last executing test programs: 22.851558429s ago: executing program 0 (id=5087): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61129000000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000003d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba0e2d507b92de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 21.852694655s ago: executing program 0 (id=5099): r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/15, 0xf}, 0x0) 21.341117953s ago: executing program 2 (id=5108): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5e, 0x0, 0x0, 0x8, 0xffffffffffffff75, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 21.293075144s ago: executing program 2 (id=5109): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61129000000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000003d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba0e2d507b92de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 20.848942401s ago: executing program 0 (id=5115): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) 20.762141703s ago: executing program 0 (id=5116): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 20.415384798s ago: executing program 1 (id=5121): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x80) 20.396002718s ago: executing program 3 (id=5122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {0x94, 0x3, 0x5, 0xffffffff}, {0x6}]}) 20.336530179s ago: executing program 2 (id=5123): r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/15, 0xf}, 0x0) 20.27091408s ago: executing program 3 (id=5124): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b"], 0xfe33) 20.205047612s ago: executing program 1 (id=5125): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000a000000440000000200009302000000040000000000000001000000040000000d00000006000000000000000600000d000000002700000005000000090000000400000007000000050000000f0000000000000004000000040000000500000001000000000000305f30009d5f00"], &(0x7f0000000180)=""/62, 0x82, 0x3e, 0x1, 0x4, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="720ac4ff000000007110990000000000950000000000000032183f9ac270094a87fac9aca613cf67616f27a6dfafb7e6e377eeeaa8d681926683048d2bf09aa882d38c7395deb155e36b4dc49c5a77755f9a01cb3977a5cf80b90600a1e265945c6a1aab34557613c374739be0682eaf6ae0c7a5492345501c6829bb8f7dbda38545c3d3768542a9aa70d65f2912fafba3652f34c60607fd9bd5977066a46dba8f83611c03a3dc801877290c8f50af2f7ef95f01c13e7360bb2ae7f9d182be3a830e3e5b17e6e5ae0544f593700c3f48b29c9e8b1dea94f16fa027b8ef8ba14bb2f5013b2c15b8e1b8faeb4528b1f39bcea4afff83272b9e39ccbe20c1d4f80f9c0e49b2ce9b79717f18936b996f616660b30bacf1674b47ada4"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='(-(^[]}%^).\x00') socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x33) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, &(0x7f00000005c0)) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/175, 0xaf}, 0x2020) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 19.830522558s ago: executing program 3 (id=5126): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2) 19.68475634s ago: executing program 0 (id=5128): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 19.526563923s ago: executing program 3 (id=5129): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5e, 0x0, 0x0, 0x8, 0xffffffffffffff75, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 19.390836225s ago: executing program 1 (id=5130): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 19.390503585s ago: executing program 2 (id=5131): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 19.381088715s ago: executing program 0 (id=5132): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 19.305174306s ago: executing program 3 (id=5133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {0x94, 0x3, 0x5, 0xffffffff}, {0x6}]}) 19.270574157s ago: executing program 1 (id=5134): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x80) 19.207959698s ago: executing program 2 (id=5135): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b"], 0xfe33) 19.164793988s ago: executing program 3 (id=5136): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0xb, &(0x7f00000005c0)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 19.154998969s ago: executing program 1 (id=5137): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, 0x0, 0x40012002) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 19.09456458s ago: executing program 1 (id=5138): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000a000000440000000200009302000000040000000000000001000000040000000d00000006000000000000000600000d000000002700000005000000090000000400000007000000050000000f0000000000000004000000040000000500000001000000000000305f30009d5f00"], &(0x7f0000000180)=""/62, 0x82, 0x3e, 0x1, 0x4, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='(-(^[]}%^).\x00') socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x33) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, &(0x7f00000005c0)) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/175, 0xaf}, 0x2020) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 19.03287493s ago: executing program 2 (id=5139): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x2b, 0xfffffbff, 0x3, 0x2, 0x8000000, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20044818) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x55, 0x0, &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES32=r3, @ANYRES64=r2, @ANYRES32=r4, @ANYRES64=r4, @ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="ddc6014ba7643b0e46c3f44f54d9698a89c3e0e34decb1584ce6652e0293c70624949b45323d00d0367c65dc1917addf065ec9c13a378c3f29a151e2593bf3e79f6b8390b3086589549777c6d8939247bd66cf71d1f94a9ac4b797f538c8bf9855f6717abb44e9b286da56fa7024b74254dedd2f93c72e3ad2d5b1a7306b515d85040e2f1c4299f557a42361810cdbe8f437315c6d7c214b473688b0451f0a2d6b1dd45b94c9fdf38dd936fed65eba90c0187a1d067a4adcccff3195fa463c6ebb39e5ffac8ffcc4de7f0f4d794e2fea295d36fe9167edd0951267eb45540c9144d5cbb8aeb31b3d4f31c7fe2d88"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x81) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2.920982362s ago: executing program 32 (id=5132): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 2.655410657s ago: executing program 33 (id=5136): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0xb, &(0x7f00000005c0)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 2.343204802s ago: executing program 34 (id=5138): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000a000000440000000200009302000000040000000000000001000000040000000d00000006000000000000000600000d000000002700000005000000090000000400000007000000050000000f0000000000000004000000040000000500000001000000000000305f30009d5f00"], &(0x7f0000000180)=""/62, 0x82, 0x3e, 0x1, 0x4, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='(-(^[]}%^).\x00') socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x33) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, &(0x7f00000005c0)) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/175, 0xaf}, 0x2020) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 0s ago: executing program 35 (id=5139): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x2b, 0xfffffbff, 0x3, 0x2, 0x8000000, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20044818) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(r0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x55, 0x0, &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES32=r3, @ANYRES64=r2, @ANYRES32=r4, @ANYRES64=r4, @ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="ddc6014ba7643b0e46c3f44f54d9698a89c3e0e34decb1584ce6652e0293c70624949b45323d00d0367c65dc1917addf065ec9c13a378c3f29a151e2593bf3e79f6b8390b3086589549777c6d8939247bd66cf71d1f94a9ac4b797f538c8bf9855f6717abb44e9b286da56fa7024b74254dedd2f93c72e3ad2d5b1a7306b515d85040e2f1c4299f557a42361810cdbe8f437315c6d7c214b473688b0451f0a2d6b1dd45b94c9fdf38dd936fed65eba90c0187a1d067a4adcccff3195fa463c6ebb39e5ffac8ffcc4de7f0f4d794e2fea295d36fe9167edd0951267eb45540c9144d5cbb8aeb31b3d4f31c7fe2d88"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x81) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): e activated: batadv_slave_1 [ 72.809579][ T5779] Bluetooth: hci1: command tx timeout [ 72.815173][ T5778] Bluetooth: hci0: command tx timeout [ 72.825553][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.835773][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.848670][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.857383][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.890916][ T5778] Bluetooth: hci3: command tx timeout [ 72.910547][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.948097][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.980807][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.097190][ T5765] veth0_vlan: entered promiscuous mode [ 73.117396][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.137093][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.147726][ T5765] veth1_vlan: entered promiscuous mode [ 73.201424][ T5766] veth0_vlan: entered promiscuous mode [ 73.221059][ T5764] veth0_vlan: entered promiscuous mode [ 73.248242][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.260237][ T5764] veth1_vlan: entered promiscuous mode [ 73.272900][ T5766] veth1_vlan: entered promiscuous mode [ 73.280045][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.341689][ T5765] veth0_macvtap: entered promiscuous mode [ 73.358270][ T5764] veth0_macvtap: entered promiscuous mode [ 73.392463][ T5765] veth1_macvtap: entered promiscuous mode [ 73.418172][ T5764] veth1_macvtap: entered promiscuous mode [ 73.473109][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.486529][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.502258][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.532742][ T5766] veth0_macvtap: entered promiscuous mode [ 73.559740][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.570774][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.589065][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.601173][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.613757][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.634098][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.650636][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.663567][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.700989][ T5766] veth1_macvtap: entered promiscuous mode [ 73.735133][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.747705][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.760913][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.770252][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.808568][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.822275][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.833826][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.845957][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.856087][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.867941][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.886428][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.898655][ C0] hrtimer: interrupt took 46160 ns [ 73.914047][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.932881][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.945360][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.958980][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.976216][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.033839][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.045105][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.056185][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.066834][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.077686][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.090354][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.102157][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.121862][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.131545][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.141096][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.150553][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.174561][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.189891][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.198895][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.207603][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.490281][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.498349][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.529112][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.537517][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.608228][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.619086][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.638235][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.654645][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.687047][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.706441][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.813425][ T5778] Bluetooth: hci2: command tx timeout [ 74.818406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.837756][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.918535][ T5778] Bluetooth: hci1: command tx timeout [ 74.918573][ T5779] Bluetooth: hci0: command tx timeout [ 74.965378][ T5779] Bluetooth: hci3: command tx timeout [ 75.333588][ T5843] bridge_slave_1: left allmulticast mode [ 75.350474][ T5843] bridge_slave_1: left promiscuous mode [ 75.371646][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.405603][ T5843] bridge_slave_0: left allmulticast mode [ 75.413668][ T5843] bridge_slave_0: left promiscuous mode [ 75.423038][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.584080][ T5847] netlink: 'syz.2.8': attribute type 10 has an invalid length. [ 75.592054][ T5847] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8'. [ 75.871395][ T5857] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 76.888686][ T5779] Bluetooth: hci2: command tx timeout [ 76.963859][ T5779] Bluetooth: hci0: command tx timeout [ 76.969457][ T5779] Bluetooth: hci1: command tx timeout [ 77.040703][ T5779] Bluetooth: hci3: command tx timeout [ 77.568951][ T5865] syz.3.12 (5865) used greatest stack depth: 20272 bytes left [ 78.200133][ T5888] Zero length message leads to an empty skb [ 80.310302][ T5954] netlink: 'syz.3.51': attribute type 10 has an invalid length. [ 80.333422][ T5954] netlink: 156 bytes leftover after parsing attributes in process `syz.3.51'. [ 80.431375][ T5960] bridge_slave_1: left allmulticast mode [ 80.458736][ T5960] bridge_slave_1: left promiscuous mode [ 80.469747][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.545003][ T5960] bridge_slave_0: left allmulticast mode [ 80.563414][ T5960] bridge_slave_0: left promiscuous mode [ 80.577865][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.521229][ T54] cfg80211: failed to load regulatory.db [ 81.885088][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 1342 [ 82.520495][ T5779] Bluetooth: hci0: ISO packet for unknown connection handle 1342 [ 83.129708][ T5779] Bluetooth: hci2: ISO packet for unknown connection handle 1342 [ 84.382903][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 1342 [ 85.055127][ T5779] Bluetooth: hci2: ISO packet for unknown connection handle 1342 [ 85.549062][ T5779] Bluetooth: hci0: ISO packet for unknown connection handle 1342 [ 86.147203][ T5779] Bluetooth: hci2: ISO packet for unknown connection handle 1342 [ 87.674005][ T6227] bridge_slave_1: left allmulticast mode [ 87.692284][ T6227] bridge_slave_1: left promiscuous mode [ 87.703777][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.839229][ T6227] bridge_slave_0: left allmulticast mode [ 87.856054][ T6227] bridge_slave_0: left promiscuous mode [ 87.901125][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.550442][ T6227] syz.3.183 (6227) used greatest stack depth: 19952 bytes left [ 88.680113][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 1342 [ 89.381901][ T5779] Bluetooth: hci0: ISO packet for unknown connection handle 1342 [ 97.711182][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 1342 [ 111.189858][ T6931] bridge_slave_1: left allmulticast mode [ 111.217409][ T6931] bridge_slave_1: left promiscuous mode [ 111.231600][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.313888][ T6931] bridge_slave_0: left allmulticast mode [ 111.332263][ T6931] bridge_slave_0: left promiscuous mode [ 111.338459][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.025617][ T7072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.717310][ T7094] warning: `syz.2.565' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.725247][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.738787][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.811109][ T8629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1227'. [ 177.984040][ T8770] netlink: 'syz.1.1288': attribute type 10 has an invalid length. [ 178.062735][ T8770] veth1_macvtap: left promiscuous mode [ 179.572030][ T8817] netlink: 'syz.1.1309': attribute type 10 has an invalid length. [ 179.667524][ T8823] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1311'. [ 180.745083][ T8855] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1324'. [ 180.958265][ T8859] ref_ctr_offset mismatch. inode: 0x693 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 181.926165][ T8896] ref_ctr_offset mismatch. inode: 0x717 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 183.636288][ T8943] ref_ctr_offset mismatch. inode: 0x690 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 187.018496][ T9045] netlink: 'syz.3.1401': attribute type 10 has an invalid length. [ 187.049785][ T9045] veth1_macvtap: left promiscuous mode [ 189.982434][ T9138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1439'. [ 190.693537][ T9171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1452'. [ 191.285168][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 191.285180][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 191.440950][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 191.440963][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 194.393350][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400770][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 246.290842][T10625] netlink: 'syz.1.2041': attribute type 29 has an invalid length. [ 246.319133][T10625] netlink: 'syz.1.2041': attribute type 29 has an invalid length. [ 246.372109][T10625] netlink: 'syz.1.2041': attribute type 29 has an invalid length. [ 255.611809][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.620594][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.570808][T10917] netlink: 'syz.3.2159': attribute type 29 has an invalid length. [ 257.618958][T10917] netlink: 'syz.3.2159': attribute type 29 has an invalid length. [ 257.678113][T10921] netlink: 'syz.3.2159': attribute type 29 has an invalid length. [ 263.843681][T11108] netlink: 'syz.3.2242': attribute type 29 has an invalid length. [ 263.857269][T11108] netlink: 'syz.3.2242': attribute type 29 has an invalid length. [ 265.210769][T11149] netlink: 'syz.0.2259': attribute type 29 has an invalid length. [ 265.221365][T11149] netlink: 'syz.0.2259': attribute type 29 has an invalid length. [ 265.890882][T11175] netlink: 'syz.1.2271': attribute type 29 has an invalid length. [ 265.910517][T11175] netlink: 'syz.1.2271': attribute type 29 has an invalid length. [ 266.700522][T11205] netlink: 'syz.0.2283': attribute type 29 has an invalid length. [ 266.738858][T11205] netlink: 'syz.0.2283': attribute type 29 has an invalid length. [ 267.589117][T11242] netlink: 'syz.2.2297': attribute type 29 has an invalid length. [ 267.612877][T11242] netlink: 'syz.2.2297': attribute type 29 has an invalid length. [ 269.884572][T11310] validate_nla: 2 callbacks suppressed [ 269.884591][T11310] netlink: 'syz.3.2326': attribute type 29 has an invalid length. [ 269.909781][T11310] netlink: 'syz.3.2326': attribute type 29 has an invalid length. [ 273.924159][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.933589][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.942727][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.953664][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.962044][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.982692][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.253406][T11432] netlink: 'syz.0.2370': attribute type 29 has an invalid length. [ 274.265330][T11432] netlink: 'syz.0.2370': attribute type 29 has an invalid length. [ 274.566985][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.689852][T11428] chnl_net:caif_netlink_parms(): no params data found [ 275.047894][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.605864][T11459] netlink: 'syz.3.2379': attribute type 29 has an invalid length. [ 275.660280][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.692014][T11459] netlink: 'syz.3.2379': attribute type 29 has an invalid length. [ 275.779574][T11428] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.786999][T11428] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.794374][T11428] bridge_slave_0: entered allmulticast mode [ 275.802827][T11428] bridge_slave_0: entered promiscuous mode [ 275.849783][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.893439][T11428] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.900964][T11428] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.908229][T11428] bridge_slave_1: entered allmulticast mode [ 275.916542][T11428] bridge_slave_1: entered promiscuous mode [ 276.030986][T11428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.126007][T11428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.157989][ T5772] Bluetooth: hci4: command tx timeout [ 276.455350][T11428] team0: Port device team_slave_0 added [ 276.466487][T11428] team0: Port device team_slave_1 added [ 276.633112][T11428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.658054][T11486] netlink: 'syz.3.2390': attribute type 29 has an invalid length. [ 276.666053][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.700201][T11428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.726990][T11428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.744303][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.775096][T11428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.825726][T11486] netlink: 'syz.3.2390': attribute type 29 has an invalid length. [ 277.081816][T11428] hsr_slave_0: entered promiscuous mode [ 277.094009][T11428] hsr_slave_1: entered promiscuous mode [ 277.100587][T11428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.108196][T11428] Cannot create hsr debugfs directory [ 278.240211][ T5087] Bluetooth: hci4: command tx timeout [ 278.254434][T11519] netlink: 'syz.2.2400': attribute type 29 has an invalid length. [ 278.266343][T11519] netlink: 'syz.2.2400': attribute type 29 has an invalid length. [ 279.954756][ T48] hsr_slave_0: left promiscuous mode [ 280.000140][ T48] hsr_slave_1: left promiscuous mode [ 280.076551][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.098883][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.129153][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.165440][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.368741][ T5087] Bluetooth: hci4: command tx timeout [ 280.444637][ T48] veth0_macvtap: left promiscuous mode [ 280.452867][ T48] veth1_vlan: left promiscuous mode [ 280.458508][ T48] veth0_vlan: left promiscuous mode [ 281.340744][ T48] team0 (unregistering): Port device team_slave_1 removed [ 281.375259][ T48] team0 (unregistering): Port device team_slave_0 removed [ 281.407818][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.447684][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.781274][ T48] bond0 (unregistering): Released all slaves [ 281.890277][T11428] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.918083][T11428] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.986839][T11428] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 282.025919][T11428] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 282.408650][ T5087] Bluetooth: hci4: command tx timeout [ 282.447194][T11428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.468131][T11428] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.545085][T11428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.560715][T11428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.616955][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.624231][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.643889][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.651094][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.210798][T11428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.393081][T11631] netlink: 'syz.3.2432': attribute type 29 has an invalid length. [ 283.403698][T11428] veth0_vlan: entered promiscuous mode [ 283.420610][T11631] netlink: 'syz.3.2432': attribute type 29 has an invalid length. [ 283.458249][T11428] veth1_vlan: entered promiscuous mode [ 283.526722][T11428] veth0_macvtap: entered promiscuous mode [ 283.560758][T11428] veth1_macvtap: entered promiscuous mode [ 283.609738][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.626290][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.636235][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.651919][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.683242][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.710133][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.734415][T11428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.787728][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.827821][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.857350][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.879401][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.889841][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.900546][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.913318][T11428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.942542][T11428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.955900][T11428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.965817][T11428] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.974850][T11428] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.160366][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.168242][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.271193][T11651] netlink: 'syz.0.2441': attribute type 29 has an invalid length. [ 284.286839][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.299415][T11651] netlink: 'syz.0.2441': attribute type 29 has an invalid length. [ 284.315504][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.768974][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.783837][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.793605][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.802619][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.821499][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.831275][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.353588][T11674] chnl_net:caif_netlink_parms(): no params data found [ 286.374715][T11695] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 286.396760][T11695] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 286.781680][T11674] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.833821][T11674] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.841590][T11674] bridge_slave_0: entered allmulticast mode [ 286.849166][T11674] bridge_slave_0: entered promiscuous mode [ 286.859216][T11674] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.866423][T11674] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.880552][T11674] bridge_slave_1: entered allmulticast mode [ 286.897242][T11674] bridge_slave_1: entered promiscuous mode [ 287.375119][T11674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.424725][T11674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.552380][T11674] team0: Port device team_slave_0 added [ 287.566219][T11674] team0: Port device team_slave_1 added [ 287.647069][T11674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.654802][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.691947][T11674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.707790][T11674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.718970][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.746424][T11674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.916296][T11674] hsr_slave_0: entered promiscuous mode [ 287.923599][T11674] hsr_slave_1: entered promiscuous mode [ 287.929803][ T5772] Bluetooth: hci1: command tx timeout [ 287.936557][T11674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.952750][T11674] Cannot create hsr debugfs directory [ 288.385681][T11747] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 288.454031][T11747] netlink: 'syz.0.2475': attribute type 29 has an invalid length. [ 