last executing test programs: 22.857751313s ago: executing program 3 (id=19255): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000e40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x10000002, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000ec0), 0x4) sendmsg$kcm(r0, &(0x7f0000000f00)={&(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000001000)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 22.545317475s ago: executing program 3 (id=19259): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002"], 0x0, 0x3e, 0x5a, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0xe0) 22.306427329s ago: executing program 3 (id=19260): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 20.615432472s ago: executing program 3 (id=19263): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x98102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x5, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001180)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000001280)) 19.995192695s ago: executing program 3 (id=19281): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cd000000b70000000200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x50, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000003c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close(0x3) 19.385286857s ago: executing program 3 (id=19277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b0000000000ff00000000000000ac1414aa000086dd"], 0xcfa4) 14.746340469s ago: executing program 1 (id=19314): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb548, 0x2}, 0x10100e, 0x400000, 0x0, 0x0, 0x0, 0xfffffffd, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) 14.401263544s ago: executing program 1 (id=19316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) 14.186111496s ago: executing program 1 (id=19319): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 11.748857284s ago: executing program 1 (id=19333): perf_event_open(&(0x7f0000000140)={0x1, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000200)={r0}, 0x8) write$cgroup_int(r1, &(0x7f0000000240), 0xfffffdef) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x541b, &(0x7f0000000300)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) 10.988619282s ago: executing program 4 (id=19327): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)) 10.046190388s ago: executing program 2 (id=19331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c006, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000a80)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r3, 0x5, 0xe, 0x0, &(0x7f0000000bc0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.299299314s ago: executing program 0 (id=19332): socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x886c25ef308ee361, @perf_config_ext={0x20003, 0x2d1}, 0x20a8, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000002380)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000002400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002440)={r2, 0x0, 0xe, 0x0, &(0x7f00000024c0)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002540), &(0x7f00000025c0)}, 0x20) 6.063747813s ago: executing program 0 (id=19334): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xc4, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000080)=r3, 0x4) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r0) 6.063531393s ago: executing program 2 (id=19335): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb548, 0x2}, 0x10100e, 0x400000, 0x0, 0x0, 0x0, 0xfffffffd, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) 5.937029246s ago: executing program 0 (id=19336): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1803"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 5.881937302s ago: executing program 2 (id=19337): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000600)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.785868561s ago: executing program 2 (id=19338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) 4.345017168s ago: executing program 32 (id=19277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b0000000000ff00000000000000ac1414aa000086dd"], 0xcfa4) 4.340642838s ago: executing program 4 (id=19340): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000080000000900000000000000", @ANYRES32=0x1, @ANYBLOB="fd10"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x29, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x2, 0x0, 0x7}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 4.32399775s ago: executing program 2 (id=19349): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)) 4.32338635s ago: executing program 1 (id=19341): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffc901}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70e7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc8601, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f00000008c0)=ANY=[], 