last executing test programs: 2.259650752s ago: executing program 3 (id=3207): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) 2.231488083s ago: executing program 3 (id=3208): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 2.230019372s ago: executing program 3 (id=3209): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6007f03000000000000040014000d000a000f0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb4a00f6985b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x6, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x24, 0x0, 0x0, 0x0, 0xfd3, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x20) write$cgroup_subtree(r7, &(0x7f0000000680)=ANY=[@ANYBLOB="2d626c6b696f202b637075736574202b7225ddc9f09df65ab3146814676d77bbd86c696d6974202b626c6b696f202d667265657a6572202b6e65745f636c73202d696f20"], 0x34) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) 1.42301389s ago: executing program 4 (id=3216): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0xa, [@datasec={0x6, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x9, 0x9}, {0x2, 0x7f66, 0x8}, {0x1, 0x4, 0x800}, {0x5, 0x5, 0x7}], "bafd41"}]}, {0x0, [0x30, 0x30, 0x5f, 0x5f, 0x2e, 0x61, 0x2e, 0x2e]}}, &(0x7f0000000500)=""/147, 0x62, 0x93, 0x1, 0x6}, 0x28) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.288030363s ago: executing program 2 (id=3221): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000000380)="c109000000000000001d1e020e", 0xd}, {&(0x7f0000000240)="0001", 0x2}, {&(0x7f0000000080)="45f3d80089735ff0009598d0923d1ef904ff6ea9517ef0d69a75c944845888e3670532b8e56f3d4a3ba893eead72c55d8ea3f9cd69586f3a4e76c42fb921ead6b9eab90458894b44995154a849255197ce55df53c9de437c04b613646fc5066394b4c758b891f82cdd88f207c1acf107b6eb3f83a300000000000000000000c38c1c62163b90ae02f3fedd8972be6028bf86f8bfe33865", 0x97}, {&(0x7f0000002a00)="5e09fea9c4bdecd822cd8d738725d88804712e172a9895b8df6e261454e458edd1d9e8b8ed825aec4fdaf48083be944c2e9d6990c4e8a117f9757a9c5332220099ca0f0b5b2474f6cc6794477fd76e2dfe9e7a8ee88d8188ade0035d2ec72230b59dc05ee442babee13bbf2888e8a5e13181c1d0405c87621ffa598855786134cc0181364db5dcc15ec962e9699de812d0f895fc08db7a8a54f7a6adeb386dabb415bc9189c8584b9e0c7175e33b27a44e4abbdd0b4c0a0d014666b1281af7a146eeea974906d7794890", 0xca}], 0x4}, 0x20040000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0xc0189436, 0x0) 1.200647684s ago: executing program 2 (id=3223): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3d, &(0x7f0000000040)=ANY=[], 0x0, 0x602, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000025c0)={&(0x7f00000011c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001280), 0x0, 0x0, 0x12f0}, 0x4010) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84022, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000140)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N,'], 0x6a) 1.130900926s ago: executing program 2 (id=3224): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3d, &(0x7f0000000040)=ANY=[], 0x0, 0x202, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000025c0)={&(0x7f00000011c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001280), 0x0, 0x0, 0x12f0}, 0x4010) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84022, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000001240000002400000002000000000000000000000d020000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000140)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000027c0)={r3, 0x0, &(0x7f00000026c0)=""/244}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) 1.126931236s ago: executing program 3 (id=3225): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x2, 0x0, &(0x7f0000000100)="00ec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000026c400004c0000004c000000030000000d0000000000000b020000000600000000000010040000000e00000000000007000000000b000000000000110400000002000000000000000000000300000000050000120200000001010000003000045f91589987a9a8a8bd3d3a115e4fcde596eda06b0a5bf36bcbb1c6768c5bf42842ab7ad50876f1e5e9ab7d94010000000100000027f45ae0348edfe68c2d5152aadd74a8e2f4d3c36976f1d672f74d7caa9984d7efd4c11925b5ac5d484946f7a084cba7428efc5acdc5520344d57504b7a3e25a33988c0a38d1ee9e5b84fd6eb45a29888f9499d087d806ccdd9d229d89e85129a53e8a9c87cc106658d3d55160ed9b430f6ce922e292ed06128cfc53bc8f91beeda6db4b44563959a4821bf35ecedba6c29d04d761ef050000000000000071f37296015d523b0c872212638f7ec8d68fa584554bad47724c747b8decc62d7cb4810c12f5cde772cbadf4273c50d5e0d6c043f0ff6ae351f02bf65e6a38c363037f2b6caffaa22074bbd5d8e5d7743214b0087a0b31953411cc13a939c0b1f092cae4d0e6f84f984557c4415d995b37d7ee05b37f9824ca"], &(0x7f0000000700)=""/91, 0x67, 0x5b, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_clone(0x800900, &(0x7f00000002c0)="d06b5513dc6d1643367f9c2b87d5aa287156ce321562d8e3362bdd0ad48c468f8153ef9819eabc4f47416993e11696cdb00b8be30cb98b70c79266fdec10e07b464df45779a2d3f8972dcf7f0735e8878e836d8e3a476283e8222472a27879f945527ac15d8cfc41d81119b472b9d1e1c64593133e522ee10078583ff6eea438d51bd3ef0000501cd2417b20dc360ff04d7747d7d12a44da148bc38eaf14ba75950d318c75dbb4b4b75237f6db3e6c5ce4", 0xb1, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)="b0d6ab2f943831c61509cb0a8efa5986c69cc6b0c35e69dae4b6bb441c7c11d8aa4072872762d45184d9cc8d8f8f1da5701184ec737ebb94087c4d1ab4a61201b5cd86ebed154b6e575ef8bba0c8d016bd6762298968c0ab5d") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x165a}, 0x1053e0, 0x2, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18060000ffff0300000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100004020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600003fd2017e97f63bbc00274ab97c780331f650117b18d1b3c83ffce255afe2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) 854.805372ms ago: executing program 2 (id=3234): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3d, &(0x7f0000000040)=ANY=[], 0x0, 0x602, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000025c0)={&(0x7f00000011c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001280), 0x0, 0x0, 0x12f0}, 0x4010) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84022, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000140)) socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N,'], 0x6a) 797.036333ms ago: executing program 2 (id=3237): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 762.371124ms ago: executing program 2 (id=3238): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 474.6123ms ago: executing program 4 (id=3243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500007c07000000000000000400000000000000", @ANYRES32, @ANYBLOB="000000000000000000ff000000000000000000004238d59444e01cec264441006cceffca6713b690f05f136fd44642647e76f8ada9801f5599bf1c09f5380b82b727ac0c5fcd6d9edb5e18feb597a3f86be70da6d9bd3e94237fe2adb25d2c5eee29705bfdab4fda2b48913836016cb8b4b59b5009e86c170493989f226ba820dd3bd878e60247252f9eddb81fdb93d35e2bb1796d06418b790fb222aedfcbdbff320148a74ee7", @ANYRES32=0x0, @ANYRES32, @ANYRES16], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095000000000000008a138db907014317bdc86399003ef279bcf4438908fb119c3434377c5416c3cb37b84568575efdf19a281703ec0ebd66879d0d95516f52a13ea385c52fad4aff77dd304e6a8961cc72e8fb09"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000240)=""/4096}, 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000200)="5c00000010006bcc9e3be35c6e17aa31076b856c150000007ea20864160af3650c001ac008000a00040008001e618294ff0051f60284c9f4d4938037e786a6d0001000000e4509c5bb0100000053c7e834371ccdd11774738d52317c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040090) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa400080000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x77, &(0x7f0000000000), 0x62) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001240), 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001280)={'sit0\x00', 0x4a00}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x7, 0x0, 0x9, 0x8000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r10, 0xce, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001240)={@ifindex, 0x22, 0x1, 0x207d, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001480)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r12, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="f921c00874b11e0489c0fbde8fe29d000087ff4d438a781d7791ac138fe7f48de28014daf73e620ca685f8ecc1c849f1ed2071be", @ANYRES64=r13], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000015c0)={@fallback=r5, r2, 0x2c, 0xc5989dd34c4dfadb, r4, @value=r7, @void, @void, @void, r13}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r14) 460.28543ms ago: executing program 4 (id=3245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 446.315561ms ago: executing program 1 (id=3246): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000000380)="c109000000000000001d1e020e", 0xd}, {&(0x7f0000000240)="0001", 0x2}, {&(0x7f0000000080)="45f3d80089735ff0009598d0923d1ef904ff6ea9517ef0d69a75c944845888e3670532b8e56f3d4a3ba893eead72c55d8ea3f9cd69586f3a4e76c42fb921ead6b9eab90458894b44995154a849255197ce55df53c9de437c04b613646fc5066394b4c758b891f82cdd88f207c1acf107b6eb3f83a300000000000000000000c38c1c62163b90ae02f3fedd8972be6028bf86f8bfe33865", 0x97}, {&(0x7f0000002a00)="5e09fea9c4bdecd822cd8d738725d88804712e172a9895b8df6e261454e458edd1d9e8b8ed825aec4fdaf48083be944c2e9d6990c4e8a117f9757a9c5332220099ca0f0b5b2474f6cc6794477fd76e2dfe9e7a8ee88d8188ade0035d2ec72230b59dc05ee442babee13bbf2888e8a5e13181c1d0405c87621ffa598855786134cc0181364db5dcc15ec962e9699de812d0f895fc08db7a8a54f7a6adeb386dabb415bc9189c8584b9e0c7175e33b27a44e4abbdd0b4c0a0d014666b1281af7a146eeea974906d7794890", 0xca}], 0x4}, 0x20040000) 403.538571ms ago: executing program 4 (id=3247): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3d, &(0x7f0000000040)=ANY=[], 0x0, 0x602, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000025c0)={&(0x7f00000011c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001280), 0x0, 0x0, 0x12f0}, 0x4010) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84022, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N,'], 0x6a) 393.361442ms ago: executing program 1 (id=3248): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) 348.817953ms ago: executing program 1 (id=3249): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x3, 0x84) 347.496473ms ago: executing program 4 (id=3250): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x40, 0x4, 0xfffff018}, {0x6, 0x2, 0x4, 0x4}]}) 341.939492ms ago: executing program 1 (id=3251): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000800)={'pim6reg1\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x102}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001880)={r7, &(0x7f0000000840)="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", &(0x7f0000001840)=""/30, 0x4}, 0x20) write$cgroup_type(r6, &(0x7f0000000280), 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0) socket$kcm(0xa, 0x2, 0x0) 325.769583ms ago: executing program 0 (id=3252): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x20}, 0x0) 265.009174ms ago: executing program 4 (id=3253): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0xa, [@datasec={0x6, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x9, 0x9}, {0x2, 0x7f66, 0x8}, {0x1, 0x4, 0x800}, {0x5, 0x5, 0x7}], "bafd41"}]}, {0x0, [0x30, 0x30, 0x5f, 0x5f, 0x2e, 0x61, 0x2e, 0x2e]}}, &(0x7f0000000500)=""/147, 0x62, 0x93, 0x1, 0x6}, 0x28) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 264.467104ms ago: executing program 3 (id=3254): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3d, &(0x7f0000000040)=ANY=[], 0x0, 0x202, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000025c0)={&(0x7f00000011c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001280), 0x0, 0x0, 0x12f0}, 0x4010) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84022, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000001240000002400000002000000000000000000000d020000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000140)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000027c0)={r3, 0x0, &(0x7f00000026c0)=""/244}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) 258.615814ms ago: executing program 0 (id=3255): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6203, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0x7, 0x7}, 0x248, 0x0, 0xbd73, 0x0, 0x7, 0x4, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 130.989687ms ago: executing program 0 (id=3256): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 108.746378ms ago: executing program 0 (id=3257): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000200)="5c00000010006bcc9e3be35c6e17aa31076b856c150000007ea20864160af3650c001ac008000a00040008001e618294ff0051f60284c9f4d4938037e786a6d0001000000e4509c5bb0100000053c7e834371ccdd11774738d52317c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040090) 66.065238ms ago: executing program 0 (id=3258): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000000380)="c109000000000000001d1e020e", 0xd}, {&(0x7f0000000240)="0001", 0x2}, {&(0x7f0000000080)="45f3d80089735ff0009598d0923d1ef904ff6ea9517ef0d69a75c944845888e3670532b8e56f3d4a3ba893eead72c55d8ea3f9cd69586f3a4e76c42fb921ead6b9eab90458894b44995154a849255197ce55df53c9de437c04b613646fc5066394b4c758b891f82cdd88f207c1acf107b6eb3f83a300000000000000000000c38c1c62163b90ae02f3fedd8972be6028bf86f8bfe33865", 0x97}, {&(0x7f0000002a00)="5e09fea9c4bdecd822cd8d738725d88804712e172a9895b8df6e261454e458edd1d9e8b8ed825aec4fdaf48083be944c2e9d6990c4e8a117f9757a9c5332220099ca0f0b5b2474f6cc6794477fd76e2dfe9e7a8ee88d8188ade0035d2ec72230b59dc05ee442babee13bbf2888e8a5e13181c1d0405c87621ffa598855786134cc0181364db5dcc15ec962e9699de812d0f895fc08db7a8a54f7a6adeb386dabb415bc9189c8584b9e0c7175e33b27a44e4abbdd0b4c0a0d014666b1281af7a146eeea974906d7794890", 0xca}], 0x4}, 0x20040000) 64.298469ms ago: executing program 1 (id=3259): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500007c07000000000000000400000000000000", @ANYRES32, @ANYBLOB="000000000000000000ff000000000000000000004238d59444e01cec264441006cceffca6713b690f05f136fd44642647e76f8ada9801f5599bf1c09f5380b82b727ac0c5fcd6d9edb5e18feb597a3f86be70da6d9bd3e94237fe2adb25d2c5eee29705bfdab4fda2b48913836016cb8b4b59b5009e86c170493989f226ba820dd3bd878e60247252f9eddb81fdb93d35e2bb1796d06418b790fb222aedfcbdbff320148a74ee7", @ANYRES32=0x0, @ANYRES32, @ANYRES16], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095000000000000008a138db907014317bdc86399003ef279bcf4438908fb119c3434377c5416c3cb37b84568575efdf19a281703ec0ebd66879d0d95516f52a13ea385c52fad4aff77dd304e6a8961cc72e8fb09"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000240)=""/4096}, 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) 1.29823ms ago: executing program 0 (id=3260): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x7, 0x0, 0x9, 0x8000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 278.03µs ago: executing program 3 (id=3261): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3d, &(0x7f0000000040)=ANY=[], 0x0, 0x602, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000025c0)={&(0x7f00000011c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001280), 0x0, 0x0, 0x12f0}, 0x4010) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84022, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N,'], 0x6a) 0s ago: executing program 1 (id=3262): socket$kcm(0x2, 0x3, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 48.940028][ T4173] cgroup: Unknown subsys name 'net' [ 49.071094][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.433640][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.801955][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.863522][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.897106][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.918151][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 51.963104][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.019304][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.026945][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.035573][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.066400][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.073680][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.081954][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.106730][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.114361][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.122395][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.153661][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.162857][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.172347][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.204623][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.212179][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.222069][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.246280][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.264961][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.276663][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.284612][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.292712][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.301712][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.318059][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.326235][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.337903][ T4196] device bridge_slave_0 entered promiscuous mode [ 52.361071][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.371501][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.378830][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.386623][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.394329][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.401861][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.412249][ T4196] device bridge_slave_1 entered promiscuous mode [ 52.433478][ T4189] team0: Port device team_slave_0 added [ 52.446777][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.454816][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.462768][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.479372][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.491024][ T4189] team0: Port device team_slave_1 added [ 52.517391][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.534220][ T4187] team0: Port device team_slave_0 added [ 52.549681][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.581008][ T4187] team0: Port device team_slave_1 added [ 52.589323][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.600744][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.613545][ T4188] team0: Port device team_slave_0 added [ 52.621348][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.630417][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.658351][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.678111][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.697563][ T4188] team0: Port device team_slave_1 added [ 52.704535][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.711617][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.739009][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.779422][ T4196] team0: Port device team_slave_0 added [ 52.791516][ T4196] team0: Port device team_slave_1 added [ 52.798461][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.806830][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.834064][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.858224][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.866467][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.900013][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.937374][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.945942][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.980519][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.995785][ T4186] team0: Port device team_slave_0 added [ 53.002498][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.010070][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.039535][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.058338][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.065978][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.094676][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.112543][ T4186] team0: Port device team_slave_1 added [ 53.131790][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.140820][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.171233][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.201204][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.208592][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.228857][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.236223][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.266693][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.281039][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.288538][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.319735][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.346391][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.355262][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.362640][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.371202][ T4188] Cannot create hsr debugfs directory [ 53.428848][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.437000][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.445541][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.457359][ T4187] Cannot create hsr debugfs directory [ 53.489210][ T4196] device hsr_slave_0 entered promiscuous mode [ 53.496892][ T4196] device hsr_slave_1 entered promiscuous mode [ 53.509478][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.515201][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 53.517935][ T4196] Cannot create hsr debugfs directory [ 53.532073][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 53.539361][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 53.547667][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 53.560612][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 53.591402][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.602900][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.610511][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.620058][ T4186] Cannot create hsr debugfs directory [ 53.921052][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.935716][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.945765][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.956546][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.019121][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.037579][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.048064][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.058400][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.140943][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.151516][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.172971][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.191057][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.253974][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.292323][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.302520][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.333038][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.349359][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.362142][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.385674][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.398343][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.414989][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.438729][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.456814][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.469915][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.504205][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.517236][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.529687][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.556090][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.577930][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.593726][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.605815][ T1223] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.615561][ T1223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.657688][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.670871][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.683116][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.693140][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.701328][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.711829][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.724858][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.735955][ T1223] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.744463][ T1223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.752684][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.789953][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.803822][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.819076][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.830592][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.845069][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.854384][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.866015][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.875801][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.887503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.898454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.920079][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.939378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.950448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.961437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.972371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.986582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.995118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.005106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.014449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.027413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.036507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.054493][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.071357][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.078956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.088255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.098691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.107538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.116338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.126134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.137269][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.155379][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.172494][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.191264][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.209769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.222465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.235235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.245973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.257169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.272195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.282903][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.295195][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.311046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.322664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.334607][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.344489][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.355654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.386115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.397661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.411124][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.424500][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.437585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.448133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.492882][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.505554][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.523311][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.532877][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.540128][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.557550][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.567294][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.581578][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.595465][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 55.600080][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.608990][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 55.616372][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 55.623083][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 55.630628][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 55.646520][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.654634][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.662708][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.677816][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.686702][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.697337][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.706363][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.715404][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.724103][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.733520][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.742456][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.750149][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.758151][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.766617][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.797838][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.809192][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.822062][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.835560][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.844951][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.853702][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.861034][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.868867][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.878584][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.887288][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.895332][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.908534][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.922634][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.932460][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.942269][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.952015][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.959632][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.969761][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.978708][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.987738][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.996984][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.008739][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.022291][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.036062][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.052891][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.061554][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.088214][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.101857][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.132864][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.145229][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.161413][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.170593][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.179963][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.201374][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.213225][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.223563][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.246403][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.263706][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.298249][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.326113][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.401087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.413123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.427671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.438057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.448414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.458104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.467529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.476530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.486174][ T4189] device veth0_vlan entered promiscuous mode [ 56.500646][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.520029][ T4188] device veth0_vlan entered promiscuous mode [ 56.537633][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.553416][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.563590][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.571615][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.592949][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.618898][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.628325][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.639524][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.647853][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.656351][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.675584][ T4189] device veth1_vlan entered promiscuous mode [ 56.694921][ T4188] device veth1_vlan entered promiscuous mode [ 56.721050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.731605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.746721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.759419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.771953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.797056][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.807257][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.818412][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.860876][ T4189] device veth0_macvtap entered promiscuous mode [ 56.870423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.881415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.891143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.901239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.914563][ T4187] device veth0_vlan entered promiscuous mode [ 56.939589][ T4186] device veth0_vlan entered promiscuous mode [ 56.950613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.963672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.972396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.982807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.992273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.002666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.012822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.024414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.032708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.041949][ T4189] device veth1_macvtap entered promiscuous mode [ 57.063398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.077835][ T4188] device veth0_macvtap entered promiscuous mode [ 57.091694][ T4186] device veth1_vlan entered promiscuous mode [ 57.115399][ T4188] device veth1_macvtap entered promiscuous mode [ 57.130520][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.140405][ T4187] device veth1_vlan entered promiscuous mode [ 57.162660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.174412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.183230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.193025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.212494][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.225488][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.236822][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.245954][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.255553][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.273510][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.285509][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.300898][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.309136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.318359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.327714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.338085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.374789][ T4186] device veth0_macvtap entered promiscuous mode [ 57.402353][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.416522][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.429671][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.439993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.449065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.458358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.467109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.475815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.488174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.499227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.508168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.516833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.537296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.548595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.559381][ T4196] device veth0_vlan entered promiscuous mode [ 57.581766][ T4187] device veth0_macvtap entered promiscuous mode [ 57.589938][ T4186] device veth1_macvtap entered promiscuous mode [ 57.606371][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.616325][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.626036][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.635096][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.653505][ T4187] device veth1_macvtap entered promiscuous mode [ 57.674724][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 57.681145][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 57.681824][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.694299][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 57.699468][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.709426][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 57.713860][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.720595][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 57.731423][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.748607][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.765512][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.779883][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.790701][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.802414][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.815242][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.846490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.855021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.863223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.872639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.882269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.893306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.902306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.928503][ T4196] device veth1_vlan entered promiscuous mode [ 57.968860][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.980227][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.990459][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.000246][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.019107][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.030260][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.040754][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.051722][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.062220][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.072975][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.087624][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.112211][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.131046][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.134601][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.151783][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.161808][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.170556][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.179750][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.188818][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.197976][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.211716][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.222415][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.232737][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.245515][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.255856][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.266811][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.278227][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.307339][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.319202][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.332448][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.343125][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.352449][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.361529][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.374573][ T4196] device veth0_macvtap entered promiscuous mode [ 58.391070][ T4196] device veth1_macvtap entered promiscuous mode [ 58.415191][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.424526][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.461755][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.471972][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.491976][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.502887][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.516594][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.529198][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.541990][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.553505][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.565009][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.578127][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.591532][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.614535][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.623213][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.640119][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.652557][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.665001][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.675677][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.675860][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.689357][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.708276][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.710086][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.721481][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.744287][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.757125][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.768257][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.780777][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.793198][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.818305][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.829118][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.840134][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.884453][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.893293][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.913201][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.930732][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.995660][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.003828][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.043852][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.081299][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.101307][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.153924][ C1] hrtimer: interrupt took 37352 ns [ 59.168990][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.183311][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.183588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.201355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.231264][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.258468][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.310686][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.336677][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.346248][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.373392][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.385602][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.406193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.459569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.754788][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 59.762271][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 59.784074][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 59.786595][ T4292] Zero length message leads to an empty skb [ 59.802624][ T4294] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 59.813817][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 59.829759][ T4294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'. [ 59.852842][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 59.974698][ T4294] batman_adv: batadv0: Adding interface: veth0_vlan [ 60.000604][ T4294] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.077223][ T4294] batman_adv: batadv0: Interface activated: veth0_vlan [ 60.250338][ T4301] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 60.269862][ T4301] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14'. [ 60.283181][ T4301] device hsr0 entered promiscuous mode [ 60.294408][ T4301] bridge0: port 3(hsr0) entered blocking state [ 60.301314][ T4301] bridge0: port 3(hsr0) entered disabled state [ 60.328876][ T4301] bridge0: port 3(hsr0) entered blocking state [ 60.336422][ T4301] bridge0: port 3(hsr0) entered forwarding state [ 60.416021][ T4301] syz.2.14 (4301) used greatest stack depth: 20112 bytes left [ 60.866923][ T4333] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.26'. [ 60.950677][ T4333] openvswitch: netlink: Flow key attribute not present in set flow. [ 61.129760][ T4336] device syzkaller0 entered promiscuous mode [ 61.413047][ T4356] netlink: 'syz.4.33': attribute type 21 has an invalid length. [ 62.049962][ T4389] raw_sendmsg: syz.3.42 forgot to set AF_INET. Fix it! [ 62.253790][ T4393] netlink: 'syz.0.44': attribute type 10 has an invalid length. [ 63.125717][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.156205][ T4393] device bridge_slave_1 left promiscuous mode [ 63.163367][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.198148][ T4393] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 63.336911][ T4410] netlink: 'syz.1.49': attribute type 21 has an invalid length. [ 63.393084][ T4415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'. [ 63.430084][ T4418] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.51'. [ 63.484255][ T4418] openvswitch: netlink: Flow key attribute not present in set flow. [ 63.495773][ T4422] netlink: 144 bytes leftover after parsing attributes in process `syz.0.50'. [ 63.502490][ T4415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'. [ 63.562646][ T4420] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'. [ 63.877253][ T4432] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.56'. [ 64.710947][ T4418] device syzkaller0 entered promiscuous mode [ 65.277057][ T4470] netlink: 'syz.0.66': attribute type 21 