288.769112][T11674] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.993045][T11674] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.171463][T11674] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.315814][T11674] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.773608][T11674] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.874606][T11674] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.916912][T11674] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.935870][T11674] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.999188][ T5772] Bluetooth: hci1: command tx timeout [ 290.334291][T11674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.368481][T11674] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.417531][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.424745][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.475153][ T4548] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.482511][ T4548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.125236][T11674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.254758][T11674] veth0_vlan: entered promiscuous mode [ 291.300594][T11674] veth1_vlan: entered promiscuous mode [ 291.397348][T11674] veth0_macvtap: entered promiscuous mode [ 291.426008][T11674] veth1_macvtap: entered promiscuous mode [ 291.480890][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.502487][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.528788][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.558604][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.568493][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.599150][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.630092][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.662385][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.690775][T11674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.733169][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.753568][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.767703][T11829] netlink: 'syz.3.2510': attribute type 29 has an invalid length. [ 291.770333][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.786447][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.796727][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.813091][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.824302][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.855426][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.876548][T11674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.886126][T11829] netlink: 'syz.3.2510': attribute type 29 has an invalid length. [ 291.916333][T11674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.941912][T11674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.956550][T11674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.975778][T11674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.079256][ T5772] Bluetooth: hci1: command tx timeout [ 292.282941][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.334991][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.455209][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.483547][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.933320][T11851] bridge_slave_1: left allmulticast mode [ 292.970366][T11851] bridge_slave_1: left promiscuous mode [ 293.009291][T11851] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.036187][T11851] bridge_slave_0: left allmulticast mode [ 293.058653][T11851] bridge_slave_0: left promiscuous mode [ 293.079442][T11851] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.536700][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.545083][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.557921][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.574188][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.584505][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.596211][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.954530][T11860] chnl_net:caif_netlink_parms(): no params data found [ 294.105131][T11860] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.113238][T11860] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.120745][T11860] bridge_slave_0: entered allmulticast mode [ 294.128298][T11860] bridge_slave_0: entered promiscuous mode [ 294.138198][T11860] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.145554][T11860] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.153023][T11860] bridge_slave_1: entered allmulticast mode [ 294.161936][T11860] bridge_slave_1: entered promiscuous mode [ 294.168658][ T5772] Bluetooth: hci1: command tx timeout [ 294.211746][T11860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.228487][T11860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.278164][T11860] team0: Port device team_slave_0 added [ 294.302529][T11860] team0: Port device team_slave_1 added [ 294.352741][T11860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.364516][T11860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.394133][T11860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.407795][T11860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.415124][T11860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.488784][T11860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.990613][T11860] hsr_slave_0: entered promiscuous mode [ 295.018773][T11860] hsr_slave_1: entered promiscuous mode [ 295.032237][T11860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.058633][T11860] Cannot create hsr debugfs directory [ 295.413292][T11860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.574980][T11860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.679699][ T5772] Bluetooth: hci2: command tx timeout [ 295.711536][T11860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.994829][T11860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.437503][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.453233][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.506220][T11919] bridge0: entered allmulticast mode [ 296.666419][T11921] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.673724][T11921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.681370][T11921] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.688583][T11921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.713641][T11921] bridge0: entered promiscuous mode [ 296.839547][T11860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 296.854818][T11860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.866101][T11860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.900339][T11860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.157569][T11860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.232276][T11860] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.290703][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.297942][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.322552][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.329787][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.758918][ T5772] Bluetooth: hci2: command tx timeout [ 298.041269][T11952] netlink: 'syz.2.2559': attribute type 29 has an invalid length. [ 298.116592][T11952] netlink: 'syz.2.2559': attribute type 29 has an invalid length. [ 298.387127][T11956] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.397559][T11956] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.439805][T11956] bridge0: left promiscuous mode [ 298.576357][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.583622][T11963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.591212][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.598343][T11963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.684626][T11963] bridge0: entered promiscuous mode [ 298.794458][T11860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.042896][T11860] veth0_vlan: entered promiscuous mode [ 299.075649][T11860] veth1_vlan: entered promiscuous mode [ 299.243491][T11860] veth0_macvtap: entered promiscuous mode [ 299.301493][T11860] veth1_macvtap: entered promiscuous mode [ 299.379455][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.411793][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.424552][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.437978][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.448954][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.459931][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.470435][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.481348][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.493028][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.503794][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.517014][T11860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.591611][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.646981][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.718779][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.769895][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.793333][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.809432][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.833249][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.844903][ T5772] Bluetooth: hci2: command tx timeout [ 299.851139][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.861604][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.872290][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.885958][T11860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.900621][T11860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.918875][T11860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.936021][T11860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.946916][T11860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.474624][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.508691][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.655669][ T4548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.683210][ T4548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.501562][T12009] IPv6: NLM_F_REPLACE set, but no existing node found! [ 302.150295][ T5772] Bluetooth: hci2: command tx timeout [ 302.927007][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.939908][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.970063][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.000288][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.043327][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 303.053801][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.724778][T12027] chnl_net:caif_netlink_parms(): no params data found [ 303.843588][T12043] IPv6: NLM_F_REPLACE set, but no existing node found! [ 304.495831][T12027] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.512906][T12027] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.522440][T12027] bridge_slave_0: entered allmulticast mode [ 304.531548][T12027] bridge_slave_0: entered promiscuous mode [ 304.543048][T12027] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.551080][T12027] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.560459][T12027] bridge_slave_1: entered allmulticast mode [ 304.568473][T12027] bridge_slave_1: entered promiscuous mode [ 304.674037][T12027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.706697][T12027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.867125][T12068] bridge_slave_1: left allmulticast mode [ 304.881248][T12068] bridge_slave_1: left promiscuous mode [ 304.894271][T12068] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.933441][T12068] bridge_slave_0: left allmulticast mode [ 304.956044][T12068] bridge_slave_0: left promiscuous mode [ 304.981875][T12068] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.119071][ T5772] Bluetooth: hci3: command tx timeout [ 305.254625][T12027] team0: Port device team_slave_0 added [ 305.284583][T12027] team0: Port device team_slave_1 added [ 305.390736][T12068] syz.0.2597 (12068) used greatest stack depth: 19496 bytes left [ 305.444106][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.458594][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.527474][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.589540][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.601931][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.672899][T12072] netlink: 'syz.2.2599': attribute type 29 has an invalid length. [ 305.677669][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.707404][T12072] netlink: 'syz.2.2599': attribute type 29 has an invalid length. [ 305.868348][T12027] hsr_slave_0: entered promiscuous mode [ 305.901770][T12027] hsr_slave_1: entered promiscuous mode [ 305.929459][T12027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.948612][T12027] Cannot create hsr debugfs directory [ 306.659065][T12027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.957168][T12027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.201641][ T5772] Bluetooth: hci3: command tx timeout [ 307.221633][T12027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.389751][T12027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.694351][T12027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.728831][T12027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.919426][T12027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.972216][T12027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.155270][T12027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.272664][T12027] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.383952][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.391178][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.464118][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.471384][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.278839][ T5772] Bluetooth: hci3: command tx timeout [ 310.090291][T12027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.362759][T12027] veth0_vlan: entered promiscuous mode [ 310.417361][T12027] veth1_vlan: entered promiscuous mode [ 310.589444][T12027] veth0_macvtap: entered promiscuous mode [ 310.672202][T12027] veth1_macvtap: entered promiscuous mode [ 