last executing test programs: 2.614053012s ago: executing program 1 (id=8449): socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socket$kcm(0x25, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x5, 0x96, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x5, 0x2200, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 2.503334688s ago: executing program 1 (id=8451): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.228455853s ago: executing program 1 (id=8456): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.985924137s ago: executing program 4 (id=8462): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.882699093s ago: executing program 1 (id=8463): socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socket$kcm(0x25, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x5, 0x96, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x5, 0x2200, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 1.710600823s ago: executing program 1 (id=8466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.625863258s ago: executing program 4 (id=8467): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) 1.575213791s ago: executing program 2 (id=8469): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) 1.547219662s ago: executing program 4 (id=8470): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x35, 0x0, 0xfcd8) 1.390229321s ago: executing program 2 (id=8472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.360242873s ago: executing program 0 (id=8473): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x900, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.253867689s ago: executing program 4 (id=8474): syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x5}, 0x14105, 0x2f, 0xff7ffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xc, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(r1, &(0x7f0000000580)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'm\x00'}, 0x8) write$cgroup_devices(r3, 0x0, 0x9) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.253552659s ago: executing program 0 (id=8475): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.167948103s ago: executing program 3 (id=8476): socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socket$kcm(0x25, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x5, 0x96, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x5, 0x2200, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 940.863316ms ago: executing program 2 (id=8477): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 825.971603ms ago: executing program 0 (id=8478): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x35, 0x0, 0x0, 0x8}, {0x2}, {0x6, 0xda}]}) 812.854183ms ago: executing program 3 (id=8479): socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000040)}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) 788.729035ms ago: executing program 2 (id=8480): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x41, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb, 0x0, 0x0, 0xf00}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) 541.993459ms ago: executing program 0 (id=8481): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e0000001801000020696c0b00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a0fd0000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8) 535.037859ms ago: executing program 2 (id=8482): syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x5}, 0x14105, 0x2f, 0xff7ffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xc, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'm\x00'}, 0x8) write$cgroup_devices(r3, 0x0, 0x9) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 534.847069ms ago: executing program 3 (id=8483): sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0xa000) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) 504.3432ms ago: executing program 4 (id=8484): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) 404.454697ms ago: executing program 0 (id=8485): r0 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) 310.936961ms ago: executing program 4 (id=8486): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 310.288572ms ago: executing program 3 (id=8487): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%pK \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r2, r0, 0x4, 0x3, 0x2}, 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) 205.902428ms ago: executing program 0 (id=8488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) 133.119742ms ago: executing program 3 (id=8489): socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socket$kcm(0x25, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x5, 0x96, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x5, 0x2200, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 45.190007ms ago: executing program 2 (id=8490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x7, 0xfffffffc, {0xa, 0x4e28, 0x3, @private0, 0x7}}}, 0x80, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='\b\x00'}) 44.412907ms ago: executing program 1 (id=8491): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 0s ago: executing program 3 (id=8492): socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) kernel console output (not intermixed with test programs): sing attributes in process `syz.0.5336'. [ 969.556328][T20575] netlink: 'syz.0.5336': attribute type 5 has an invalid length. [ 969.576564][T20575] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5336'. [ 969.741656][T20582] device syzkaller0 entered promiscuous mode [ 970.097286][T20599] netlink: 'syz.2.5340': attribute type 16 has an invalid length. [ 970.105359][T20599] netlink: 'syz.2.5340': attribute type 3 has an invalid length. [ 970.118848][T20599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5340'. [ 970.337493][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5341'. [ 970.896634][T20632] netlink: 'syz.0.5350': attribute type 21 has an invalid length. [ 970.944802][T20632] netlink: 'syz.0.5350': attribute type 5 has an invalid length. [ 971.000168][T20634] device syzkaller0 entered promiscuous mode [ 972.114795][T20658] __nla_validate_parse: 4 callbacks suppressed [ 972.114848][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5359'. [ 972.240761][T20668] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5366'. [ 972.509834][T20678] device syzkaller0 entered promiscuous mode [ 972.518423][T20677] validate_nla: 2 callbacks suppressed [ 972.518460][T20677] netlink: 'syz.2.5372': attribute type 21 has an invalid length. [ 972.533228][T20677] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5372'. [ 972.548340][T20677] netlink: 'syz.2.5372': attribute type 5 has an invalid length. [ 972.563141][T20677] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5372'. [ 972.573740][T20686] netlink: 'syz.1.5373': attribute type 21 has an invalid length. [ 972.582429][T20686] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5373'. [ 972.592191][T20686] netlink: 'syz.1.5373': attribute type 5 has an invalid length. [ 972.600661][T20686] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5373'. [ 973.050894][T20710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5377'. [ 973.939744][T20726] netlink: 'syz.3.5385': attribute type 21 has an invalid length. [ 973.965584][T20726] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5385'. [ 973.982849][T20726] netlink: 'syz.3.5385': attribute type 5 has an invalid length. [ 973.992098][T20726] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5385'. [ 974.092036][T20729] device syzkaller0 entered promiscuous mode [ 974.464247][T20744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5390'. [ 974.866475][T20778] netlink: 'syz.4.5403': attribute type 21 has an invalid length. [ 974.887085][T20778] netlink: 'syz.4.5403': attribute type 5 has an invalid length. [ 975.269724][T20794] device syzkaller0 entered promiscuous mode [ 975.703031][T20803] delete_channel: no stack [ 976.245109][T20835] netlink: 'syz.4.5420': attribute type 21 has an invalid length. [ 976.286849][T20835] netlink: 'syz.4.5420': attribute type 5 has an invalid length. [ 976.645353][T20858] device syzkaller0 entered promiscuous mode [ 977.380731][T20896] __nla_validate_parse: 17 callbacks suppressed [ 977.380771][T20896] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5441'. [ 977.460345][T20896] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5441'. [ 980.870957][T20925] device syzkaller0 entered promiscuous mode [ 981.005132][T20928] device syzkaller0 entered promiscuous mode [ 981.262901][T20950] validate_nla: 2 callbacks suppressed [ 981.262940][T20950] netlink: 'syz.2.5459': attribute type 21 has an invalid length. [ 981.281763][T20950] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5459'. [ 981.293504][T20950] netlink: 'syz.2.5459': attribute type 5 has an invalid length. [ 981.302934][T20950] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5459'. [ 981.463756][T20961] netlink: 'syz.4.5462': attribute type 21 has an invalid length. [ 981.519740][T20961] netlink: 'syz.4.5462': attribute type 1 has an invalid length. [ 981.530196][T20963] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.5464'. [ 982.668805][T20992] device syzkaller0 entered promiscuous mode [ 982.745442][T20991] device syzkaller0 entered promiscuous mode [ 982.932794][T21006] netlink: 'syz.1.5479': attribute type 21 has an invalid length. [ 982.944481][T21006] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5479'. [ 982.963131][T21006] netlink: 'syz.1.5479': attribute type 5 has an invalid length. [ 982.971638][T21006] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5479'. [ 983.024807][T21010] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.5481'. [ 983.217584][T21023] netlink: 'syz.0.5484': attribute type 21 has an invalid length. [ 983.225580][T21023] netlink: 'syz.0.5484': attribute type 1 has an invalid length. [ 984.272946][T21042] device syzkaller0 entered promiscuous mode [ 984.371786][T21052] device syzkaller0 entered promiscuous mode [ 984.502886][T21059] netlink: 'syz.1.5497': attribute type 21 has an invalid length. [ 984.552027][T21059] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5497'. [ 984.562013][T21059] netlink: 'syz.1.5497': attribute type 5 has an invalid length. [ 984.570295][T21059] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5497'. [ 984.857676][T21077] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.5500'. [ 984.858952][T21069] device syzkaller0 entered promiscuous mode [ 985.872939][T21082] device syzkaller0 entered promiscuous mode [ 986.293525][T21114] netlink: 'syz.1.5515': attribute type 21 has an invalid length. [ 986.317871][T21114] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5515'. [ 986.351529][T21114] netlink: 'syz.1.5515': attribute type 5 has an invalid length. [ 986.402729][T21114] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5515'. [ 986.601397][T21130] device syzkaller0 entered promiscuous mode [ 986.645997][T21132] device syzkaller0 entered promiscuous mode [ 987.600888][T21169] IPv6: NLM_F_CREATE should be specified when creating new route [ 987.940093][T21186] device syzkaller0 entered promiscuous mode [ 988.028750][T21193] device syzkaller0 entered promiscuous mode [ 989.158801][T21240] device syzkaller0 entered promiscuous mode [ 989.274886][T21251] device syzkaller0 entered promiscuous mode [ 990.212682][T21266] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5569'. [ 990.252031][T21269] netlink: 'syz.2.5571': attribute type 3 has an invalid length. [ 990.282270][T21269] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5571'. [ 990.648869][T21288] device syzkaller0 entered promiscuous mode [ 990.897069][T21301] device syzkaller0 entered promiscuous mode [ 991.382108][T21306] netlink: 'syz.0.5582': attribute type 21 has an invalid length. [ 991.390922][T21306] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5582'. [ 991.400542][T21306] netlink: 'syz.0.5582': attribute type 5 has an invalid length. [ 991.410280][T21306] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5582'. [ 991.712138][T21338] device syzkaller0 entered promiscuous mode [ 992.281953][T21373] netlink: 'syz.2.5604': attribute type 21 has an invalid length. [ 992.316936][T21373] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5604'. [ 992.351604][T21373] netlink: 'syz.2.5604': attribute type 5 has an invalid length. [ 992.382968][T21373] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5604'. [ 992.439222][T21378] device syzkaller0 entered promiscuous mode [ 992.748690][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.755344][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.902442][T21417] device syzkaller0 entered promiscuous mode [ 996.714152][T21443] netlink: 'syz.1.5625': attribute type 21 has an invalid length. [ 997.074141][T21449] netlink: 'syz.2.5627': attribute type 3 has an invalid length. [ 997.088841][T21454] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5630'. [ 997.092980][T21449] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.5627'. [ 997.409581][T21473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5639'. [ 997.714613][T21481] device syzkaller0 entered promiscuous mode [ 998.099382][T21499] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5649'. [ 998.272311][T21506] netlink: 'syz.4.5652': attribute type 3 has an invalid length. [ 998.306330][T21506] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.5652'. [ 998.423722][T21511] device syzkaller0 entered promiscuous mode [ 998.489841][T21516] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5654'. [ 999.110529][T21542] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5664'. [ 999.385630][T21557] netlink: 'syz.3.5668': attribute type 3 has an invalid length. [ 999.437719][T21557] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.5668'. [ 999.574650][T21564] device syzkaller0 entered promiscuous mode [ 999.601188][T21563] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5671'. [ 1000.366949][T21584] netlink: 'syz.4.5679': attribute type 21 has an invalid length. [ 1000.615035][T21590] device syzkaller0 entered promiscuous mode [ 1000.663013][T21596] device syzkaller0 entered promiscuous mode [ 1001.562762][T21622] netlink: 'syz.3.5696': attribute type 21 has an invalid length. [ 1002.306488][T21647] device syzkaller0 entered promiscuous mode [ 1002.394863][T21649] device syzkaller0 entered promiscuous mode [ 1003.676882][T21695] @ÿ: renamed from bond_slave_0 [ 1004.021806][T21700] device syzkaller0 entered promiscuous mode [ 1004.179173][T21703] device syzkaller0 entered promiscuous mode [ 1004.458338][T21711] netlink: 'syz.3.5731': attribute type 21 has an invalid length. [ 1005.961714][T21746] device syzkaller0 entered promiscuous mode [ 1010.075226][T21812] @ÿ: renamed from bond_slave_0 [ 1010.551931][T21839] device syzkaller0 entered promiscuous mode [ 1010.825697][T21855] device syzkaller0 entered promiscuous mode [ 1010.855282][T21860] @ÿ: renamed from bond_slave_0 [ 1011.433242][T21888] device syzkaller0 entered promiscuous mode [ 1012.025005][T21926] netlink: 'syz.3.5815': attribute type 29 has an invalid length. [ 1012.083115][T21920] device syzkaller0 entered promiscuous mode [ 1012.123575][T21926] netlink: 'syz.3.5815': attribute type 29 has an invalid length. [ 1012.422360][T21930] netlink: 'syz.3.5815': attribute type 29 has an invalid length. [ 1012.431015][T21942] IPv6: Can't replace route, no match found [ 1012.444222][T21932] netlink: 'syz.3.5815': attribute type 29 has an invalid length. [ 1012.645627][T21949] device syzkaller0 entered promiscuous mode [ 1013.432983][T21998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1013.466144][T21998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1013.492476][T22002] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5851'. [ 1013.510839][T22002] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1013.522467][T21998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1013.595468][T22007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1013.816017][T22015] device syzkaller0 entered promiscuous mode [ 1017.304160][T22059] device syzkaller0 entered promiscuous mode [ 1017.724371][T22079] device syzkaller0 entered promiscuous mode [ 1018.419412][T22119] device syzkaller0 entered promiscuous mode [ 1021.337545][T22131] netlink: 'syz.1.5897': attribute type 21 has an invalid length. [ 1021.357642][T22131] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5897'. [ 1021.393568][T22131] netlink: 'syz.1.5897': attribute type 5 has an invalid length. [ 1021.449000][T22131] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5897'. [ 1021.773321][T22147] device syzkaller0 entered promiscuous mode [ 1022.330110][T22173] device syzkaller0 entered promiscuous mode [ 1022.589090][T22193] netlink: 'syz.3.5909': attribute type 21 has an invalid length. [ 1022.620446][T22193] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5909'. [ 1022.630986][T22193] netlink: 'syz.3.5909': attribute type 5 has an invalid length. [ 