has an invalid length. [ 66.624380][ T4475] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.70'. [ 67.292421][ T4570] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.76'. [ 67.363267][ T4570] openvswitch: netlink: Flow key attribute not present in set flow. [ 67.402851][ T4574] netlink: 'syz.4.78': attribute type 9 has an invalid length. [ 67.436904][ T4574] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.78'. [ 67.581003][ T4578] netlink: 'syz.4.78': attribute type 11 has an invalid length. [ 68.205496][ T4570] device syzkaller0 entered promiscuous mode [ 68.246465][ T4598] netlink: 140 bytes leftover after parsing attributes in process `syz.4.82'. [ 68.756084][ T4622] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.89'. [ 69.381600][ T4637] netlink: 'syz.1.93': attribute type 3 has an invalid length. [ 69.472648][ T4637] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.93'. [ 70.440478][ T4657] netlink: 'syz.4.97': attribute type 3 has an invalid length. [ 70.529558][ T4657] netlink: 'syz.4.97': attribute type 6 has an invalid length. [ 70.620547][ T4657] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.97'. [ 70.776560][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 71.027176][ T4677] delete_channel: no stack [ 71.049942][ T4677] delete_channel: no stack [ 71.287843][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294516][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.550385][ T4690] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 71.575321][ T4690] netlink: 144 bytes leftover after parsing attributes in process `syz.3.105'. [ 72.731514][ T4752] netlink: 'syz.3.124': attribute type 5 has an invalid length. [ 72.761774][ T4757] netlink: 'syz.0.126': attribute type 29 has an invalid length. [ 72.825726][ T4757] netlink: 'syz.0.126': attribute type 29 has an invalid length. [ 72.909956][ T4757] netlink: 'syz.0.126': attribute type 29 has an invalid length. [ 73.113828][ T4767] tap0: tun_chr_ioctl cmd 1074025675 [ 73.136423][ T4767] tap0: persist disabled [ 73.507213][ T4792] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.133'. [ 75.606449][ T4855] netlink: 'syz.4.151': attribute type 10 has an invalid length. [ 75.733855][ T4858] netlink: 'syz.0.153': attribute type 21 has an invalid length. [ 75.754297][ T4858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.153'. [ 75.787670][ T4858] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 75.988876][ T4863] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.155'. [ 76.167386][ T4877] netlink: 'syz.4.158': attribute type 4 has an invalid length. [ 76.254145][ T4877] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.158'. [ 76.407316][ T21] cfg80211: failed to load regulatory.db [ 76.863236][ T4891] netlink: 111 bytes leftover after parsing attributes in process `syz.2.163'. [ 76.992644][ T4898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.165'. [ 77.125232][ T4896] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.166'. [ 77.196474][ T4896] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.166'. [ 77.319768][ T4896] netlink: 2 bytes leftover after parsing attributes in process `syz.4.166'. [ 77.419508][ T4906] netlink: 209796 bytes leftover after parsing attributes in process `syz.3.167'. [ 77.527595][ T4906] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 77.873648][ T4910] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 77.985751][ T4928] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.632833][ T4952] netlink: 'syz.3.178': attribute type 25 has an invalid length. [ 78.668117][ T4952] netlink: 'syz.3.178': attribute type 28 has an invalid length. [ 79.173065][ T4988] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 80.320947][ T5042] netlink: 'syz.0.193': attribute type 27 has an invalid length. [ 81.115399][ T5068] __nla_validate_parse: 2 callbacks suppressed [ 81.115424][ T5068] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.202'. [ 81.539165][ T5087] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 81.551959][ T5087] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.206'. [ 81.580948][ T5090] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.206'. [ 81.764179][ T4543] wlan1: Trigger new scan to find an IBSS to join [ 81.780467][ T5098] netlink: 'syz.3.209': attribute type 10 has an invalid length. [ 81.791409][ T5098] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.209'. [ 81.910084][ T5105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.212'. [ 81.958233][ T5105] syz.0.212 uses obsolete (PF_INET,SOCK_PACKET) [ 82.428063][ T5116] delete_channel: no stack [ 82.624424][ T5130] delete_channel: no stack [ 82.629078][ T5130] delete_channel: no stack [ 82.688466][ T5137] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 82.726657][ T5137] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.219'. [ 82.818383][ T5143] netlink: 'syz.4.222': attribute type 12 has an invalid length. [ 82.859038][ T5143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.222'. [ 83.590136][ T5166] netlink: 'syz.3.228': attribute type 3 has an invalid length. [ 83.666187][ T5166] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 83.721755][ T5166] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.228'. [ 84.215622][ T5176] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.230'. [ 85.662487][ T5208] syz.0.239 (5208) used greatest stack depth: 17824 bytes left [ 85.756017][ T154] wlan1: Trigger new scan to find an IBSS to join [ 85.953307][ T1229] wlan1: Creating new IBSS network, BSSID b6:19:83:d1:6f:61 [ 86.810163][ T5224] netlink: 'syz.1.246': attribute type 27 has an invalid length. [ 86.920923][ T5243] netlink: 'syz.0.251': attribute type 21 has an invalid length. [ 90.116493][ T5320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.270'. [ 90.329079][ T5325] netlink: 14 bytes leftover after parsing attributes in process `syz.2.272'. [ 90.423021][ T5325] device hsr_slave_0 left promiscuous mode [ 90.495065][ T5325] device hsr_slave_1 left promiscuous mode [ 90.919564][ T5325] bridge0: port 3(hsr0) entered disabled state [ 91.045504][ T5325] bridge0: port 3(hsr0) entered disabled state [ 92.527461][ T5371] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.283'. [ 92.644013][ T5371] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 92.652719][ T5371] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.283'. [ 93.380791][ T5387] netlink: 'syz.4.287': attribute type 2 has an invalid length. [ 93.624184][ T5389] netlink: 'syz.4.287': attribute type 2 has an invalid length. [ 93.805027][ T5403] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.291'. [ 93.958488][ T5409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.997890][ T5409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.080614][ T5409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.109877][ T5409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.036692][ T5443] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.303'. [ 96.069218][ T5446] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 96.289115][ T5451] netlink: 164 bytes leftover after parsing attributes in process `syz.4.306'. [ 96.486686][ T5456] delete_channel: no stack [ 96.498531][ T5455] device syzkaller0 entered promiscuous mode [ 96.502005][ T5456] delete_channel: no stack [ 96.545986][ T5455] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 96.630776][ T5455] team0: Device nlmon0 is of different type [ 97.791072][ T5483] netlink: 188 bytes leftover after parsing attributes in process `syz.4.314'. [ 97.814038][ T5485] netlink: 'syz.4.314': attribute type 33 has an invalid length. [ 97.850976][ T5485] netlink: 164 bytes leftover after parsing attributes in process `syz.4.314'. [ 98.647307][ T5512] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.323'. [ 98.680482][ T5512] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 98.703408][ T5512] netlink: 'syz.4.323': attribute type 2 has an invalid length. [ 98.731270][ T5512] netlink: 'syz.4.323': attribute type 3 has an invalid length. [ 98.810107][ T5512] netlink: 'syz.4.323': attribute type 4 has an invalid length. [ 99.157361][ T5521] netlink: 'syz.4.327': attribute type 9 has an invalid length. [ 99.334045][ T5521] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.327'. [ 99.790751][ T5534] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 99.999107][ T5534] team0: Device wg1 is of different type [ 100.812779][ T5552] syz.4.334[5552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.812932][ T5552] syz.4.334[5552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.052589][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.149024][ T5572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.334615][ T5573] netlink: 128 bytes leftover after parsing attributes in process `syz.3.340'. [ 101.355432][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.400585][ T5573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.481912][ T5610] netlink: 'syz.3.349': attribute type 2 has an invalid length. [ 102.549072][ T5612] netlink: 'syz.3.349': attribute type 2 has an invalid length. [ 103.667270][ T5676] netlink: 'syz.0.363': attribute type 15 has an invalid length. [ 103.694934][ T5676] netlink: 'syz.0.363': attribute type 16 has an invalid length. [ 103.723997][ T5676] netlink: 'syz.0.363': attribute type 23 has an invalid length. [ 103.754501][ T5681] netlink: 'syz.0.363': attribute type 41 has an invalid length. [ 103.770442][ T5676] netlink: 'syz.0.363': attribute type 25 has an invalid length. [ 103.795864][ T5681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.363'. [ 103.811113][ T5676] netlink: 15862 bytes leftover after parsing attributes in process `syz.0.363'. [ 103.889672][ T5688] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 103.946689][ T5681] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 104.018831][ T5693] sctp: [Deprecated]: syz.4.367 (pid 5693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.018831][ T5693] Use struct sctp_sack_info instead [ 104.040696][ T5688] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.366'. [ 104.237918][ T5700] netlink: 'syz.3.370': attribute type 4 has an invalid length. [ 104.578307][ T5712] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.371'. [ 105.173848][ T5734] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.377'. [ 105.178496][ T5729] netlink: 144 bytes leftover after parsing attributes in process `syz.2.378'. [ 105.613130][ T5748] netlink: 14 bytes leftover after parsing attributes in process `syz.3.382'. [ 106.014814][ T5761] delete_channel: no stack [ 106.423103][ T5776] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 106.476808][ T5776] netlink: 152 bytes leftover after parsing attributes in process `syz.0.391'. [ 106.583453][ T5776] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 106.761534][ T5779] netlink: 'syz.3.393': attribute type 21 has an invalid length. [ 107.304868][ T5795] netlink: 'syz.2.397': attribute type 11 has an invalid length. [ 107.630777][ T5802] nr0: port 1(hsr0) entered blocking state [ 107.652780][ T5802] nr0: port 1(hsr0) entered disabled state [ 107.707252][ T5802] device hsr0 entered promiscuous mode [ 107.753748][ T5801] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.400'. [ 107.854137][ T5803] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.400'. [ 108.036949][ T5814] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.164607][ T5814] netlink: 1 bytes leftover after parsing attributes in process `syz.3.403'. [ 108.284630][ T5821] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.404'. [ 110.081284][ T5849] netlink: 76 bytes leftover after parsing attributes in process `syz.2.415'. [ 110.171160][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.181600][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.750672][ T5851] device bridge_slave_1 left promiscuous mode [ 110.766208][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.705506][ T5858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.776260][ T5851] device bridge_slave_0 left promiscuous mode [ 111.842032][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.352076][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 113.473688][ T5896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.527676][ T5903] validate_nla: 1 callbacks suppressed [ 113.527695][ T5903] netlink: 'syz.4.429': attribute type 4 has an invalid length. [ 113.604149][ T5903] netlink: 132 bytes leftover after parsing attributes in process `syz.4.429'. [ 113.667439][ T5901] netlink: 152 bytes leftover after parsing attributes in process `syz.4.429'. [ 113.730305][ T5901] bond0: (slave bond_slave_0): Releasing backup interface [ 113.786901][ T5901] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 113.860247][ T5911] netlink: 'syz.1.431': attribute type 10 has an invalid length. [ 114.008315][ T5911] team0: Port device wlan1 added [ 114.032427][ T5924] netlink: 'syz.0.437': attribute type 2 has an invalid length. [ 114.066871][ T5924] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.437'. [ 114.349123][ T5941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.443'. [ 114.860921][ T5957] netlink: set zone limit has 8 unknown bytes [ 115.869052][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.455'. [ 115.998223][ T5986] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 116.069652][ T5986] netlink: 'syz.3.456': attribute type 5 has an invalid length. [ 116.160031][ T5986] netlink: 'syz.3.456': attribute type 6 has an invalid length. [ 116.223353][ T5991] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 116.229575][ T5986] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.456'. [ 116.330186][ T5991] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.344037][ T5986] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 116.353617][ T5986] netlink: 'syz.3.456': attribute type 2 has an invalid length. [ 116.473333][ T5991] bond0: (slave team0): Enslaving as an active interface with an up link [ 116.512543][ T6001] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.758674][ T6001] netlink: 60 bytes leftover after parsing attributes in process `syz.0.462'. [ 116.794252][ T4535] wlan1: Trigger new scan to find an IBSS to join [ 117.144987][ T6025] netlink: 'syz.3.470': attribute type 10 has an invalid length. [ 117.302022][ T6025] team0 (unregistering): Port device team_slave_0 removed [ 117.366078][ T6025] team0 (unregistering): Port device team_slave_1 removed [ 117.811204][ T6038] netlink: 55 bytes leftover after parsing attributes in process `syz.1.473'. [ 117.953126][ T6042] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.475'. [ 118.174431][ T6047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.478'. [ 118.559863][ T6061] FAULT_INJECTION: forcing a failure. [ 118.559863][ T6061] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.774445][ T6061] CPU: 1 PID: 6061 Comm: syz.0.480 Not tainted syzkaller #0 [ 118.782064][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.793099][ T6061] Call Trace: [ 118.796399][ T6061] [ 118.799341][ T6061] dump_stack_lvl+0x188/0x250 [ 118.804120][ T6061] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 118.810655][ T6061] ? show_regs_print_info+0x20/0x20 [ 118.815899][ T6061] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 118.822347][ T6061] should_fail+0x383/0x4b0 [ 118.826789][ T6061] _copy_from_user+0x2e/0x170 [ 118.831494][ T6061] ___sys_recvmsg+0x173/0x5c0 [ 118.836191][ T6061] ? __sys_recvmsg+0x280/0x280 [ 118.841090][ T6061] ? __fget_files+0x402/0x470 [ 118.846158][ T6061] __x64_sys_recvmsg+0x201/0x2d0 [ 118.852188][ T6061] ? ___sys_recvmsg+0x5c0/0x5c0 [ 118.857710][ T6061] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.863909][ T6061] ? lockdep_hardirqs_on+0x94/0x140 [ 118.870189][ T6061] do_syscall_64+0x4c/0xa0 [ 118.874645][ T6061] ? clear_bhb_loop+0x30/0x80 [ 118.879637][ T6061] ? clear_bhb_loop+0x30/0x80 [ 118.885054][ T6061] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.891283][ T6061] RIP: 0033:0x7fbc537d60d9 [ 118.895719][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.918506][ T6061] RSP: 002b:00007fbc51a2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 118.927665][ T6061] RAX: ffffffffffffffda RBX: 00007fbc53a5dfa0 RCX: 00007fbc537d60d9 [ 118.936624][ T6061] RDX: 0000000000012000 RSI: 0000200000000400 RDI: 0000000000000009 [ 118.946119][ T6061] RBP: 00007fbc51a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 118.957530][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.968078][ T6061] R13: 00007fbc53a5e038 R14: 00007fbc53a5dfa0 R15: 00007ffe30be5398 [ 118.976691][ T6061] [ 119.888122][ T6094] validate_nla: 1 callbacks suppressed [ 119.888140][ T6094] netlink: 'syz.4.486': attribute type 275 has an invalid length. [ 120.146064][ T6112] netlink: 'syz.2.494': attribute type 21 has an invalid length. [ 120.794243][ T4549] wlan1: Trigger new scan to find an IBSS to join [ 120.981410][ T6147] netlink: 'syz.4.500': attribute type 2 has an invalid length. [ 121.036168][ T6147] netlink: 'syz.4.500': attribute type 4 has an invalid length. [ 121.084649][ T6147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.500'. [ 121.132847][ T6140] netlink: 'syz.1.498': attribute type 29 has an invalid length. [ 121.295135][ T6148] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 121.364916][ T6148] nr0: port 1(hsr0) entered disabled state [ 121.404051][ T6148] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 121.425102][ T6148] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 121.444219][ T6148] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 121.474122][ T6148] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 121.481369][ T6140] netlink: 'syz.1.498': attribute type 29 has an invalid length. [ 121.511826][ T6141] netlink: 'syz.1.498': attribute type 29 has an invalid length. [ 121.811871][ T6169] netlink: 156 bytes leftover after parsing attributes in process `syz.4.505'. [ 122.204362][ T6180] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 122.290280][ T6180] device veth0_vlan left promiscuous mode [ 122.356346][ T6180] device veth0_vlan entered promiscuous mode [ 122.409816][ T6180] team0: Device veth0_vlan failed to register rx_handler [ 122.755219][ T6193] netlink: 'syz.3.512': attribute type 2 has an invalid length. [ 122.797159][ T4535] wlan1: Creating new IBSS network, BSSID 9a:b1:19:42:ee:8e [ 122.814539][ T6193] netlink: 198628 bytes leftover after parsing attributes in process `syz.3.512'. [ 122.887483][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.321225][ T6206] device syzkaller0 entered promiscuous mode [ 124.865650][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 125.116663][ T6269] validate_nla: 3 callbacks suppressed [ 125.116680][ T6269] netlink: 'syz.0.535': attribute type 9 has an invalid length. [ 125.203190][ T6269] netlink: 167288 bytes leftover after parsing attributes in process `syz.0.535'. [ 125.420623][ T6270] netlink: 'syz.0.535': attribute type 9 has an invalid length. [ 125.502691][ T6270] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.535'. [ 125.610947][ T6271] netlink: 'syz.0.535': attribute type 9 has an invalid length. [ 125.665289][ T6271] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.535'. [ 126.227375][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 126.998075][ T6307] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.544'. [ 127.589256][ T6320] netlink: 'syz.2.549': attribute type 3 has an invalid length. [ 127.620564][ T6320] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.549'. [ 127.654341][ T6324] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 127.691418][ T6324] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 127.738279][ T6324] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 127.795390][ T6327] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 127.840984][ T6328] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 127.922353][ T6330] netlink: 112 bytes leftover after parsing attributes in process `syz.3.552'. [ 128.078217][ T6332] netlink: 196 bytes leftover after parsing attributes in process `syz.2.553'. [ 128.150952][ T6329] 0: renamed from pim6reg1 [ 129.283772][ T6367] netlink: 'syz.4.564': attribute type 21 has an invalid length. [ 129.301897][ T6365] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.562'. [ 129.338819][ T6367] netlink: 168 bytes leftover after parsing attributes in process `syz.4.564'. [ 129.369343][ T6369] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.562'. [ 129.800296][ T6378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.567'. [ 129.899419][ T6376] bridge0: port 3(batadv0) entered blocking state [ 129.925639][ T6376] bridge0: port 3(batadv0) entered disabled state [ 130.086114][ T6376] device batadv0 entered promiscuous mode [ 130.149602][ T6376] bridge0: port 3(batadv0) entered blocking state [ 130.158771][ T6376] bridge0: port 3(batadv0) entered forwarding state [ 130.289247][ T6385] netlink: 'syz.3.569': attribute type 10 has an invalid length. [ 130.299197][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.569'. [ 130.378619][ T6391] netlink: 'syz.4.570': attribute type 1 has an invalid length. [ 130.452255][ T6396] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 130.466189][ T4516] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 130.476883][ T4516] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 130.553131][ T6396] team0: Device nlmon0 is of different type [ 130.620433][ T6399] netlink: 'syz.4.573': attribute type 11 has an invalid length. [ 130.661986][ T6399] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 131.226713][ T6422] netlink: 'syz.4.580': attribute type 46 has an invalid length. [ 131.248860][ T6422] netlink: 'syz.4.580': attribute type 46 has an invalid length. [ 132.350624][ T6459] netlink: 'syz.4.589': attribute type 10 has an invalid length. [ 132.495843][ T6459] team0: Port device wlan1 added [ 132.540951][ T6469] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 132.543039][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.604222][ T6470] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 132.629040][ T6468] __nla_validate_parse: 3 callbacks suppressed [ 132.629058][ T6468] netlink: 192 bytes leftover after parsing attributes in process `syz.3.592'. [ 132.781091][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.788308][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.015040][ T6487] netlink: 'syz.3.596': attribute type 29 has an invalid length. [ 133.029349][ T6487] netlink: 'syz.3.596': attribute type 29 has an invalid length. [ 133.150570][ T6493] syz.1.599[6493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.150676][ T6493] syz.1.599[6493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.949224][ T6523] : renamed from pim6reg1 [ 134.469279][ T6548] device veth1_macvtap left promiscuous mode [ 134.509318][ T6548] device macsec0 entered promiscuous mode [ 134.561391][ T6555] device veth1_macvtap entered promiscuous mode [ 134.632802][ T6552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.614'. [ 135.700278][ T6575] team0: Device wg1 is of different type [ 135.786262][ T6591] validate_nla: 5 callbacks suppressed [ 135.786280][ T6591] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 135.835767][ T6591] device hsr0 entered promiscuous mode [ 135.864878][ T6591] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.944066][ T6591] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 135.979436][ T6591] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 136.034057][ T6591] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 136.327147][ T6617] netlink: 'syz.4.636': attribute type 29 has an invalid length. [ 136.357102][ T6617] netlink: 'syz.4.636': attribute type 29 has an invalid length. [ 136.395503][ T6631] netlink: 