310.720109][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.730714][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.742052][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.753139][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.775885][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.809366][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.837108][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.860127][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.877368][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.908777][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.938696][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.966613][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.027195][T12027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.081979][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.094848][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.105489][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.116514][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.137015][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.165273][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.258974][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.282277][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.310536][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.346338][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.358774][ T5772] Bluetooth: hci3: command tx timeout [ 311.370615][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.381375][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.396570][T12027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.439204][T12027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.468658][T12027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.488725][T12027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.498198][T12027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.763101][ T4548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.798339][ T4548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.034944][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.068757][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.629503][T12213] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.636885][T12213] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.679491][T12213] bridge0: left promiscuous mode [ 315.736773][T12218] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.744035][T12218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.751648][T12218] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.759045][T12218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.886713][T12218] bridge0: entered promiscuous mode [ 317.109394][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115925][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.508291][T12292] IPv6: NLM_F_REPLACE set, but no existing node found! [ 321.811738][T12327] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2693'. [ 321.902070][T12324] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2693'. [ 330.652326][T12523] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2772'. [ 330.684965][T12520] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2772'. [ 336.345642][T12648] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2827'. [ 336.385897][T12651] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2827'. [ 341.084470][T12727] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2859'. [ 341.121739][T12723] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2859'. [ 343.050049][T12762] bridge_slave_1: left allmulticast mode [ 343.076045][T12762] bridge_slave_1: left promiscuous mode [ 343.086424][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.598122][T12762] bridge_slave_0: left allmulticast mode [ 343.647912][T12762] bridge_slave_0: left promiscuous mode [ 343.665655][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.773949][T12770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.781604][T12770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.790846][T12770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.798312][T12770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.758452][T12791] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2886'. [ 344.832557][T12786] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2886'. [ 346.109909][T12822] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2898'. [ 346.134588][T12818] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2898'. [ 348.186258][T12860] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2915'. [ 349.050335][T12881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.068196][T12881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.179608][T12881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.199354][T12881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.021919][T12917] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2938'. [ 352.201269][T12923] netlink: 'syz.0.2940': attribute type 4 has an invalid length. [ 352.222016][T12923] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2940'. [ 355.776385][T12972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.809103][T12972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.864962][T12972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.918233][T12972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.854172][T12993] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.2966'. [ 360.629925][T13012] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.637523][T13012] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.698942][T13012] bridge0: left promiscuous mode [ 360.766211][T13009] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.774735][T13009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.785615][T13009] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.794274][T13009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.864316][T13009] bridge0: entered promiscuous mode [ 362.373788][T13034] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.2982'. [ 364.413390][T13063] netlink: 'syz.3.2992': attribute type 10 has an invalid length. [ 364.569413][T13063] veth0_vlan: left promiscuous mode [ 364.591665][T13063] veth0_vlan: entered promiscuous mode [ 364.610926][T13063] team0: Device veth0_vlan failed to register rx_handler [ 368.951986][T13130] netlink: 'syz.0.3020': attribute type 10 has an invalid length. [ 369.092548][T13130] veth0_vlan: left promiscuous mode [ 369.120542][T13130] veth0_vlan: entered promiscuous mode [ 369.141740][T13130] team0: Device veth0_vlan failed to register rx_handler [ 369.273784][T13138] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.282664][T13138] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.296890][T13138] bridge0: left promiscuous mode [ 369.320216][T13138] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.327395][T13138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.335684][T13138] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.343167][T13138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.369458][T13138] bridge0: entered promiscuous mode [ 372.532070][T13228] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3059'. [ 372.549493][T13224] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3059'. [ 373.480809][T13251] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3070'. [ 373.512571][T13247] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3070'. [ 373.568069][T13257] netlink: 'syz.3.3074': attribute type 10 has an invalid length. [ 373.584743][T13257] veth0_vlan: left promiscuous mode [ 373.591414][T13257] veth0_vlan: entered promiscuous mode [ 373.605112][T13257] team0: Device veth0_vlan failed to register rx_handler [ 373.729809][T13259] syz.1.3075 uses obsolete (PF_INET,SOCK_PACKET) [ 375.414177][ T5772] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13 [ 375.527873][T13286] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3083'. [ 375.550749][T13281] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3083'. [ 375.673568][T13288] netlink: 'syz.2.3086': attribute type 10 has an invalid length. [ 375.742368][T13288] veth0_vlan: left promiscuous mode [ 375.760567][T13288] veth0_vlan: entered promiscuous mode [ 375.773286][T13288] team0: Device veth0_vlan failed to register rx_handler [ 375.989757][T13293] netlink: 'syz.2.3088': attribute type 10 has an invalid length. [ 376.518040][T13310] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3094'. [ 376.541863][T13306] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3094'. [ 376.592220][T13313] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3097'. [ 377.969585][T13346] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3111'. [ 378.164863][T13352] netlink: 'syz.3.3114': attribute type 10 has an invalid length. [ 378.184055][T13352] veth0_vlan: left promiscuous mode [ 378.191539][T13352] veth0_vlan: entered promiscuous mode [ 378.202287][T13352] team0: Device veth0_vlan failed to register rx_handler [ 378.597265][T13364] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3119'. [ 378.615108][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.621611][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.094046][T13376] netlink: 'syz.2.3125': attribute type 10 has an invalid length. [ 379.112058][T13376] veth0_vlan: left promiscuous mode [ 379.122954][T13376] veth0_vlan: entered promiscuous mode [ 379.133212][T13376] team0: Device veth0_vlan failed to register rx_handler [ 380.224690][T13397] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3132'. [ 380.397262][T13403] netlink: 'syz.3.3136': attribute type 10 has an invalid length. [ 380.420874][T13403] veth0_vlan: left promiscuous mode [ 380.435053][T13403] veth0_vlan: entered promiscuous mode [ 380.461689][T13403] team0: Device veth0_vlan failed to register rx_handler [ 381.584091][T13426] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3144'. [ 382.127490][T13438] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3148'. [ 382.138884][T13436] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3148'. [ 382.265390][T13442] netlink: 'syz.2.3150': attribute type 10 has an invalid length. [ 382.278916][T13442] veth0_vlan: left promiscuous mode [ 382.287765][T13442] veth0_vlan: entered promiscuous mode [ 382.300722][T13442] team0: Device veth0_vlan failed to register rx_handler [ 382.916956][T13463] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3157'. [ 384.317255][T13471] netlink: 'syz.2.3164': attribute type 10 has an invalid length. [ 384.336424][T13471] veth0_vlan: left promiscuous mode [ 384.361761][T13471] veth0_vlan: entered promiscuous mode [ 384.400053][T13471] team0: Device veth0_vlan failed to register rx_handler [ 385.261647][T13489] delete_channel: no stack [ 385.266953][T13489] delete_channel: no stack [ 385.575584][T13481] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3161'. [ 385.588133][T13484] netlink: 'syz.1.3166': attribute type 10 has an invalid length. [ 385.604074][T13491] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3169'. [ 385.649499][T13475] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3161'. [ 385.993623][T13501] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3172'. [ 386.721385][T13512] netlink: 'syz.1.3177': attribute type 10 has an invalid length. [ 386.906198][T13512] veth0_vlan: left promiscuous mode [ 386.932933][T13512] veth0_vlan: entered promiscuous mode [ 386.957332][T13512] team0: Device veth0_vlan failed to register rx_handler [ 387.112221][T13517] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3179'. [ 387.395807][T13522] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3181'. [ 387.421892][T13521] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3181'. [ 388.743609][T13552] delete_channel: no stack [ 388.818709][T13552] delete_channel: no stack [ 388.875794][T13547] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3189'. [ 390.972349][T13588] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3203'. [ 391.225438][ T48] hsr_slave_0: left promiscuous mode [ 391.263939][ T48] hsr_slave_1: left promiscuous mode [ 391.300214][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.310197][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.328944][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.336408][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.504309][ T48] hsr_slave_0: left promiscuous mode [ 391.522759][ T48] hsr_slave_1: left promiscuous mode [ 391.556148][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.584906][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.650027][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.657523][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.573898][ T48] veth1_macvtap: left promiscuous mode [ 392.595946][ T48] veth0_macvtap: left promiscuous mode [ 392.616194][ T48] veth1_vlan: left promiscuous mode [ 392.690038][ T48] veth0_vlan: left promiscuous mode [ 392.823518][ T48] veth1_macvtap: left promiscuous mode [ 392.838117][ T48] veth0_macvtap: left promiscuous mode [ 392.844975][ T48] veth1_vlan: left promiscuous mode [ 392.850522][ T48] veth0_vlan: left promiscuous mode [ 394.594315][ T48] team0 (unregistering): Port device team_slave_1 removed [ 394.694562][ T48] team0 (unregistering): Port device team_slave_0 removed [ 394.775528][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.865567][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.515535][ T48] bond0 (unregistering): Released all slaves [ 396.134057][ T48] team0 (unregistering): Port device team_slave_1 removed [ 396.183994][ T48] team0 (unregistering): Port device team_slave_0 removed [ 396.261429][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.338812][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.080636][ T48] bond0 (unregistering): Released all slaves [ 397.136752][T13622] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.3216'. [ 400.734707][T13751] bridge_slave_1: left allmulticast mode [ 400.766008][T13751] bridge_slave_1: left promiscuous mode [ 400.773012][T13751] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.840864][T13751] bridge_slave_0: left allmulticast mode [ 400.846597][T13751] bridge_slave_0: left promiscuous mode [ 400.861640][T13751] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.038640][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 401.848698][T13786] netlink: 'syz.3.3276': attribute type 10 has an invalid length. [ 401.867158][T13786] veth0_vlan: left promiscuous mode [ 401.877939][T13786] veth0_vlan: entered promiscuous mode [ 401.888606][T13786] team0: Device veth0_vlan failed to register rx_handler [ 401.951300][T13788] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3274'. [ 401.963994][T13782] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3274'. [ 