1022.641666][T22193] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5909'. [ 1022.882394][T22203] device syzkaller0 entered promiscuous mode [ 1023.402508][T22229] device syzkaller0 entered promiscuous mode [ 1023.445689][T22238] netlink: 'syz.2.5925': attribute type 21 has an invalid length. [ 1023.459755][T22238] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5925'. [ 1023.473192][T22238] netlink: 'syz.2.5925': attribute type 5 has an invalid length. [ 1023.481903][T22238] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5925'. [ 1023.959653][T22258] device syzkaller0 entered promiscuous mode [ 1024.533277][T22281] netlink: 'syz.2.5939': attribute type 21 has an invalid length. [ 1024.547490][T22281] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1024.559258][T22281] netlink: 'syz.2.5939': attribute type 5 has an invalid length. [ 1024.607478][T22281] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1025.462441][T22314] device syzkaller0 entered promiscuous mode [ 1026.469417][T22369] device syzkaller0 entered promiscuous mode [ 1027.423776][T22427] device syzkaller0 entered promiscuous mode [ 1032.022714][T22511] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6016'. [ 1032.220648][T22518] device syzkaller0 entered promiscuous mode [ 1035.866529][T22553] device syzkaller0 entered promiscuous mode [ 1036.161453][T22573] netlink: 'syz.1.6036': attribute type 4 has an invalid length. [ 1036.198983][T22573] netlink: 'syz.1.6036': attribute type 1 has an invalid length. [ 1036.234446][T22573] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6036'. [ 1036.785456][T22601] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6049'. [ 1037.084340][T22611] device syzkaller0 entered promiscuous mode [ 1038.117750][T22661] device syzkaller0 entered promiscuous mode [ 1039.030579][T22695] netlink: 'syz.0.6083': attribute type 11 has an invalid length. [ 1039.378852][T22711] device syzkaller0 entered promiscuous mode [ 1039.769027][T22726] netlink: 'syz.0.6104': attribute type 4 has an invalid length. [ 1039.788034][T22726] netlink: 'syz.0.6104': attribute type 1 has an invalid length. [ 1039.824096][T22726] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6104'. [ 1039.911459][T22734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1039.960716][T22734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1040.009980][T22734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1040.020492][T22734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1040.377335][T22751] netlink: 'syz.2.6106': attribute type 11 has an invalid length. [ 1041.587134][T22824] device syzkaller0 entered promiscuous mode [ 1041.669997][T22835] netlink: 'syz.3.6131': attribute type 9 has an invalid length. [ 1041.688382][T22835] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6131'. [ 1041.706964][T22831] device syzkaller0 entered promiscuous mode [ 1042.010624][T22837] netlink: 'syz.3.6131': attribute type 9 has an invalid length. [ 1042.067966][T22837] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6131'. [ 1042.311489][T22859] netlink: 'syz.1.6139': attribute type 29 has an invalid length. [ 1042.340585][T22859] netlink: 'syz.1.6139': attribute type 29 has an invalid length. [ 1042.390125][T22859] netlink: 'syz.1.6139': attribute type 29 has an invalid length. [ 1042.419435][T22859] netlink: 'syz.1.6139': attribute type 29 has an invalid length. [ 1042.668795][T22875] device syzkaller0 entered promiscuous mode [ 1043.181447][T22898] netlink: 'syz.4.6154': attribute type 10 has an invalid length. [ 1043.205652][T22898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6154'. [ 1043.671928][T22928] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1043.703219][T22921] device syzkaller0 entered promiscuous mode [ 1044.673262][T22976] netlink: 'syz.3.6182': attribute type 21 has an invalid length. [ 1044.690361][T22978] netlink: 'syz.1.6180': attribute type 9 has an invalid length. [ 1044.704667][T22976] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6182'. [ 1044.714379][T22978] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6180'. [ 1044.726854][T22976] netlink: 'syz.3.6182': attribute type 5 has an invalid length. [ 1044.846309][T22985] __nla_validate_parse: 1 callbacks suppressed [ 1044.846327][T22985] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6180'. [ 1045.282060][T23015] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6195'. [ 1045.761660][T23044] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6203'. [ 1045.772315][T23036] device syzkaller0 entered promiscuous mode [ 1045.815652][T23045] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6203'. [ 1049.860852][T23114] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6226'. [ 1050.016950][T23119] validate_nla: 3 callbacks suppressed [ 1050.016988][T23119] netlink: 'syz.3.6230': attribute type 21 has an invalid length. [ 1050.062481][T23119] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1050.085682][T23119] netlink: 'syz.3.6230': attribute type 5 has an invalid length. [ 1050.133831][T23119] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1050.335526][T23134] device syzkaller0 entered promiscuous mode [ 1050.788033][T23157] sock: sock_timestamping_bind_phc: sock not bind to device [ 1051.131353][T23164] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6242'. [ 1051.510124][T23178] device syzkaller0 entered promiscuous mode [ 1052.017689][T23208] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6257'. [ 1052.165212][T23212] netlink: 'syz.1.6258': attribute type 21 has an invalid length. [ 1052.185447][T23212] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6258'. [ 1052.194688][T23212] netlink: 'syz.1.6258': attribute type 5 has an invalid length. [ 1052.203301][T23212] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6258'. [ 1052.398824][T23221] device syzkaller0 entered promiscuous mode [ 1052.685821][T23231] netlink: 'syz.0.6274': attribute type 21 has an invalid length. [ 1052.697051][T23231] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6274'. [ 1052.718193][T23231] netlink: 'syz.0.6274': attribute type 5 has an invalid length. [ 1052.732523][T23231] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6274'. [ 1052.935698][T23244] device syzkaller0 entered promiscuous mode [ 1053.221057][T23258] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1053.428199][T23263] device syzkaller0 entered promiscuous mode [ 1053.749393][T23274] device syzkaller0 entered promiscuous mode [ 1054.188110][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.194660][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.432473][T23304] device syzkaller0 entered promiscuous mode [ 1054.939640][T23342] netlink: 'syz.4.6302': attribute type 11 has an invalid length. [ 1055.416097][T23357] device syzkaller0 entered promiscuous mode [ 1055.692127][T23362] netlink: 'syz.2.6312': attribute type 21 has an invalid length. [ 1055.700549][T23362] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6312'. [ 1055.711789][T23362] netlink: 'syz.2.6312': attribute type 5 has an invalid length. [ 1055.720972][T23362] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6312'. [ 1055.734037][T23376] netlink: 'syz.3.6316': attribute type 11 has an invalid length. [ 1056.303532][T23408] device syzkaller0 entered promiscuous mode [ 1056.555711][T23423] netlink: 'syz.0.6329': attribute type 21 has an invalid length. [ 1056.566340][T23423] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6329'. [ 1056.581134][T23423] netlink: 'syz.0.6329': attribute type 5 has an invalid length. [ 1056.594116][T23423] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6329'. [ 1056.708568][T23433] netlink: 'syz.1.6331': attribute type 11 has an invalid length. [ 1056.767400][T23436] netlink: 'syz.2.6333': attribute type 29 has an invalid length. [ 1056.853606][T23430] device syzkaller0 entered promiscuous mode [ 1056.868793][T23442] netlink: 'syz.3.6335': attribute type 21 has an invalid length. [ 1056.883819][T23442] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1056.894784][T23442] netlink: 'syz.3.6335': attribute type 4 has an invalid length. [ 1056.904705][T23442] netlink: 'syz.3.6335': attribute type 5 has an invalid length. [ 1056.932710][T23442] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1057.941203][T23484] device syzkaller0 entered promiscuous mode [ 1058.391360][T23502] device syzkaller0 entered promiscuous mode [ 1059.257792][T23547] device syzkaller0 entered promiscuous mode [ 1060.207240][T23551] device syzkaller0 entered promiscuous mode [ 1060.579175][T23589] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6390'. [ 1060.847093][T23600] device syzkaller0 entered promiscuous mode [ 1060.955425][T23602] device syzkaller0 entered promiscuous mode [ 1060.965094][T23610] validate_nla: 8 callbacks suppressed [ 1060.965131][T23610] netlink: 'syz.1.6399': attribute type 21 has an invalid length. [ 1060.983671][T23610] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6399'. [ 1060.993912][T23610] netlink: 'syz.1.6399': attribute type 5 has an invalid length. [ 1061.002539][T23610] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6399'. [ 1061.750804][T23652] netlink: 'syz.3.6412': attribute type 21 has an invalid length. [ 1061.772856][T23652] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6412'. [ 1061.783340][T23652] netlink: 'syz.3.6412': attribute type 5 has an invalid length. [ 1061.793426][T23652] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6412'. [ 1061.920912][T23657] device syzkaller0 entered promiscuous mode [ 1062.491607][T23672] device syzkaller0 entered promiscuous mode [ 1062.812701][T23692] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6425'. [ 1062.940552][T23696] netlink: 'syz.3.6427': attribute type 21 has an invalid length. [ 1062.983564][T23696] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6427'. [ 1063.023674][T23696] netlink: 'syz.3.6427': attribute type 5 has an invalid length. [ 1063.076465][T23696] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6427'. [ 1063.523905][T23718] device syzkaller0 entered promiscuous mode [ 1063.650955][T23725] device syzkaller0 entered promiscuous mode [ 1063.905091][T23741] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6439'. [ 1064.198211][T23756] netlink: 'syz.2.6445': attribute type 21 has an invalid length. [ 1064.217206][T23756] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6445'. [ 1064.239478][T23756] netlink: 'syz.2.6445': attribute type 5 has an invalid length. [ 1064.273726][T23756] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6445'. [ 1065.170216][T23770] device syzkaller0 entered promiscuous mode [ 1065.665999][T23785] device syzkaller0 entered promiscuous mode [ 1065.938011][ T9251] tipc: Subscription rejected, illegal request [ 1066.384144][T23804] device syzkaller0 entered promiscuous mode [ 1066.682532][T23817] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.6465'. [ 1066.879064][T23826] delete_channel: no stack [ 1066.883900][T23826] delete_channel: no stack [ 1067.211125][ T9251] tipc: Subscription rejected, illegal request [ 1067.481508][T23843] netlink: 'syz.1.6477': attribute type 17 has an invalid length. [ 1067.701830][T23852] device syzkaller0 entered promiscuous mode [ 1067.796263][ T9242] tipc: Subscription rejected, illegal request [ 1067.864652][T23862] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.6483'. [ 1068.124624][T23872] delete_channel: no stack [ 1068.155576][T23872] delete_channel: no stack [ 1068.273638][T23878] netlink: 'syz.2.6491': attribute type 10 has an invalid length. [ 1068.282271][T23878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6491'. [ 1068.531516][T23891] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1068.734853][T23900] device syzkaller0 entered promiscuous mode [ 1068.808705][T23905] device syzkaller0 entered promiscuous mode [ 1068.851381][T23907] netlink: 'syz.0.6503': attribute type 21 has an invalid length. [ 1068.860761][T23907] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6503'. [ 1068.878831][T23907] netlink: 'syz.0.6503': attribute type 5 has an invalid length. [ 1068.887480][T23907] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6503'. [ 1068.940003][T23913] netlink: 'syz.1.6504': attribute type 1 has an invalid length. [ 1068.968248][T23913] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6504'. [ 1069.474521][T23926] netlink: 'syz.2.6507': attribute type 17 has an invalid length. [ 1069.599907][T23928] device syzkaller0 entered promiscuous mode [ 1069.832992][T23944] netlink: 'syz.3.6515': attribute type 1 has an invalid length. [ 1069.842205][T23944] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6515'. [ 1070.057141][T23953] device syzkaller0 entered promiscuous mode [ 1070.089588][T23958] netlink: 'syz.4.6523': attribute type 17 has an invalid length. [ 1070.139890][T23957] device syzkaller0 entered promiscuous mode [ 1070.766665][T23984] device syzkaller0 entered promiscuous mode [ 1070.940372][T23989] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.6532'. [ 1071.141250][T23999] device syzkaller0 entered promiscuous mode [ 1071.184049][T24002] netlink: 'syz.0.6536': attribute type 17 has an invalid length. [ 1072.023396][T24038] device syzkaller0 entered promiscuous mode [ 1072.584023][T24064] device syzkaller0 entered promiscuous mode [ 1073.208477][T24084] delete_channel: no stack [ 1073.258302][T24084] delete_channel: no stack [ 1073.500710][T24088] device syzkaller0 entered promiscuous mode [ 1075.718684][T24110] netlink: 'syz.0.6586': attribute type 1 has an invalid length. [ 1075.739277][T24110] netlink: 'syz.0.6586': attribute type 1 has an invalid length. [ 1075.832670][T24112] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.6578'. [ 1076.024227][T24121] device syzkaller0 entered promiscuous mode [ 1076.055693][T24125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.911015][T24146] netlink: 'syz.1.6591': attribute type 1 has an invalid length. [ 1076.968337][T24146] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6591'. [ 1077.034966][T24152] netlink: 'syz.4.6592': attribute type 1 has an invalid length. [ 1077.087876][T24152] netlink: 'syz.4.6592': attribute type 1 has an invalid length. [ 1077.165342][T24158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.413325][T24170] device syzkaller0 entered promiscuous mode [ 1077.708351][T24189] netlink: 'syz.3.6607': attribute type 1 has an invalid length. [ 1077.727890][T24189] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6607'. [ 1078.140787][T24198] netlink: 'syz.1.6611': attribute type 1 has an invalid length. [ 1078.357754][T24200] device syzkaller0 entered promiscuous mode [ 1078.410016][T24198] netlink: 'syz.1.6611': attribute type 1 has an invalid length. [ 1078.449822][T24206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.078608][T24226] netlink: 'syz.0.6620': attribute type 1 has an invalid length. [ 1079.126053][T24226] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6620'. [ 1080.070760][T24252] device syzkaller0 entered promiscuous mode [ 1080.509364][T24270] netlink: 'syz.3.6637': attribute type 10 has an invalid length. [ 1080.517557][T24270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6637'. [ 1080.642821][T24276] sctp: [Deprecated]: syz.4.6640 (pid 24276) Use of int in maxseg socket option. [ 1080.642821][T24276] Use struct sctp_assoc_value instead [ 1080.708577][T24278] device syzkaller0 entered promiscuous mode [ 1080.957676][T24283] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1080.963923][T24283] syzkaller0: Linktype set failed because interface is up [ 1081.010394][T24291] netlink: 'syz.4.6647': attribute type 21 has an invalid length. [ 1081.020097][T24291] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1081.032337][T24291] netlink: 'syz.4.6647': attribute type 5 has an invalid length. [ 1081.041510][T24291] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1081.059894][T24294] netlink: 'syz.1.6648': attribute type 21 has an invalid length. [ 1081.080850][T24294] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6648'. [ 1081.127556][T24294] netlink: 'syz.1.6648': attribute type 5 has an invalid length. [ 1081.157022][T24294] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6648'. [ 1081.523043][T24314] device syzkaller0 entered promiscuous mode [ 1082.305769][T24343] netlink: 'syz.4.6664': attribute type 21 has an invalid length. [ 1082.360996][T24343] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1082.368491][T24340] netlink: 'syz.3.6665': attribute type 3 has an invalid length. [ 1082.411020][T24343] netlink: 'syz.4.6664': attribute type 5 has an invalid length. [ 1082.423299][T24343] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6664'. [ 1082.428201][T24340] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6665'. [ 1082.674263][T24357] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1082.698591][T24357] syzkaller0: Linktype set failed because interface is up [ 1082.746472][T10148] syzkaller0: tun_net_xmit 76 [ 1082.751976][T10148] syzkaller0: tun_net_xmit 48 [ 1082.786581][ T9598] syzkaller0: tun_net_xmit 76 [ 1083.164281][T24364] device syzkaller0 entered promiscuous mode [ 1083.761277][T24384] netlink: 'syz.0.6679': attribute type 3 has an invalid length. [ 1083.779345][T24384] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1083.808881][T24390] netlink: 'syz.3.6681': attribute type 21 has an invalid length. [ 1083.854267][T24390] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6681'. [ 1083.871150][T24390] netlink: 'syz.3.6681': attribute type 5 has an invalid length. [ 1083.915404][T24390] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6681'. [ 1084.010165][ T2288] syzkaller0: tun_net_xmit 76 [ 1084.015839][ T2288] syzkaller0: tun_net_xmit 48 [ 1084.076831][T16026] syzkaller0: tun_net_xmit 76 [ 1084.119984][T24399] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1084.126072][T24399] syzkaller0: Linktype set failed because interface is up [ 1084.976498][T24433] device syzkaller0 entered promiscuous mode [ 1085.837862][T24483] device syzkaller0 entered promiscuous mode [ 1086.194661][T24501] __nla_validate_parse: 7 callbacks suppressed [ 1086.194700][T24501] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.6725'. [ 1086.744867][T24524] validate_nla: 5 callbacks suppressed [ 1086.744904][T24524] netlink: 'syz.0.6735': attribute type 21 has an invalid length. [ 1086.813161][T24524] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6735'. [ 1086.852307][T24524] netlink: 'syz.0.6735': attribute type 5 has an invalid length. [ 1086.882049][T24524] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6735'. [ 1087.011780][T24536] device syzkaller0 entered promiscuous mode [ 1087.404566][T24543] device syzkaller0 entered promiscuous mode [ 1087.620206][T24556] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.6746'. [ 1087.891593][T24560] device syzkaller0 entered promiscuous mode [ 1087.943025][T24574] netlink: 'syz.4.6750': attribute type 21 has an invalid length. [ 1087.983391][T24574] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6750'. [ 1088.046592][T24574] netlink: 'syz.4.6750': attribute type 5 has an invalid length. [ 1088.063041][T24574] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6750'. [ 1088.421781][T24591] netlink: 'syz.2.6757': attribute type 21 has an invalid length. [ 1088.442641][T24591] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6757'. [ 1088.464431][T24591] netlink: 'syz.2.6757': attribute type 5 has an invalid length. [ 1088.475216][T24591] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6757'. [ 1089.970501][T24631] netlink: 'syz.2.6775': attribute type 39 has an invalid length. [ 1090.833605][T24666] netlink: 'syz.0.6791': attribute type 2 has an invalid length. [ 1091.751244][T24699] device syzkaller0 entered promiscuous mode [ 1092.628030][T24722] netlink: 'syz.3.6811': attribute type 21 has an invalid length. [ 1092.636229][T24722] IPv6: NLM_F_CREATE should be specified when creating new route [ 1092.645126][T24722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1092.652481][T24722] IPv6: NLM_F_CREATE should be set when creating new route [ 1092.659818][T24722] IPv6: NLM_F_CREATE should be set when creating new route [ 1092.818830][T24729] netlink: 'syz.1.6814': attribute type 28 has an invalid length. [ 1092.880879][T24734] netlink: 'syz.0.6813': attribute type 27 has an invalid length. [ 1092.888968][T24734] C: renamed from team_slave_0 [ 1093.142846][T24744] netlink: 198364 bytes leftover after parsing attributes in process `syz.2.6821'. [ 1093.526764][T24753] netlink: 'syz.0.6824': attribute type 1 has an invalid length. [ 1093.542214][T24753] netlink: 'syz.0.6824': attribute type 4 has an invalid length. [ 1093.563931][T24753] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6824'. [ 1093.771169][T24771] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.6832'. [ 1093.832971][T24771] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1093.840568][T24775] netlink: 198364 bytes leftover after parsing attributes in process `syz.3.6834'. [ 1093.951416][T24780] netlink: 'syz.1.6836': attribute type 21 has an invalid length. [ 1093.972855][T24780] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6836'. [ 1094.005435][T24780] netlink: 'syz.1.6836': attribute type 5 has an invalid length. [ 1094.066577][T24780] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6836'. [ 1094.079763][T24783] netlink: 'syz.3.6837': attribute type 4 has an invalid length. [ 1094.096447][T24783] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6837'. [ 1094.429916][T24806] netlink: 198364 bytes leftover after parsing attributes in process `syz.4.6847'. [ 1094.483147][T24804] device syzkaller0 entered promiscuous mode [ 1094.511135][T24810] netlink: 'syz.2.6858': attribute type 21 has an invalid length. [ 1094.539628][T24810] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6858'. [ 1094.549983][T24810] netlink: 'syz.2.6858': attribute type 5 has an invalid length. [ 1094.558753][T24810] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6858'. [ 1094.920772][T24828] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1095.362075][T24848] device syzkaller0 entered promiscuous mode [ 1095.564480][T24862] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1095.711770][T24869] device syzkaller0 entered promiscuous mode [ 1096.574879][T24912] device syzkaller0 entered promiscuous mode [ 1097.134400][T24936] device syzkaller0 entered promiscuous mode [ 1098.214339][T24970] validate_nla: 13 callbacks suppressed [ 1098.214378][T24970] netlink: 'syz.3.6906': attribute type 1 has an invalid length. [ 1098.315832][T24970] __nla_validate_parse: 14 callbacks suppressed [ 1098.315867][T24970] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.6906'. [ 1098.400419][T24970] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6906'. [ 1098.525017][T24997] netlink: 'syz.0.6912': attribute type 21 has an invalid length. [ 1098.535162][T24997] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6912'. [ 1098.586904][T24997] netlink: 'syz.0.6912': attribute type 5 has an invalid length. [ 1098.594828][T24997] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6912'. [ 1099.880796][T25020] device syzkaller0 entered promiscuous mode [ 1100.520062][T25043] netlink: 'syz.4.6928': attribute type 10 has an invalid length. [ 1100.804062][T25046] netlink: 'syz.2.6929': attribute type 21 has an invalid length. [ 1100.828580][T25046] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6929'. [ 1100.849170][T25046] netlink: 'syz.2.6929': attribute type 5 has an invalid length. [ 1100.882475][T25046] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6929'. [ 1101.267493][T25069] netlink: 'syz.0.6933': attribute type 1 has an invalid length. [ 1101.300527][T25069] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1101.330107][T25069] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1101.630617][T25081] device syzkaller0 entered promiscuous mode [ 1101.645793][T25084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6945'. [ 1102.055357][T25096] netlink: 'syz.3.6949': attribute type 21 has an invalid length. [ 1102.137307][T25096] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6949'. [ 1102.185803][T25096] netlink: 'syz.3.6949': attribute type 5 has an invalid length. [ 1102.513213][T25112] netlink: 'syz.2.6954': attribute type 1 has an invalid length. [ 1102.635992][T25122] syz.1.6957[25122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1102.636247][T25122] syz.1.6957[25122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1103.263010][T25148] validate_nla: 2 callbacks suppressed [ 1103.263048][T25148] netlink: 'syz.4.6970': attribute type 1 has an invalid length. [ 1103.389272][T25159] __nla_validate_parse: 5 callbacks suppressed [ 1103.389292][T25159] netlink: 192440 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1103.415478][T25148] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.6970'. [ 1103.444180][T25148] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6970'. [ 1103.459013][T25159] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1104.059470][T25185] netlink: 'syz.2.6983': attribute type 4 has an invalid length. [ 1104.073736][T25185] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.6983'. [ 1104.222401][T25197] netlink: 'syz.2.6987': attribute type 21 has an invalid length. [ 1104.241709][T25197] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6987'. [ 1104.252477][T25197] netlink: 'syz.2.6987': attribute type 5 has an invalid length. [ 1104.260876][T25197] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6987'. [ 1104.349624][T25199] device syzkaller0 entered promiscuous mode [ 1104.606529][T25213] netlink: 'syz.1.6991': attribute type 1 has an invalid length. [ 1104.643778][T25213] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.6991'. [ 1104.671686][T25216] netlink: 'syz.3.6996': attribute type 3 has an invalid length. [ 1104.679797][T25213] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6991'. [ 1104.713253][T25216] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6996'. [ 1105.313614][T25245] netlink: 'syz.0.7006': attribute type 21 has an invalid length. [ 1105.330696][T25245] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7006'. [ 1105.357890][T25245] netlink: 'syz.0.7006': attribute type 5 has an invalid length. [ 1107.646086][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 1108.429042][T25276] netlink: 'syz.0.7018': attribute type 21 has an invalid length. [ 1108.476329][T25276] __nla_validate_parse: 1 callbacks suppressed [ 1108.476367][T25276] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1108.576769][T25276] netlink: 'syz.0.7018': attribute type 5 has an invalid length. [ 1108.623311][T25276] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1108.750562][T25290] netlink: 'syz.1.7021': attribute type 10 has an invalid length. [ 1109.659632][T25310] device syzkaller0 entered promiscuous mode [ 1109.814667][T25320] netlink: 'syz.3.7035': attribute type 21 has an invalid length. [ 1109.843810][T25320] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1109.854743][T25320] netlink: 'syz.3.7035': attribute type 5 has an invalid length. [ 1109.862946][T25320] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1110.138701][T25335] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7041'. [ 1110.549275][T25343] netlink: 'syz.0.7044': attribute type 10 has an invalid length. [ 1111.214812][T25373] netlink: 'syz.4.7057': attribute type 21 has an invalid length. [ 1111.235002][T25373] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7057'. [ 1111.267105][T25373] netlink: 'syz.4.7057': attribute type 5 has an invalid length. [ 1111.287538][T25373] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7057'. [ 1111.342905][T25380] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7059'. [ 1111.964398][T25400] netlink: 'syz.0.7067': attribute type 21 has an invalid length. [ 1111.976520][T25400] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7067'. [ 1111.986886][T25400] netlink: 'syz.0.7067': attribute type 5 has an invalid length. [ 1111.994757][T25400] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7067'. [ 1115.641873][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.648599][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.282476][T25450] netlink: 'syz.1.7083': attribute type 21 has an invalid length. [ 1118.297032][T25450] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7083'. [ 1118.327890][T25450] netlink: 'syz.1.7083': attribute type 5 has an invalid length. [ 1118.342460][T25450] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7083'. [ 1119.298395][T25488] netlink: 'syz.3.7101': attribute type 21 has an invalid length. [ 1119.321340][T25488] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7101'. [ 1119.340843][T25488] netlink: 'syz.3.7101': attribute type 5 has an invalid length. [ 1119.368016][T25488] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7101'. [ 1119.669744][T25505] hsr0: VLAN not yet supported [ 1119.678637][T25508] netlink: 'syz.0.7108': attribute type 2 has an invalid length. [ 1119.722625][T25508] netlink: 'syz.0.7108': attribute type 1 has an invalid length. [ 1119.746337][T25508] netlink: 'syz.0.7108': attribute type 6 has an invalid length. [ 1119.774496][T25508] netlink: 'syz.0.7108': attribute type 11 has an invalid length. [ 1119.808348][T25508] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.7108'. [ 1119.843812][T25517] netlink: 'syz.1.7111': attribute type 21 has an invalid length. [ 1119.868920][T25517] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7111'. [ 1119.908606][T25517] netlink: 'syz.1.7111': attribute type 5 has an invalid length. [ 1119.957407][T25517] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7111'. [ 1120.256362][T25532] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7125'. [ 1120.278171][T25532] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7125'. [ 1120.530142][T25546] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.7119'. [ 1121.938486][T25598] device syzkaller0 entered promiscuous mode [ 1126.727305][T25676] validate_nla: 10 callbacks suppressed [ 1126.727345][T25676] netlink: 'syz.2.7169': attribute type 10 has an invalid length. [ 1126.846557][T25680] device lo entered promiscuous mode [ 1127.446994][T25710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1127.454563][T25710] IPv6: NLM_F_CREATE should be set when creating new route [ 1127.462547][T25710] IPv6: NLM_F_CREATE should be set when creating new route [ 1127.470214][T25710] IPv6: NLM_F_CREATE should be set when creating new route [ 1127.544483][T25714] netlink: 'syz.1.7183': attribute type 10 has an invalid length. [ 1127.653221][T25717] device lo entered promiscuous mode [ 1127.702928][T25717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1127.732541][T25723] netlink: 'syz.0.7186': attribute type 10 has an invalid length. [ 1127.754947][T25721] __nla_validate_parse: 6 callbacks suppressed [ 1127.754964][T25721] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.7194'. [ 1128.112888][T25738] netlink: 'syz.0.7188': attribute type 10 has an invalid length. [ 1128.491035][T25748] netlink: 'syz.4.7195': attribute type 10 has an invalid length. [ 1129.618001][T25763] device lo entered promiscuous mode [ 1129.649279][T25763] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1130.040011][T25784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.047518][T25784] IPv6: NLM_F_CREATE should be set when creating new route [ 1130.055344][T25784] IPv6: NLM_F_CREATE should be set when creating new route [ 1130.063130][T25784] IPv6: NLM_F_CREATE should be set when creating new route [ 1130.520958][T25806] netlink: 'syz.2.7211': attribute type 10 has an invalid length. [ 1130.532409][T25811] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.7215'. [ 1130.797439][T25815] netlink: 'syz.1.7216': attribute type 28 has an invalid length. [ 1130.912896][T25824] netlink: 'syz.3.7219': attribute type 10 has an invalid length. [ 1130.922501][T25824] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7219'. [ 1131.073690][T25829] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.7224'. [ 1131.121100][T25832] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1131.142577][T25829] netlink: 'syz.4.7224': attribute type 13 has an invalid length. [ 1131.178472][T25829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7224'. [ 1131.705216][T25854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1131.712561][T25854] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.719898][T25854] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.727214][T25854] IPv6: NLM_F_CREATE should be set when creating new route [ 1132.365073][T25856] device syzkaller0 entered promiscuous mode [ 1132.565369][T25869] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.7239'. [ 1133.340054][T25895] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1134.137819][T25916] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.7253'. [ 1134.395951][T25929] netlink: 'syz.3.7262': attribute type 21 has an invalid length. [ 1134.424681][T25929] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7262'. [ 1134.471498][T25929] netlink: 'syz.3.7262': attribute type 5 has an invalid length. [ 1134.508295][T25929] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7262'. [ 1134.999836][T25951] device geneve0 entered promiscuous mode [ 1135.058934][T25949] netlink: 'syz.0.7268': attribute type 28 has an invalid length. [ 1135.881465][T25957] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7271'. [ 1136.257860][T25969] netlink: 'syz.0.7278': attribute type 7 has an invalid length. [ 1136.297077][T25969] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7278'. [ 1136.317441][T25978] netlink: 'syz.3.7280': attribute type 21 has an invalid length. [ 1136.325745][T25978] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7280'. [ 1136.360672][T25978] netlink: 'syz.3.7280': attribute