0x13) 4.257375697s ago: executing program 0 (id=19342): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c8ed01a24a00c19c619b8189c043fcbfcf7e0dae6fa040957389be6376784", 0x7b}, {&(0x7f0000001b40)="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", 0x4ed}], 0x2}, 0x8000) socketpair(0x2, 0x0, 0x9, &(0x7f0000000bc0)) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0e3279fe27f1e540d16901b4071c379362435ed245423", 0x59}], 0x1}, 0x0) 4.211011282s ago: executing program 4 (id=19343): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10010c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x51}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.189459266s ago: executing program 0 (id=19344): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 3.093265236s ago: executing program 4 (id=19345): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) 2.869869988s ago: executing program 0 (id=19346): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x7f, 0x7, 0x9, 0x0, 0x100, 0x208d0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x8, 0x14ed10b8}, 0x8000, 0x5, 0x1, 0xe, 0x4, 0x7, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x10, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x208, 0x0, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x8847, &(0x7f0000000d40)=[{&(0x7f0000001340)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000900)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}}}, 0x80, 0x0}, 0x20008044) 2.75292717s ago: executing program 4 (id=19347): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x409}, 0x2000, 0xac61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x5, 0x9, 0x40}], 0x0, 0x8d8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.08702ms ago: executing program 1 (id=19348): socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x886c25ef308ee361, @perf_config_ext={0x20003, 0x2d1}, 0x20a8, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000002380)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000002400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002440)={r2, 0x0, 0xe, 0x0, &(0x7f00000024c0)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002540), &(0x7f00000025c0)}, 0x20) 169.031µs ago: executing program 2 (id=19350): perf_event_open(&(0x7f0000000140)={0x1, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000200)={r0}, 0x8) write$cgroup_int(r1, &(0x7f0000000240), 0xfffffdef) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x541b, &(0x7f0000000300)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) 0s ago: executing program 4 (id=19351): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) kernel console output (not intermixed with test programs): Pv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1032.542521][T29089] IPv6: NLM_F_CREATE should be set when creating new route [ 1032.549872][T29089] IPv6: NLM_F_CREATE should be set when creating new route [ 1032.557134][T29089] IPv6: NLM_F_CREATE should be set when creating new route [ 1033.014992][T29130] netlink: 'syz.2.11497': attribute type 1 has an invalid length. [ 1033.054932][T29130] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.11497'. [ 1033.264718][T29134] netlink: 'syz.4.11499': attribute type 46 has an invalid length. [ 1033.402165][ T58] tipc: Subscription rejected, illegal request [ 1033.657723][T29151] netlink: 126324 bytes leftover after parsing attributes in process `syz.0.11507'. [ 1033.750384][T29150] device syzkaller0 entered promiscuous mode [ 1035.898075][T29173] netlink: 'syz.3.11514': attribute type 1 has an invalid length. [ 1035.950753][T29173] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.11514'. [ 1036.171917][ T11] tipc: Subscription rejected, illegal request [ 1037.275519][T29197] device syzkaller0 entered promiscuous mode [ 1037.558868][ T11] tipc: Subscription rejected, illegal request [ 1038.852139][T29227] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.11546'. [ 1040.678385][T29217] netlink: 'syz.4.11539': attribute type 11 has an invalid length. [ 1041.292289][T29261] netlink: 'syz.4.11563': attribute type 9 has an invalid length. [ 1041.385743][T29267] netlink: 'syz.3.11562': attribute type 2 has an invalid length. [ 1041.411560][T29267] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.11562'. [ 1041.518279][T29269] device syzkaller0 entered promiscuous mode [ 1041.527768][T29271] netlink: 'syz.1.11566': attribute type 11 has an invalid length. [ 1042.128806][T29286] netlink: 'syz.1.11573': attribute type 29 has an invalid length. [ 1044.595753][T29282] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.11571'. [ 1044.611199][T29282] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.11571'. [ 1044.624505][T29282] tc_dump_action: action bad kind [ 