402.412168][T13809] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3285'. [ 402.956477][T13825] netlink: 'syz.1.3290': attribute type 10 has an invalid length. [ 402.985278][T13825] veth0_vlan: left promiscuous mode [ 403.002882][T13825] veth0_vlan: entered promiscuous mode [ 403.048133][T13825] team0: Device veth0_vlan failed to register rx_handler [ 403.250782][T13835] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3292'. [ 403.281395][T13830] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3292'. [ 404.227988][T13871] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3305'. [ 404.243429][T13869] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3305'. [ 404.417955][T13873] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3308'. [ 405.249288][T13903] netlink: 'syz.1.3318': attribute type 10 has an invalid length. [ 405.366641][T13903] veth0_vlan: left promiscuous mode [ 405.389537][T13903] veth0_vlan: entered promiscuous mode [ 405.487773][T13903] team0: Device veth0_vlan failed to register rx_handler [ 405.577702][T13910] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3322'. [ 407.502085][T13931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3331'. [ 410.167918][T14000] netlink: 'syz.2.3354': attribute type 10 has an invalid length. [ 410.182113][T14000] veth0_vlan: left promiscuous mode [ 410.194536][T14000] veth0_vlan: entered promiscuous mode [ 410.231888][T14000] team0: Device veth0_vlan failed to register rx_handler [ 410.301080][T14007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.329963][T14007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.349717][T14007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.357278][T14007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.371614][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 411.553393][T14041] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3375'. [ 411.822279][T14044] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3367'. [ 413.080152][T14069] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.3378'. [ 415.764797][T14099] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3390'. [ 416.189500][T14118] netlink: 'syz.0.3399': attribute type 10 has an invalid length. [ 416.224121][T14118] veth0_vlan: left promiscuous mode [ 416.276022][T14118] veth0_vlan: entered promiscuous mode [ 416.389934][T14118] team0: Device veth0_vlan failed to register rx_handler [ 416.639764][T14126] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3402'. [ 417.160759][T14146] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3411'. [ 417.220450][T14149] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3408'. [ 417.352575][T14144] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3408'. [ 417.679014][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 418.518548][T14164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3414'. [ 418.724238][T14175] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3421'. [ 418.846495][ T12] hsr_slave_0: left promiscuous mode [ 418.862404][ T12] hsr_slave_1: left promiscuous mode [ 418.895717][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.909324][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.979019][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.136220][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.199483][ T12] veth0_macvtap: left promiscuous mode [ 419.205287][ T12] veth1_vlan: left promiscuous mode [ 419.218715][ T12] veth0_vlan: left promiscuous mode [ 419.843891][ T12] team0 (unregistering): Port device team_slave_1 removed [ 419.879899][ T12] team0 (unregistering): Port device team_slave_0 removed [ 419.920972][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.961649][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.306155][ T12] bond0 (unregistering): Released all slaves [ 420.332716][T14200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3431'. [ 420.358633][T14202] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3432'. [ 421.336599][T14230] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3444'. [ 422.546044][T14256] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3455'. [ 423.232740][T14276] netlink: 'syz.1.3463': attribute type 10 has an invalid length. [ 423.243230][T14276] veth0_vlan: left promiscuous mode [ 423.250653][T14276] veth0_vlan: entered promiscuous mode [ 423.272142][T14276] team0: Device veth0_vlan failed to register rx_handler [ 423.435412][T14285] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3466'. [ 424.391966][T14314] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3478'. [ 425.023416][T14341] netlink: 'syz.2.3490': attribute type 10 has an invalid length. [ 425.047763][T14341] veth0_vlan: left promiscuous mode [ 425.075338][T14341] veth0_vlan: entered promiscuous mode [ 425.145595][T14341] team0: Device veth0_vlan failed to register rx_handler [ 426.639817][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 426.901932][T14417] netlink: 'syz.2.3518': attribute type 10 has an invalid length. [ 426.912209][T14417] veth0_vlan: left promiscuous mode [ 426.918378][T14417] veth0_vlan: entered promiscuous mode [ 426.926162][T14417] team0: Device veth0_vlan failed to register rx_handler [ 427.717920][T14445] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3528'. [ 427.833343][T14448] netlink: 'syz.1.3529': attribute type 11 has an invalid length. [ 427.842206][T14448] netlink: 'syz.1.3529': attribute type 15 has an invalid length. [ 427.850153][T14448] netlink: 'syz.1.3529': attribute type 16 has an invalid length. [ 427.869269][T14448] netlink: 'syz.1.3529': attribute type 21 has an invalid length. [ 427.877785][T14448] netlink: 'syz.1.3529': attribute type 25 has an invalid length. [ 427.896733][T14448] netlink: 'syz.1.3529': attribute type 27 has an invalid length. [ 427.924420][T14448] netlink: 'syz.1.3529': attribute type 28 has an invalid length. [ 428.235533][T14462] veth0_vlan: left promiscuous mode [ 428.246651][T14462] veth0_vlan: entered promiscuous mode [ 428.253837][T14462] team0: Device veth0_vlan failed to register rx_handler [ 428.701834][ T5772] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 429.640401][T14505] validate_nla: 3 callbacks suppressed [ 429.640417][T14505] netlink: 'syz.3.3547': attribute type 10 has an invalid length. [ 429.664962][T14505] veth0_vlan: left promiscuous mode [ 429.673279][T14505] veth0_vlan: entered promiscuous mode [ 429.696252][T14505] team0: Device veth0_vlan failed to register rx_handler [ 431.485483][T14547] netlink: 'syz.2.3560': attribute type 11 has an invalid length. [ 431.507880][T14547] netlink: 'syz.2.3560': attribute type 15 has an invalid length. [ 431.530946][T14547] netlink: 'syz.2.3560': attribute type 16 has an invalid length. [ 431.551860][T14547] netlink: 'syz.2.3560': attribute type 21 has an invalid length. [ 431.568660][T14547] netlink: 'syz.2.3560': attribute type 25 has an invalid length. [ 431.590191][T14547] netlink: 'syz.2.3560': attribute type 27 has an invalid length. [ 431.735341][T14547] netlink: 'syz.2.3560': attribute type 28 has an invalid length. [ 431.743388][T14547] netlink: 'syz.2.3560': attribute type 29 has an invalid length. [ 431.757431][T14547] netlink: 'syz.2.3560': attribute type 30 has an invalid length. [ 432.728050][T14587] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3574'. [ 433.898094][T14628] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3589'. [ 434.287925][T14639] veth0_vlan: left promiscuous mode [ 434.295006][T14639] veth0_vlan: entered promiscuous mode [ 434.303020][T14639] team0: Device veth0_vlan failed to register rx_handler [ 434.654692][T14650] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3598'. [ 435.412234][T14667] validate_nla: 1 callbacks suppressed [ 435.412251][T14667] netlink: 'syz.3.3605': attribute type 10 has an invalid length. [ 435.427983][T14667] veth0_vlan: left promiscuous mode [ 435.436766][T14667] veth0_vlan: entered promiscuous mode [ 435.445033][T14667] team0: Device veth0_vlan failed to register rx_handler [ 435.623732][T14678] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3609'. [ 436.610795][T14709] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3620'. [ 437.807583][T14736] netlink: 'syz.0.3629': attribute type 10 has an invalid length. [ 437.825129][T14736] veth0_vlan: left promiscuous mode [ 437.832300][T14736] veth0_vlan: entered promiscuous mode [ 437.841978][T14736] team0: Device veth0_vlan failed to register rx_handler [ 437.882283][T14739] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3631'. [ 438.675442][T14771] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3643'. [ 438.706574][T14772] netlink: 'syz.1.3642': attribute type 10 has an invalid length. [ 438.723249][T14772] veth0_vlan: left promiscuous mode [ 438.729455][T14772] veth0_vlan: entered promiscuous mode [ 438.738582][T14772] team0: Device veth0_vlan failed to register rx_handler [ 439.169148][T14786] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 439.176954][T14786] netlink: 12950 bytes leftover after parsing attributes in process `syz.2.3648'. [ 439.476545][T14794] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3652'. [ 439.725442][T14805] netlink: 'syz.1.3655': attribute type 10 has an invalid length. [ 439.770283][T14805] veth0_vlan: left promiscuous mode [ 439.790810][T14805] veth0_vlan: entered promiscuous mode [ 439.832314][T14805] team0: Device veth0_vlan failed to register rx_handler [ 439.983694][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.990325][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.230092][T14818] netlink: 'syz.1.3660': attribute type 1 has an invalid length. [ 440.249295][T14818] netlink: 12950 bytes leftover after parsing attributes in process `syz.1.3660'. [ 440.461328][T14829] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3664'. [ 440.892383][T14846] netlink: 'syz.0.3672': attribute type 10 has an invalid length. [ 440.904436][T14846] veth0_vlan: left promiscuous mode [ 440.912537][T14846] veth0_vlan: entered promiscuous mode [ 440.921261][T14846] team0: Device veth0_vlan failed to register rx_handler [ 441.061741][T14853] netlink: 64803 bytes leftover after parsing attributes in process `syz.1.3673'. [ 441.255742][T14860] netlink: 'syz.2.3676': attribute type 1 has an invalid length. [ 441.275961][T14860] netlink: 12950 bytes leftover after parsing attributes in process `syz.2.3676'. [ 441.616217][T14875] netlink: 64803 bytes leftover after parsing attributes in process `syz.3.3683'. [ 441.669545][T14877] netlink: 'syz.2.3684': attribute type 10 has an invalid length. [ 441.686654][T14877] veth0_vlan: left promiscuous mode [ 441.693098][T14877] veth0_vlan: entered promiscuous mode [ 441.703589][T14877] team0: Device veth0_vlan failed to register rx_handler [ 442.253925][T14902] netlink: 'syz.0.3692': attribute type 11 has an invalid length. [ 442.267020][T14902] netlink: 'syz.0.3692': attribute type 15 has an invalid length. [ 442.276143][T14902] netlink: 'syz.0.3692': attribute type 16 has an invalid length. [ 442.284621][T14902] netlink: 'syz.0.3692': attribute type 21 has an invalid length. [ 442.294902][T14902] netlink: 'syz.0.3692': attribute type 25 has an invalid length. [ 442.303101][T14902] netlink: 'syz.0.3692': attribute type 27 has an invalid length. [ 442.311571][T14902] netlink: 'syz.0.3692': attribute type 28 has an invalid length. [ 442.575835][T14911] netlink: 64803 bytes leftover after parsing attributes in process `syz.0.3695'. [ 442.664923][ T5772] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 442.721402][T14915] veth0_vlan: left promiscuous mode [ 442.750621][T14915] veth0_vlan: entered promiscuous mode [ 442.798005][T14915] team0: Device veth0_vlan failed to register rx_handler [ 443.379816][T14942] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3707'. [ 443.527730][ T5772] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 443.701485][T14953] veth0_vlan: left promiscuous mode [ 443.826415][T14953] veth0_vlan: entered promiscuous mode [ 443.834373][T14953] team0: Device veth0_vlan failed to register rx_handler [ 444.451633][T14981] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3718'. [ 446.208873][ T5772] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 446.970110][T15011] validate_nla: 4 callbacks suppressed [ 446.970129][T15011] netlink: 'syz.3.3730': attribute type 2 has an invalid length. [ 446.995510][T15011] netlink: 'syz.3.3730': attribute type 1 has an invalid length. [ 447.120268][T15016] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3732'. [ 451.675873][ T5772] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 452.948872][ T5087] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 453.518258][ T5087] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 453.706768][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 454.413952][T15241] netlink: 'syz.1.3815': attribute type 1 has an invalid length. [ 454.435297][T15241] netlink: 12950 bytes leftover after parsing attributes in process `syz.1.3815'. [ 454.964242][ T5772] Bluetooth: hci4: command 0x0406 tx timeout [ 455.539191][ T5778] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 455.599842][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 456.522587][T15293] netlink: 'syz.0.3839': attribute type 10 has an invalid length. [ 456.550978][T15293] veth0_vlan: left promiscuous mode [ 456.557172][T15293] veth0_vlan: entered promiscuous mode [ 456.583943][T15293] team0: Device veth0_vlan failed to register rx_handler [ 456.861207][T15315] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3846'. [ 456.879494][T15310] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3846'. [ 457.241457][T15324] delete_channel: no stack [ 457.415583][T15331] netlink: 'syz.0.3854': attribute type 10 has an invalid length. [ 457.426743][T15331] veth0_vlan: left promiscuous mode [ 457.435180][T15331] veth0_vlan: entered promiscuous mode [ 457.445816][T15331] team0: Device veth0_vlan failed to register rx_handler [ 457.664462][T15341] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3857'. [ 457.710637][T15338] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3857'. [ 457.796319][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3860'. [ 457.971275][T15357] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3869'. [ 457.990999][T15352] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3869'. [ 458.184039][T15353] delete_channel: no stack [ 458.519262][T15382] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3874'. [ 