'syz.4.636': attribute type 29 has an invalid length. [ 136.435930][ T6629] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.639'. [ 136.491430][ T6617] netlink: 'syz.4.636': attribute type 29 has an invalid length. [ 136.543768][ T6633] netlink: 'syz.1.640': attribute type 12 has an invalid length. [ 136.570503][ T6631] netlink: 'syz.4.636': attribute type 29 has an invalid length. [ 136.759601][ T6640] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.642'. [ 136.993004][ T6649] netlink: 198088 bytes leftover after parsing attributes in process `syz.4.644'. [ 137.074280][ T6646] IPv6: Can't replace route, no match found [ 137.114622][ T6652] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.644'. [ 137.170826][ T6653] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 137.247617][ T6653] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 137.388766][ T6654] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 137.806855][ T6693] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.655'. [ 137.866930][ T6693] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.655'. [ 137.880197][ T6694] device syzkaller0 entered promiscuous mode [ 137.915465][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 137.949657][ T6693] netlink: 44 bytes leftover after parsing attributes in process `syz.2.655'. [ 138.001057][ T6700] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.658'. [ 138.656649][ T6729] delete_channel: no stack [ 138.691037][ T6729] delete_channel: no stack [ 139.183262][ T6753] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.673'. [ 139.982816][ T6787] device lo entered promiscuous mode [ 140.035332][ T6787] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 140.092265][ T6791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.687'. [ 140.267778][ T6797] netlink: 132 bytes leftover after parsing attributes in process `syz.4.688'. [ 140.374397][ T6801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.687'. [ 140.411030][ T6805] netlink: 168 bytes leftover after parsing attributes in process `syz.3.691'. [ 140.747467][ T6824] IPv6: Can't replace route, no match found [ 140.886132][ T6826] validate_nla: 8 callbacks suppressed [ 140.886240][ T6826] netlink: 'syz.1.698': attribute type 3 has an invalid length. [ 140.948594][ T6826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.698'. [ 141.235143][ T6840] netlink: set zone limit has 8 unknown bytes [ 141.412236][ T6845] netlink: 'syz.4.703': attribute type 39 has an invalid length. [ 141.755625][ T6857] netlink: 'syz.4.708': attribute type 7 has an invalid length. [ 141.770281][ T6858] netlink: 'syz.4.708': attribute type 7 has an invalid length. [ 141.815861][ T6857] netlink: 'syz.4.708': attribute type 1 has an invalid length. [ 141.835251][ T6858] netlink: 'syz.4.708': attribute type 1 has an invalid length. [ 141.978486][ T6866] netlink: 'syz.2.711': attribute type 2 has an invalid length. [ 142.152891][ T6880] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 142.348780][ T6883] device syzkaller0 entered promiscuous mode [ 142.795373][ T4535] wlan1: Trigger new scan to find an IBSS to join [ 143.064978][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 143.146361][ T6914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.204255][ T6920] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 143.219528][ T6920] __nla_validate_parse: 6 callbacks suppressed [ 143.219542][ T6920] netlink: 168 bytes leftover after parsing attributes in process `syz.3.726'. [ 143.387238][ T6932] IPv6: Can't replace route, no match found [ 143.906314][ T6947] netlink: 'syz.1.733': attribute type 3 has an invalid length. [ 143.954678][ T6947] netlink: 152 bytes leftover after parsing attributes in process `syz.1.733'. [ 144.053281][ T6946] netlink: 152 bytes leftover after parsing attributes in process `syz.1.733'. [ 144.530694][ T6974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.742'. [ 144.645304][ T6977] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.741'. [ 144.987603][ T6977] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.741'. [ 145.210506][ T6988] IPv6: Can't replace route, no match found [ 145.856619][ T7007] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.751'. [ 145.965708][ T7009] validate_nla: 3 callbacks suppressed [ 145.965728][ T7009] netlink: 'syz.2.751': attribute type 2 has an invalid length. [ 146.040761][ T7009] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.751'. [ 146.205416][ T7016] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.753'. [ 146.297826][ T7016] openvswitch: netlink: Tunnel attr 8240 out of range max 16 [ 146.422773][ T7025] netlink: 'syz.2.756': attribute type 3 has an invalid length. [ 146.458802][ T7025] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.756'. [ 146.624613][ T7026] netlink: 'syz.2.756': attribute type 3 has an invalid length. [ 146.960319][ T7029] device syzkaller0 entered promiscuous mode [ 147.755403][ T144] wlan1: Trigger new scan to find an IBSS to join [ 150.075466][ T4516] wlan1: Creating new IBSS network, BSSID ea:d5:4a:c4:1c:54 [ 150.114219][ T7040] __nla_validate_parse: 1 callbacks suppressed [ 150.114244][ T7040] netlink: 164 bytes leftover after parsing attributes in process `syz.3.760'. [ 150.381168][ T7047] netlink: 'syz.2.763': attribute type 3 has an invalid length. [ 150.410340][ T7048] netlink: 144 bytes leftover after parsing attributes in process `syz.3.762'. [ 150.418840][ T7047] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.763'. [ 150.617186][ T7053] syz.3.764 (7053) used obsolete PPPIOCDETACH ioctl [ 150.837489][ T7062] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 150.847821][ T7062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.766'. [ 150.861498][ T7062] batman_adv: batadv0: Adding interface: virt_wifi0 [ 150.868534][ T7062] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.898474][ T7062] batman_adv: batadv0: Interface activated: virt_wifi0 [ 151.623043][ T7076] netlink: 'syz.2.771': attribute type 3 has an invalid length. [ 151.655511][ T7076] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.771'. [ 151.985051][ T7082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.772'. [ 152.545477][ T7099] netlink: 'syz.3.777': attribute type 20 has an invalid length. [ 153.200248][ T7127] netlink: 'syz.2.787': attribute type 21 has an invalid length. [ 153.253654][ T7128] netlink: 'syz.3.786': attribute type 21 has an invalid length. [ 153.291329][ T7128] netlink: 144 bytes leftover after parsing attributes in process `syz.3.786'. [ 153.340634][ T7131] netlink: 72 bytes leftover after parsing attributes in process `syz.2.788'. [ 153.793162][ T7147] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.791'. [ 155.070121][ T7179] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 155.093940][ T7179] netlink: 55 bytes leftover after parsing attributes in process `syz.3.800'. [ 155.692641][ T7186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.803'. [ 155.772266][ T7194] netlink: 'syz.0.805': attribute type 21 has an invalid length. [ 155.786558][ T7194] netlink: 128 bytes leftover after parsing attributes in process `syz.0.805'. [ 155.799403][ T7194] netlink: 'syz.0.805': attribute type 4 has an invalid length. [ 156.266047][ T7207] netlink: 180 bytes leftover after parsing attributes in process `syz.3.809'. [ 156.599062][ T7213] netlink: 'syz.1.811': attribute type 8 has an invalid length. [ 156.619634][ T7213] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.811'. [ 157.113496][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.817'. [ 157.131096][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.817'. [ 157.154204][ T7232] sctp: [Deprecated]: syz.3.815 (pid 7232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.154204][ T7232] Use struct sctp_sack_info instead [ 157.177461][ T7234] netlink: 60 bytes leftover after parsing attributes in process `syz.2.817'. [ 157.255329][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.817'. [ 158.208213][ T7261] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.822'. [ 158.334192][ T7259] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.822'. [ 159.831748][ T7291] netlink: 'syz.1.830': attribute type 39 has an invalid length. [ 159.849245][ T7291] device macvlan0 entered promiscuous mode [ 160.356522][ T7301] tc_dump_action: action bad kind [ 160.693274][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 161.158149][ T7313] netlink: 'syz.3.838': attribute type 3 has an invalid length. [ 161.204603][ T7313] __nla_validate_parse: 1 callbacks suppressed [ 161.204655][ T7313] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.838'. [ 162.356643][ T7354] netlink: 192 bytes leftover after parsing attributes in process `syz.0.849'. [ 162.517272][ T7353] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.848'. [ 162.940827][ T7370] netlink: 'syz.1.853': attribute type 3 has an invalid length. [ 162.949711][ T7370] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 162.978113][ T7370] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.853'. [ 163.515178][ T7381] device syzkaller0 entered promiscuous mode [ 163.703197][ T7384] netlink: 128 bytes leftover after parsing attributes in process `syz.4.857'. [ 163.749936][ T7384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.764918][ T7407] FAULT_INJECTION: forcing a failure. [ 164.764918][ T7407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.860513][ T7407] CPU: 1 PID: 7407 Comm: syz.4.862 Not tainted syzkaller #0 [ 164.868873][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.879603][ T7407] Call Trace: [ 164.883615][ T7407] [ 164.886926][ T7407] dump_stack_lvl+0x188/0x250 [ 164.892144][ T7407] ? show_regs_print_info+0x20/0x20 [ 164.900347][ T7407] ? load_image+0x410/0x410 [ 164.905275][ T7407] ? __lock_acquire+0x7b50/0x7b50 [ 164.910510][ T7407] ? perf_trace_lock+0xe4/0x390 [ 164.915873][ T7407] should_fail+0x383/0x4b0 [ 164.920438][ T7407] _copy_from_user+0x2e/0x170 [ 164.925356][ T7407] ___sys_recvmsg+0x173/0x5c0 [ 164.930342][ T7407] ? __sys_recvmsg+0x280/0x280 [ 164.935212][ T7407] ? __fget_files+0x402/0x470 [ 164.939979][ T7407] __x64_sys_recvmsg+0x201/0x2d0 [ 164.944993][ T7407] ? ___sys_recvmsg+0x5c0/0x5c0 [ 164.949881][ T7407] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 164.955943][ T7407] ? lockdep_hardirqs_on+0x94/0x140 [ 164.961210][ T7407] do_syscall_64+0x4c/0xa0 [ 164.965687][ T7407] ? clear_bhb_loop+0x30/0x80 [ 164.970502][ T7407] ? clear_bhb_loop+0x30/0x80 [ 164.975339][ T7407] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.981284][ T7407] RIP: 0033:0x7f09c22f30d9 [ 164.987054][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.013358][ T7407] RSP: 002b:00007f09c052a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 165.022135][ T7407] RAX: ffffffffffffffda RBX: 00007f09c257b090 RCX: 00007f09c22f30d9 [ 165.030795][ T7407] RDX: 0000000000012000 RSI: 0000200000000400 RDI: 0000000000000004 [ 165.041485][ T7407] RBP: 00007f09c052a090 R08: 0000000000000000 R09: 0000000000000000 [ 165.049938][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.058647][ T7407] R13: 00007f09c257b128 R14: 00007f09c257b090 R15: 00007ffc180842c8 [ 165.067405][ T7407] [ 165.999357][ T7423] netlink: 'syz.0.869': attribute type 25 has an invalid length. [ 166.034273][ T7423] netlink: 'syz.0.869': attribute type 10 has an invalid length. [ 167.608925][ T7463] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 167.673987][ T7463] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.879'. [ 170.655954][ T7496] nr0: port 1(hsr0) entered blocking state [ 170.684056][ T7496] nr0: port 1(hsr0) entered disabled state [ 171.861072][ T7512] netlink: 'syz.1.894': attribute type 19 has an invalid length. [ 172.524580][ T7519] netlink: 'syz.1.896': attribute type 10 has an invalid length. [ 172.532701][ T7519] netlink: 2 bytes leftover after parsing attributes in process `syz.1.896'. [ 172.610561][ T7519] device bond0 entered promiscuous mode [ 172.640199][ T7519] device bond_slave_0 entered promiscuous mode [ 172.661085][ T7519] device bond_slave_1 entered promiscuous mode [ 172.709300][ T7519] bridge0: port 4(bond0) entered blocking state [ 172.742271][ T7519] bridge0: port 4(bond0) entered disabled state [ 172.774022][ T7519] bridge0: port 4(bond0) entered blocking state [ 172.780378][ T7519] bridge0: port 4(bond0) entered forwarding state [ 172.868832][ T7522] tap0: tun_chr_ioctl cmd 1074025692 [ 174.193265][ T7559] netlink: 'syz.4.907': attribute type 25 has an invalid length. [ 174.244141][ T7559] netlink: 'syz.4.907': attribute type 28 has an invalid length. [ 174.936207][ T7574] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.911'. [ 175.120444][ T7588] netlink: 'syz.3.916': attribute type 3 has an invalid length. [ 175.127477][ T7587] netlink: 'syz.3.916': attribute type 3 has an invalid length. [ 175.141799][ T7588] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.916'. [ 175.223370][ T7584] delete_channel: no stack [ 175.274025][ T7587] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.916'. [ 175.754095][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 175.762812][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 175.825229][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 175.864678][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 175.900383][ T4234] Bluetooth: hci2: command 0x0406 tx timeout [ 176.243483][ T7627] device syzkaller0 entered promiscuous mode [ 176.640070][ T7640] netlink: 'syz.4.932': attribute type 3 has an invalid length. [ 176.675732][ T7643] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.931'. [ 176.702211][ T7640] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.932'. [ 177.517094][ T7673] netlink: 62739 bytes leftover after parsing attributes in process `syz.2.938'. [ 177.559360][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 177.749220][ T7683] netlink: 'syz.4.940': attribute type 4 has an invalid length. [ 177.801655][ T7683] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.940'. [ 178.613236][ T7713] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 178.763354][ T7713] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.949'. [ 178.789261][ T7723] netlink: 'syz.4.952': attribute type 10 has an invalid length. [ 179.145577][ T7730] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 179.194221][ T7730] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.954'. [ 179.756124][ T7756] netlink: set zone limit has 8 unknown bytes [ 180.040617][ T7779] netlink: 'syz.3.964': attribute type 3 has an invalid length. [ 180.056331][ T7776] netlink: 'syz.3.964': attribute type 3 has an invalid length. [ 180.067419][ T7777] device veth1_macvtap left promiscuous mode [ 180.076631][ T7777] device macsec0 entered promiscuous mode [ 180.090966][ T7779] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.964'. [ 180.101566][ T7776] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.964'. [ 180.148851][ T7783] device veth1_macvtap entered promiscuous mode [ 180.218182][ T7785] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.967'. [ 180.287410][ T7780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.364376][ T7790] netlink: 'syz.3.969': attribute type 21 has an invalid length. [ 180.386891][ T7790] netlink: 156 bytes leftover after parsing attributes in process `syz.3.969'. [ 181.271911][ T7795] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.969'. [ 181.272467][ T7796] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.970'. [ 181.543411][ T7821] netlink: 'syz.2.976': attribute type 4 has an invalid length. [ 181.563159][ T7821] netlink: 'syz.2.976': attribute type 3 has an invalid length. [ 181.629337][ T7821] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.976'. [ 182.327558][ T4549] tipc: Subscription rejected, illegal request [ 182.510390][ T7852] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.987'. [ 182.624345][ T7852] tap0: tun_chr_ioctl cmd 2147767520 [ 182.660767][ T7852] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 183.232144][ T7872] netlink: 'syz.1.993': attribute type 27 has an invalid length. [ 183.284382][ T4549] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 183.303199][ T7872] device wlan1 entered promiscuous mode [ 183.550130][ T7884] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 183.604014][ T7884] netlink: 154880 bytes leftover after parsing attributes in process `syz.4.996'. [ 184.270963][ T7916] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1006'. [ 184.384500][ T7918] -1O2~: renamed from syzkaller0 [ 184.495150][ T7916] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 184.538066][ T7916] CPU: 0 PID: 7916 Comm: syz.4.1006 Not tainted syzkaller #0 [ 184.546511][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.557136][ T7916] Call Trace: [ 184.560449][ T7916] [ 184.563663][ T7916] dump_stack_lvl+0x188/0x250 [ 184.569176][ T7916] ? show_regs_print_info+0x20/0x20 [ 184.574616][ T7916] ? load_image+0x410/0x410 [ 184.579423][ T7916] sysfs_warn_dup+0x8a/0xa0 [ 184.584504][ T7916] sysfs_do_create_link_sd+0xc0/0x110 [ 184.590515][ T7916] device_add+0x83b/0x1050 [ 184.595750][ T7916] wiphy_register+0x1e74/0x2c40 [ 184.600839][ T7916] ? cfg80211_event_work+0x40/0x40 [ 184.605999][ T7916] ? minstrel_ht_alloc+0x807/0x980 [ 184.611202][ T7916] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 184.617573][ T7916] ieee80211_register_hw+0x2a03/0x3a60 [ 184.623251][ T7916] ? ieee80211_register_hw+0xa81/0x3a60 [ 184.631151][ T7916] ? ieee80211_tasklet_handler+0x20/0x20 [ 184.637073][ T7916] ? rcu_is_watching+0x11/0xa0 [ 184.642253][ T7916] ? hrtimer_init+0x10c/0x220 [ 184.648191][ T7916] mac80211_hwsim_new_radio+0x209d/0x4050 [ 184.654421][ T7916] hwsim_new_radio_nl+0xa7d/0xc50 [ 184.660246][ T7916] genl_rcv_msg+0xd0b/0xfa0 [ 184.667255][ T7916] ? genl_bind+0x370/0x370 [ 184.671967][ T7916] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 184.677911][ T7916] ? verify_lock_unused+0x140/0x140 [ 184.683260][ T7916] ? perf_trace_lock_acquire+0xed/0x3f0 [ 184.688852][ T7916] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 184.696091][ T7916] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 184.702649][ T7916] netlink_rcv_skb+0x1e9/0x430 [ 184.707445][ T7916] ? genl_bind+0x370/0x370 [ 184.711909][ T7916] ? netlink_ack+0xb10/0xb10 [ 184.716549][ T7916] ? down_read+0x1aa/0x2e0 [ 184.721520][ T7916] genl_rcv+0x24/0x40 [ 184.725800][ T7916] netlink_unicast+0x78f/0x940 [ 184.730626][ T7916] netlink_sendmsg+0x8ba/0xbe0 [ 184.735423][ T7916] ? lockdep_hardirqs_on+0x94/0x140 [ 184.740758][ T7916] ? netlink_getsockopt+0x570/0x570 [ 184.746090][ T7916] ? aa_sock_msg_perm+0x94/0x150 [ 184.751070][ T7916] ? apparmor_socket_sendmsg+0x88/0x230 [ 184.756640][ T7916] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 184.762127][ T7916] ? security_socket_sendmsg+0x7c/0xa0 [ 184.767779][ T7916] ? netlink_getsockopt+0x570/0x570 [ 184.773001][ T7916] ____sys_sendmsg+0x5be/0x8f0 [ 184.777986][ T7916] ? __sys_sendmsg_sock+0x30/0x30 [ 184.783148][ T7916] ? import_iovec+0x6f/0xa0 [ 184.787799][ T7916] ___sys_sendmsg+0x236/0x2e0 [ 184.792521][ T7916] ? __sys_sendmsg+0x290/0x290 [ 184.798028][ T7916] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 184.804058][ T7916] __se_sys_sendmsg+0x1b7/0x2a0 [ 184.809757][ T7916] ? __x64_sys_sendmsg+0x80/0x80 [ 184.815196][ T7916] ? syscall_enter_from_user_mode+0x2a/0x70 [ 184.821559][ T7916] do_syscall_64+0x4c/0xa0 [ 184.826178][ T7916] ? clear_bhb_loop+0x30/0x80 [ 184.830961][ T7916] ? clear_bhb_loop+0x30/0x80 [ 184.835658][ T7916] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.841664][ T7916] RIP: 0033:0x7f09c22f30d9 [ 184.846180][ T7916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.865994][ T7916] RSP: 002b:00007f09c054b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.874632][ T7916] RAX: ffffffffffffffda RBX: 00007f09c257afa0 RCX: 00007f09c22f30d9 [ 184.882731][ T7916] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 184.890931][ T7916] RBP: 00007f09c238a024 R08: 0000000000000000 R09: 0000000000000000 [ 184.898950][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.907035][ T7916] R13: 00007f09c257b038 R14: 00007f09c257afa0 R15: 00007ffc180842c8 [ 184.915073][ T7916] [ 185.020704][ T7922] netlink: 'syz.2.1007': attribute type 41 has an invalid length. [ 185.280406][ T7923] team0: Port device team_slave_0 removed [ 185.310562][ T7923] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 185.809359][ T7954] delete_channel: no stack [ 185.821173][ T7953] __nla_validate_parse: 1 callbacks suppressed [ 185.821213][ T7953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1016'. [ 185.938890][ T7957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.960047][ T7961] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1019'. [ 186.040297][ T7961] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 186.079624][ T7961] CPU: 0 PID: 7961 Comm: syz.2.1019 Not tainted syzkaller #0 [ 186.087058][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.097462][ T7961] Call Trace: [ 186.100894][ T7961] [ 186.103931][ T7961] dump_stack_lvl+0x188/0x250 [ 186.108734][ T7961] ? show_regs_print_info+0x20/0x20 [ 186.113973][ T7961] ? load_image+0x410/0x410 [ 186.119230][ T7961] sysfs_warn_dup+0x8a/0xa0 [ 186.123757][ T7961] sysfs_do_create_link_sd+0xc0/0x110 [ 186.129164][ T7961] device_add+0x83b/0x1050 [ 186.133903][ T7961] wiphy_register+0x1e74/0x2c40 [ 186.138808][ T7961] ? cfg80211_event_work+0x40/0x40 [ 186.144033][ T7961] ? minstrel_ht_alloc+0x807/0x980 [ 186.149444][ T7961] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 186.155540][ T7961] ieee80211_register_hw+0x2a03/0x3a60 [ 186.161031][ T7961] ? ieee80211_register_hw+0xa81/0x3a60 [ 186.166869][ T7961] ? ieee80211_tasklet_handler+0x20/0x20 [ 186.172553][ T7961] ? rcu_is_watching+0x11/0xa0 [ 186.177515][ T7961] ? hrtimer_init+0x10c/0x220 [ 186.182389][ T7961] mac80211_hwsim_new_radio+0x209d/0x4050 [ 186.188168][ T7961] hwsim_new_radio_nl+0xa7d/0xc50 [ 186.193362][ T7961] genl_rcv_msg+0xd0b/0xfa0 [ 186.197921][ T7961] ? genl_bind+0x370/0x370 [ 186.202378][ T7961] ? perf_trace_lock+0xe4/0x390 [ 186.207256][ T7961] ? verify_lock_unused+0x140/0x140 [ 186.212839][ T7961] ? perf_trace_lock_acquire+0xed/0x3f0 [ 186.218775][ T7961] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 186.225755][ T7961] ? perf_trace_lock+0xe4/0x390 [ 186.231702][ T7961] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 186.238448][ T7961] netlink_rcv_skb+0x1e9/0x430 [ 186.243754][ T7961] ? genl_bind+0x370/0x370 [ 186.248251][ T7961] ? netlink_ack+0xb10/0xb10 [ 186.252945][ T7961] ? down_read+0x1aa/0x2e0 [ 186.257588][ T7961] genl_rcv+0x24/0x40 [ 186.261588][ T7961] netlink_unicast+0x78f/0x940 [ 186.266516][ T7961] netlink_sendmsg+0x8ba/0xbe0 [ 186.271418][ T7961] ? netlink_getsockopt+0x570/0x570 [ 186.276812][ T7961] ? aa_sock_msg_perm+0x94/0x150 [ 186.281821][ T7961] ? apparmor_socket_sendmsg+0x88/0x230 [ 186.287421][ T7961] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 186.292819][ T7961] ? security_socket_sendmsg+0x7c/0xa0 [ 186.298382][ T7961] ? netlink_getsockopt+0x570/0x570 [ 186.303603][ T7961] ____sys_sendmsg+0x5be/0x8f0 [ 186.308465][ T7961] ? __sys_sendmsg_sock+0x30/0x30 [ 186.313607][ T7961] ? import_iovec+0x6f/0xa0 [ 186.318222][ T7961] ___sys_sendmsg+0x236/0x2e0 [ 186.322923][ T7961] ? __sys_sendmsg+0x290/0x290 [ 186.327828][ T7961] ? trace_event_raw_event_lock+0x250/0x250 [ 186.334004][ T7961] __se_sys_sendmsg+0x1b7/0x2a0 [ 186.338966][ T7961] ? __x64_sys_sendmsg+0x80/0x80 [ 186.344111][ T7961] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.350260][ T7961] ? trace_sys_enter+0x1f/0x80 [ 186.355260][ T7961] do_syscall_64+0x4c/0xa0 [ 186.359688][ T7961] ? clear_bhb_loop+0x30/0x80 [ 186.364366][ T7961] ? clear_bhb_loop+0x30/0x80 [ 186.369131][ T7961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.375104][ T7961] RIP: 0033:0x7ff51aa700d9 [ 186.379802][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.400107][ T7961] RSP: 002b:00007ff518cc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.409200][ T7961] RAX: ffffffffffffffda RBX: 00007ff51acf7fa0 RCX: 00007ff51aa700d9 [ 186.417276][ T7961] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 186.425266][ T7961] RBP: 00007ff51ab07024 R08: 0000000000000000 R09: 0000000000000000 [ 186.433448][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.441420][ T7961] R13: 00007ff51acf8038 R14: 00007ff51acf7fa0 R15: 00007ffcd009e828 [ 186.449428][ T7961] [ 186.759654][ T7983] netlink: set zone limit has 8 unknown bytes [ 186.759757][ T7979] netlink: set zone limit has 8 unknown bytes [ 186.772289][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1026'. [ 186.811888][ T7986] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1026'. [ 187.034903][ T8007] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1030'. [ 187.268663][ T8000] device pim6reg1 entered promiscuous mode [ 188.593770][ T8050] netlink: 'syz.3.1039': attribute type 9 has an invalid length. [ 188.631943][ T8050] netlink: 165200 bytes leftover after parsing attributes in process `syz.3.1039'. [ 188.663615][ T8058] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1040'. [ 188.748725][ T8058] netlink: 'syz.4.1040': attribute type 10 has an invalid length. [ 188.819203][ T8058] team0: Device vxcan1 is of different type [ 188.969169][ T8060] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1041'. [ 188.997136][ T8051] netlink: 'syz.3.1039': attribute type 9 has an invalid length. [ 189.013594][ T8051] netlink: 165200 bytes leftover after parsing attributes in process `syz.3.1039'. [ 189.120512][ T8070] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1043'. [ 189.676157][ T8089] netlink: 'syz.0.1049': attribute type 10 has an invalid length. [ 189.736941][ T8089] device team0 entered promiscuous mode [ 189.801262][ T8089] device team_slave_0 entered promiscuous mode [ 189.941175][ T8089] device team_slave_1 entered promiscuous mode [ 190.013517][ T8089] bridge0: port 2(team0) entered blocking state [ 190.090806][ T8089] bridge0: port 2(team0) entered disabled state [ 190.223116][ T8089] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 190.375657][ T8107] netlink: 'syz.1.1062': attribute type 21 has an invalid length. [ 190.389837][ T8111] netlink: 'syz.3.1053': attribute type 3 has an invalid length. [ 190.447447][ T8112] netlink: 'syz.3.1053': attribute type 3 has an invalid length. [ 190.563613][ T8111] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 190.619763][ T8111] netlink: 'syz.3.1053': attribute type 21 has an invalid length. [ 190.630781][ T8118] netlink: 'syz.4.1055': attribute type 4 has an invalid length. [ 190.660350][ T8111] netlink: 'syz.3.1053': attribute type 4 has an invalid length. [ 191.378305][ T8155] IPv6: : Disabled Multicast RS [ 191.779556][ T8162] __nla_validate_parse: 11 callbacks suppressed [ 191.779578][ T8162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1067'. [ 191.847671][ T8170] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.876387][ T8170] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1068'. [ 192.047266][ T8180] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1072'. [ 192.092390][ T8179] sock: sock_set_timeout: `syz.4.1071' (pid 8179) tries to set negative timeout [ 192.125103][ T8183] netlink: 15862 bytes leftover after parsing attributes in process `syz.2.1072'. [ 192.229622][ T8185] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1073'. [ 192.286172][ T8177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1070'. [ 192.755038][ T8195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1076'. [ 193.130503][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1080'. [ 193.257524][ T8217] batman_adv: batadv0: Adding interface: virt_wifi0 [ 193.299753][ T8217] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.340322][ T8217] batman_adv: batadv0: Interface activated: virt_wifi0 [ 193.397251][ T8223] pimreg1: tun_chr_ioctl cmd 35108 [ 193.494400][ T8228] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1086'. [ 193.532214][ T8230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1087'. [ 193.542263][ T8228] netlink: get zone limit has 4 unknown bytes [ 194.166189][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.173014][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.562362][ T8263] validate_nla: 11 callbacks suppressed [ 194.562379][ T8263] netlink: 'syz.2.1097': attribute type 10 has an invalid length. [ 194.590155][ T8263] device caif0 entered promiscuous mode [ 194.610364][ T8263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.313616][ T8353] device syzkaller0 entered promiscuous mode [ 197.132709][ T8382] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 197.158463][ T8382] __nla_validate_parse: 8 callbacks suppressed [ 197.158497][ T8382] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1131'. [ 197.472587][ T8414] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 197.571934][ T8414] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.1135'. [ 197.602510][ T8420] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1138'. [ 197.988699][ T8446] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 198.027611][ T8446] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1146'. [ 198.294106][ T8459] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1150'. [ 198.346699][ T8457] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1151'. [ 198.846422][ T8473] netlink: 149412 bytes leftover after parsing attributes in process `syz.2.1155'. [ 198.875861][ T8473] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 202.130320][ T8518] netlink: 'syz.2.1168': attribute type 5 has an invalid length. [ 202.142425][ T8516] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1166'. [ 202.396968][ T8533] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1173'. [ 202.671433][ T8547] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 202.677435][ T8547] syzkaller1: persist disabled [ 202.682875][ T8547] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 202.973693][ T8564] delete_channel: no stack [ 203.087761][ T8573] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 203.166312][ T8584] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1186'. [ 203.182532][ T8573] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1182'. [ 203.259894][ T8580] netlink: 'syz.3.1187': attribute type 10 has an invalid length. [ 203.287502][ T8580] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1187'. [ 203.336888][ T8580] device bond0 entered promiscuous mode [ 203.374132][ T8580] device bond_slave_0 entered promiscuous mode [ 203.414391][ T8580] device bond_slave_1 entered promiscuous mode [ 206.305846][ T8600] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 206.331914][ T8600] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1191'. [ 206.528846][ T8621] netlink: 'syz.1.1197': attribute type 8 has an invalid length. [ 206.592963][ T8621] netlink: 'syz.1.1197': attribute type 6 has an invalid length. [ 206.624878][ T8621] netlink: 'syz.1.1197': attribute type 8 has an invalid length. [ 206.677437][ T8621] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 206.716146][ T8621] netlink: 'syz.1.1197': attribute type 11 has an invalid length. [ 206.744615][ T8621] netlink: 198884 bytes leftover after parsing attributes in process `syz.1.1197'. [ 206.984089][ T8640] netlink: 'syz.4.1201': attribute type 3 has an invalid length. [ 207.004040][ T8640] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1201'. [ 207.062329][ T8645] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1203'. [ 207.339227][ T8639] delete_channel: no stack [ 207.522786][ T8670] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 207.579673][ T8672] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1211'. [ 207.928067][ T8678] netlink: 'syz.3.1212': attribute type 3 has an invalid length. [ 207.977881][ T8678] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1212'. [ 208.352331][ T8700] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1218'. [ 208.645722][ T8717] netlink: 'syz.4.1224': attribute type 15 has an invalid length. [ 208.666848][ T8717] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.1224'. [ 208.698006][ T8719] netlink: 'syz.3.1223': attribute type 29 has an invalid length. [ 208.714855][ T8719] netlink: 'syz.3.1223': attribute type 29 has an invalid length. [ 208.789597][ T8722] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1225'. [ 208.976963][ T8720] device syzkaller0 entered promiscuous mode [ 209.005472][ T8727] netlink: 'syz.0.1225': attribute type 10 has an invalid length. [ 209.013411][ T8727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1225'. [ 209.060677][ T8727] device dummy0 entered promiscuous mode [ 209.067654][ T8727] bridge0: port 2(dummy0) entered blocking state [ 209.100703][ T8727] bridge0: port 2(dummy0) entered disabled state [ 209.109082][ T8727] bridge0: port 2(dummy0) entered blocking state [ 209.115537][ T8727] bridge0: port 2(dummy0) entered forwarding state [ 209.154239][ T8728] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1226'. [ 209.520056][ T8742] netlink: 144300 bytes leftover after parsing attributes in process `syz.0.1231'. [ 209.570092][ T8742] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1231'. [ 210.165076][ T8764] netlink: 'syz.4.1237': attribute type 9 has an invalid length. [ 210.200493][ T8764] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1237'. [ 210.348777][ T8768] netlink: 'syz.4.1237': attribute type 9 has an invalid length. [ 213.280476][ T8802] netlink: 'syz.0.1245': attribute type 21 has an invalid length. [ 213.291352][ T8802] __nla_validate_parse: 1 callbacks suppressed [ 213.291370][ T8802] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1245'. [ 213.307100][ T8802] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1245'. [ 213.348355][ T8815] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1248'. [ 213.420028][ T8815] device sit0 entered promiscuous mode [ 213.564630][ T8824] device wlan1 left promiscuous mode [ 213.590266][ T8824] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1249'. [ 214.525274][ T8884] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 214.542369][ T8884] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.1268'. [ 214.574027][ T8887] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1269'. [ 214.600919][ T8892] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1271'. [ 214.647754][ T8892] openvswitch: netlink: Key type 15645 is out of range max 29 [ 215.017931][ T8902] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1273'. [ 215.910194][ T8922] netlink: 'syz.0.1276': attribute type 9 has an invalid length. [ 215.948007][ T8922] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1276'. [ 216.146759][ T8934] netlink: 'syz.3.1282': attribute type 4 has an invalid length. [ 216.699075][ T8947] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1286'. [ 216.738568][ T8950] netlink: 'syz.0.1287': attribute type 9 has an invalid length. [ 216.752755][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 216.833721][ T8947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.541540][ T8968] netlink: 'syz.1.1293': attribute type 7 has an invalid length. [ 217.553153][ T8968] netlink: 'syz.1.1293': attribute type 1 has an invalid length. [ 218.262675][ T8975] netlink: 'syz.4.1294': attribute type 29 has an invalid length. [ 219.959575][ T8975] netlink: 'syz.4.1294': attribute type 29 has an invalid length. [ 220.228648][ T8981] netlink: 'syz.0.1295': attribute type 21 has an invalid length. [ 220.264508][ T8981] __nla_validate_parse: 2 callbacks suppressed [ 220.264542][ T8981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1295'. [ 220.338743][ T8990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1298'. [ 220.393527][ T8990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1298'. [ 220.487951][ T8993] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1298'. [ 220.575997][ T8985] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1298'. [ 221.461619][ T9005] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1302'. [ 224.891175][ T9051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1316'. [ 225.291036][ T9060] netlink: 'syz.0.1318': attribute type 8 has an invalid length. [ 225.638295][ T9068] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1320'. [ 225.972928][ T9068] bridge0: port 4(bond0) entered disabled state [ 226.067344][ T9068] bridge0: port 4(bond0) entered disabled state [ 226.093330][ T9068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.123065][ T9068] device bond_slave_0 left promiscuous mode [ 226.190950][ T9068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.283528][ T9068] device bond_slave_1 left promiscuous mode [ 226.480950][ T9068] bond0 (unregistering): Released all slaves [ 226.629644][ T9095] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1328'. [ 226.678610][ T9094] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1328'. [ 226.720142][ T9095] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 226.790057][ T9096] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1328'. [ 226.846739][ T9096] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 227.111614][ T9113] device pim6reg1 entered promiscuous mode [ 227.317340][ T9116] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.940263][ T9135] netlink: 'syz.2.1337': attribute type 21 has an invalid length. [ 227.976087][ T9135] netlink: 'syz.2.1337': attribute type 2 has an invalid length. [ 228.059886][ T9135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1337'. [ 228.141508][ T9140] netlink: 'syz.1.1338': attribute type 10 has an invalid length. [ 228.193098][ T9140] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1338'. [ 228.374967][ T9147] netlink: 'syz.4.1339': attribute type 13 has an invalid length. [ 228.637404][ T9148] netlink: 'syz.2.1340': attribute type 11 has an invalid length. [ 230.965201][ T9182] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 231.028153][ T9185] netlink: 'syz.0.1353': attribute type 29 has an invalid length. [ 231.062053][ T9182] team0: Device wg1 is of different type [ 231.198608][ T9185] netlink: 'syz.0.1353': attribute type 29 has an invalid length. [ 231.219028][ T9188] netlink: 'syz.0.1353': attribute type 29 has an invalid length. [ 231.346613][ T9189] mac80211_hwsim hwsim3 : renamed from wlan0 [ 231.399682][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1354'. [ 231.412986][ T9198] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 231.689506][ T9205] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 231.782819][ T9205] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1358'. [ 231.850278][ T9207] netlink: 'syz.3.1358': attribute type 21 has an invalid length. [ 231.858721][ T9217] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1361'. [ 231.933972][ T9207] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 231.943542][ T9207] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1358'. [ 232.267009][ T9235] netlink: 'syz.3.1366': attribute type 29 has an invalid length. [ 232.384023][ T9235] netlink: 'syz.3.1366': attribute type 29 has an invalid length. [ 232.423293][ T9242] netlink: 'syz.3.1366': attribute type 29 has an invalid length. [ 232.524463][ T9249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1370'. [ 232.608926][ T9249] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 232.729923][ T9255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1372'. [ 232.775076][ T9256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1372'. [ 232.892583][ T9259] device syzkaller0 entered promiscuous mode [ 232.971927][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.979422][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.068431][ T9259] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.1373'. [ 234.217520][ T9314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1386'. [ 234.226016][ T9320] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 234.246505][ T9321] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1388'. [ 234.297888][ T9321] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 236.255973][ T9382] validate_nla: 12 callbacks suppressed [ 236.255992][ T9382] netlink: 'syz.3.1406': attribute type 7 has an invalid length. [ 236.274679][ T9396] netlink: 'syz.1.1411': attribute type 3 has an invalid length. [ 236.587626][ T9382] __nla_validate_parse: 7 callbacks suppressed [ 236.587641][ T9382] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1406'. [ 236.861658][ T9416] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1417'. [ 236.952589][ T9416] netlink: 'syz.1.1417': attribute type 3 has an invalid length. [ 236.974114][ T9416] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1417'. [ 238.117246][ T9458] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1429'. [ 238.183672][ T9462] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.1430'. [ 238.873034][ T9489] netlink: 'syz.0.1437': attribute type 21 has an invalid length. [ 238.919892][ T9489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1437'. [ 238.950667][ T9490] netlink: 'syz.0.1437': attribute type 21 has an invalid length. [ 238.975598][ T9490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1437'. [ 240.102254][ T9500] netlink: 'syz.0.1440': attribute type 21 has an invalid length. [ 240.113956][ T9500] netlink: 'syz.0.1440': attribute type 4 has an invalid length. [ 240.142208][ T9500] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1440'. [ 240.177798][ T9501] netlink: 'syz.1.1439': attribute type 13 has an invalid length. [ 240.208410][ T9506] netlink: 'syz.3.1441': attribute type 10 has an invalid length. [ 240.292938][ T9506] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1441'. [ 240.413632][ T9512] delete_channel: no stack [ 242.888997][ T9568] netlink: 'syz.0.1458': attribute type 2 has an invalid length. [ 242.964602][ T9568] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.1458'. [ 242.974897][ T9569] sctp: [Deprecated]: syz.1.1459 (pid 9569) Use of int in maxseg socket option. [ 242.974897][ T9569] Use struct sctp_assoc_value instead [ 243.076518][ T9568] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1458'. [ 244.706295][ T9619] sctp: [Deprecated]: syz.0.1471 (pid 9619) Use of int in maxseg socket option. [ 244.706295][ T9619] Use struct sctp_assoc_value instead [ 244.991128][ T9630] netlink: 'syz.0.1474': attribute type 10 has an invalid length. [ 246.085004][ T9630] device hsr0 entered promiscuous mode [ 246.200364][ T9630] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.241419][ T9630] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 246.269571][ T9630] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 246.292684][ T9630] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 246.513720][ T9645] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 246.549639][ T9648] netlink: 'syz.0.1479': attribute type 21 has an invalid length. [ 246.580766][ T9645] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 246.590243][ T9648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1479'. [ 246.700509][ T9648] netlink: 'syz.0.1479': attribute type 25 has an invalid length. [ 246.737061][ T9648] netlink: 'syz.0.1479': attribute type 28 has an invalid length. [ 247.179721][ T9658] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1481'. [ 247.630363][ T9671] sctp: [Deprecated]: syz.4.1485 (pid 9671) Use of int in maxseg socket option. [ 247.630363][ T9671] Use struct sctp_assoc_value instead [ 247.749235][ T9676] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1488'. [ 248.290276][ T9692] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1495'. [ 248.655373][ T9729] netlink: 'syz.3.1503': attribute type 41 has an invalid length. [ 248.697384][ T9706] device syzkaller0 entered promiscuous mode [ 248.714001][ T9716] netlink: 'syz.4.1501': attribute type 10 has an invalid length. [ 248.722605][ T9716] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1501'. [ 248.745851][ T9729] netlink: 'syz.3.1503': attribute type 41 has an invalid length. [ 248.948026][ T9746] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 248.996626][ T9746] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1510'. [ 249.001767][ T9749] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1510'. [ 249.060507][ T9749] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 249.572820][ T9759] netlink: 'syz.4.1514': attribute type 2 has an invalid length. [ 249.669715][ T9755] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1511'. [ 249.806290][ T9763] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1515'. [ 249.875171][ T9759] device syzkaller0 entered promiscuous mode [ 249.903919][ T9766] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1517'. [ 249.943668][ T9768] netlink: 'syz.3.1516': attribute type 28 has an invalid length. [ 250.004697][ T9768] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1516'. [ 250.015676][ T9771] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1518'. [ 250.061969][ T9772] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1518'. [ 250.100852][ T9773] device syzkaller0 entered promiscuous mode [ 251.980710][ T9830] netlink: 'syz.2.1531': attribute type 10 has an invalid length. [ 252.023957][ T9830] netlink: 'syz.2.1531': attribute type 25 has an invalid length. [ 252.069731][ T9832] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 252.109060][ T9832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.222914][ T9835] device batadv0 left promiscuous mode [ 252.294861][ T9835] bridge0: port 3(batadv0) entered disabled state [ 252.410414][ T9835] device bridge_slave_1 left promiscuous mode [ 252.447720][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.585687][ T9835] device bridge_slave_0 left promiscuous mode [ 252.592069][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.584616][ T9886] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.606263][ T9886] __nla_validate_parse: 7 callbacks suppressed [ 253.606301][ T9886] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1547'. [ 254.150635][ T9902] sctp: [Deprecated]: syz.3.1552 (pid 9902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.150635][ T9902] Use struct sctp_sack_info instead [ 254.505824][ T9915] netlink: 'syz.2.1556': attribute type 21 has an invalid length. [ 254.555377][ T9915] netlink: 'syz.2.1556': attribute type 7 has an invalid length. [ 254.858614][ T9921] netlink: 'syz.2.1558': attribute type 9 has an invalid length. [ 254.900932][ T9921] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1558'. [ 254.926238][ T9909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1554'. [ 254.931962][ T9926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1559'. [ 255.102616][ T9940] netlink: 'syz.2.1562': attribute type 3 has an invalid length. [ 255.161844][ T9940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1562'. [ 255.486907][ T9955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1567'. [ 255.629709][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.636205][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.803121][ T9959] delete_channel: no stack [ 255.990329][ T9968] netlink: 'syz.4.1572': attribute type 11 has an invalid length. [ 256.016618][ T9968] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.1572'. [ 256.091690][ T9968] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 256.114053][ T9968] CPU: 0 PID: 9968 Comm: syz.4.1572 Not tainted syzkaller #0 [ 256.121484][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.131566][ T9968] Call Trace: [ 