1044.632552][T29286] netlink: 'syz.1.11573': attribute type 29 has an invalid length. [ 1044.736696][T29295] netlink: 'syz.4.11578': attribute type 2 has an invalid length. [ 1044.745565][T29295] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.11578'. [ 1044.834938][T29297] netlink: 'syz.1.11577': attribute type 9 has an invalid length. [ 1045.183665][T29311] netlink: 'syz.1.11594': attribute type 2 has an invalid length. [ 1045.244355][T29311] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.11594'. [ 1045.634869][T29329] device syzkaller0 entered promiscuous mode [ 1047.771039][T29338] netlink: 'syz.0.11593': attribute type 9 has an invalid length. [ 1047.928003][T29348] netlink: 'syz.0.11597': attribute type 2 has an invalid length. [ 1047.947546][T29348] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.11597'. [ 1048.604802][T29371] rxe_eth0 speed is unknown, defaulting to 1000 [ 1048.934678][T29380] device syzkaller0 entered promiscuous mode [ 1052.792383][T29422] netlink: 15478 bytes leftover after parsing attributes in process `syz.0.11628'. [ 1054.015292][ T4372] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1054.159941][T29452] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11646'. [ 1054.572308][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.578734][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.271786][T29465] rxe_eth0 speed is unknown, defaulting to 1000 [ 1056.134071][T29492] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.11664'. [ 1056.919460][T29508] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.11672'. [ 1057.172950][T29518] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11676'. [ 1058.370315][T29536] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.11684'. [ 1058.756628][T29542] netlink: 'syz.1.11697': attribute type 3 has an invalid length. [ 1058.801407][T29542] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.11697'. [ 1059.532986][T29553] rxe_eth0 speed is unknown, defaulting to 1000 [ 1059.678887][T29566] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.11695'. [ 1060.463595][T29585] device pim6reg1 entered promiscuous mode [ 1061.019964][T29595] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.11710'. [ 1061.050633][T29595] netlink: zone id is out of range [ 1062.241562][T29623] netlink: 'syz.2.11719': attribute type 7 has an invalid length. [ 1062.256103][T29623] netlink: 208404 bytes leftover after parsing attributes in process `syz.2.11719'. [ 1062.504293][T29617] rxe_eth0 speed is unknown, defaulting to 1000 [ 1062.914482][T29636] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.11724'. [ 1062.937713][T29634] device pim6reg1 entered promiscuous mode [ 1062.950104][T29636] netlink: zone id is out of range [ 1063.280883][T29641] device syzkaller0 entered promiscuous mode [ 1066.893058][T29667] netlink: 'syz.4.11739': attribute type 2 has an invalid length. [ 1067.090086][T29674] device pim6reg1 entered promiscuous mode [ 1067.178712][ T48] tipc: Subscription rejected, illegal request [ 1067.626974][T29695] netlink: 'syz.2.11752': attribute type 21 has an invalid length. [ 1067.669551][T29695] netlink: 'syz.2.11752': attribute type 1 has an invalid length. [ 1067.677468][T29695] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.11752'. [ 1067.710496][T29700] netlink: 'syz.1.11754': attribute type 2 has an invalid length. [ 1067.872645][T23801] tipc: Subscription rejected, illegal request [ 1068.354211][T29714] rxe_eth0 speed is unknown, defaulting to 1000 [ 1068.408901][T29723] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.11764'. [ 1068.915575][T29729] netlink: 'syz.1.11766': attribute type 21 has an invalid length. [ 1068.925235][T29729] netlink: 'syz.1.11766': attribute type 6 has an invalid length. [ 1068.950653][T29729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11766'. [ 1069.288161][ T4372] tipc: Subscription rejected, illegal request [ 1070.628919][T29762] netlink: 'syz.2.11780': attribute type 2 has an invalid length. [ 1070.639344][T29762] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11780'. [ 1071.075437][T29768] rxe_eth0 speed is unknown, defaulting to 1000 [ 1072.533798][T29795] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.11792'. [ 1073.494550][T29829] sock: sock_timestamping_bind_phc: sock not bind to device [ 1073.651972][T29833] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.11810'. [ 1074.858902][T29870] sock: sock_timestamping_bind_phc: sock not bind to device [ 1074.883450][T29874] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.11824'. [ 1075.066478][T29877] netlink: 'syz.1.11826': attribute type 2 has an invalid length. [ 1075.079642][T29877] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11826'. [ 1075.621047][T29890] rxe_eth0 speed is unknown, defaulting to 1000 [ 