458.720471][T15391] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3876'. [ 459.997918][T15442] __nla_validate_parse: 4 callbacks suppressed [ 459.997928][T15442] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3900'. [ 460.019043][T15441] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3900'. [ 460.723650][T15464] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3909'. [ 460.757606][T15463] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3909'. [ 461.034765][ T5777] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 461.314988][T15493] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3921'. [ 461.333184][T15492] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3921'. [ 461.960570][T15514] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3930'. [ 461.996369][T15511] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3930'. [ 462.252122][T15523] delete_channel: no stack [ 462.333696][T15528] netlink: 'syz.1.3937': attribute type 1 has an invalid length. [ 462.349714][T15528] netlink: 12950 bytes leftover after parsing attributes in process `syz.1.3937'. [ 462.653722][T15545] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3942'. [ 462.886575][ T5777] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 463.030619][T15559] netlink: 'syz.0.3949': attribute type 11 has an invalid length. [ 463.046322][T15559] netlink: 'syz.0.3949': attribute type 15 has an invalid length. [ 463.054932][T15559] netlink: 'syz.0.3949': attribute type 16 has an invalid length. [ 463.062950][T15559] netlink: 'syz.0.3949': attribute type 21 has an invalid length. [ 463.070979][T15559] netlink: 'syz.0.3949': attribute type 25 has an invalid length. [ 463.078953][T15559] netlink: 'syz.0.3949': attribute type 27 has an invalid length. [ 463.086947][T15559] netlink: 'syz.0.3949': attribute type 28 has an invalid length. [ 463.094934][T15559] netlink: 'syz.0.3949': attribute type 29 has an invalid length. [ 463.102926][T15559] netlink: 'syz.0.3949': attribute type 30 has an invalid length. [ 463.564736][T15572] veth0_vlan: left promiscuous mode [ 463.571295][T15572] veth0_vlan: entered promiscuous mode [ 463.579342][T15572] team0: Device veth0_vlan failed to register rx_handler [ 464.690235][T15598] delete_channel: no stack [ 465.230786][T15617] __nla_validate_parse: 5 callbacks suppressed [ 465.230803][T15617] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3971'. [ 465.271328][T15612] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3971'. [ 466.259825][T15636] delete_channel: no stack [ 467.818995][T15660] delete_channel: no stack [ 468.664802][T15676] delete_channel: no stack [ 469.070195][T15685] delete_channel: no stack [ 469.096182][T15692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4005'. [ 470.529028][T15716] delete_channel: no stack [ 470.663256][T15726] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4018'. [ 470.689385][T15724] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4018'. [ 471.136503][T15742] delete_channel: no stack [ 471.372505][T15752] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4028'. [ 471.387563][T15748] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4028'. [ 471.608857][T15756] delete_channel: no stack [ 472.052569][T15775] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4037'. [ 472.084220][T15772] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4037'. [ 472.479742][T15785] delete_channel: no stack [ 473.414854][T15820] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4056'. [ 473.887008][T15838] delete_channel: no stack [ 473.990336][T15844] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4065'. [ 474.043852][T15846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4066'. [ 474.637584][T15872] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4078'. [ 476.487307][T15929] __nla_validate_parse: 1 callbacks suppressed [ 476.487325][T15929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4102'. [ 477.604488][T15961] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4114'. [ 478.137907][ T5777] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 479.152332][T15994] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4127'. [ 479.364687][T16006] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4130'. [ 480.203788][T16023] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4138'. [ 480.609648][T16046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4150'. [ 480.620341][T16047] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4147'. [ 481.067755][T16068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4160'. [ 481.595831][T16089] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4170'. [ 481.898186][T16103] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4175'. [ 482.291004][T16119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4182'. [ 482.509822][T16126] delete_channel: no stack [ 482.786544][T16138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4192'. [ 483.248934][T16148] delete_channel: no stack [ 483.309835][T16159] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4199'. [ 483.389397][T16165] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4204'. [ 483.989679][T16184] delete_channel: no stack [ 485.420967][T16224] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4225'. [ 486.765477][T16261] validate_nla: 1 callbacks suppressed [ 486.765494][T16261] netlink: 'syz.1.4243': attribute type 10 has an invalid length. [ 487.031031][T16267] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4245'. [ 487.452290][T16261] team0: Port device geneve1 added [ 487.730878][T16279] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4251'. [ 488.413087][T16300] netlink: 'syz.3.4258': attribute type 10 has an invalid length. [ 488.607410][T16300] team0: Port device geneve1 added [ 488.907558][T16319] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4267'. [ 489.585659][T16347] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4278'. [ 490.305492][T16379] netlink: 'syz.1.4290': attribute type 10 has an invalid length. [ 490.413920][T16384] netlink: 'syz.1.4292': attribute type 10 has an invalid length. [ 490.421902][T16387] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4293'. [ 490.424248][T16384] veth0_vlan: left promiscuous mode [ 490.437875][T16384] veth0_vlan: entered promiscuous mode [ 490.446591][T16384] team0: Device veth0_vlan failed to register rx_handler [ 490.456622][T16388] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4291'. [ 491.020601][T16405] netlink: 'syz.1.4300': attribute type 10 has an invalid length. [ 491.461561][T16419] netlink: 'syz.0.4304': attribute type 10 has an invalid length. [ 491.508921][T16419] veth0_vlan: left promiscuous mode [ 491.532956][T16419] veth0_vlan: entered promiscuous mode [ 491.564090][T16419] team0: Device veth0_vlan failed to register rx_handler [ 491.786736][T16430] netlink: 'syz.3.4309': attribute type 10 has an invalid length. [ 492.113794][T16447] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4312'. [ 492.272384][T16454] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4318'. [ 492.467398][ T5777] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 493.125335][ T5777] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 493.267571][T16486] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4333'. [ 493.422141][T16498] netlink: 'syz.3.4338': attribute type 10 has an invalid length. [ 493.506032][T16501] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4335'. [ 493.825218][ T5777] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 494.114570][T16520] netlink: 'syz.3.4347': attribute type 10 has an invalid length. [ 494.726680][T16539] netlink: 'syz.2.4356': attribute type 10 has an invalid length. [ 494.764276][T16539] team0: Port device geneve1 added [ 495.715845][T16576] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4371'. [ 496.360268][T16595] delete_channel: no stack [ 496.375661][T16601] netlink: 'syz.1.4383': attribute type 10 has an invalid length. [ 496.399288][T16604] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4384'. [ 497.106347][T16627] netlink: 'syz.1.4395': attribute type 10 has an invalid length. [ 497.355133][T16628] delete_channel: no stack [ 497.947334][T16657] netlink: 'syz.1.4407': attribute type 10 has an invalid length. [ 498.215470][T16660] delete_channel: no stack [ 498.647420][T16685] netlink: 'syz.3.4418': attribute type 10 has an invalid length. [ 498.944569][ T5777] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 499.140352][T16692] delete_channel: no stack [ 499.979713][T16729] delete_channel: no stack [ 501.239009][T16759] delete_channel: no stack [ 501.369461][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.375941][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.699522][T16776] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4453'. [ 501.754442][ T5777] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 502.141891][T16789] delete_channel: no stack [ 502.170853][T16794] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4461'. [ 502.239662][T16796] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4462'. [ 502.397037][ T5777] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 502.814299][T16822] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.4472'. [ 502.986583][T16826] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4474'. [ 503.086012][T16828] netlink: 'syz.0.4475': attribute type 10 has an invalid length. [ 503.172023][T16828] team0: Port device geneve1 added [ 503.767832][T16849] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.4484'. [ 503.973936][T16859] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4489'. [ 504.242050][T16869] netlink: 'syz.1.4492': attribute type 3 has an invalid length. [ 504.392843][T16879] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.4496'. [ 504.741585][T16895] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4504'. [ 505.017616][T16910] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.4511'. [ 505.299466][T16923] netlink: 'syz.1.4518': attribute type 10 has an invalid length. [ 505.345910][T16926] netlink: 'syz.2.4519': attribute type 49 has an invalid length. [ 505.378738][T16926] netlink: 'syz.2.4519': attribute type 49 has an invalid length. [ 505.504822][T16927] delete_channel: no stack [ 506.158967][T16957] delete_channel: no stack [ 507.883076][T17023] __nla_validate_parse: 1 callbacks suppressed [ 507.883095][T17023] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.4559'. [ 508.359488][T17043] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4570'. [ 508.499703][T17052] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4572'. [ 508.961559][T17075] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4582'. [ 509.167629][T17081] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4584'. [ 509.446278][T17096] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4592'. [ 509.502682][T17098] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4593'. [ 510.193514][T17129] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4606'. [ 510.211935][T17127] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4605'. [ 510.707207][T17140] delete_channel: no stack [ 510.885425][T17155] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4617'. [ 511.096600][T17165] netlink: 'syz.0.4621': attribute type 49 has an invalid length. [ 511.112465][T17165] netlink: 'syz.0.4621': attribute type 49 has an invalid length. [ 511.401474][ T5777] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 511.529563][T17179] delete_channel: no stack [ 511.671489][T17188] netlink: 'syz.1.4631': attribute type 49 has an invalid length. [ 511.696109][T17188] netlink: 'syz.1.4631': attribute type 49 has an invalid length. [ 512.312504][T17220] netlink: 'syz.3.4643': attribute type 49 has an invalid length. [ 512.322179][T17220] netlink: 'syz.3.4643': attribute type 49 has an invalid length. [ 512.432360][T17217] delete_channel: no stack [ 512.960217][T17246] __nla_validate_parse: 5 callbacks suppressed [ 512.960236][T17246] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4656'. [ 513.079233][T17243] delete_channel: no stack [ 513.218130][T17255] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4658'. [ 513.643860][T17272] delete_channel: no stack [ 513.697524][T17278] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4669'. [ 514.546083][T17298] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4677'. [ 514.869004][T17302] delete_channel: no stack [ 515.034119][T17319] netlink: 'syz.2.4687': attribute type 49 has an invalid length. [ 515.066591][T17319] netlink: 'syz.2.4687': attribute type 49 has an invalid length. [ 516.158644][T17338] delete_channel: no stack [ 516.256133][T17352] netlink: 'syz.2.4698': attribute type 49 has an invalid length. [ 516.278678][T17352] netlink: 'syz.2.4698': attribute type 49 has an invalid length. [ 516.881007][T17376] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4709'. [ 516.961519][T17373] delete_channel: no stack [ 518.011313][T17405] delete_channel: no stack [ 518.402091][T17423] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4729'. [ 519.089930][T17454] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4740'. [ 519.630973][T17480] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4753'. [ 521.884980][T17585] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4803'. [ 521.909501][T17588] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4804'. [ 523.629966][T17656] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.4836'. [ 523.726181][T17660] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.4838'. [ 524.737742][T17697] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4854'. [ 524.754312][T17697] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4854'. [ 524.774730][T17696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4854'. [ 524.785452][T17699] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4855'. [ 525.856555][T17722] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4864'. [ 526.169668][T17737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4868'. [ 526.188597][T17737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4868'. [ 526.202304][T17733] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4868'. [ 528.222614][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.231649][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.248769][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.257132][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.265485][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 