type 5 has an invalid length. [ 1136.371320][T25978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7280'. [ 1136.385517][T25977] Q±6ã`Ò˜: renamed from lo [ 1136.740015][T25992] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7286'. [ 1136.868468][T26002] netlink: 'syz.1.7290': attribute type 21 has an invalid length. [ 1136.894476][T26002] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7290'. [ 1136.947169][T26002] netlink: 'syz.1.7290': attribute type 5 has an invalid length. [ 1136.978383][T26010] device lo left promiscuous mode [ 1137.018135][T26010] Q±6ã`Ò˜: renamed from lo [ 1137.343378][T26026] netlink: 'syz.0.7297': attribute type 21 has an invalid length. [ 1137.360611][T26026] netlink: 'syz.0.7297': attribute type 5 has an invalid length. [ 1137.718511][T26040] device syzkaller0 entered promiscuous mode [ 1138.380906][T26078] __nla_validate_parse: 6 callbacks suppressed [ 1138.380940][T26078] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7324'. [ 1138.442822][T26078] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7324'. [ 1138.500669][T26079] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7314'. [ 1142.717513][T26134] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1142.863889][T26141] validate_nla: 4 callbacks suppressed [ 1142.863927][T26141] netlink: 'syz.0.7341': attribute type 12 has an invalid length. [ 1142.919648][T26141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7341'. [ 1143.107891][T26151] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.7345'. [ 1143.641990][T26171] cgroup: fork rejected by pids controller in /syz4 [ 1144.193468][T26177] netlink: 'syz.3.7352': attribute type 1 has an invalid length. [ 1144.225994][T26177] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.7352'. [ 1144.658698][T26195] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1144.695730][T26196] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.7364'. [ 1145.394690][T26214] cgroup: fork rejected by pids controller in /syz1 [ 1145.770162][T26223] netlink: 'syz.0.7371': attribute type 1 has an invalid length. [ 1145.789684][T26223] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.7371'. [ 1145.892192][T26206] chnl_net:caif_netlink_parms(): no params data found [ 1146.150154][T26206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.157951][T26206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.166689][T26206] device bridge_slave_0 entered promiscuous mode [ 1146.175653][T26206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.183457][T26206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.192630][T26206] device bridge_slave_1 entered promiscuous mode [ 1146.236589][T26206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.309267][T26206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.391606][T26206] team0: Port device team_slave_0 added [ 1146.415579][T26206] team0: Port device team_slave_1 added [ 1146.600062][T26206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.666299][T26206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.736212][T26206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.797355][T26206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.821650][T26206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.900382][T26206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.060125][T26206] device hsr_slave_0 entered promiscuous mode [ 1147.066450][T14865] Bluetooth: hci1: command 0x0409 tx timeout [ 1147.154625][T26259] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.7385'. [ 1147.169709][T26206] device hsr_slave_1 entered promiscuous mode [ 1147.194057][T26206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1147.233285][T26206] Cannot create hsr debugfs directory [ 1147.863703][T26206] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.921146][T26268] netlink: 'syz.2.7386': attribute type 1 has an invalid length. [ 1147.936325][T26268] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1147.998387][T26206] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.056572][T26257] chnl_net:caif_netlink_parms(): no params data found [ 1148.174423][T26273] cgroup: fork rejected by pids controller in /syz0 [ 1148.194484][T26206] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.729303][T26257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.736512][T26257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.744702][T26257] device bridge_slave_0 entered promiscuous mode [ 1148.785585][T26257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.792838][T26257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.801387][T26257] device bridge_slave_1 entered promiscuous mode [ 1148.870320][ T9251] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.146459][T10148] Bluetooth: hci1: command 0x041b tx timeout [ 1149.226322][T10148] Bluetooth: hci4: command 0x0409 tx timeout [ 1151.226592][T14865] Bluetooth: hci1: command 0x040f tx timeout [ 1151.306417][T14865] Bluetooth: hci4: command 0x041b tx timeout [ 1151.876748][T26257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.902129][T26257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.949486][ T9251] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.150625][T26257] team0: Port device team_slave_0 added [ 1152.174446][T26257] team0: Port device team_slave_1 added [ 1152.218726][ T9251] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.235967][T26257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.243182][T26257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.270920][T26257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.285968][T26257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.293370][T26257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.336983][T26257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.369429][ T9251] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.420374][T26257] device hsr_slave_0 entered promiscuous mode [ 1152.428025][T26257] device hsr_slave_1 entered promiscuous mode [ 1152.440962][T26257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1152.448852][T26257] Cannot create hsr debugfs directory [ 1152.652514][T26206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1152.704975][T26206] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1153.143520][T26206] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1153.189971][T26206] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1153.306234][T25773] Bluetooth: hci1: command 0x0419 tx timeout [ 1153.386349][T25773] Bluetooth: hci4: command 0x040f tx timeout [ 1153.731487][T26304] chnl_net:caif_netlink_parms(): no params data found [ 1153.882269][T26206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.891145][T26304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.898815][T26304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.907582][T26304] device bridge_slave_0 entered promiscuous mode [ 1153.917027][T26304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.924303][T26304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.933622][T26304] device bridge_slave_1 entered promiscuous mode [ 1153.969462][T26304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.991783][T26304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.008615][T26206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.506443][T26156] Bluetooth: hci0: command 0x0409 tx timeout [ 1155.466257][T26156] Bluetooth: hci4: command 0x0419 tx timeout [ 1155.796615][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1155.810866][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1155.833472][T26304] team0: Port device team_slave_0 added [ 1155.863592][T26304] team0: Port device team_slave_1 added [ 1155.873242][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1155.908061][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1155.917124][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.924237][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.932360][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1155.942687][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1155.951505][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.958695][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.995047][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1156.008845][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1156.021955][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1156.081861][T26364] syz.3.7409 (26364) used obsolete PPPIOCDETACH ioctl [ 1156.141555][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1156.165410][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1156.174395][T26361] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7409'. [ 1156.197776][T26304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.204783][T26304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.231284][T26361] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1156.242262][T26304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.255326][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1156.265168][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1156.275452][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1156.285303][T26369] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7411'. [ 1156.298242][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1156.311605][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1156.331644][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1156.343808][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1156.353661][T26304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.368906][T26304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.395468][T26304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.430673][T26206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1156.586766][T26156] Bluetooth: hci0: command 0x041b tx timeout [ 1156.595117][T26304] device hsr_slave_0 entered promiscuous mode [ 1156.621649][T26304] device hsr_slave_1 entered promiscuous mode [ 1156.685098][T26304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1156.702863][T26304] Cannot create hsr debugfs directory [ 1156.723804][T26257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1156.785900][T26257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1156.811350][T26257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1156.881731][T26257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1156.945577][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1156.958711][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1157.000148][T26206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.031260][T26304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.123338][T26304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.178966][T26257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.219064][T26304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.269217][T26257] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.278115][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1157.286058][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1157.297764][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1157.307008][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1157.315795][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.322941][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.341136][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1157.352020][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1157.361023][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1157.372519][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1157.382746][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1157.392371][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.399523][ T9242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.418809][T26304] batman_adv: batadv0: Removing interface: netdevsim0 [ 1157.450533][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1157.468594][T26206] device veth0_vlan entered promiscuous mode [ 1157.475374][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1157.484965][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1157.493885][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1157.503783][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1157.512320][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1157.530276][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1157.540673][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1157.549818][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1157.570705][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1157.585876][T26206] device veth1_vlan entered promiscuous mode [ 1157.605766][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1157.614225][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1157.622859][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1157.633083][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1157.642229][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1157.651633][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1157.663562][T26257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1157.745039][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1157.753518][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1157.767384][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1157.792100][T26304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1157.815472][T26206] device veth0_macvtap entered promiscuous mode [ 1157.833849][T26304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1157.846077][T26206] device veth1_macvtap entered promiscuous mode [ 1157.871460][T26304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1157.885338][T26304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1157.911085][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1157.926476][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1157.938321][T26206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.962798][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1157.974820][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1157.986180][T26206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.997544][T26206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.009091][T26206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.021751][T26206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.030841][T26206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.042299][T26206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.051410][T26206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.090884][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1158.100056][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1158.110792][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1158.118935][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1158.163551][T26257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.214187][T26304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.238694][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1158.248722][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.330688][T17219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.340572][T26304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.354559][T17219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.354663][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1158.373285][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.383104][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1158.416998][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1158.425535][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.435318][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1158.444650][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.458608][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.465740][ T9242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.475176][T26257] device veth0_vlan entered promiscuous mode [ 1158.498914][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.510362][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1158.519881][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1158.529159][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1158.538285][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.547230][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.554323][ T9242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.563727][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.581772][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.589618][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1158.592402][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1158.612544][T26257] device veth1_vlan entered promiscuous mode [ 1158.660977][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1158.667052][T14667] Bluetooth: hci0: command 0x040f tx timeout [ 