1076.544404][T29912] sock: sock_timestamping_bind_phc: sock not bind to device [ 1076.865408][T29920] netlink: 'syz.4.11846': attribute type 2 has an invalid length. [ 1076.884406][T29920] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11846'. [ 1077.692509][T29937] rxe_eth0 speed is unknown, defaulting to 1000 [ 1081.205629][T30008] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.11883'. [ 1081.319668][T30008] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.11883'. [ 1082.426723][T30049] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.11903'. [ 1082.445128][T30049] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.11903'. [ 1083.026042][T30071] netlink: 'syz.3.11915': attribute type 2 has an invalid length. [ 1083.039470][T30071] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11915'. [ 1083.171088][T30077] netlink: 'syz.2.11929': attribute type 3 has an invalid length. [ 1083.434188][T30079] netlink: 'syz.0.11926': attribute type 2 has an invalid length. [ 1083.469403][T30079] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11926'. [ 1084.424450][T30095] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.11922'. [ 1084.538328][T30095] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.11922'. [ 1084.882489][T30107] netlink: 'syz.2.11933': attribute type 2 has an invalid length. [ 1084.901975][T30107] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11933'. [ 1085.059316][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1086.563477][T30139] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.11944'. [ 1086.584945][T30139] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.11944'. [ 1086.610764][T30140] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11946'. [ 1087.388906][T30171] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.11960'. [ 1087.426151][T30171] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.11960'. [ 1089.337933][T30223] netlink: 'syz.4.11986': attribute type 2 has an invalid length. [ 1089.351614][T30223] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.11986'. [ 1091.098102][T30269] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.12006'. [ 1092.973887][T30303] netlink: 'syz.3.12021': attribute type 2 has an invalid length. [ 1093.052593][T30303] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.12021'. [ 1094.712398][T30339] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12038'. [ 1095.918205][T30375] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12053'. [ 1096.255767][T30385] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12058'. [ 1096.280540][T30385] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1096.357558][T30385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1097.910184][T30415] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12067'. [ 1098.471982][T30427] netlink: 'syz.2.12076': attribute type 11 has an invalid length. [ 1098.509920][T30427] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12076'. [ 1107.141833][T30521] netlink: 'syz.1.12126': attribute type 21 has an invalid length. [ 1107.186329][T30521] netlink: 'syz.1.12126': attribute type 13 has an invalid length. [ 1107.212384][T30521] netlink: 6188 bytes leftover after parsing attributes in process `syz.1.12126'. [ 1111.060918][T30555] netlink: 'syz.4.12142': attribute type 8 has an invalid length. [ 1111.068816][T30555] netlink: 'syz.4.12142': attribute type 7 has an invalid length. [ 1111.097724][T30555] netlink: 126196 bytes leftover after parsing attributes in process `syz.4.12142'. [ 1111.725212][T30571] netlink: 'syz.1.12143': attribute type 21 has an invalid length. [ 1111.742405][T30571] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.12143'. [ 1112.884582][T30614] netlink: 'syz.4.12173': attribute type 21 has an invalid length. [ 1112.899964][T30614] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.12173'. [ 1112.917305][T30619] netlink: 'syz.1.12157': attribute type 8 has an invalid length. [ 1112.929249][T30619] netlink: 'syz.1.12157': attribute type 7 has an invalid length. [ 1112.939213][T30619] netlink: 126196 bytes leftover after parsing attributes in process `syz.1.12157'. [ 1114.421390][T30655] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.12179'. [ 1116.022330][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.028732][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.272797][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1118.499592][T30700] netlink: 'syz.0.12210': attribute type 29 has an invalid length. [ 1118.601801][T30700] netlink: 'syz.0.12210': attribute type 29 has an invalid length. [ 1118.669808][T30708] netlink: 'syz.0.12210': attribute type 29 has an invalid length. [ 1118.721025][T30700] netlink: 'syz.0.12210': attribute type 29 has an invalid length. [ 1118.759374][T30711] netlink: 