528.278622][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 528.716520][T17803] chnl_net:caif_netlink_parms(): no params data found [ 528.967773][T17803] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.997161][T17803] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.005830][T17803] bridge_slave_0: entered allmulticast mode [ 529.013637][T17803] bridge_slave_0: entered promiscuous mode [ 529.023032][T17803] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.030590][T17803] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.037945][T17803] bridge_slave_1: entered allmulticast mode [ 529.045808][T17803] bridge_slave_1: entered promiscuous mode [ 529.112890][T17803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.126366][T17803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.175942][T17803] team0: Port device team_slave_0 added [ 529.192919][T17803] team0: Port device team_slave_1 added [ 529.205657][T17838] __nla_validate_parse: 5 callbacks suppressed [ 529.205675][T17838] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4911'. [ 529.244290][T17803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.251405][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.320410][T17803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.345729][T17803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.363236][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.399068][T17803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.507491][T17803] hsr_slave_0: entered promiscuous mode [ 529.514528][T17803] hsr_slave_1: entered promiscuous mode [ 529.747183][T17803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.853481][T17803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.925561][T17803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.036219][T17803] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.092707][T17861] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4920'. [ 530.301931][T17803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 530.316997][T17803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 530.319209][ T5777] Bluetooth: hci0: command tx timeout [ 530.343304][T17803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.368155][T17803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 530.505850][T17869] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4924'. [ 530.620294][T17803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.675741][T17803] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.711376][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.718660][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.748180][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.755460][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.271870][T17803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.341912][T17896] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4933'. [ 531.349151][T17803] veth0_vlan: entered promiscuous mode [ 531.373142][T17803] veth1_vlan: entered promiscuous mode [ 531.432306][T17803] veth0_macvtap: entered promiscuous mode [ 531.454190][T17803] veth1_macvtap: entered promiscuous mode [ 531.483081][T17803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.497137][T17803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.511161][T17803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.521705][T17803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.530671][T17803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.539582][T17803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.662904][T17901] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4935'. [ 531.682583][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.692632][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.734822][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.743390][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.404811][ T5777] Bluetooth: hci0: command tx timeout [ 532.510273][T17919] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4941'. [ 532.719981][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.740928][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 532.760510][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 532.777356][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.786752][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 532.796889][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.270247][T17943] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4949'. [ 533.275768][T17922] chnl_net:caif_netlink_parms(): no params data found [ 533.336551][T17922] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.345131][T17922] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.356182][T17922] bridge_slave_0: entered allmulticast mode [ 533.369908][T17922] bridge_slave_0: entered promiscuous mode [ 533.391000][T17922] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.401562][T17922] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.411962][T17922] bridge_slave_1: entered allmulticast mode [ 533.421589][T17922] bridge_slave_1: entered promiscuous mode [ 533.494383][T17922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.515326][T17922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.586854][T17922] team0: Port device team_slave_0 added [ 533.603715][T17922] team0: Port device team_slave_1 added [ 533.656267][T17922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.663508][T17922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.695867][T17922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.713429][T17922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.722777][T17922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.768173][T17922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.883857][T17922] hsr_slave_0: entered promiscuous mode [ 533.893799][T17922] hsr_slave_1: entered promiscuous mode [ 533.903388][T17922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.913751][T17922] Cannot create hsr debugfs directory [ 534.035205][T17954] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4952'. [ 534.163873][T17922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.294456][T17922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.458148][T17922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.479267][ T5777] Bluetooth: hci0: command tx timeout [ 534.673829][T17922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.879540][ T5777] Bluetooth: hci2: command tx timeout [ 534.912549][T17922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 534.953147][T17922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 534.992841][T17922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 535.014518][T17922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 535.074115][T17980] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4963'. [ 535.173279][T17922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.208936][T17922] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.230473][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.237719][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.256884][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.266065][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.814047][T17922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.895456][T17922] veth0_vlan: entered promiscuous mode [ 535.957225][T17922] veth1_vlan: entered promiscuous mode [ 536.016002][T18002] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4971'. [ 536.048385][T17922] veth0_macvtap: entered promiscuous mode [ 536.081209][T17922] veth1_macvtap: entered promiscuous mode [ 536.132962][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.151958][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.173911][T17922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.215692][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.253384][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.282550][T17922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.327667][T17922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.349345][T17922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.370617][T17922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.389738][T17922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.542618][T13579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.562621][ T5777] Bluetooth: hci0: command tx timeout [ 536.585219][T13579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.702792][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.731770][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.959418][ T5777] Bluetooth: hci2: command tx timeout [ 537.695434][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 537.705687][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 537.715438][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 537.731059][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 537.737236][T18039] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.4986'. [ 537.750667][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 537.768365][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.962414][T18036] chnl_net:caif_netlink_parms(): no params data found [ 539.038855][ T5777] Bluetooth: hci2: command tx timeout [ 539.172462][T18036] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.186137][T18036] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.194555][T18036] bridge_slave_0: entered allmulticast mode [ 539.213239][T18036] bridge_slave_0: entered promiscuous mode [ 539.223063][T18036] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.232019][T18036] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.239650][T18036] bridge_slave_1: entered allmulticast mode [ 539.247424][T18036] bridge_slave_1: entered promiscuous mode [ 539.294833][T18075] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4999'. [ 539.300528][T18036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.319416][T18036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.543974][T18036] team0: Port device team_slave_0 added [ 539.568389][T18036] team0: Port device team_slave_1 added [ 539.839081][ T5777] Bluetooth: hci1: command tx timeout [ 540.264338][T18036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.282312][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.338631][T18036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.371069][T18036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.378073][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.423045][T18036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.532301][T18036] hsr_slave_0: entered promiscuous mode [ 540.560501][T18036] hsr_slave_1: entered promiscuous mode [ 540.573576][T18036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.588652][T18036] Cannot create hsr debugfs directory [ 541.120319][ T5777] Bluetooth: hci2: command tx timeout [ 541.310899][T18110] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5013'. [ 541.444264][T18036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.742978][T18036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.876625][T18036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.920995][ T5777] Bluetooth: hci1: command tx timeout [ 542.041049][T18036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.329301][T18036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 542.368011][T18036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 542.383895][T18036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 542.411729][T18036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 542.572761][T18036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.599518][T18036] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.663714][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.670955][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.737925][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.745195][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.425775][T18036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.543900][T18036] veth0_vlan: entered promiscuous mode [ 543.551239][T18147] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5028'. [ 543.574480][T18036] veth1_vlan: entered promiscuous mode [ 543.621837][T18036] veth0_macvtap: entered promiscuous mode [ 543.661185][T18036] veth1_macvtap: entered promiscuous mode [ 543.709769][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.738561][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.756351][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.771677][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.793998][T18036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.826136][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.848531][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.866320][T18036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.878576][T18036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.901089][T18036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.927946][T18036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.951320][T18036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.968333][T18036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.978341][T18036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.999042][ T5777] Bluetooth: hci1: command tx timeout [ 544.154712][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.175477][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.221525][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.234685][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.361173][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 545.370306][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 545.380995][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 545.389650][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 545.418334][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 545.443233][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 546.078875][ T5778] Bluetooth: hci1: command tx timeout [ 546.479785][T18173] chnl_net:caif_netlink_parms(): no params data found [ 546.583793][T18199] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5046'. [ 546.736913][T18173] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.754463][T18173] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.762076][T18173] bridge_slave_0: entered allmulticast mode [ 546.771991][T18173] bridge_slave_0: entered promiscuous