1158.678120][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1158.687722][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1158.698338][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1158.707283][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1158.716697][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1158.725497][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1158.735934][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.748754][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1158.759527][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.768372][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1158.794715][T26304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1158.876201][T26414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1158.884639][T26414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1158.902258][T26414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1158.918217][T26257] device veth0_macvtap entered promiscuous mode [ 1159.041002][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1159.052204][T26257] device veth1_macvtap entered promiscuous mode [ 1159.114806][T26257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.151870][T26257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.173329][T26257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.213209][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1159.234604][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1159.258800][T26257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.279355][T26257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.294850][T26257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.305818][T26257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.320248][T26257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.331525][T26257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.340421][T26257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.349556][T26257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.359535][T26257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.377868][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1159.387989][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1159.421846][T26414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1159.431198][T26414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1159.446005][T26304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.529151][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1159.538732][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1159.644338][T26414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.673003][T26414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.688973][T26304] device veth0_vlan entered promiscuous mode [ 1159.713382][T26424] netlink: 'syz.3.7416': attribute type 10 has an invalid length. [ 1159.735015][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1159.746848][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1159.755844][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1159.766318][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1159.774743][T17219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1159.814012][T26304] device veth1_vlan entered promiscuous mode [ 1160.551701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1160.598010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1160.647091][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.661203][T26304] device veth0_macvtap entered promiscuous mode [ 1160.677269][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.701892][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1160.711641][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1160.725266][T26438] netlink: 'syz.4.7420': attribute type 29 has an invalid length. [ 1160.735932][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1160.747007][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 1160.764818][T26438] netlink: 'syz.4.7420': attribute type 29 has an invalid length. [ 1160.795346][T26440] netlink: 'syz.4.7420': attribute type 29 has an invalid length. [ 1160.851264][T26304] device veth1_macvtap entered promiscuous mode [ 1160.878908][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1160.881466][T26438] netlink: 'syz.4.7420': attribute type 4 has an invalid length. [ 1160.895514][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1160.972499][T26438] netlink: 205184 bytes leftover after parsing attributes in process `syz.4.7420'. [ 1161.002538][T26304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.055235][T26304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.070887][T26304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.082237][T26304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.105627][T26304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.177325][T26448] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.7423'. [ 1161.217401][T26442] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7378'. [ 1161.234922][T26444] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1161.276955][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1161.305263][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1161.329766][T26304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.351493][T26304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.365398][T26304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.384207][T26304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.395274][T26304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.420753][T26304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.452698][T26304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.488465][T26304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.542944][T26456] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1161.572653][T26304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.585744][T26304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.629691][T26304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.710308][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1161.728601][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1161.926836][T26461] device bridge_slave_1 left promiscuous mode [ 1161.944348][T26461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.959638][T26461] device bridge_slave_0 left promiscuous mode [ 1161.966629][T26461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.118514][ T9242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.136746][ T9242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.184171][T26414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1162.309943][T26414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.342453][T26414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.376307][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1163.596068][T26483] netlink: 'syz.2.7435': attribute type 29 has an invalid length. [ 1163.605127][T26483] netlink: 'syz.2.7435': attribute type 29 has an invalid length. [ 1163.622716][T26483] netlink: 'syz.2.7435': attribute type 29 has an invalid length. [ 1163.660654][T26483] netlink: 'syz.2.7435': attribute type 4 has an invalid length. [ 1163.717172][T26483] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.7435'. [ 1163.743028][ T9251] device hsr_slave_0 left promiscuous mode [ 1163.787162][ T9251] device hsr_slave_1 left promiscuous mode [ 1163.847528][ T9251] device hsr_slave_0 left promiscuous mode [ 1163.860551][ T9251] device hsr_slave_1 left promiscuous mode [ 1166.831089][T26487] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7436'. [ 1166.855542][T26495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1166.893579][T26495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1167.078140][T26505] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.7440'. [ 1167.297402][T26509] Ÿë: port 1(veth0_to_team) entered blocking state [ 1167.335187][T26509] Ÿë: port 1(veth0_to_team) entered disabled state [ 1167.362275][T26509] device veth0_to_team entered promiscuous mode [ 1167.727221][T26517] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7445'. [ 1167.739443][T26517] openvswitch: netlink: Flow key attribute not present in set flow. [ 1168.096671][T26533] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1168.332899][T26537] netlink: 'syz.1.7453': attribute type 3 has an invalid length. [ 1168.379368][T26537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7453'. [ 1168.431907][T26535] delete_channel: no stack [ 1169.148845][T26551] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7459'. [ 1169.211533][T26553] netlink: 'syz.0.7458': attribute type 1 has an invalid length. [ 1169.250836][T26553] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.7458'. [ 1169.339840][T26557] Ÿë: port 1(veth0_to_team) entered blocking state [ 1169.372177][T26559] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.7461'. [ 1169.406292][T26557] Ÿë: port 1(veth0_to_team) entered disabled state [ 1169.417521][T26557] device veth0_to_team entered promiscuous mode [ 1170.013760][T26574] device wlan0 left promiscuous mode [ 1170.066652][T26579] device wlan0 entered promiscuous mode [ 1170.403772][T26586] netlink: 'syz.2.7468': attribute type 3 has an invalid length. [ 1170.413029][T26586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7468'. [ 1170.435692][T26583] delete_channel: no stack [ 1170.496547][T26587] device wlan0 entered promiscuous mode [ 1170.947060][T26599] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1171.081203][T26599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1172.075209][T26616] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.7478'. [ 1172.737600][T26636] device veth1_to_batadv entered promiscuous mode [ 1172.745659][T26634] Ÿë: port 1(veth0_to_team) entered blocking state [ 1172.762852][T26634] Ÿë: port 1(veth0_to_team) entered disabled state [ 1172.792135][T26634] device veth0_to_team entered promiscuous mode [ 1173.074063][T26643] netlink: 'syz.0.7490': attribute type 10 has an invalid length. [ 1173.113925][T26640] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.7489'. [ 1173.308074][T26643] team0: Port device geneve1 added [ 1173.354149][T26647] netlink: 'syz.1.7491': attribute type 1 has an invalid length. [ 1173.399379][T26647] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7491'. [ 1173.626883][T26657] netlink: 'syz.4.7495': attribute type 10 has an invalid length. [ 1174.171784][T26657] team0 (unregistering): Port device team_slave_0 removed [ 1174.220829][T26657] team0 (unregistering): Port device team_slave_1 removed [ 1174.262871][T26660] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1174.289298][T26660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1174.544338][T26670] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7508'. [ 1174.642693][T26670] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1175.292932][T26685] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.7504'. [ 1176.004546][T26706] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7512'. [ 1176.193599][T26706] netlink: 'syz.1.7512': attribute type 39 has an invalid length. [ 1177.079153][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.085534][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.743328][T26726] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.7521'. [ 1177.792102][T26729] Ÿë: port 1(veth0_to_team) entered blocking state [ 1177.836524][T26729] Ÿë: port 1(veth0_to_team) entered disabled state [ 1177.856431][T26729] device veth0_to_team entered promiscuous mode [ 1178.475672][T26742] netlink: 'syz.0.7529': attribute type 10 has an invalid length. [ 1178.701225][T26742] team0 (unregistering): Port device team_slave_0 removed [ 1178.882781][T26742] team0 (unregistering): Port device team_slave_1 removed [ 1179.204612][T26742] team0 (unregistering): Port device geneve1 removed [ 1179.586315][T26756] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.7534'. [ 1179.796622][T26763] device Ÿë entered promiscuous mode [ 1179.885322][T26764] device bridge_slave_1 left promiscuous mode [ 1179.898474][T26764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.911709][T26764] device bridge_slave_0 left promiscuous mode [ 1179.918945][T26764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.072830][T26767] netlink: 'syz.1.7539': attribute type 39 has an invalid length. [ 1180.110508][T26775] Ÿë: port 1(veth0_to_team) entered blocking state [ 1180.117473][T26775] Ÿë: port 1(veth0_to_team) entered disabled state [ 1180.125157][T26775] device veth0_to_team entered promiscuous mode [ 1180.641201][T26793] netlink: 'syz.2.7546': attribute type 10 has an invalid length. [ 1180.809075][T26793] team0 (unregistering): Port device team_slave_1 removed [ 1181.015465][T26793] team0 (unregistering): Port device dummy0 removed [ 1181.057039][T26793] team0 (unregistering): Port device geneve1 removed [ 1181.394412][T26801] device wg2 entered promiscuous mode [ 1183.289517][T26837] netlink: 'syz.2.7565': attribute type 3 has an invalid length. [ 1183.323671][T26837] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7565'. [ 1183.675208][T26854] netlink: 'syz.1.7567': attribute type 10 has an invalid length. [ 1184.220444][T26854] team0 (unregistering): Port device team_slave_0 removed [ 1184.359510][T26854] team0 (unregistering): Port device team_slave_1 removed [ 1184.475098][T26857] device wg2 entered promiscuous mode [ 1184.516477][T26869] device syzkaller0 entered promiscuous mode [ 1184.665847][T26875] netlink: 'syz.4.7575': attribute type 39 has an invalid length. [ 1184.835663][T26881] netlink: 'syz.2.7579': attribute type 5 has an invalid length. [ 1184.905481][T26881] netlink: 'syz.2.7579': attribute type 3 has an invalid length. [ 1184.986247][T26881] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7579'. [ 1185.940584][T26916] netlink: 'syz.3.7589': attribute type 10 has an invalid length. [ 1186.295470][T26916] team0 (unregistering): Port device team_slave_1 removed [ 1186.337121][T26916] team0 (unregistering): Port device geneve1 removed [ 1186.436512][T26913] device syzkaller0 entered promiscuous mode [ 1188.518330][T26977] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.7617'. [ 1188.973899][T26976] netlink: 'syz.2.7607': attribute type 10 has an invalid length. [ 1189.515922][T26986] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1189.586504][T26986] device syzkaller0 entered promiscuous mode [ 1190.221347][T26993] Ÿë: port 2(erspan0) entered blocking state [ 1190.302232][T26993] Ÿë: port 2(erspan0) entered disabled state [ 1190.436591][T26993] device erspan0 entered promiscuous mode [ 1190.832543][T27022] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7620'. [ 1191.014078][T27021] netlink: 'syz.1.7619': attribute type 4 has an invalid length. [ 1191.056388][T27021] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7619'. [ 1191.129923][T27028] netlink: 'syz.3.7621': attribute type 39 has an invalid length. [ 1191.589020][T27046] netlink: 'syz.0.7625': attribute type 2 has an invalid length. [ 1191.646876][T27046] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7625'. [ 1191.793610][T27048] netlink: 'syz.0.7625': attribute type 2 has an invalid length. [ 1191.816623][T27048] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7625'. [ 1192.019961][T27058] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7626'. [ 1195.192750][T27077] device syzkaller0 entered promiscuous mode [ 1195.227683][T27079] netlink: 'syz.0.7635': attribute type 39 has an invalid length. [ 1195.608582][T27088] Ÿë: port 2(erspan0) entered blocking state [ 1195.686368][T27088] Ÿë: port 2(erspan0) entered disabled state [ 1195.729567][T27088] device erspan0 entered promiscuous mode [ 1195.746542][T27088] Ÿë: port 2(erspan0) entered blocking state [ 1195.753141][T27088] Ÿë: port 2(erspan0) entered forwarding state [ 1195.865441][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): Ÿë: link becomes ready [ 1196.254307][T27114] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7647'. [ 1196.452899][T27122] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7650'. [ 1196.503836][T27120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7649'. [ 1197.044609][T27136] -1: renamed from syzkaller0 [ 1197.140981][T27143] netlink: 'syz.2.7656': attribute type 2 has an invalid length. [ 1197.152397][T27143] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7656'. [ 1197.204443][T27143] netlink: 'syz.2.7656': attribute type 2 has an invalid length. [ 1197.234042][T27143] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7656'. [ 1197.296907][T27149] device syzkaller0 entered promiscuous mode [ 1198.764750][T27181] Ÿë: port 2(veth0_to_bridge) entered blocking state [ 1198.826548][T27181] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 1198.849782][T27181] device veth0_to_bridge entered promiscuous mode [ 1199.886361][T27206] netlink: 'syz.1.7677': attribute type 2 has an invalid length. [ 1199.906142][T27206] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7677'. [ 1199.923276][T27206] netlink: 'syz.1.7677': attribute type 2 has an invalid length. [ 1199.967379][T27206] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7677'. [ 1200.149018][T27212] device wlan0 entered promiscuous