256.134951][ T9968] [ 256.137903][ T9968] dump_stack_lvl+0x188/0x250 [ 256.142618][ T9968] ? show_regs_print_info+0x20/0x20 [ 256.147849][ T9968] ? load_image+0x410/0x410 [ 256.152413][ T9968] sysfs_warn_dup+0x8a/0xa0 [ 256.156947][ T9968] sysfs_do_create_link_sd+0xc0/0x110 [ 256.162347][ T9968] device_add+0x83b/0x1050 [ 256.166801][ T9968] wiphy_register+0x1e74/0x2c40 [ 256.171726][ T9968] ? cfg80211_event_work+0x40/0x40 [ 256.176863][ T9968] ? minstrel_ht_alloc+0x807/0x980 [ 256.182098][ T9968] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 256.188199][ T9968] ieee80211_register_hw+0x2a03/0x3a60 [ 256.193708][ T9968] ? ieee80211_register_hw+0xa81/0x3a60 [ 256.199302][ T9968] ? ieee80211_tasklet_handler+0x20/0x20 [ 256.204996][ T9968] ? rcu_is_watching+0x11/0xa0 [ 256.209885][ T9968] ? hrtimer_init+0x10c/0x220 [ 256.214603][ T9968] mac80211_hwsim_new_radio+0x209d/0x4050 [ 256.220395][ T9968] hwsim_new_radio_nl+0xa7d/0xc50 [ 256.225482][ T9968] genl_rcv_msg+0xd0b/0xfa0 [ 256.230031][ T9968] ? genl_bind+0x370/0x370 [ 256.234486][ T9968] ? __dev_queue_xmit+0x1b64/0x2e50 [ 256.239708][ T9968] ? verify_lock_unused+0x140/0x140 [ 256.244950][ T9968] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 256.250707][ T9968] ? perf_trace_lock+0x301/0x390 [ 256.255684][ T9968] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 256.262072][ T9968] netlink_rcv_skb+0x1e9/0x430 [ 256.266865][ T9968] ? genl_bind+0x370/0x370 [ 256.271398][ T9968] ? netlink_ack+0xb10/0xb10 [ 256.276195][ T9968] ? down_read+0x1aa/0x2e0 [ 256.280646][ T9968] genl_rcv+0x24/0x40 [ 256.284647][ T9968] netlink_unicast+0x78f/0x940 [ 256.289456][ T9968] netlink_sendmsg+0x8ba/0xbe0 [ 256.294279][ T9968] ? netlink_getsockopt+0x570/0x570 [ 256.299505][ T9968] ? aa_sock_msg_perm+0x94/0x150 [ 256.304473][ T9968] ? apparmor_socket_sendmsg+0x88/0x230 [ 256.310046][ T9968] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 256.315350][ T9968] ? security_socket_sendmsg+0x7c/0xa0 [ 256.320836][ T9968] ? netlink_getsockopt+0x570/0x570 [ 256.326076][ T9968] ____sys_sendmsg+0x5be/0x8f0 [ 256.330883][ T9968] ? __sys_sendmsg_sock+0x30/0x30 [ 256.335975][ T9968] ? import_iovec+0x6f/0xa0 [ 256.340504][ T9968] ___sys_sendmsg+0x236/0x2e0 [ 256.345207][ T9968] ? __sys_sendmsg+0x290/0x290 [ 256.350002][ T9968] ? trace_event_raw_event_lock+0x250/0x250 [ 256.355944][ T9968] __se_sys_sendmsg+0x1b7/0x2a0 [ 256.360798][ T9968] ? __x64_sys_sendmsg+0x80/0x80 [ 256.365737][ T9968] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 256.371749][ T9968] ? lockdep_hardirqs_on+0x94/0x140 [ 256.376959][ T9968] do_syscall_64+0x4c/0xa0 [ 256.381374][ T9968] ? clear_bhb_loop+0x30/0x80 [ 256.386047][ T9968] ? clear_bhb_loop+0x30/0x80 [ 256.390728][ T9968] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.396618][ T9968] RIP: 0033:0x7f09c22f30d9 [ 256.401059][ T9968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.420681][ T9968] RSP: 002b:00007f09c054b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.429107][ T9968] RAX: ffffffffffffffda RBX: 00007f09c257afa0 RCX: 00007f09c22f30d9 [ 256.437091][ T9968] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 256.445059][ T9968] RBP: 00007f09c238a024 R08: 0000000000000000 R09: 0000000000000000 [ 256.453025][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.460993][ T9968] R13: 00007f09c257b038 R14: 00007f09c257afa0 R15: 00007ffc180842c8 [ 256.468993][ T9968] [ 256.741740][ T9987] netlink: 'syz.2.1578': attribute type 3 has an invalid length. [ 256.761158][ T9987] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1578'. [ 256.836421][ T9990] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 257.069924][T10001] netlink: 'syz.4.1581': attribute type 29 has an invalid length. [ 257.097432][ T9996] netlink: 'syz.2.1578': attribute type 29 has an invalid length. [ 257.119820][T10001] netlink: 'syz.4.1581': attribute type 29 has an invalid length. [ 257.161749][T10003] netlink: 'syz.4.1581': attribute type 29 has an invalid length. [ 257.472112][T10010] delete_channel: no stack [ 258.327998][T10036] netlink: 144300 bytes leftover after parsing attributes in process `syz.1.1593'. [ 258.347707][T10043] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1594'. [ 258.818506][T10073] __nla_validate_parse: 1 callbacks suppressed [ 258.818567][T10073] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1603'. [ 259.067807][T10080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.823368][T10080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.165141][T10080] device batadv_slave_0 entered promiscuous mode [ 260.248190][T10080] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 260.326234][T10094] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1604'. [ 260.352392][T10105] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1609'. [ 261.114650][T10127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1613'. [ 261.166649][T10130] validate_nla: 2 callbacks suppressed [ 261.166699][T10130] netlink: 'syz.4.1614': attribute type 21 has an invalid length. [ 261.285769][T10131] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1614'. [ 261.414237][T10131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.093734][T10160] netlink: 'syz.0.1622': attribute type 19 has an invalid length. [ 262.165671][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1622'. [ 262.529360][T10178] netlink: 'syz.0.1629': attribute type 9 has an invalid length. [ 262.580174][T10178] netlink: 165200 bytes leftover after parsing attributes in process `syz.0.1629'. [ 262.713025][T10190] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 262.763560][T10190] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 262.824017][T10190] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 263.428591][T10229] netlink: 'syz.3.1642': attribute type 21 has an invalid length. [ 263.539353][T10236] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1643'. [ 263.558089][T10236] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1643'. [ 263.765235][T10242] netlink: 16374 bytes leftover after parsing attributes in process `syz.0.1645'. [ 264.073258][T10254] device syzkaller0 left promiscuous mode [ 264.508179][T10261] netlink: 'syz.2.1653': attribute type 1 has an invalid length. [ 264.533995][T10261] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1653'. [ 265.099747][T10306] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.1662'. [ 265.148526][T10313] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.1662'. [ 265.175442][T10316] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1664'. [ 265.196389][T10316] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1664'. [ 267.020438][T10339] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1673'. [ 267.291250][T10339] netlink: 'syz.4.1673': attribute type 12 has an invalid length. [ 267.299719][T10339] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1673'. [ 267.359765][T10345] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1675'. [ 267.681396][T10355] netlink: 'syz.0.1676': attribute type 1 has an invalid length. [ 267.700639][T10355] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1676'. [ 267.878109][T10358] netlink: 'syz.4.1679': attribute type 3 has an invalid length. [ 267.903285][T10360] netlink: 'syz.3.1677': attribute type 10 has an invalid length. [ 267.938108][T10358] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1679'. [ 267.999622][T10365] netlink: 'syz.4.1679': attribute type 21 has an invalid length. [ 268.064249][T10365] netlink: 'syz.4.1679': attribute type 1 has an invalid length. [ 268.188349][T10381] netlink: 'syz.2.1684': attribute type 9 has an invalid length. [ 268.245643][T10388] netlink: 'syz.2.1684': attribute type 7 has an invalid length. [ 268.273644][T10388] netlink: 'syz.2.1684': attribute type 6 has an invalid length. [ 268.510989][T10396] netlink: 'syz.1.1689': attribute type 3 has an invalid length. [ 268.697560][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 268.778126][T10408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.691892][T10437] __nla_validate_parse: 8 callbacks suppressed [ 269.691910][T10437] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.1701'. [ 269.957794][T10446] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1702'. [ 270.045610][T10449] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1704'. [ 270.109388][T10449] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 270.255960][T10458] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1707'. [ 270.493917][T10469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1708'. [ 270.928577][T10488] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 271.642891][T10535] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1729'. [ 271.657863][T10532] device pim6reg1 entered promiscuous mode [ 271.709188][T10539] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1730'. [ 271.891959][T10546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1733'. [ 271.913581][T10546] device team0 entered promiscuous mode [ 271.924829][T10546] device team_slave_0 entered promiscuous mode [ 271.931767][T10546] device team_slave_1 entered promiscuous mode [ 271.944584][T10546] device wlan1 entered promiscuous mode [ 271.972426][T10546] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 272.150777][T10550] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1734'. [ 272.877429][T10573] validate_nla: 10 callbacks suppressed [ 272.877449][T10573] netlink: 'syz.3.1740': attribute type 6 has an invalid length. [ 272.921654][T10573] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.1740'. [ 272.942029][T10567] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 272.964419][T10567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.042460][T10567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.102101][T10567] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 273.548848][T10605] netlink: 'syz.2.1749': attribute type 21 has an invalid length. [ 274.766851][T10630] netlink: 'syz.3.1757': attribute type 3 has an invalid length. [ 274.818690][T10630] __nla_validate_parse: 6 callbacks suppressed [ 274.818706][T10630] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1757'. [ 274.896295][T10632] netlink: 'syz.1.1758': attribute type 11 has an invalid length. [ 274.918725][T10632] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1758'. [ 274.961489][T10642] netlink: 'syz.1.1758': attribute type 3 has an invalid length. [ 275.013079][T10641] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.1759'. [ 275.041747][T10642] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1758'. [ 275.411275][T10653] cgroup: fork rejected by pids controller in /syz1 [ 276.956208][T10808] netlink: 'syz.4.1778': attribute type 46 has an invalid length. [ 276.986856][T10815] netlink: 'syz.2.1779': attribute type 29 has an invalid length. [ 277.023897][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 277.033149][T10815] netlink: 'syz.2.1779': attribute type 29 has an invalid length. [ 277.089025][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 277.198467][T10815] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1779'. [ 277.399972][T10815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.416852][T10815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.440946][T10815] bond0 (unregistering): (slave team0): Releasing backup interface [ 277.468131][T10815] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 277.490607][T10815] bond0 (unregistering): Released all slaves [ 277.507944][T10831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1783'. [ 277.517376][T10831] : renamed from caif0 [ 277.525144][T10831] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 277.691148][ T4535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.849843][ T4535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.967218][ T4535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.045263][ T4535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.069698][T10817] chnl_net:caif_netlink_parms(): no params data found [ 278.273720][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.281101][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.295355][T10817] device bridge_slave_0 entered promiscuous mode [ 278.356959][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.365402][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.373515][T10817] device bridge_slave_1 entered promiscuous mode [ 278.398892][T10873] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1791'. [ 278.438263][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.478795][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.505715][T10873] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1791'. [ 278.687338][T10817] team0: Port device team_slave_0 added [ 278.731407][T10817] team0: Port device team_slave_1 added [ 278.869360][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.944015][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.006335][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.039651][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.058099][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.125547][T10060] Bluetooth: hci0: command 0x0409 tx timeout [ 279.151195][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.278614][T10907] netlink: 'syz.4.1798': attribute type 9 has an invalid length. [ 279.334131][T10817] device hsr_slave_0 entered promiscuous mode [ 279.341458][T10817] device hsr_slave_1 entered promiscuous mode [ 280.371830][T10941] __nla_validate_parse: 6 callbacks suppressed [ 280.371845][T10941] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1806'. [ 280.412781][T10949] netlink: 'syz.0.1805': attribute type 4 has an invalid length. [ 280.454632][T10949] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.1805'. [ 280.477148][T10948] netlink: 'syz.3.1806': attribute type 19 has an invalid length. [ 280.758813][T10962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1809'. [ 280.911890][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 281.194294][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 281.725851][ T4535] device wlan1 left promiscuous mode [ 281.756364][T11030] syz.3.1823[11030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.756514][T11030] syz.3.1823[11030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.773417][ T4535] team0: Port device wlan1 removed [ 281.845698][T11024] device sit0 entered promiscuous mode [ 282.102424][T10817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 282.163400][T10817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 282.202032][T10817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 282.252918][T10817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 282.373071][ T4535] device hsr_slave_0 left promiscuous mode [ 282.391319][ T4535] device hsr_slave_1 left promiscuous mode [ 282.434603][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.442629][T11057] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1831'. [ 282.465222][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.478517][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.499240][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.519728][ T4535] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 282.546620][ T4535] batman_adv: batadv0: Removing interface: virt_wifi0 [ 282.565374][ T4535] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 282.589363][ T4535] batman_adv: batadv0: Removing interface: veth0_vlan [ 282.632133][ T4535] device veth1_vlan left promiscuous mode [ 282.634820][T11068] syz.2.1833[11068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.640998][ T4535] device veth0_vlan left promiscuous mode [ 282.642809][T11068] syz.2.1833[11068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.043290][ T4535] device team_slave_1 left promiscuous mode [ 283.064482][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 283.079314][ T4535] device team_slave_0 left promiscuous mode [ 283.087114][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 283.197188][T11083] netlink: 'syz.2.1835': attribute type 10 has an invalid length. [ 283.210685][T11083] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1835'. [ 283.220131][T11083] device batadv_slave_1 entered promiscuous mode [ 283.227055][T11083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.234845][T11083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.284023][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 285.062189][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.107884][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.116639][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.148982][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.168098][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.179153][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.199425][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.206582][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.241175][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.250412][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.260768][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.270026][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.277213][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.288095][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.297279][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.308558][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.322564][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.354059][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 285.366669][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.376802][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.385945][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.398119][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.407005][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.422296][T10817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.448281][T10817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.464540][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.473100][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.796629][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.814177][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.826945][T10817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.867400][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.895045][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.951343][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.971188][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.993360][T10817] device veth0_vlan entered promiscuous mode [ 286.006949][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.027816][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.060814][T10817] device veth1_vlan entered promiscuous mode [ 286.120950][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.151828][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.172301][T10817] device veth0_macvtap entered promiscuous mode [ 286.194863][T10817] device veth1_macvtap entered promiscuous mode [ 286.251683][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.311234][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.358744][T10817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.375546][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.386560][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.410380][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.443023][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.490827][T10817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.517443][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.536256][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.565075][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.583199][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.634652][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.651902][T11158] netlink: 'syz.2.1846': attribute type 4 has an invalid length. [ 286.664285][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.693072][T10817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.702025][T11158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1846'. [ 286.717596][T10817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.746894][T10817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.776509][T10817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.111394][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.140238][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.174723][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.322624][ T4545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.337868][ T4545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.396509][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.869218][T11176] netlink: 'syz.2.1853': attribute type 22 has an invalid length. [ 287.893889][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'. [ 288.239573][T11189] IPv6: Can't replace route, no match found [ 288.545744][T11198] netlink: 'syz.4.1860': attribute type 1 has an invalid length. [ 288.553744][T11198] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1860'. [ 289.121571][T11206] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1863'. [ 289.224375][T11206] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1863'. [ 291.102154][T11275] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1880'. [ 291.132568][T11275] openvswitch: netlink: Key type 15645 is out of range max 29 [ 291.217571][T11286] device lo left promiscuous mode [ 291.331559][T11292] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1885'. [ 291.342404][T11298] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1885'. [ 291.440753][T11301] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.1889'. [ 291.702918][T11305] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1890'. [ 291.913455][T11315] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1892'. [ 291.940298][T11315] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 291.962302][T11315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.099131][T11320] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.1894'. [ 292.437124][T11344] device syzkaller0 entered promiscuous mode [ 292.574754][T11347] netlink: 'syz.0.1901': attribute type 3 has an invalid length. [ 292.604332][T11347] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1901'. [ 292.659489][T11357] netlink: 'syz.2.1903': attribute type 1 has an invalid length. [ 292.696424][T11357] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.1903'. [ 292.879025][T11364] netlink: 'syz.0.1905': attribute type 29 has an invalid length. [ 292.883978][T11372] netlink: 'syz.4.1908': attribute type 29 has an invalid length. [ 292.980536][T11364] netlink: 'syz.0.1905': attribute type 29 has an invalid length. [ 293.024679][T11372] netlink: 'syz.4.1908': attribute type 29 has an invalid length. [ 293.149094][T11385] netlink: 'syz.0.1909': attribute type 3 has an invalid length. [ 293.157394][T11386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1911'. [ 293.181724][T11385] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1909'. [ 293.224679][T11386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1911'. [ 293.294232][T11388] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1911'. [ 293.374562][T11386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1911'. [ 293.634986][T11405] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1917'. [ 295.003159][T11463] netlink: 'syz.0.1930': attribute type 4 has an invalid length. [ 295.104001][T11463] netlink: 'syz.0.1930': attribute type 1 has an invalid length. [ 295.622025][T11487] bridge0: port 3(syz_tun) entered blocking state [ 295.638114][T11487] bridge0: port 3(syz_tun) entered disabled state [ 295.806323][T11487] device syz_tun