'syz.0.12210': attribute type 29 has an invalid length. [ 1119.971640][T30731] device pim6reg1 entered promiscuous mode [ 1120.252062][T30743] netlink: 34 bytes leftover after parsing attributes in process `syz.2.12220'. [ 1120.307726][T30745] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.12218'. [ 1120.866776][T30767] device pim6reg1 entered promiscuous mode [ 1120.977876][T30771] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.12233'. [ 1121.088700][T30775] netlink: 34 bytes leftover after parsing attributes in process `syz.3.12235'. [ 1121.148857][T30777] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.12245'. [ 1121.895411][T30802] device pim6reg1 entered promiscuous mode [ 1123.312191][T30826] netlink: 'syz.4.12259': attribute type 29 has an invalid length. [ 1123.330490][T30826] netlink: 'syz.4.12259': attribute type 29 has an invalid length. [ 1123.395894][T30826] netlink: 'syz.4.12259': attribute type 29 has an invalid length. [ 1123.405459][T30826] netlink: 'syz.4.12259': attribute type 29 has an invalid length. [ 1123.430969][T30826] netlink: 'syz.4.12259': attribute type 29 has an invalid length. [ 1124.774056][T30855] device pim6reg1 entered promiscuous mode [ 1128.586328][T30949] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12314'. [ 1132.970404][T31060] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1134.252200][T31079] netlink: 148 bytes leftover after parsing attributes in process `syz.1.12375'. [ 1134.431748][T31086] netlink: 148 bytes leftover after parsing attributes in process `syz.4.12381'. [ 1135.446259][T31097] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12370'. [ 1135.864940][T31116] netlink: 'syz.2.12383': attribute type 29 has an invalid length. [ 1135.942820][T31116] netlink: 'syz.2.12383': attribute type 29 has an invalid length. [ 1136.479556][T31137] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1136.569908][T31141] netlink: 'syz.0.12393': attribute type 9 has an invalid length. [ 1136.578386][T31141] netlink: 7679 bytes leftover after parsing attributes in process `syz.0.12393'. [ 1136.812619][T31153] netlink: 'syz.1.12401': attribute type 29 has an invalid length. [ 1136.952791][T31153] netlink: 'syz.1.12401': attribute type 29 has an invalid length. [ 1137.462710][T31172] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1138.550953][T31198] netlink: 'syz.1.12423': attribute type 9 has an invalid length. [ 1138.558899][T31198] netlink: 7679 bytes leftover after parsing attributes in process `syz.1.12423'. [ 1138.977759][T19820] wlan1: Trigger new scan to find an IBSS to join [ 1142.012081][T19820] wlan1: Trigger new scan to find an IBSS to join [ 1144.002124][T31335] netlink: 'syz.2.12483': attribute type 13 has an invalid length. [ 1144.019832][T31335] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.12483'. [ 1144.628312][T31355] netlink: 'syz.3.12488': attribute type 2 has an invalid length. [ 1144.667599][T31355] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.12488'. [ 1145.049490][ T48] wlan1: Creating new IBSS network, BSSID d2:54:66:27:f2:c2 [ 1145.174106][T31374] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.12497'. [ 1145.286410][T31377] netlink: 'syz.4.12500': attribute type 29 has an invalid length. [ 1145.334637][T31377] netlink: 'syz.4.12500': attribute type 29 has an invalid length. [ 1146.256139][T31410] bond0: (slave bridge0): Error: Slave device does not support XDP [ 1146.329948][T31410] netlink: 'syz.0.12513': attribute type 10 has an invalid length. [ 1146.431027][T31410] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1146.446421][T31419] netlink: 'syz.3.12518': attribute type 29 has an invalid length. [ 1146.547858][T31419] netlink: 'syz.3.12518': attribute type 29 has an invalid length. [ 1147.190867][T31453] netlink: 'syz.4.12535': attribute type 13 has an invalid length. [ 1147.218111][T31453] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.12535'. [ 1147.729620][T31472] netlink: 'syz.0.12540': attribute type 29 has an invalid length. [ 1147.846815][T31472] netlink: 'syz.0.12540': attribute type 29 has an invalid length. [ 1148.344515][T31498] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.12559'. [ 1148.502968][T31504] device veth1_macvtap left promiscuous mode [ 1148.548186][T31506] netlink: 209556 bytes leftover after parsing attributes in process `syz.0.12561'. [ 1149.018126][T31522] validate_nla: 10 callbacks suppressed [ 1149.018322][T31522] netlink: 'syz.1.12579': attribute type 29 has an invalid length. [ 1149.573352][T31549] device veth1_macvtap left promiscuous mode [ 1150.571833][T31560] netlink: 'syz.3.12589': attribute type 29 has an invalid length. [ 1150.772286][T31560] netlink: 'syz.3.12589': attribute type 29 has an invalid length. [ 1151.013722][T31576] netlink: 'syz.2.12607': attribute