mode [ 1200.177148][T27212] netlink: 'syz.3.7680': attribute type 9 has an invalid length. [ 1200.211666][T27212] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7680'. [ 1200.541586][T27220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7683'. [ 1201.363756][T27242] netlink: 'syz.3.7691': attribute type 2 has an invalid length. [ 1201.396296][T27242] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7691'. [ 1201.461690][T27242] netlink: 'syz.3.7691': attribute type 2 has an invalid length. [ 1201.473231][T27242] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7691'. [ 1201.651357][T27252] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7694'. [ 1201.743202][T27252] device sit0 entered promiscuous mode [ 1201.968190][T27259] netlink: 'syz.3.7697': attribute type 1 has an invalid length. [ 1201.994798][T27259] netlink: 'syz.3.7697': attribute type 3 has an invalid length. [ 1202.003349][T27259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7697'. [ 1202.179969][T27263] netlink: 'syz.1.7699': attribute type 9 has an invalid length. [ 1202.216228][T27263] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7699'. [ 1202.683142][T27276] device veth1_macvtap left promiscuous mode [ 1202.977785][T27277] device syzkaller0 entered promiscuous mode [ 1203.169384][T27282] device veth1_macvtap entered promiscuous mode [ 1203.181617][T27282] device macsec0 entered promiscuous mode [ 1203.208396][ T9251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1203.227478][T27292] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7710'. [ 1203.372778][T27296] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7721'. [ 1203.441532][T27299] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7723'. [ 1203.800431][T27311] device wg2 left promiscuous mode [ 1204.143112][T27313] device wlan0 entered promiscuous mode [ 1204.606658][T27332] netlink: 'syz.2.7720': attribute type 1 has an invalid length. [ 1204.617179][T27332] netlink: 'syz.2.7720': attribute type 3 has an invalid length. [ 1204.624979][T27332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7720'. [ 1204.758249][T27335] device wlan0 left promiscuous mode [ 1204.795529][T27338] device wlan0 entered promiscuous mode [ 1204.824959][T27335] netlink: 'syz.0.7725': attribute type 9 has an invalid length. [ 1204.839204][T27335] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7725'. [ 1205.033730][T27336] netlink: 'syz.1.7724': attribute type 9 has an invalid length. [ 1205.722220][T27361] device wlan0 left promiscuous mode [ 1205.799106][T27362] device wlan0 entered promiscuous mode [ 1205.814085][T27360] device sit0 entered promiscuous mode [ 1206.175281][T27373] device wlan0 left promiscuous mode [ 1206.287835][T27377] device wlan0 entered promiscuous mode [ 1206.999357][T27397] netlink: 'syz.0.7740': attribute type 21 has an invalid length. [ 1207.010604][T27397] __nla_validate_parse: 2 callbacks suppressed [ 1207.010652][T27397] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7740'. [ 1207.202130][T27404] -1: renamed from syzkaller0 [ 1207.248791][T27408] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7745'. [ 1207.310066][T27408] device sit0 entered promiscuous mode [ 1209.298561][T27470] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7763'. [ 1209.545146][T27470] device sit0 entered promiscuous mode [ 1210.049431][T27478] netlink: 'syz.4.7766': attribute type 9 has an invalid length. [ 1210.086271][T27478] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7766'. [ 1210.307396][T27491] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7769'. [ 1211.628604][T27532] netlink: 'syz.0.7780': attribute type 3 has an invalid length. [ 1211.672435][T27532] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7780'. [ 1212.141734][T27537] netlink: 'syz.3.7783': attribute type 21 has an invalid length. [ 1212.160390][T27537] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7783'. [ 1212.227903][T27542] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7784'. [ 1212.391249][T27546] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7781'. [ 1212.515350][T27554] netlink: 'syz.2.7786': attribute type 9 has an invalid length. [ 1212.639671][T27554] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7786'. [ 1212.659488][T27546] device sit0 entered promiscuous mode [ 1213.703524][T27594] netlink: 'syz.2.7800': attribute type 21 has an invalid length. [ 1213.750887][T27594] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7800'. [ 1213.945250][T27605] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7804'. [ 1214.542203][T27614] netlink: 'syz.2.7806': attribute type 3 has an invalid length. [ 1214.550488][T27618] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7807'. [ 1214.651809][T27614] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7806'. [ 1215.154873][T27636] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7813'. [ 1218.548321][T27654] netlink: 'syz.3.7828': attribute type 39 has an invalid length. [ 1219.642961][T27676] netlink: 'syz.3.7822': attribute type 9 has an invalid length. [ 1219.698896][T27676] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7822'. [ 1219.776918][T27684] netlink: 'syz.1.7825': attribute type 3 has an invalid length. [ 1219.876350][T27684] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7825'. [ 1220.675333][T27696] netlink: 'syz.2.7830': attribute type 10 has an invalid length. [ 1220.771223][T27701] netlink: 'syz.1.7832': attribute type 39 has an invalid length. [ 1220.905245][T27703] -1: renamed from syzkaller0 [ 1222.029027][T27730] netlink: 'syz.4.7839': attribute type 3 has an invalid length. [ 1222.099404][T27730] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7839'. [ 1222.122855][T27727] netlink: 'syz.1.7838': attribute type 9 has an invalid length. [ 1222.163306][T27727] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7838'. [ 1225.793792][T27749] netlink: 'syz.4.7849': attribute type 39 has an invalid length. [ 1225.853358][T27750] netlink: 703 bytes leftover after parsing attributes in process `syz.2.7858'. [ 1226.011343][T27762] netlink: 'syz.0.7844': attribute type 9 has an invalid length. [ 1226.044286][T27761] -1: renamed from syzkaller0 [ 1226.052083][T27762] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7844'. [ 1226.472937][T27768] netlink: 'syz.4.7850': attribute type 10 has an invalid length. [ 1226.887914][T27778] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7857'. [ 1227.033944][T27781] netlink: 'syz.3.7856': attribute type 3 has an invalid length. [ 1227.046755][T27781] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7856'. [ 1227.417554][T27791] netlink: 'syz.0.7861': attribute type 10 has an invalid length. [ 1227.543142][T27791] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.677772][T27791] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.729182][T27791] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.771053][T27791] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.842382][T27791] device geneve0 entered promiscuous mode [ 1228.021054][T27791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.050343][T27791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.076521][T27791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.132016][T27791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.166984][T27791] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1228.178418][T27796] netlink: 703 bytes leftover after parsing attributes in process `syz.4.7863'. [ 1228.213499][T27799] netlink: 'syz.2.7864': attribute type 39 has an invalid length. [ 1228.365149][T27814] device wlan0 left promiscuous mode [ 1228.491061][T27818] netlink: 'syz.3.7870': attribute type 10 has an invalid length. [ 1228.635001][T27823] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7872'. [ 1228.789485][T27824] -1: renamed from syzkaller0 [ 1228.976666][T27835] netlink: 'syz.2.7874': attribute type 3 has an invalid length. [ 1229.026636][T27835] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7874'. [ 1232.204776][T27860] netlink: 'syz.4.7883': attribute type 10 has an invalid length. [ 1232.238055][T27860] device geneve0 entered promiscuous mode [ 1232.357777][T27860] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1232.381499][ T9242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.390585][ T9242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.403821][ T9242] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1232.676841][T27858] netlink: 703 bytes leftover after parsing attributes in process `syz.1.7882'. [ 1232.742663][T27867] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1233.028893][T27876] netlink: 'syz.0.7886': attribute type 10 has an invalid length. [ 1233.168411][T27885] netlink: 'syz.2.7891': attribute type 27 has an invalid length. [ 1233.231715][T27885] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7891'. [ 1233.636294][T27900] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7896'. [ 1233.846668][T27908] netlink: 'syz.2.7899': attribute type 21 has an invalid length. [ 1234.300460][T27924] netlink: 703 bytes leftover after parsing attributes in process `syz.3.7904'. [ 1235.016225][T27942] netlink: 'syz.3.7919': attribute type 21 has an invalid length. [ 1235.140679][T27948] netlink: 'syz.1.7906': attribute type 10 has an invalid length. [ 1235.566162][T27963] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7911'. [ 1235.821389][T27973] netlink: 'syz.3.7915': attribute type 27 has an invalid length. [ 1235.853148][T27973] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7915'. [ 1236.546105][T27988] netlink: 703 bytes leftover after parsing attributes in process `syz.0.7918'. [ 1236.566778][T27992] netlink: 'syz.4.7925': attribute type 21 has an invalid length. [ 1238.514963][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.521474][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.156767][T28027] netlink: 'syz.0.7934': attribute type 27 has an invalid length. [ 1240.164861][T28027] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7934'. [ 1240.659128][T28040] netlink: 'syz.1.7941': attribute type 21 has an invalid length. [ 1241.170068][T28047] netlink: 'syz.3.7944': attribute type 1 has an invalid length. [ 1241.887360][T28078] netlink: 'syz.4.7950': attribute type 27 has an invalid length. [ 1241.935189][T28078] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7950'. [ 1241.998117][T28082] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7951'. [ 1242.304859][T28092] netlink: 'syz.3.7955': attribute type 10 has an invalid length. [ 1242.351332][T28092] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.363587][T28092] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.377071][T28092] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.387394][T28092] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.718433][T28105] netlink: 'syz.0.7957': attribute type 21 has an invalid length. [ 1248.324525][T28129] bridge0: port 3(bond0) entered blocking state [ 1248.335795][T28129] bridge0: port 3(bond0) entered disabled state [ 1248.346558][T28129] device bond0 entered promiscuous mode [ 1248.352169][T28129] device bond_slave_0 entered promiscuous mode [ 1248.359309][T28129] device bond_slave_1 entered promiscuous mode [ 1248.572593][T28135] netlink: 'syz.1.7966': attribute type 27 has an invalid length. [ 1248.593877][T28132] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7967'. [ 1248.605124][T28135] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7966'. [ 1248.695420][T28136] netlink: 'syz.0.7970': attribute type 20 has an invalid length. [ 1248.739834][T28136] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7970'. [ 1248.777302][T28136] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1249.264501][T28152] netlink: 'syz.2.7976': attribute type 3 has an invalid length. [ 1249.286585][T28152] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7976'. [ 1249.509505][T28152] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.7976'. [ 1249.895053][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1250.013543][T28165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1250.161174][T28170] netlink: 'syz.2.7982': attribute type 10 has an invalid length. [ 1250.419798][T28178] netlink: 'syz.4.7984': attribute type 10 has an invalid length. [ 1250.430986][T28178] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7984'. [ 1250.460939][T28178] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1250.489747][T28178] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.544432][T28178] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1250.638908][T28177] delete_channel: no stack [ 1251.282743][T28208] netlink: 'syz.2.7995': attribute type 21 has an invalid length. [ 1251.337401][T28208] device wlan0 left promiscuous mode [ 1251.428889][T28208] device wlan0 entered promiscuous mode [ 1251.454855][T28208] netlink: 'syz.2.7995': attribute type 9 has an invalid length. [ 1251.463608][T28208] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7995'. [ 1251.907645][T28224] netlink: 'syz.0.7999': attribute type 10 has an invalid length. [ 1251.953309][T28228] netlink: 'syz.2.8000': attribute type 27 has an invalid length. [ 1251.961748][T28228] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8000'. [ 1252.651067][T28240] netlink: 'syz.4.8007': attribute type 29 has an invalid length. [ 1252.674153][T28245] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8008'. [ 1252.841956][T28248] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8019'. [ 1252.947365][T28249] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 1252.970499][T28249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.154050][T28254] device bond0 left promiscuous mode [ 1253.181028][T28254] device bond_slave_0 left promiscuous mode [ 1253.231982][T28254] device bond_slave_1 left promiscuous mode [ 1253.258488][T28254] bridge0: port 3(bond0) entered disabled state [ 1253.287004][T28254] device bridge_slave_1 left promiscuous mode [ 1253.295116][T28254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.364610][T28254] device bridge_slave_0 left promiscuous mode [ 1253.380645][T28254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.651773][T28256] validate_nla: 1 callbacks suppressed [ 1253.651791][T28256] netlink: 'syz.1.8013': attribute type 1 has an invalid length. [ 1253.666347][T28256] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8013'. [ 1253.686489][T28263] netlink: 'syz.1.8013': attribute type 21 has an invalid length. [ 1253.694931][T28263] netlink: 'syz.1.8013': attribute type 1 has an invalid length. [ 1254.252167][T28281] netlink: 'syz.0.8021': attribute type 10 has an invalid length. [ 1254.265450][T28281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8021'. [ 1254.299594][T28281] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1254.307878][T28281] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.342821][T28281] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1254.456792][T28280] delete_channel: no stack [ 1254.582178][T28297] netlink: 'syz.0.8026': attribute type 3 has an invalid length. [ 1254.617135][T28297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8026'. [ 1254.640054][T28292] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 1254.695961][T28292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.711851][T28292] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 1254.723516][T28292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.913951][T28303] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.8026'. [ 1255.059616][T28307] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8028'. [ 1255.115761][T28307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.128521][T28307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.169758][T28307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.192286][T28307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.209935][T28307] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1255.222523][T28307] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1255.335763][T28318] netlink: 'syz.3.8030': attribute type 10 has an invalid length. [ 1255.340488][T28311] netlink: 'syz.0.8040': attribute type 27 has an invalid length. [ 1255.352732][T28311] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8040'. [ 1255.913733][T28340] netlink: 'syz.4.8036': attribute type 10 has an invalid length. [ 1256.120007][T28343] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8038'. [ 1256.384819][T28351] netlink: 'syz.4.8045': attribute type 27 has an invalid length. [ 1256.408289][T28351] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8045'. [ 1256.550016][T28357] netlink: 'syz.2.8046': attribute type 10 has an invalid length. [ 1256.723053][T28363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8049'. [ 1257.197084][T28376] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8055'. [ 1258.213480][T28408] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1258.290386][T28408] CPU: 0 PID: 28408 Comm: syz.3.8065 Not