entered promiscuous mode [ 295.842693][T11487] bridge0: port 3(syz_tun) entered blocking state [ 295.849385][T11487] bridge0: port 3(syz_tun) entered forwarding state [ 296.640309][T11513] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 296.670283][T11513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.702469][T11524] IPv6: Can't replace route, no match found [ 297.242813][T11553] __nla_validate_parse: 7 callbacks suppressed [ 297.242831][T11553] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1960'. [ 297.380316][T11553] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 297.719956][T11560] device syzkaller0 entered promiscuous mode [ 298.155776][T11578] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1966'. [ 298.281262][T11582] can: request_module (can-proto-0) failed. [ 298.542071][T11598] netlink: 'syz.4.1972': attribute type 21 has an invalid length. [ 298.567063][T11598] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1972'. [ 299.433543][T11645] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1985'. [ 299.506449][T11648] netlink: 'syz.2.1987': attribute type 2 has an invalid length. [ 299.521903][T11648] netlink: 'syz.2.1987': attribute type 8 has an invalid length. [ 299.553913][T11648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1987'. [ 299.601111][T11649] netlink: 'syz.2.1987': attribute type 2 has an invalid length. [ 299.650066][T11649] netlink: 'syz.2.1987': attribute type 8 has an invalid length. [ 299.683560][T11649] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1987'. [ 299.722858][T11650] netlink: 'syz.3.1984': attribute type 21 has an invalid length. [ 299.819935][T11650] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1984'. [ 299.840246][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1984'. [ 299.891812][T11663] netlink: 'syz.0.1990': attribute type 28 has an invalid length. [ 299.929775][T11663] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1990'. [ 300.065317][T11668] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 300.099055][T11668] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1992'. [ 300.520946][T11680] netlink: 'syz.0.1998': attribute type 27 has an invalid length. [ 300.747244][T11695] netlink: 'syz.4.2003': attribute type 29 has an invalid length. [ 301.050148][T11706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.125695][T11706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.193280][T11706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.228026][T11706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.461884][T11711] team0: Device wg1 is of different type [ 301.793748][T11733] FAULT_INJECTION: forcing a failure. [ 301.793748][T11733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.884506][T11733] CPU: 1 PID: 11733 Comm: syz.1.2015 Not tainted syzkaller #0 [ 301.892023][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.902090][T11733] Call Trace: [ 301.905378][T11733] [ 301.908315][T11733] dump_stack_lvl+0x188/0x250 [ 301.913005][T11733] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 301.919211][T11733] ? show_regs_print_info+0x20/0x20 [ 301.924424][T11733] ? load_image+0x410/0x410 [ 301.928935][T11733] should_fail+0x383/0x4b0 [ 301.933344][T11733] _copy_from_user+0x2e/0x170 [ 301.938019][T11733] __sys_bpf+0x26d/0x6f0 [ 301.942255][T11733] ? bpf_link_show_fdinfo+0x380/0x380 [ 301.947635][T11733] __x64_sys_bpf+0x78/0x90 [ 301.952041][T11733] do_syscall_64+0x4c/0xa0 [ 301.956444][T11733] ? clear_bhb_loop+0x30/0x80 [ 301.961117][T11733] ? clear_bhb_loop+0x30/0x80 [ 301.965866][T11733] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.971744][T11733] RIP: 0033:0x7f9a714af0d9 [ 301.976146][T11733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.995738][T11733] RSP: 002b:00007f9a6f707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.004139][T11733] RAX: ffffffffffffffda RBX: 00007f9a71736fa0 RCX: 00007f9a714af0d9 [ 302.012096][T11733] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012 [ 302.020054][T11733] RBP: 00007f9a6f707090 R08: 0000000000000000 R09: 0000000000000000 [ 302.028011][T11733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.035966][T11733] R13: 00007f9a71737038 R14: 00007f9a71736fa0 R15: 00007ffff40e7568 [ 302.043933][T11733] [ 302.259470][T11749] delete_channel: no stack [ 302.519996][T11765] __nla_validate_parse: 3 callbacks suppressed [ 302.520013][T11765] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2025'. [ 302.769449][T11768] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2026'. [ 303.197817][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 303.922540][T11809] FAULT_INJECTION: forcing a failure. [ 303.922540][T11809] name failslab, interval 1, probability 0, space 0, times 1 [ 303.993489][T11809] CPU: 1 PID: 11809 Comm: syz.1.2039 Not tainted syzkaller #0 [ 304.001052][T11809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.011115][T11809] Call Trace: [ 304.014397][T11809] [ 304.017330][T11809] dump_stack_lvl+0x188/0x250 [ 304.022024][T11809] ? show_regs_print_info+0x20/0x20 [ 304.027352][T11809] ? load_image+0x410/0x410 [ 304.031874][T11809] ? __lock_acquire+0x7b50/0x7b50 [ 304.036908][T11809] ? aa_get_newest_label+0xf5/0x5a0 [ 304.042112][T11809] should_fail+0x383/0x4b0 [ 304.046541][T11809] should_failslab+0x5/0x20 [ 304.051045][T11809] slab_pre_alloc_hook+0x51/0xc0 [ 304.055984][T11809] kmem_cache_alloc_trace+0x47/0x290 [ 304.061275][T11809] ? btf_new_fd+0x110/0x910 [ 304.065785][T11809] btf_new_fd+0x110/0x910 [ 304.070137][T11809] ? capable+0x84/0xe0 [ 304.074218][T11809] __sys_bpf+0x58c/0x6f0 [ 304.078470][T11809] ? bpf_link_show_fdinfo+0x380/0x380 [ 304.083845][T11809] ? rcu_nmi_exit+0x6f/0xf0 [ 304.088373][T11809] __x64_sys_bpf+0x78/0x90 [ 304.092798][T11809] do_syscall_64+0x4c/0xa0 [ 304.097211][T11809] ? clear_bhb_loop+0x30/0x80 [ 304.101886][T11809] ? clear_bhb_loop+0x30/0x80 [ 304.106566][T11809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.112465][T11809] RIP: 0033:0x7f9a714af0d9 [ 304.116877][T11809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.136476][T11809] RSP: 002b:00007f9a6f707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.144895][T11809] RAX: ffffffffffffffda RBX: 00007f9a71736fa0 RCX: 00007f9a714af0d9 [ 304.152870][T11809] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012 [ 304.160837][T11809] RBP: 00007f9a6f707090 R08: 0000000000000000 R09: 0000000000000000 [ 304.168895][T11809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.176862][T11809] R13: 00007f9a71737038 R14: 00007f9a71736fa0 R15: 00007ffff40e7568 [ 304.184845][T11809] [ 304.313646][T11815] device sit0 left promiscuous mode [ 304.507020][T11827] validate_nla: 3 callbacks suppressed [ 304.507036][T11827] netlink: 'syz.2.2043': attribute type 10 has an invalid length. [ 304.571016][T11837] netlink: 'syz.4.2046': attribute type 3 has an invalid length. [ 304.597395][T11838] netlink: 'syz.4.2046': attribute type 3 has an invalid length. [ 304.614986][T11837] netlink: 'syz.4.2046': attribute type 1 has an invalid length. [ 304.648124][T11838] netlink: 'syz.4.2046': attribute type 1 has an invalid length. [ 304.684287][T11837] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2046'. [ 304.835948][T11838] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2046'. [ 305.127519][T11854] netlink: 'syz.0.2049': attribute type 21 has an invalid length. [ 305.148912][T11854] netlink: 55039 bytes leftover after parsing attributes in process `syz.0.2049'. [ 305.538332][T11867] pimreg1: tun_chr_ioctl cmd 1074025677 [ 305.571589][T11867] pimreg1: linktype set to 768 [ 305.804138][T11894] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2061'. [ 305.824103][T11894] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2061'. [ 305.853956][T11894] tc_dump_action: action bad kind [ 306.482719][T11917] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2069'. [ 306.523396][T11919] 0: renamed from pim6reg1 [ 306.537991][T11916] delete_channel: no stack [ 307.000564][T11928] device syzkaller0 entered promiscuous mode [ 307.620023][T11946] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2078'. [ 307.813269][T11954] netlink: 'syz.0.2081': attribute type 39 has an invalid length. [ 308.567124][T11975] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 308.584467][T11975] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2086'. [ 309.332719][T11990] netlink: 'syz.4.2091': attribute type 29 has an invalid length. [ 309.366644][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 309.424584][T11990] netlink: 'syz.4.2091': attribute type 29 has an invalid length. [ 309.432706][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 311.224291][T12002] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2094'. [ 311.354846][T12006] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2095'. [ 312.626605][T12021] device veth1_macvtap left promiscuous mode [ 312.717442][T12022] device veth1_macvtap entered promiscuous mode [ 315.368926][T12050] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2108'. [ 315.429156][T12050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.565380][T12062] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2111'. [ 315.979052][ T4545] tipc: Subscription rejected, illegal request [ 316.089227][T12077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.515019][T12103] netlink: 'syz.4.2121': attribute type 21 has an invalid length. [ 317.041004][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.047411][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.317679][T12120] netlink: 'syz.2.2127': attribute type 2 has an invalid length. [ 317.333907][T12120] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2127'. [ 317.625660][T12130] netlink: 'syz.2.2129': attribute type 40 has an invalid length. [ 317.665827][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.555335][T12138] device syzkaller0 left promiscuous mode [ 319.916688][T12179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2143'. [ 320.141018][T12188] netlink: 'syz.3.2145': attribute type 29 has an invalid length. [ 320.171391][T12188] netlink: 'syz.3.2145': attribute type 29 has an invalid length. [ 320.325405][T12192] netlink: 'syz.1.2147': attribute type 3 has an invalid length. [ 320.361490][T12192] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2147'. [ 320.725025][T12202] netlink: 'syz.1.2149': attribute type 27 has an invalid length. [ 320.733128][T12202] netlink: 'syz.1.2149': attribute type 25 has an invalid length. [ 321.242451][T12212] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 321.339895][T12226] device sit0 entered promiscuous mode [ 322.510121][T12249] netlink: 'syz.4.2161': attribute type 2 has an invalid length. [ 322.616500][T12249] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2161'. [ 323.541557][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2172'. [ 324.175999][T12317] netlink: 'syz.3.2178': attribute type 10 has an invalid length. [ 324.219784][T12318] netlink: 'syz.3.2178': attribute type 10 has an invalid length. [ 325.057923][T12342] netlink: 'syz.1.2185': attribute type 49 has an invalid length. [ 325.335606][T12347] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2187'. [ 326.339387][T12376] netlink: 'syz.2.2195': attribute type 27 has an invalid length. [ 326.441745][T12376] netlink: 'syz.2.2195': attribute type 25 has an invalid length. [ 328.858371][T12445] netlink: 'syz.1.2210': attribute type 21 has an invalid length. [ 328.874121][T12445] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.2210'. [ 329.415574][T12461] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.2214'. [ 329.494559][T12463] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2214'. [ 329.550141][T12459] can: request_module (can-proto-5) failed. [ 329.716981][T12471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2216'. [ 329.787745][T12473] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2217'. [ 329.991337][T12473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.108306][T12473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.236523][T12473] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 330.391288][T12473] bond0 (unregistering): Released all slaves [ 330.506283][T12476] netlink: 'syz.1.2218': attribute type 21 has an invalid length. [ 330.730305][T12480] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2219'. [ 331.089957][T12491] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2222'. [ 331.105474][T12491] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 331.165339][T12493] syzkaller0: refused to change device tx_queue_len [ 331.185905][T12496] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.2224'. [ 331.396167][T12499] device syzkaller0 entered promiscuous mode [ 331.494543][T12502] netlink: 'syz.4.2226': attribute type 4 has an invalid length. [ 331.526444][T12505] netlink: 'syz.1.2227': attribute type 10 has an invalid length. [ 332.370748][T12518] device syzkaller0 entered promiscuous mode [ 332.910691][T12539] netlink: 'syz.2.2236': attribute type 10 has an invalid length. [ 332.943385][T12539] device veth0_vlan left promiscuous mode [ 332.969654][T12539] device veth0_vlan entered promiscuous mode [ 332.981840][T12539] team0: Device veth0_vlan failed to register rx_handler [ 333.413114][T12562] device sit0 entered promiscuous mode [ 333.713172][T12576] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2247'. [ 333.724458][T12578] netlink: 'syz.2.2247': attribute type 46 has an invalid length. [ 333.732506][T12578] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2247'. [ 334.378308][T12601] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2254'. [ 334.533390][T12605] netlink: 'syz.1.2256': attribute type 30 has an invalid length. [ 335.625994][T12625] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2262'. [ 335.719223][T12625] bond0: (slave bond_slave_0): Releasing backup interface [ 335.799236][T12625] device bond_slave_0 left promiscuous mode [ 335.858721][T12625] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 335.943285][T12651] netlink: 'syz.1.2269': attribute type 3 has an invalid length. [ 335.962699][T12651] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2269'. [ 336.000559][T12651] netlink: 'syz.1.2269': attribute type 10 has an invalid length. [ 336.042862][T12651] team0: Port device virt_wifi0 added [ 336.726464][T12678] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2278'. [ 336.930482][T12699] netlink: 'syz.0.2285': attribute type 2 has an invalid length. [ 337.158153][T12708] netlink: 'syz.2.2288': attribute type 29 has an invalid length. [ 337.206286][T12708] netlink: 'syz.2.2288': attribute type 29 has an invalid length. [ 337.248042][T12708] netlink: 'syz.2.2288': attribute type 29 has an invalid length. [ 337.281820][T12708] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 337.316439][T12708] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2288'. [ 337.355518][T12714] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2286'. [ 338.001839][T12729] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2292'. [ 338.053467][T12736] netlink: 'syz.4.2292': attribute type 49 has an invalid length. [ 338.745434][T12758] netlink: 'syz.4.2300': attribute type 2 has an invalid length. [ 338.753209][T12758] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2300'. [ 338.890158][T12758] device bridge_slave_1 left promiscuous mode [ 338.934189][T12758] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.975311][T12758] device bridge_slave_0 left promiscuous mode [ 339.010238][T12758] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.135366][T12769] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2302'. [ 339.719544][T12813] validate_nla: 1 callbacks suppressed [ 339.719590][T12813] netlink: 'syz.3.2314': attribute type 8 has an invalid length. [ 340.582478][T12870] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2330'. [ 340.784122][T12871] device syzkaller0 entered promiscuous mode [ 341.080851][T12880] netlink: 'syz.0.2333': attribute type 39 has an invalid length. [ 341.130197][T12880] device macvlan0 entered promiscuous mode [ 341.316947][T12893] device syzkaller0 entered promiscuous mode [ 341.351090][T12894] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 341.435803][T12893] netlink: 'syz.2.2337': attribute type 15 has an invalid length. [ 341.463994][T12893] netlink: 'syz.2.2337': attribute type 16 has an invalid length. [ 341.494285][T12893] netlink: 'syz.2.2337': attribute type 20 has an invalid length. [ 341.525195][T12893] netlink: 'syz.2.2337': attribute type 21 has an invalid length. [ 341.543413][T12893] netlink: 'syz.2.2337': attribute type 23 has an invalid length. [ 341.597020][T12893] netlink: 'syz.2.2337': attribute type 25 has an invalid length. [ 341.644692][T12893] netlink: 15862 bytes leftover after parsing attributes in process `syz.2.2337'. [ 342.009353][T12916] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2342'. [ 342.044697][T12916] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2342'. [ 342.067130][T12916] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2342'. [ 342.339218][T12932] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2349'. [ 342.722343][T12945] netlink: 'syz.1.2350': attribute type 4 has an invalid length. [ 343.306249][T12971] netlink: 'syz.3.2360': attribute type 3 has an invalid length. [ 343.337730][T12971] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2360'. [ 343.432406][T12976] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2361'. [ 343.638201][T12988] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2363'. [ 343.817147][T12988] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2363'. [ 347.118043][T13049] syz.2.2383[13049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.118161][T13049] syz.2.2383[13049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.492554][T13062] __nla_validate_parse: 2 callbacks suppressed [ 347.492569][T13062] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.2384'. [ 347.837547][T13062] openvswitch: netlink: Key type 4112 is out of range max 29 [ 348.160347][T13073] device syzkaller0 entered promiscuous mode [ 348.280676][T13089] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2390'. [ 348.432279][T13093] validate_nla: 4 callbacks suppressed [ 348.432293][T13093] netlink: 'syz.0.2392': attribute type 13 has an invalid length. [ 348.449007][T13093] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2392'. [ 348.461187][T13093] erspan0: refused to change device tx_queue_len [ 348.650776][T13112] netlink: 'syz.0.2397': attribute type 21 has an invalid length. [ 348.664076][T13110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.674383][T13110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.874124][T13124] netlink: 'syz.4.2400': attribute type 10 has an invalid length. [ 348.974470][T13124] team0: Device hsr_slave_0 failed to register rx_handler [ 349.016462][T13128] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2400'. [ 349.289841][T13128] netlink: 21648 bytes leftover after parsing attributes in process `syz.4.2400'. [ 349.333967][T13128] tipc: Started in network mode [ 349.354635][T13128] tipc: Node identity e, cluster identity 4711 [ 349.360827][T13128] tipc: Node number set to 14 [ 349.822511][T13144] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.2408'. [ 350.313985][T13171] netlink: 'syz.3.2414': attribute type 21 has an invalid length. [ 350.332220][T13171] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.347438][T13171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.354827][T13171] IPv6: NLM_F_CREATE should be set when creating new route [ 350.362401][T13171] IPv6: NLM_F_CREATE should be set when creating new route [ 350.386000][T13180] netlink: 'syz.1.2415': attribute type 8 has an invalid length. [ 350.403641][T13176] netlink: 'syz.3.2414': attribute type 21 has an invalid length. [ 350.434009][T13180] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2415'. [ 350.453998][T13176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.490760][T13183] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2415'. [ 350.623407][T13188] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2418'. [ 350.718525][ T4545] wlan1: Trigger new scan to find an IBSS to join [ 350.727607][T13188] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 350.971509][T13196] device pim6reg1 entered promiscuous mode [ 351.266674][T13208] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2425'. [ 351.485471][T13215] netlink: 'syz.2.2424': attribute type 29 has an invalid length. [ 351.960973][T13233] netlink: 'syz.2.2431': attribute type 3 has an invalid length. [ 353.416888][T13272] netlink: 'syz.1.2442': attribute type 4 has an invalid length. [ 353.764971][ T1229] wlan1: Trigger new scan to find an IBSS to join [ 353.957043][T13304] __nla_validate_parse: 4 callbacks suppressed [ 353.957060][T13304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2451'. [ 354.841154][T13323] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2457'. [ 354.908632][T13323] tc_dump_action: action bad kind [ 355.006065][T13332] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.2459'. [ 355.919658][T13371] device syzkaller0 entered promiscuous mode [ 356.794109][ T1229] wlan1: Trigger new scan to find an IBSS to join [ 356.959480][T13417] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2485'. [ 357.740297][ T4545] wlan1: Creating new IBSS network, BSSID 46:7c:e8:3b:0d:ae [ 358.126986][T13456] netlink: 'syz.1.2494': attribute type 21 has an invalid length. [ 358.180470][T13456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2494'. [ 358.285994][T13456] netlink: 'syz.1.2494': attribute type 25 has an invalid length. [ 358.356105][T13456] netlink: 'syz.1.2494': attribute type 28 has an invalid length. [ 358.763536][T13476] netlink: 'syz.1.2500': attribute type 9 has an invalid length. [ 358.879387][T13482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2502'. [ 358.958110][T13482] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2502'. [ 359.364721][T13510] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2509'. [ 359.896106][T13524] netlink: 'syz.3.2511': attribute type 21 has an invalid length. [ 359.920015][T13524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2511'. [ 360.049200][T13536] netlink: 'syz.1.2514': attribute type 19 has an invalid length. [ 360.074442][T13536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2514'. [ 360.113455][T13536] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2514'. [ 360.276786][T13536] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 360.319185][T13536] CPU: 1 PID: 13536 Comm: syz.1.2514 Not tainted syzkaller #0 [ 360.326788][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.336866][T13536] Call Trace: [ 360.340163][T13536] [ 360.343110][T13536] dump_stack_lvl+0x188/0x250 [ 360.347868][T13536] ? show_regs_print_info+0x20/0x20 [ 360.353092][T13536] ? load_image+0x410/0x410 [ 360.357719][T13536] sysfs_warn_dup+0x8a/0xa0 [ 360.362404][T13536] sysfs_do_create_link_sd+0xc0/0x110 [ 360.367806][T13536] device_add+0x83b/0x1050 [ 360.372327][T13536] wiphy_register+0x1e74/0x2c40 [ 360.377288][T13536] ? cfg80211_event_work+0x40/0x40 [ 360.382421][T13536] ? minstrel_ht_alloc+0x807/0x980 [ 360.387633][T13536] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 360.393955][T13536] ieee80211_register_hw+0x2a03/0x3a60 [ 360.399510][T13536] ? ieee80211_register_hw+0xa81/0x3a60 [ 360.405091][T13536] ? ieee80211_tasklet_handler+0x20/0x20 [ 360.411010][T13536] ? rcu_is_watching+0x11/0xa0 [ 360.415861][T13536] ? hrtimer_init+0x10c/0x220 [ 360.420629][T13536] mac80211_hwsim_new_radio+0x209d/0x4050 [ 360.426476][T13536] hwsim_new_radio_nl+0xa7d/0xc50 [ 360.431526][T13536] ? genl_rcv_msg+0xc8d/0xfa0 [ 360.436283][T13536] genl_rcv_msg+0xd0b/0xfa0 [ 360.440811][T13536] ? genl_bind+0x370/0x370 [ 360.445230][T13536] ? check_preemption_disabled+0x37/0x110 [ 360.451044][T13536] ? __dev_queue_xmit+0x1b64/0x2e50 [ 360.456304][T13536] ? verify_lock_unused+0x140/0x140 [ 360.461591][T13536] ? perf_trace_lock+0xe4/0x390 [ 360.466455][T13536] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 360.472818][T13536] netlink_rcv_skb+0x1e9/0x430 [ 360.477645][T13536] ? genl_bind+0x370/0x370 [ 360.482075][T13536] ? netlink_ack+0xb10/0xb10 [ 360.486691][T13536] ? down_read+0x1aa/0x2e0 [ 360.491180][T13536] genl_rcv+0x24/0x40 [ 360.495161][T13536] netlink_unicast+0x78f/0x940 [ 360.499947][T13536] netlink_sendmsg+0x8ba/0xbe0 [ 360.504730][T13536] ? netlink_getsockopt+0x570/0x570 [ 360.509946][T13536] ? aa_sock_msg_perm+0x94/0x150 [ 360.514972][T13536] ? apparmor_socket_sendmsg+0x88/0x230 [ 360.520532][T13536] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 360.525987][T13536] ? security_socket_sendmsg+0x7c/0xa0 [ 360.531582][T13536] ? netlink_getsockopt+0x570/0x570 [ 360.536788][T13536] ____sys_sendmsg+0x5be/0x8f0 [ 360.541625][T13536] ? __sys_sendmsg_sock+0x30/0x30 [ 360.546672][T13536] ? import_iovec+0x6f/0xa0 [ 360.551203][T13536] ___sys_sendmsg+0x236/0x2e0 [ 360.555899][T13536] ? __sys_sendmsg+0x290/0x290 [ 360.560686][T13536] ? lockdep_hardirqs_on+0x94/0x140 [ 360.565934][T13536] __se_sys_sendmsg+0x1b7/0x2a0 [ 360.570894][T13536] ? __x64_sys_sendmsg+0x80/0x80 [ 360.575938][T13536] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 360.581944][T13536] ? lockdep_hardirqs_on+0x94/0x140 [ 360.587153][T13536] do_syscall_64+0x4c/0xa0 [ 360.591569][T13536] ? clear_bhb_loop+0x30/0x80 [ 360.596319][T13536] ? clear_bhb_loop+0x30/0x80 [ 360.601006][T13536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.606909][T13536] RIP: 0033:0x7f9a714af0d9 [ 360.611329][T13536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.630957][T13536] RSP: 002b:00007f9a6f707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.639384][T13536] RAX: ffffffffffffffda RBX: 00007f9a71736fa0 RCX: 00007f9a714af0d9 [ 360.647366][T13536] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 360.655344][T13536] RBP: 00007f9a71546024 R08: 0000000000000000 R09: 0000000000000000 [ 360.663318][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.671289][T13536] R13: 00007f9a71737038 R14: 00007f9a71736fa0 R15: 00007ffff40e7568 [ 360.679281][T13536] [ 360.739131][T13550] IPv6: Can't replace route, no match found [ 360.993264][T13562] netlink: 127968 bytes leftover after parsing attributes in process `syz.2.2520'. [ 361.313374][T13578] netlink: 'syz.3.2526': attribute type 5 has an invalid length. [ 361.694723][T13590] netlink: 'syz.4.2529': attribute type 21 has an invalid length. [ 361.777364][T13590] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2529'. [ 361.841291][T13598] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2532'. [ 361.867705][T13598] mac80211_hwsim hwsim5 .3c: renamed from wlan1 [ 362.049045][T13610] netlink: 'syz.4.2535': attribute type 29 has an invalid length. [ 362.057437][T13611] netlink: 'syz.4.2535': attribute type 29 has an invalid length. [ 362.870370][T13642] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2541'. [ 363.121149][T13647] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2543'. [ 363.531209][T13659] validate_nla: 5 callbacks suppressed [ 363.531227][T13659] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 363.926338][T13679] sock: sock_timestamping_bind_phc: sock not bind to device [ 364.020444][T13672] netlink: 'syz.1.2550': attribute type 21 has an invalid length. [ 364.029584][T13677] netlink: 'syz.3.2552': attribute type 8 has an invalid length. [ 364.039626][T13677] netlink: 'syz.3.2552': attribute type 9 has an invalid length. [ 364.048815][T13677] netlink: 'syz.3.2552': attribute type 10 has an invalid length. [ 364.057071][T13677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2552'. [ 364.476714][T13678] chnl_net:caif_netlink_parms(): no params data found [ 364.791493][T13678] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.838976][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.888402][T13678] device bridge_slave_0 entered promiscuous mode [ 364.919439][T13678] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.016882][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.109189][T13678] device bridge_slave_1 entered promiscuous mode [ 365.353252][T13678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.428905][T13678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.585459][T13678] team0: Port device team_slave_0 added [ 365.608577][T13678] team0: Port device team_slave_1 added [ 365.697561][T13678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.736415][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.798991][T13678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.818241][T13721] device wlan1 entered promiscuous mode [ 365.832519][T13678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.880742][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.928981][T13728] netlink: 'syz.2.2562': attribute type 3 has an invalid length. [ 365.947276][T13678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.970355][T13728] __nla_validate_parse: 1 callbacks suppressed [ 365.970390][T13728] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2562'. [ 366.075570][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 366.118797][T13678] device hsr_slave_0 entered promiscuous mode [ 366.164932][T13678] device hsr_slave_1 entered promiscuous mode [ 366.181910][T13678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.200304][T13678] Cannot create hsr debugfs directory [ 366.608220][T13765] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2571'. [ 366.625912][T13678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.663467][T13765] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.2571'. [ 366.806087][T13678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.943333][T13786] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2577'. [ 366.945968][T13678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.031785][T13786] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 367.110123][T13678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.158241][T13799] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2580'. [ 367.179170][T13799] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 367.209710][T13799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.236530][T13805] netlink: 'syz.2.2581': attribute type 21 has an invalid length. [ 367.247773][T13805] netlink: 'syz.2.2581': attribute type 7 has an invalid length. [ 367.276885][T13801] netlink: 'syz.2.2581': attribute type 9 has an invalid length. [ 367.438107][T13678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.499618][T13678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.515000][T13815] netlink: 'syz.3.2585': attribute type 3 has an invalid length. [ 367.523058][T13815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2585'. [ 367.527755][T13799] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2580'. [ 367.566888][ T154] tipc: Left network mode [ 367.572610][T13678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.601419][T13678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.755799][T13819] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2586'. [ 367.758987][T13818] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2587'. [ 367.813382][T13678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.824987][T13818] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2587'. [ 367.842724][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.859293][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.882765][T13678] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.980047][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.078488][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.090533][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.097686][ T4549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.135757][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.147718][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.164598][T10960] Bluetooth: hci4: command 0x041b tx timeout [ 368.172439][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.191838][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.199013][ T4549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.251817][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.279837][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.411186][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.427230][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.449907][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.472563][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.489072][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.537729][T13859] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 368.560852][T13678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.583841][T13678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.607735][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.625298][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.641049][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 368.651288][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.664629][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.050263][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.060750][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.080457][T13678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.386578][T13903] sctp: [Deprecated]: syz.2.2610 (pid 13903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.386578][T13903] Use struct sctp_sack_info instead [ 369.392719][T13893] device syzkaller0 entered promiscuous mode [ 369.489927][T13911] validate_nla: 4 callbacks suppressed [ 369.489944][T13911] netlink: 'syz.1.2612': attribute type 10 has an invalid length. [ 369.531795][T13911] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 369.817758][T13919] tc_dump_action: action bad kind [ 370.041605][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.072272][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.129945][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.178797][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.211087][T13678] device veth0_vlan entered promiscuous mode [ 370.234231][T10964] Bluetooth: hci4: command 0x040f tx timeout [ 370.263109][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.272846][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.306686][T13678] device veth1_vlan entered promiscuous mode [ 370.402957][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 370.413099][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 370.429530][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.443370][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.456795][T13678] device veth0_macvtap entered promiscuous mode [ 370.501113][T13678] device veth1_macvtap entered promiscuous mode [ 370.578389][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.590123][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.605591][T13678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.629300][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.677976][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.708383][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.733511][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.771783][T13678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.829807][T13678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.884970][T13678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.004371][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.034935][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.054808][T13678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.071074][T13678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.080750][T13678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.094478][T13678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.366109][T13989] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 371.468450][ T4535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.491431][ T4535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.547827][ T154] team0: Port device wlan1 removed [ 371.566777][T14003] __nla_validate_parse: 11 callbacks suppressed [ 371.566794][T14003] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2638'. [ 371.601351][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.670231][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.677322][T14008] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2640'. [ 371.692380][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.718774][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.875665][ T154] nr0: port 1(hsr0) entered disabled state [ 371.934180][ T154] device hsr_slave_0 left promiscuous mode [ 371.990028][ T154] device hsr_slave_1 left promiscuous mode [ 372.037541][ T154] device veth1_macvtap left promiscuous mode [ 372.061364][ T154] device veth0_macvtap left promiscuous mode [ 372.259928][T14040] netlink: 'syz.3.2648': attribute type 10 has an invalid length. [ 372.273404][T14040] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2648'. [ 372.287404][T14038] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2649'. [ 372.313892][T10060] Bluetooth: hci4: command 0x0419 tx timeout [ 372.502552][ T154] team0 (unregistering): Port device team_slave_1 removed [ 372.519563][ T154] team0 (unregistering): Port device team_slave_0 removed [ 372.532129][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.612895][ T154] bond0 (unregistering): Released all slaves [ 372.645446][T14040] netlink: 'syz.3.2648': attribute type 10 has an invalid length. [ 372.678841][T14040] device bridge_slave_1 entered promiscuous mode [ 372.698093][T14040] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 373.033276][T14065] netlink: 'syz.0.2657': attribute type 3 has an invalid length. [ 373.090266][T14069] netlink: 'syz.1.2658': attribute type 17 has an invalid length. [ 373.115170][T14065] netlink: 'syz.0.2657': attribute type 1 has an invalid length. [ 373.123032][T14065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2657'. [ 373.146426][T14069] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2658'. [ 373.161853][T14069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 373.243774][T14069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.293419][T14070] netlink: 1150 bytes leftover after parsing attributes in process `syz.1.2658'. [ 373.755042][T14092] netlink: 'syz.3.2665': attribute type 10 has an invalid length. [ 373.802533][T14092] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2665'. [ 373.868269][T14093] netlink: 'syz.3.2665': attribute type 10 has an invalid length. [ 373.887607][T14101] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2668'. [ 374.160856][T14117] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2673'. [ 374.284274][T14117] netlink: 'syz.1.2673': attribute type 29 has an invalid length. [ 374.343579][T14122] netlink: 'syz.0.2674': attribute type 3 has an invalid length. [ 374.376707][T14114] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.475700][T14120] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 374.546131][T14120] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 374.644390][T14120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.003065][T14138] delete_channel: no stack [ 375.021297][T14138] delete_channel: no stack [ 376.299675][T14187] validate_nla: 3 callbacks suppressed [ 376.299709][T14187] netlink: 'syz.3.2696': attribute type 21 has an invalid length. [ 376.339292][T14193] netlink: 'syz.1.2699': attribute type 29 has an invalid length. [ 376.350970][T14187] device lo entered promiscuous mode [ 376.369120][T14187] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 376.441464][T14193] netlink: 'syz.1.2699': attribute type 29 has an invalid length. [ 376.472279][T14195] netlink: 'syz.1.2699': attribute type 29 has an invalid length. [ 376.485483][T14199] netlink: 'syz.1.2699': attribute type 29 has an invalid length. [ 376.516721][T14193] netlink: 'syz.1.2699': attribute type 29 has an invalid length. [ 376.652685][T14206] netlink: 'syz.0.2702': attribute type 46 has an invalid length. [ 376.661795][ T4543] tipc: Subscription rejected, illegal request [ 376.677830][T14206] __nla_validate_parse: 5 callbacks suppressed [ 376.677846][T14206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2702'. [ 376.697134][T14207] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2703'. [ 377.692130][T14231] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2709'. [ 377.768778][T14231] netlink: 22796 bytes leftover after parsing attributes in process `syz.2.2709'. [ 378.035464][T14242] netlink: 'syz.4.2714': attribute type 3 has an invalid length. [ 378.074389][T14242] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2714'. [ 378.485721][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.492033][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.837861][T14274] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2721'. [ 381.200977][T14256] ODEBUG: Out of memory. ODEBUG disabled [ 382.539363][T14295] netlink: 'syz.0.2728': attribute type 3 has an invalid length. [ 382.574002][T14295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2728'. [ 382.627211][T14294] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2728'. [ 382.728666][T14300] netlink: 'syz.1.2731': attribute type 10 has an invalid length. [ 382.763095][T14300] netlink: 'syz.1.2731': attribute type 4 has an invalid length. [ 382.783263][T14300] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2731'. [ 382.796103][T14309] sctp: [Deprecated]: syz.2.2732 (pid 14309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.796103][T14309] Use struct sctp_sack_info instead [ 382.821951][T14300] virt_wifi0: mtu greater than device maximum [ 382.829166][T14300] team0: Device virt_wifi0 failed to change mtu [ 383.397668][T14338] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2738'. [ 384.471778][T14375] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2747'. [ 384.683350][T14393] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2765'. [ 385.068106][T14400] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2755'. [ 385.451659][T14420] netlink: 'syz.1.2759': attribute type 4 has an invalid length. [ 385.481469][T14421] netlink: 'syz.0.2760': attribute type 29 has an invalid length. [ 385.500582][T14420] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.2759'. [ 385.527328][T14421] netlink: 'syz.0.2760': attribute type 29 has an invalid length. [ 385.589583][T14421] netlink: 'syz.0.2760': attribute type 29 has an invalid length. [ 386.093442][T14432] netlink: 'syz.3.2763': attribute type 10 has an invalid length. [ 386.121944][T14432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2763'. [ 386.207076][T14432] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2763'. [ 386.308182][T14432] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 386.325290][T14446] netlink: 'syz.1.2769': attribute type 4 has an invalid length. [ 387.995338][T14501] device syzkaller0 entered promiscuous mode [ 388.299583][T14508] device syzkaller0 entered promiscuous mode [ 388.524828][T14518] netlink: 'syz.2.2788': attribute type 9 has an invalid length. [ 388.542911][T14518] __nla_validate_parse: 3 callbacks suppressed [ 388.542929][T14518] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2788'. [ 388.677317][T14522] netlink: 'syz.2.2788': attribute type 9 has an invalid length. [ 388.694684][T14522] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2788'. [ 389.334088][T14557] device syzkaller0 entered promiscuous mode [ 389.347524][T14560] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.373095][T14560] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2803'. [ 389.488850][T14570] netlink: 'syz.2.2806': attribute type 7 has an invalid length. [ 389.498123][T14570] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2806'. [ 389.540492][T14562] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2802'. [ 389.562270][T14573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2807'. [ 389.592099][T14571] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2802'. [ 389.666231][T14573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2807'. [ 389.703380][T14581] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2807'. [ 389.746284][T14588] netlink: 'syz.1.2810': attribute type 7 has an invalid length. [ 389.995005][ T4543] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 390.035100][T14606] netlink: 'syz.1.2816': attribute type 1 has an invalid length. [ 390.063523][T14606] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2816'. [ 390.620461][T14632] netlink: 'syz.4.2822': attribute type 3 has an invalid length. [ 390.679818][T14637] netlink: 'syz.4.2822': attribute type 3 has an invalid length. [ 390.704553][T14632] netlink: 'syz.4.2822': attribute type 4 has an invalid length. [ 390.720053][T14637] netlink: 'syz.4.2822': attribute type 4 has an invalid length. [ 390.961432][T14648] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.968899][T14648] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.106057][T14658] netlink: 'syz.2.2831': attribute type 10 has an invalid length. [ 392.157785][T14720] device sit0 left promiscuous mode [ 392.278468][T14722] device sit0 entered promiscuous mode [ 392.690287][T14743] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 393.625382][T14773] validate_nla: 9 callbacks suppressed [ 393.625398][T14773] netlink: 'syz.2.2863': attribute type 10 has an invalid length. [ 393.680654][T14773] team0: Device wg1 is of different type [ 393.716344][T14776] netlink: 'syz.1.2865': attribute type 7 has an invalid length. [ 393.738686][T14776] __nla_validate_parse: 11 callbacks suppressed [ 393.738705][T14776] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2865'. [ 393.792724][T14781] netlink: 'syz.0.2866': attribute type 1 has an invalid length. [ 393.813938][T14781] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2866'. [ 394.331404][T14815] netlink: 'syz.4.2875': attribute type 3 has an invalid length. [ 394.361941][T14815] netlink: 'syz.4.2875': attribute type 1 has an invalid length. [ 394.380384][T14815] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2875'. [ 394.477791][T14825] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.2878'. [ 395.105255][T14841] netlink: 'syz.3.2883': attribute type 39 has an invalid length. [ 395.328160][T14841] device hsr_slave_0 left promiscuous mode [ 395.384143][T14846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2885'. [ 395.406622][T14846] : renamed from caif0 [ 395.486983][T14846] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 395.535051][T14851] netlink: 'syz.2.2887': attribute type 10 has an invalid length. [ 395.544602][T14848] netlink: 'syz.1.2886': attribute type 10 has an invalid length. [ 395.647630][T14848] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.794578][T14848] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 395.934908][T14863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2890'. [ 395.963047][T14863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2890'. [ 396.227335][T14873] netlink: 'syz.1.2894': attribute type 9 has an invalid length. [ 396.269335][T14875] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2893'. [ 396.285880][T14873] netlink: 181676 bytes leftover after parsing attributes in process `syz.1.2894'. [ 397.127188][T14935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2911'. [ 398.162922][T14990] netlink: 'syz.2.2930': attribute type 4 has an invalid length. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.