535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.901492][T15535] RSP: 002b:00007f4a342a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.910447][T15535] RAX: ffffffffffffffda RBX: 00007f4a335b5fa0 RCX: 00007f4a3338ebe9 [ 462.918610][T15535] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 462.927650][T15535] RBP: 00007f4a33411e19 R08: 0000000000000000 R09: 0000000000000000 [ 462.936086][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.944241][T15535] R13: 00007f4a335b6038 R14: 00007f4a335b5fa0 R15: 00007ffe017984e8 [ 462.952339][T15535] [ 468.728720][ T5791] Bluetooth: hci1: command 0x0406 tx timeout