tainted syzkaller #0 [ 1258.297938][T28408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1258.308091][T28408] Call Trace: [ 1258.311409][T28408] [ 1258.314371][T28408] dump_stack_lvl+0x188/0x250 [ 1258.319139][T28408] ? show_regs_print_info+0x20/0x20 [ 1258.324397][T28408] ? load_image+0x400/0x400 [ 1258.329028][T28408] sysfs_warn_dup+0x8a/0xa0 [ 1258.333775][T28408] sysfs_do_create_link_sd+0xc0/0x110 [ 1258.339205][T28408] device_add+0x7ed/0xfb0 [ 1258.343697][T28408] wiphy_register+0x1e81/0x2c30 [ 1258.348685][T28408] ? cfg80211_event_work+0x40/0x40 [ 1258.353831][T28408] ? minstrel_ht_alloc+0x808/0x980 [ 1258.359042][T28408] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1258.365210][T28408] ieee80211_register_hw+0x2aa1/0x3af0 [ 1258.370755][T28408] ? lockdep_hardirqs_on+0x94/0x140 [ 1258.376171][T28408] ? ieee80211_tasklet_handler+0x20/0x20 [ 1258.381851][T28408] ? rcu_is_watching+0x11/0xa0 [ 1258.386707][T28408] ? memset+0x1e/0x40 [ 1258.390786][T28408] ? hrtimer_init+0x10c/0x220 [ 1258.395591][T28408] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1258.401611][T28408] hwsim_new_radio_nl+0xa6f/0xc40 [ 1258.406682][T28408] genl_rcv_msg+0xcea/0xf90 [ 1258.411409][T28408] ? genl_bind+0x380/0x380 [ 1258.415989][T28408] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 1258.421275][T28408] ? verify_lock_unused+0x140/0x140 [ 1258.426668][T28408] ? kmalloc_large_node+0xf2/0x190 [ 1258.431809][T28408] ? dev_queue_xmit+0x20/0x20 [ 1258.436515][T28408] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1258.443068][T28408] netlink_rcv_skb+0x1f5/0x440 [ 1258.447862][T28408] ? genl_bind+0x380/0x380 [ 1258.452313][T28408] ? netlink_ack+0xb50/0xb50 [ 1258.456933][T28408] ? __lock_acquire+0x7d10/0x7d10 [ 1258.461998][T28408] ? down_read+0x1aa/0x2e0 [ 1258.466509][T28408] genl_rcv+0x24/0x40 [ 1258.470541][T28408] netlink_unicast+0x774/0x920 [ 1258.475821][T28408] netlink_sendmsg+0x8ba/0xbe0 [ 1258.480758][T28408] ? netlink_getsockopt+0x570/0x570 [ 1258.486014][T28408] ? aa_sock_msg_perm+0x94/0x150 [ 1258.491049][T28408] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1258.496418][T28408] ? security_socket_sendmsg+0x7c/0xa0 [ 1258.501939][T28408] ? netlink_getsockopt+0x570/0x570 [ 1258.507162][T28408] ____sys_sendmsg+0x5b7/0x8f0 [ 1258.512041][T28408] ? __sys_sendmsg_sock+0x30/0x30 [ 1258.517155][T28408] ? import_iovec+0x6f/0xa0 [ 1258.521764][T28408] ___sys_sendmsg+0x236/0x2e0 [ 1258.526481][T28408] ? __sys_sendmsg+0x2a0/0x2a0 [ 1258.531300][T28408] __se_sys_sendmsg+0x1af/0x290 [ 1258.536182][T28408] ? __x64_sys_sendmsg+0x80/0x80 [ 1258.541148][T28408] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1258.547166][T28408] ? lockdep_hardirqs_on+0x94/0x140 [ 1258.552397][T28408] do_syscall_64+0x4c/0xa0 [ 1258.556834][T28408] ? clear_bhb_loop+0x30/0x80 [ 1258.561593][T28408] ? clear_bhb_loop+0x30/0x80 [ 1258.566305][T28408] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1258.572248][T28408] RIP: 0033:0x7f81c3463cb9 [ 1258.576694][T28408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.596554][T28408] RSP: 002b:00007f81c16bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.605043][T28408] RAX: ffffffffffffffda RBX: 00007f81c36defa0 RCX: 00007f81c3463cb9 [ 1258.613062][T28408] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1258.621171][T28408] RBP: 00007f81c34d1bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1258.629178][T28408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.637179][T28408] R13: 00007f81c36df038 R14: 00007f81c36defa0 R15: 00007ffcd2b12498 [ 1258.645199][T28408] [ 1259.022174][T28414] validate_nla: 5 callbacks suppressed [ 1259.022192][T28414] netlink: 'syz.1.8066': attribute type 10 has an invalid length. [ 1259.147117][T28427] __nla_validate_parse: 3 callbacks suppressed [ 1259.147149][T28427] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8069'. [ 1259.325876][T28432] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1259.410499][T28432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1259.445569][T28436] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8082'. [ 1259.465934][T28434] netlink: 'syz.4.8082': attribute type 20 has an invalid length. [ 1259.510638][T28437] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8073'. [ 1259.524348][T28436] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1259.615975][T28437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.635314][T28437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.657161][T28437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.677285][T28437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.847616][T28443] netlink: 'syz.3.8075': attribute type 10 has an invalid length. [ 1259.855820][T28443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8075'. [ 1259.869811][T28443] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1259.938474][T28442] delete_channel: no stack [ 1260.320988][T28452] netlink: 'syz.1.8077': attribute type 27 has an invalid length. [ 1260.331747][T28452] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8077'. [ 1260.739874][T28461] netlink: 'syz.4.8083': attribute type 10 has an invalid length. [ 1260.849353][T28463] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8084'. [ 1261.449541][T28482] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8091'. [ 1262.405021][T28497] netlink: 'syz.3.8101': attribute type 29 has an invalid length. [ 1262.477325][T28497] netlink: 'syz.3.8101': attribute type 29 has an invalid length. [ 1262.877428][T28510] netlink: 'syz.1.8106': attribute type 10 has an invalid length. [ 1263.088484][T28512] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8107'. [ 1263.320993][T28517] netlink: 'syz.1.8109': attribute type 3 has an invalid length. [ 1263.358673][T28517] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8109'. [ 1264.550914][T28563] IPv6: Can't replace route, no match found [ 1264.882386][T28587] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8137'. [ 1264.901159][T28589] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8139'. [ 1264.952429][T28589] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1265.099367][T28596] netlink: 'syz.0.8143': attribute type 10 has an invalid length. [ 1265.152283][T28598] IPv6: Can't replace route, no match found [ 1265.172599][T28600] netlink: 'syz.3.8145': attribute type 20 has an invalid length. [ 1265.260014][T28600] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8145'. [ 1265.344244][T28600] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1265.391661][T28600] CPU: 0 PID: 28600 Comm: syz.3.8145 Not tainted syzkaller #0 [ 1265.399202][T28600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1265.409316][T28600] Call Trace: [ 1265.412648][T28600] [ 1265.415617][T28600] dump_stack_lvl+0x188/0x250 [ 1265.420352][T28600] ? show_regs_print_info+0x20/0x20 [ 1265.425613][T28600] ? load_image+0x400/0x400 [ 1265.430191][T28600] sysfs_warn_dup+0x8a/0xa0 [ 1265.434800][T28600] sysfs_do_create_link_sd+0xc0/0x110 [ 1265.440229][T28600] device_add+0x7ed/0xfb0 [ 1265.444626][T28600] wiphy_register+0x1e81/0x2c30 [ 1265.449808][T28600] ? cfg80211_event_work+0x40/0x40 [ 1265.454970][T28600] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1265.461175][T28600] ? ieee80211_register_hw+0x28d4/0x3af0 [ 1265.466868][T28600] ieee80211_register_hw+0x2aa1/0x3af0 [ 1265.472395][T28600] ? ieee80211_tasklet_handler+0x20/0x20 [ 1265.478083][T28600] ? rcu_is_watching+0x11/0xa0 [ 1265.482901][T28600] ? memset+0x1e/0x40 [ 1265.486932][T28600] ? hrtimer_init+0x10c/0x220 [ 1265.491660][T28600] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1265.497453][T28600] hwsim_new_radio_nl+0xa6f/0xc40 [ 1265.502555][T28600] genl_rcv_msg+0xcea/0xf90 [ 1265.507118][T28600] ? genl_bind+0x380/0x380 [ 1265.511937][T28600] ? mark_lock+0x94/0x320 [ 1265.516326][T28600] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1265.522422][T28600] ? lock_chain_count+0x20/0x20 [ 1265.527460][T28600] ? rcu_is_watching+0x11/0xa0 [ 1265.532275][T28600] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1265.538491][T28600] ? lockdep_hardirqs_on+0x94/0x140 [ 1265.543751][T28600] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1265.550338][T28600] netlink_rcv_skb+0x1f5/0x440 [ 1265.555150][T28600] ? genl_bind+0x380/0x380 [ 1265.559630][T28600] ? netlink_ack+0xb50/0xb50 [ 1265.564271][T28600] ? __lock_acquire+0x7d10/0x7d10 [ 1265.569374][T28600] ? down_read+0x1aa/0x2e0 [ 1265.573843][T28600] genl_rcv+0x24/0x40 [ 1265.577878][T28600] netlink_unicast+0x774/0x920 [ 1265.582698][T28600] netlink_sendmsg+0x8ba/0xbe0 [ 1265.587529][T28600] ? netlink_getsockopt+0x570/0x570 [ 1265.592779][T28600] ? aa_sock_msg_perm+0x94/0x150 [ 1265.597784][T28600] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1265.603123][T28600] ? security_socket_sendmsg+0x7c/0xa0 [ 1265.608652][T28600] ? netlink_getsockopt+0x570/0x570 [ 1265.614295][T28600] ____sys_sendmsg+0x5b7/0x8f0 [ 1265.619134][T28600] ? __sys_sendmsg_sock+0x30/0x30 [ 1265.624221][T28600] ? import_iovec+0x6f/0xa0 [ 1265.628769][T28600] ___sys_sendmsg+0x236/0x2e0 [ 1265.633488][T28600] ? __sys_sendmsg+0x2a0/0x2a0 [ 1265.638299][T28600] ? ktime_get_real_ts64+0x440/0x440 [ 1265.643643][T28600] __se_sys_sendmsg+0x1af/0x290 [ 1265.648533][T28600] ? __x64_sys_sendmsg+0x80/0x80 [ 1265.653543][T28600] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1265.659486][T28600] do_syscall_64+0x4c/0xa0 [ 1265.663948][T28600] ? clear_bhb_loop+0x30/0x80 [ 1265.668656][T28600] ? clear_bhb_loop+0x30/0x80 [ 1265.673367][T28600] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1265.679295][T28600] RIP: 0033:0x7f81c3463cb9 [ 1265.683890][T28600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.703925][T28600] RSP: 002b:00007f81c16bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.712388][T28600] RAX: ffffffffffffffda RBX: 00007f81c36defa0 RCX: 00007f81c3463cb9 [ 1265.720431][T28600] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1265.728451][T28600] RBP: 00007f81c34d1bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1265.736472][T28600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.744668][T28600] R13: 00007f81c36df038 R14: 00007f81c36defa0 R15: 00007ffcd2b12498 [ 1265.752781][T28600] [ 1265.966697][T28619] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8153'. [ 1266.127237][T28627] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1266.134152][T28627] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1266.625331][T28655] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8169'. [ 1266.804401][T28661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8171'. [ 1267.259695][T28685] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8183'. [ 1267.447997][T28690] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8185'. [ 1267.538270][T28694] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1267.544751][T28694] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1267.836582][T28710] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8194'. [ 1267.887263][T28710] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1268.411638][T28719] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8205'. [ 1268.523045][T28722] delete_channel: no stack [ 1268.712710][T28735] netlink: 'syz.2.8204': attribute type 10 has an invalid length. [ 1270.278017][T28781] __nla_validate_parse: 5 callbacks suppressed [ 1270.278037][T28781] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1270.370277][T28781] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1270.381845][T28784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1270.409049][T28783] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8227'. [ 1270.617822][T28795] netlink: 'syz.1.8233': attribute type 3 has an invalid length. [ 1270.626750][T28795] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8233'. [ 1270.985897][T28816] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8243'. [ 1271.229960][T28825] delete_channel: no stack [ 1271.306309][T28830] netlink: 'syz.2.8248': attribute type 10 has an invalid length. [ 1271.315046][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 1271.323942][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 1271.912735][T28868] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.8267'. [ 1271.969853][T28868] openvswitch: netlink: Duplicate key (type 0). [ 1272.303250][T28879] can: request_module (can-proto-4) failed. [ 1272.487144][T28894] netlink: 'syz.4.8278': attribute type 21 has an invalid length. [ 1273.546496][T28930] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8294'. [ 1274.727326][T28955] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8303'. [ 1274.757435][T28955] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8303'. [ 1274.985047][T28971] netlink: 'syz.4.8311': attribute type 29 has an invalid length. [ 1275.003163][T28971] netlink: 'syz.4.8311': attribute type 29 has an invalid length. [ 1275.015460][T28971] netlink: 'syz.4.8311': attribute type 29 has an invalid length. [ 1275.035625][T28971] netlink: 'syz.4.8311': attribute type 29 has an invalid length. [ 1275.739466][T29002] __nla_validate_parse: 3 callbacks suppressed [ 1275.739495][T29002] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8323'. [ 1276.400259][T29016] netlink: 'syz.2.8328': attribute type 29 has an invalid length. [ 1276.426310][T25773] Bluetooth: hci0: command 0x0406 tx timeout [ 1276.440272][T29016] netlink: 'syz.2.8328': attribute type 29 has an invalid length. [ 1276.484250][T29020] netlink: 'syz.2.8328': attribute type 29 has an invalid length. [ 1276.519425][T29016] netlink: 'syz.2.8328': attribute type 29 has an invalid length. [ 1277.471182][T29059] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1277.508237][T29059] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1277.566821][T29063] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1277.599821][T29065] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8347'. [ 1277.610444][T29059] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8345'. [ 1278.303828][T29101] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8363'. [ 1278.337711][T29107] netlink: 'syz.2.8365': attribute type 4 has an invalid length. [ 1278.516836][T29117] netlink: 'syz.0.8368': attribute type 29 has an invalid length. [ 1278.539310][T29117] netlink: 'syz.0.8368': attribute type 29 has an invalid length. [ 1278.567964][T29122] netlink: 'syz.0.8368': attribute type 29 has an invalid length. [ 1278.648642][T29117] netlink: 'syz.0.8368': attribute type 29 has an invalid length. [ 1278.783850][T29134] netlink: 'syz.0.8375': attribute type 29 has an invalid length. [ 1279.449557][T29169] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8390'. [ 1279.560624][T29177] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8392'. [ 1279.917211][T29190] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8398'. [ 1280.443648][T29223] openvswitch: netlink: Duplicate key (type 0). [ 1280.862336][T29239] __nla_validate_parse: 4 callbacks suppressed [ 1280.862355][T29239] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8418'. [ 1280.921622][T29239] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.8418'. [ 1280.965713][T29244] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8420'. [ 1281.909649][T29285] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8438'. [ 1282.025505][T29294] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8441'. [ 1282.125524][T29298] validate_nla: 13 callbacks suppressed [ 1282.125543][T29298] netlink: 'syz.2.8443': attribute type 46 has an invalid length. [ 1282.336862][T29307] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.8446'. [ 1282.662222][T29323] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8453'. [ 1283.063565][T29342] netlink: 'syz.0.8461': attribute type 21 has an invalid length. [ 1283.079297][T29342] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8461'. [ 1283.109778][T29342] netlink: 'syz.0.8461': attribute type 4 has an invalid length. [ 1283.171990][T29342] netlink: 'syz.0.8461': attribute type 5 has an invalid length. [ 1283.194548][T29342] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8461'. [ 1283.654769][T29371] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8471'. [ 1284.541040][T29399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1284.784532][T29410] netlink: 'syz.4.8486': attribute type 10 has an invalid length. [ 1284.986431][ C1] ------------[ cut here ]------------ [ 1284.992527][ C1] WARNING: CPU: 1 PID: 29410 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 1285.002188][ C1] Modules linked in: [ 1285.006200][ C1] CPU: 1 PID: 29410 Comm: syz.4.8486 Not tainted syzkaller #0 [ 1285.013707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1285.024055][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1285.030450][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1285.050277][ C1] RSP: 0018:ffffc90000dcfec8 EFLAGS: 00010246 [ 1285.056540][ C1] RAX: ffffffff81a08ea0 RBX: 0000000000000000 RCX: ffff8880299b9dc0 [ 1285.064560][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.072664][ C1] RBP: 0000000000000000 R08: ffffc90000dd02f7 R09: ffffc90000dd02c4 [ 1285.080943][ C1] R10: dffffc0000000000 R11: fffff520001ba05f R12: ffff8880299bb548 [ 1285.089162][ C1] R13: ffffc90001308030 R14: ffffc90000dcff28 R15: 0000000000000000 [ 1285.097438][ C1] FS: 00007f45388356c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1285.106463][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1285.113197][ C1] CR2: 0000001b2d223ffc CR3: 000000003c53b000 CR4: 00000000003506e0 [ 1285.121377][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1285.129458][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1285.137517][ C1] Call Trace: [ 1285.140834][ C1] [ 1285.143705][ C1] bpf_probe_read_user+0x26/0x70 [ 1285.148815][ C1] bpf_prog_f2594087b0f175cc+0x32/0x850 [ 1285.154414][ C1] bpf_flow_dissect+0x12b/0x3f0 [ 1285.159475][ C1] __skb_flow_dissect+0x792/0x60b0 [ 1285.164663][ C1] ? mark_lock+0x94/0x320 [ 1285.169132][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1285.174223][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 1285.179397][ C1] ? verify_lock_unused+0x140/0x140 [ 1285.184757][ C1] ? mark_lock+0x94/0x320 [ 1285.189233][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1285.194460][ C1] ? verify_lock_unused+0x140/0x140 [ 1285.199793][ C1] ? is_bpf_text_address+0x254/0x270 [ 1285.205208][ C1] ? __kernel_text_address+0x9a/0x100 [ 1285.210754][ C1] ? verify_lock_unused+0x140/0x140 [ 1285.216019][ C1] ___skb_get_hash+0x55/0x680 [ 1285.220837][ C1] __skb_get_hash+0xd2/0x270 [ 1285.225483][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 1285.231316][ C1] ? rcu_lock_release+0x9/0x20 [ 1285.236204][ C1] netdev_pick_tx+0x335/0xad0 [ 1285.240939][ C1] netdev_core_pick_tx+0x12e/0x2e0 [ 1285.246167][ C1] __dev_queue_xmit+0x756/0x2fd0 [ 1285.251182][ C1] ? dev_queue_xmit+0x20/0x20 [ 1285.256012][ C1] ? memcpy+0x3c/0x60 [ 1285.260171][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 1285.265437][ C1] ? __skb_clone+0x480/0x790 [ 1285.270275][ C1] ? hsr_addr_subst_dest+0x1d5/0x500 [ 1285.275675][ C1] ? skb_clone+0x1f1/0x350 [ 1285.280149][ C1] hsr_forward_skb+0xfd2/0x1700 [ 1285.285040][ C1] ? prp_fill_frame_info+0x660/0x660 [ 1285.290787][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 1285.295876][ C1] ? memset+0x1e/0x40 [ 1285.299965][ C1] ? __skb_pad+0x407/0x620 [ 1285.304474][ C1] send_hsr_supervision_frame+0x5f7/0xb80 [ 1285.310263][ C1] hsr_announce+0x168/0x310 [ 1285.314795][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1285.319937][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1285.325116][ C1] call_timer_fn+0x17b/0x540 [ 1285.329805][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1285.334959][ C1] ? __run_timers+0x7f0/0x7f0 [ 1285.339725][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1285.344961][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1285.350276][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1285.355365][ C1] __run_timers+0x53a/0x7f0 [ 1285.359958][ C1] ? detach_timer+0x2b0/0x2b0 [ 1285.364905][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1285.370984][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1285.376163][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1285.381519][ C1] run_timer_softirq+0x63/0xf0 [ 1285.386380][ C1] handle_softirqs+0x339/0x830 [ 1285.391288][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1285.396241][ C1] ? do_softirq+0x210/0x210 [ 1285.400930][ C1] __irq_exit_rcu+0x13b/0x230 [ 1285.405755][ C1] ? irq_exit_rcu+0x20/0x20 [ 1285.410372][ C1] irq_exit_rcu+0x5/0x20 [ 1285.414758][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1285.420586][ C1] [ 1285.423560][ C1] [ 1285.426576][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1285.432976][ C1] RIP: 0010:fib_sync_down_addr+0x226/0x3a0 [ 1285.438918][ C1] Code: 00 00 c7 44 24 04 00 00 00 00 4d 8d 66 30 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 c0 2b 45 f9 4d 39 3c 24 74 0a 95 27 00 f9 e9 a7 00 00 00 4d 8d 66 4c 4c 89 e0 48 c1 e8 03 42 [ 1285.459025][ C1] RSP: 0018:ffffc9000318ec10 EFLAGS: 00000287 [ 1285.465254][ C1] RAX: 1ffff1100c166346 RBX: 00000000381414ac RCX: 0000000000080000 [ 1285.473950][ C1] RDX: ffffc90004e1a000 RSI: 000000000002f86b RDI: 000000000002f86c [ 1285.482020][ C1] RBP: 00000000000000fe R08: ffffffff8d89d8af R09: 1ffffffff1b13b15 [ 1285.490201][ C1] R10: dffffc0000000000 R11: fffffbfff1b13b16 R12: ffff888060b31a30 [ 1285.498279][ C1] R13: dffffc0000000000 R14: ffff888060b31a00 R15: ffff8880776c0000 [ 1285.506440][ C1] fib_del_ifaddr+0x1113/0x1440 [ 1285.511415][ C1] ? inetaddr_event+0xec/0x150 [ 1285.516385][ C1] ? is_eth_active_slave_of_bonding_rcu+0x270/0x270 [ 1285.523177][ C1] fib_inetaddr_event+0xb7/0x1c0 [ 1285.528222][ C1] blocking_notifier_call_chain+0x103/0x1b0 [ 1285.534261][ C1] __inet_del_ifa+0x879/0x1020 [ 1285.539190][ C1] inetdev_event+0x5b6/0x1370 [ 1285.543928][ C1] ? devinet_exit_net+0x220/0x220 [ 1285.549115][ C1] ? netdevice_event+0x900/0x900 [ 1285.554117][ C1] raw_notifier_call_chain+0xcb/0x160 [ 1285.559705][ C1] unregister_netdevice_many+0x1049/0x19f0 [ 1285.565585][ C1] ? alloc_netdev_mqs+0xc40/0xc40 [ 1285.570745][ C1] ? unregister_netdevice_queue+0x1aa/0x370 [ 1285.576930][ C1] ? list_netdevice+0x450/0x450 [ 1285.581865][ C1] ? veth_newlink+0xe30/0xe30 [ 1285.586727][ C1] rtnl_dellink+0x52b/0x7b0 [ 1285.591374][ C1] ? rtnl_newlink+0x1a50/0x1a50 [ 1285.596372][ C1] ? __mutex_trylock_common+0x155/0x260 [ 1285.602129][ C1] ? rtnl_newlink+0x1a50/0x1a50 [ 1285.607118][ C1] rtnetlink_rcv_msg+0x844/0xf30 [ 1285.612118][ C1] ? rtnetlink_bind+0x80/0x80 [ 1285.616930][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 1285.622369][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1285.627685][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 1285.633124][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1285.638090][ C1] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 1285.643363][ C1] ? dev_queue_xmit+0x20/0x20 [ 1285.648149][ C1] ? memcpy+0x3c/0x60 [ 1285.652191][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 1285.657414][ C1] ? __skb_clone+0x480/0x790 [ 1285.662058][ C1] netlink_rcv_skb+0x1f5/0x440 [ 1285.667089][ C1] ? rtnetlink_bind+0x80/0x80 [ 1285.671859][ C1] ? netlink_ack+0xb50/0xb50 [ 1285.676562][ C1] netlink_unicast+0x774/0x920 [ 1285.681387][ C1] netlink_sendmsg+0x8ba/0xbe0 [ 1285.686230][ C1] ? netlink_getsockopt+0x570/0x570 [ 1285.691466][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 1285.696488][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1285.701859][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 1285.707426][ C1] ? netlink_getsockopt+0x570/0x570 [ 1285.712661][ C1] ____sys_sendmsg+0x5b7/0x8f0 [ 1285.717637][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 1285.722796][ C1] ? import_iovec+0x6f/0xa0 [ 1285.727403][ C1] ___sys_sendmsg+0x236/0x2e0 [ 1285.732135][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 1285.737060][ C1] __se_sys_sendmsg+0x1af/0x290 [ 1285.742092][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 1285.747239][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1285.753414][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1285.758734][ C1] do_syscall_64+0x4c/0xa0 [ 1285.763235][ C1] ? clear_bhb_loop+0x30/0x80 [ 1285.768045][ C1] ? clear_bhb_loop+0x30/0x80 [ 1285.772895][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1285.779051][ C1] RIP: 0033:0x7f453a5d9cb9 [ 1285.783520][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.803706][ C1] RSP: 002b:00007f4538835028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.812396][ C1] RAX: ffffffffffffffda RBX: 00007f453a854fa0 RCX: 00007f453a5d9cb9 [ 1285.820576][ C1] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1285.828946][ C1] RBP: 00007f453a647bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1285.837028][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.845047][ C1] R13: 00007f453a855038 R14: 00007f453a854fa0 R15: 00007fffb30b6018 [ 1285.853140][ C1] [ 1285.856282][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1285.863602][ C1] CPU: 1 PID: 29410 Comm: syz.4.8486 Not tainted syzkaller #0 [ 1285.871094][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1285.881164][ C1] Call Trace: [ 1285.884464][ C1] [ 1285.887337][ C1] dump_stack_lvl+0x188/0x250 [ 1285.892048][ C1] ? show_regs_print_info+0x20/0x20 [ 1285.897309][ C1] ? load_image+0x400/0x400 [ 1285.901858][ C1] panic+0x2e5/0x810 [ 1285.905776][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1285.910435][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1285.916005][ C1] __warn+0x248/0x2b0 [ 1285.920048][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1285.925647][ C1] report_bug+0x1b7/0x2e0 [ 1285.930097][ C1] handle_bug+0x3a/0x70 [ 1285.934299][ C1] exc_invalid_op+0x16/0x40 [ 1285.938844][ C1] asm_exc_invalid_op+0x16/0x20 [ 1285.943712][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1285.949902][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1285.969623][ C1] RSP: 0018:ffffc90000dcfec8 EFLAGS: 00010246 [ 1285.975734][ C1] RAX: ffffffff81a08ea0 RBX: 0000000000000000 RCX: ffff8880299b9dc0 [ 1285.983805][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.991920][ C1] RBP: 0000000000000000 R08: ffffc90000dd02f7 R09: ffffc90000dd02c4 [ 1285.999914][ C1] R10: dffffc0000000000 R11: fffff520001ba05f R12: ffff8880299bb548 [ 1286.007912][ C1] R13: ffffc90001308030 R14: ffffc90000dcff28 R15: 0000000000000000 [ 1286.016100][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1286.021709][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1286.027297][ C1] bpf_probe_read_user+0x26/0x70 [ 1286.032290][ C1] bpf_prog_f2594087b0f175cc+0x32/0x850 [ 1286.037869][ C1] bpf_flow_dissect+0x12b/0x3f0 [ 1286.042766][ C1] __skb_flow_dissect+0x792/0x60b0 [ 1286.047933][ C1] ? mark_lock+0x94/0x320 [ 1286.052298][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1286.057361][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 1286.062506][ C1] ? verify_lock_unused+0x140/0x140 [ 1286.067767][ C1] ? mark_lock+0x94/0x320 [ 1286.072287][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1286.077539][ C1] ? verify_lock_unused+0x140/0x140 [ 1286.082790][ C1] ? is_bpf_text_address+0x254/0x270 [ 1286.088132][ C1] ? __kernel_text_address+0x9a/0x100 [ 1286.093618][ C1] ? verify_lock_unused+0x140/0x140 [ 1286.098827][ C1] ___skb_get_hash+0x55/0x680 [ 1286.103533][ C1] __skb_get_hash+0xd2/0x270 [ 1286.108196][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 1286.113941][ C1] ? rcu_lock_release+0x9/0x20 [ 1286.118795][ C1] netdev_pick_tx+0x335/0xad0 [ 1286.123530][ C1] netdev_core_pick_tx+0x12e/0x2e0 [ 1286.128685][ C1] __dev_queue_xmit+0x756/0x2fd0 [ 1286.133969][ C1] ? dev_queue_xmit+0x20/0x20 [ 1286.138776][ C1] ? memcpy+0x3c/0x60 [ 1286.143046][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 1286.148694][ C1] ? __skb_clone+0x480/0x790 [ 1286.153313][ C1] ? hsr_addr_subst_dest+0x1d5/0x500 [ 1286.158614][ C1] ? skb_clone+0x1f1/0x350 [ 1286.163053][ C1] hsr_forward_skb+0xfd2/0x1700 [ 1286.167950][ C1] ? prp_fill_frame_info+0x660/0x660 [ 1286.173275][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 1286.178351][ C1] ? memset+0x1e/0x40 [ 1286.182348][ C1] ? __skb_pad+0x407/0x620 [ 1286.186872][ C1] send_hsr_supervision_frame+0x5f7/0xb80 [ 1286.192744][ C1] hsr_announce+0x168/0x310 [ 1286.197356][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1286.202398][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1286.207582][ C1] call_timer_fn+0x17b/0x540 [ 1286.212201][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1286.217267][ C1] ? __run_timers+0x7f0/0x7f0 [ 1286.222177][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1286.227456][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1286.232680][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1286.237747][ C1] __run_timers+0x53a/0x7f0 [ 1286.242277][ C1] ? detach_timer+0x2b0/0x2b0 [ 1286.246970][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1286.253142][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1286.258173][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1286.263534][ C1] run_timer_softirq+0x63/0xf0 [ 1286.268341][ C1] handle_softirqs+0x339/0x830 [ 1286.273240][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1286.278140][ C1] ? do_softirq+0x210/0x210 [ 1286.282787][ C1] __irq_exit_rcu+0x13b/0x230 [ 1286.287584][ C1] ? irq_exit_rcu+0x20/0x20 [ 1286.292142][ C1] irq_exit_rcu+0x5/0x20 [ 1286.296638][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1286.302493][ C1] [ 1286.305469][ C1] [ 1286.308412][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1286.314439][ C1] RIP: 0010:fib_sync_down_addr+0x226/0x3a0 [ 1286.320264][ C1] Code: 00 00 c7 44 24 04 00 00 00 00 4d 8d 66 30 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 c0 2b 45 f9 4d 39 3c 24 74 0a 95 27 00 f9 e9 a7 00 00 00 4d 8d 66 4c 4c 89 e0 48 c1 e8 03 42 [ 1286.339983][ C1] RSP: 0018:ffffc9000318ec10 EFLAGS: 00000287 [ 1286.346094][ C1] RAX: 1ffff1100c166346 RBX: 00000000381414ac RCX: 0000000000080000 [ 1286.354424][ C1] RDX: ffffc90004e1a000 RSI: 000000000002f86b RDI: 000000000002f86c [ 1286.362430][ C1] RBP: 00000000000000fe R08: ffffffff8d89d8af R09: 1ffffffff1b13b15 [ 1286.370548][ C1] R10: dffffc0000000000 R11: fffffbfff1b13b16 R12: ffff888060b31a30 [ 1286.378694][ C1] R13: dffffc0000000000 R14: ffff888060b31a00 R15: ffff8880776c0000 [ 1286.387569][ C1] fib_del_ifaddr+0x1113/0x1440 [ 1286.392723][ C1] ? inetaddr_event+0xec/0x150 [ 1286.397535][ C1] ? is_eth_active_slave_of_bonding_rcu+0x270/0x270 [ 1286.404181][ C1] fib_inetaddr_event+0xb7/0x1c0 [ 1286.409140][ C1] blocking_notifier_call_chain+0x103/0x1b0 [ 1286.415242][ C1] __inet_del_ifa+0x879/0x1020 [ 1286.420046][ C1] inetdev_event+0x5b6/0x1370 [ 1286.424774][ C1] ? devinet_exit_net+0x220/0x220 [ 1286.429821][ C1] ? netdevice_event+0x900/0x900 [ 1286.434778][ C1] raw_notifier_call_chain+0xcb/0x160 [ 1286.440173][ C1] unregister_netdevice_many+0x1049/0x19f0 [ 1286.446167][ C1] ? alloc_netdev_mqs+0xc40/0xc40 [ 1286.451361][ C1] ? unregister_netdevice_queue+0x1aa/0x370 [ 1286.457419][ C1] ? list_netdevice+0x450/0x450 [ 1286.462350][ C1] ? veth_newlink+0xe30/0xe30 [ 1286.467143][ C1] rtnl_dellink+0x52b/0x7b0 [ 1286.471835][ C1] ? rtnl_newlink+0x1a50/0x1a50 [ 1286.476982][ C1] ? __mutex_trylock_common+0x155/0x260 [ 1286.482848][ C1] ? rtnl_newlink+0x1a50/0x1a50 [ 1286.487831][ C1] rtnetlink_rcv_msg+0x844/0xf30 [ 1286.492893][ C1] ? rtnetlink_bind+0x80/0x80 [ 1286.497593][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 1286.502987][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1286.508211][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 1286.513604][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1286.518607][ C1] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 1286.523885][ C1] ? dev_queue_xmit+0x20/0x20 [ 1286.528606][ C1] ? memcpy+0x3c/0x60 [ 1286.532610][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 1286.537791][ C1] ? __skb_clone+0x480/0x790 [ 1286.542530][ C1] netlink_rcv_skb+0x1f5/0x440 [ 1286.547309][ C1] ? rtnetlink_bind+0x80/0x80 [ 1286.552274][ C1] ? netlink_ack+0xb50/0xb50 [ 1286.556907][ C1] netlink_unicast+0x774/0x920 [ 1286.561741][ C1] netlink_sendmsg+0x8ba/0xbe0 [ 1286.566536][ C1] ? netlink_getsockopt+0x570/0x570 [ 1286.571777][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 1286.576752][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1286.582119][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 1286.587611][ C1] ? netlink_getsockopt+0x570/0x570 [ 1286.592911][ C1] ____sys_sendmsg+0x5b7/0x8f0 [ 1286.597907][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 1286.602958][ C1] ? import_iovec+0x6f/0xa0 [ 1286.607499][ C1] ___sys_sendmsg+0x236/0x2e0 [ 1286.612318][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 1286.617170][ C1] __se_sys_sendmsg+0x1af/0x290 [ 1286.622073][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 1286.627024][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1286.633039][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1286.638386][ C1] do_syscall_64+0x4c/0xa0 [ 1286.642840][ C1] ? clear_bhb_loop+0x30/0x80 [ 1286.647553][ C1] ? clear_bhb_loop+0x30/0x80 [ 1286.652253][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1286.658161][ C1] RIP: 0033:0x7f453a5d9cb9 [ 1286.662594][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.682333][ C1] RSP: 002b:00007f4538835028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.690818][ C1] RAX: ffffffffffffffda RBX: 00007f453a854fa0 RCX: 00007f453a5d9cb9 [ 1286.698805][ C1] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1286.706956][ C1] RBP: 00007f453a647bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1286.714954][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.722971][ C1] R13: 00007f453a855038 R14: 00007f453a854fa0 R15: 00007fffb30b6018 [ 1286.730974][ C1] [ 1286.734327][ C1] Kernel Offset: disabled [ 1286.738907][ C1] Rebooting in 86400 seconds..