mode [ 546.781198][T18173] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.788698][T18173] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.796001][T18173] bridge_slave_1: entered allmulticast mode [ 546.805326][T18173] bridge_slave_1: entered promiscuous mode [ 546.850991][T18173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.864563][T18173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.953560][T18173] team0: Port device team_slave_0 added [ 546.985393][T18173] team0: Port device team_slave_1 added [ 547.275623][T18173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.305958][T18173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.410607][T18173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.473951][T18173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.488525][T18173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.519470][T18173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.537245][ T5778] Bluetooth: hci3: command tx timeout [ 547.907699][T18173] hsr_slave_0: entered promiscuous mode [ 547.924230][T18173] hsr_slave_1: entered promiscuous mode [ 547.942745][T18173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.961804][T18173] Cannot create hsr debugfs directory [ 548.117825][T18228] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5057'. [ 548.136418][T18230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5058'. [ 548.159977][T18230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5058'. [ 548.183057][T18230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5058'. [ 548.330342][T18173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.346528][T18236] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5060'. [ 548.426078][T18173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.535789][T18173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.652055][T18173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.598681][ T5778] Bluetooth: hci3: command tx timeout [ 549.707324][T18173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 549.753255][T18249] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.767903][T18249] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.817316][T18249] bridge0: entered allmulticast mode [ 549.973540][T18173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 549.975416][T18262] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5071'. [ 549.996944][T18173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 550.007666][T18257] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.014868][T18257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.022598][T18257] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.029723][T18257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.037491][T18257] bridge0: entered promiscuous mode [ 550.052257][T18173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 550.237665][T18173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.272685][T18173] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.296775][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.304007][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.320865][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.328088][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.880919][T18282] netlink: 'syz.0.5078': attribute type 10 has an invalid length. [ 551.224382][T18287] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.239691][T18287] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.286642][T18287] bridge0: entered allmulticast mode [ 551.411002][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.418254][T18292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.425829][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.433061][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.449766][T18292] bridge0: entered promiscuous mode [ 551.483883][T18173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.550551][T18173] veth0_vlan: entered promiscuous mode [ 551.569100][T18173] veth1_vlan: entered promiscuous mode [ 551.635476][T18173] veth0_macvtap: entered promiscuous mode [ 551.658026][T18173] veth1_macvtap: entered promiscuous mode [ 551.691831][ T5778] Bluetooth: hci3: command tx timeout [ 551.699894][T18173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.710955][T18173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.720941][T18173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.735670][T18173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.752603][T18173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.763759][T18173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.776230][T18173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.781164][T18302] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5087'. [ 551.790141][T18173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.803958][T18173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.814054][T18173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.825932][T18173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.836345][T18173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.847287][T18173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.860908][T18173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.879260][T18173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.888075][T18173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.897766][T18173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.906666][T18173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.020454][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.044845][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.091587][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.103090][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.311702][T18315] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.5092'. [ 552.617883][T18317] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.628239][T18317] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.649552][T18317] bridge0: left promiscuous mode [ 552.758253][T18321] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.765501][T18321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.773091][T18321] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.780310][T18321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.793677][T18321] bridge0: entered promiscuous mode [ 552.864407][T18334] C: renamed from team_slave_0 (while UP) [ 552.882256][T18334] netlink: 'syz.1.5100': attribute type 3 has an invalid length. [ 552.899665][T18334] netlink: 'syz.1.5100': attribute type 1 has an invalid length. [ 552.907529][T18334] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5100'. [ 552.918202][T18334] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 553.064949][T18340] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5104'. [ 553.343744][T18353] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5109'. [ 553.536766][T18356] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.551481][T18356] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.582578][T18356] bridge0: entered allmulticast mode [ 553.702850][T18364] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.5115'. [ 553.726128][T18362] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.733324][T18362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.740886][T18362] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.748020][T18362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.756328][T18362] bridge0: entered promiscuous mode [ 553.769825][ T5778] Bluetooth: hci3: command tx timeout [ 553.813832][T18366] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5116'. [ 553.983523][T18374] C: renamed from team_slave_0 (while UP) [ 553.999455][T18374] netlink: 'syz.3.5119': attribute type 3 has an invalid length. [ 554.013212][T18374] netlink: 'syz.3.5119': attribute type 1 has an invalid length. [ 554.028080][T18374] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5119'. [ 554.047123][T18374] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 554.419775][T18386] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5124'. [ 554.774628][T18389] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.784553][T18389] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.822928][T18389] bridge0: left promiscuous mode [ 554.989448][T18390] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.996653][T18390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.004255][T18390] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.011495][T18390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.022310][T18390] bridge0: entered promiscuous mode [ 555.292531][T18405] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5132'. [ 569.584986][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.593211][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.971159][T18418] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.981515][T18418] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.005452][T18418] bridge0: left promiscuous mode [ 629.430179][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.436587][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 657.637100][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 658.052820][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 665.138405][T18440] Bluetooth: hci1: command 0x0406 tx timeout [ 682.009679][T18444] Bluetooth: hci3: command 0x0406 tx timeout [ 682.903334][T18442] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 683.028933][T18444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 689.499490][T18443] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 700.849324][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.855688][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.613459][T18442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 706.622442][T18442] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 706.630831][T18442] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 706.690014][T18442] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 706.697833][T18442] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 706.712495][T18442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 713.044412][T18444] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 713.193022][T18444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 713.202568][T18444] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 713.220042][T18444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 713.233588][T18444] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 713.289633][T18444] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 713.297175][T18444] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 754.037121][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.044242][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.919644][ T5778] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 805.933578][ T5778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 805.948624][ T5778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 805.970615][ T5778] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 805.979361][ T5778] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 805.989125][ T5778] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 806.804433][T18453] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 806.858610][T18453] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 806.867114][T18453] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 806.876263][T18453] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 806.884920][T18453] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 806.892577][T18453] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 810.120650][T18444] Bluetooth: hci5: command tx timeout [ 810.126689][ T5777] Bluetooth: hci7: command tx timeout [ 810.132398][T18440] Bluetooth: hci4: command tx timeout [ 810.138169][T18440] Bluetooth: hci6: command tx timeout [ 813.248492][T18444] Bluetooth: hci5: command tx timeout [ 813.255594][T18444] Bluetooth: hci6: command tx timeout [ 813.262168][T18444] Bluetooth: hci7: command tx timeout [ 813.267627][T18444] Bluetooth: hci4: command tx timeout [ 816.231899][ T29] INFO: task kworker/0:5:5826 blocked for more than 157 seconds. [ 816.241709][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.248038][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.273367][ T5777] Bluetooth: hci4: command tx timeout [ 816.283227][ T5777] Bluetooth: hci7: command tx timeout [ 816.289294][ T5777] Bluetooth: hci6: command tx timeout [ 816.294722][ T5777] Bluetooth: hci5: command tx timeout [ 816.478837][ T29] Not tainted 6.6.93-syzkaller #0 [ 816.484447][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 818.151419][ T29] task:kworker/0:5 state:D stack:23312 pid:5826 ppid:2 flags:0x00004000 [ 818.400099][ T29] Workqueue: events_power_efficient reg_check_chans_work [ 818.407259][ T29] Call Trace: [ 818.468395][T18444] Bluetooth: hci5: command tx timeout [ 818.473873][T18444] Bluetooth: hci6: command tx timeout [ 818.482471][ T5777] Bluetooth: hci7: command tx timeout [ 818.487903][ T5777] Bluetooth: hci4: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 819.878725][ T29] [ 819.881810][ T29] __schedule+0x14e2/0x4580 [ 819.886395][ T29] ? mark_lock+0x94/0x320 [ 820.005446][T18444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 820.128502][T18444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 820.149179][T18444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 820.157635][T18444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 820.166762][T18444] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 820.174335][T18444] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 820.288410][ T29] ? asan.module_dtor+0x20/0x20 [ 820.293713][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 820.468512][ T29] schedule+0xbd/0x170 [ 820.472678][ T29] schedule_preempt_disabled+0x13/0x20 [ 820.478170][ T29] __mutex_lock+0x6b7/0xcc0 [ 822.258727][T18444] Bluetooth: hci0: command tx timeout [ 822.299179][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 822.303954][ T29] ? reg_check_chans_work+0x91/0xd70 [ 823.213555][ T29] ? mutex_lock_nested+0x20/0x20 [ 823.278403][ T29] ? process_scheduled_works+0x957/0x15b0 [ 823.284222][ T29] reg_check_chans_work+0x91/0xd70 [ 825.220872][ T29] ? reg_process_ht_flags+0xb80/0xb80 [ 825.226440][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 826.128666][T18444] Bluetooth: hci0: command tx timeout