type 29 has an invalid length. [ 1151.056411][T31576] netlink: 'syz.2.12607': attribute type 29 has an invalid length. [ 1151.271717][T31586] netlink: 'syz.2.12600': attribute type 10 has an invalid length. [ 1151.894531][T31609] netlink: 'syz.1.12614': attribute type 29 has an invalid length. [ 1151.935539][T31609] netlink: 'syz.1.12614': attribute type 29 has an invalid length. [ 1152.141053][T31620] bond0: (slave bridge0): Error: Slave device does not support XDP [ 1152.151889][T31620] netlink: 'syz.1.12618': attribute type 10 has an invalid length. [ 1152.174144][T31620] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1152.386048][T31627] netlink: 'syz.3.12630': attribute type 29 has an invalid length. [ 1152.684140][T31641] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12626'. [ 1152.950965][T31643] device veth1_macvtap left promiscuous mode [ 1154.250430][T31680] device veth1_macvtap left promiscuous mode [ 1154.667756][T31697] validate_nla: 2 callbacks suppressed [ 1154.667777][T31697] netlink: 'syz.3.12651': attribute type 10 has an invalid length. [ 1155.380559][T31723] IPv6: NLM_F_CREATE should be specified when creating new route [ 1155.796859][T31737] netlink: 'syz.4.12683': attribute type 1 has an invalid length. [ 1155.832971][T31737] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12683'. [ 1155.998587][T31747] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12676'. [ 1156.162607][T31749] netlink: 'syz.1.12688': attribute type 1 has an invalid length. [ 1156.181820][T31749] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12688'. [ 1157.243589][T31783] netlink: 'syz.2.12693': attribute type 1 has an invalid length. [ 1157.251933][T31783] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12693'. [ 1158.130379][T31815] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12710'. [ 1158.458370][T31832] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.12719'. [ 1159.521109][T31875] netlink: 'syz.1.12749': attribute type 2 has an invalid length. [ 1159.720578][T31886] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.12739'. [ 1160.625497][T31921] netlink: 'syz.2.12757': attribute type 4 has an invalid length. [ 1160.649330][T31921] netlink: 'syz.2.12757': attribute type 4 has an invalid length. [ 1160.671755][T31921] netlink: 'syz.2.12757': attribute type 7 has an invalid length. [ 1160.689193][T31921] netlink: 197284 bytes leftover after parsing attributes in process `syz.2.12757'. [ 1160.992557][T31929] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.12758'. [ 1161.221162][T31936] netlink: 'syz.2.12768': attribute type 2 has an invalid length. [ 1161.362493][T31942] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.12771'. [ 1161.400853][T31942] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.12771'. [ 1161.778855][T31950] netlink: 'syz.4.12775': attribute type 4 has an invalid length. [ 1161.796443][T31950] netlink: 'syz.4.12775': attribute type 4 has an invalid length. [ 1161.810492][T31950] netlink: 'syz.4.12775': attribute type 7 has an invalid length. [ 1161.827210][T31950] netlink: 197284 bytes leftover after parsing attributes in process `syz.4.12775'. [ 1162.650349][T31969] sctp: [Deprecated]: syz.3.12781 (pid 31969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1162.650349][T31969] Use struct sctp_sack_info instead [ 1162.691435][T31972] netlink: 'syz.0.12782': attribute type 2 has an invalid length. [ 1162.857566][T31976] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.12784'. [ 1163.200279][T31983] netlink: 'syz.0.12787': attribute type 4 has an invalid length. [ 1163.208186][T31983] netlink: 'syz.0.12787': attribute type 4 has an invalid length. [ 1163.255099][T31987] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.12790'. [ 1163.264607][T31987] netlink: 6328 bytes leftover after parsing attributes in process `syz.4.12790'. [ 1163.339138][T31983] netlink: 197284 bytes leftover after parsing attributes in process `syz.0.12787'. [ 1163.678219][T31995] rxe_eth0 speed is unknown, defaulting to 1000 [ 1164.843333][T32025] netlink: 197284 bytes leftover after parsing attributes in process `syz.3.12808'. [ 1168.605332][T32068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12828'. [ 1169.282327][T32076] can: request_module (can-proto-0) failed. [ 1169.742783][T32087] rxe_eth0 speed is unknown, defaulting to 1000 [ 1169.997762][T32103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12842'. [ 1171.083910][T19705] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1171.437130][T32130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12856'. [ 1173.080468][T19705] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1173.207154][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1175.042121][T32158] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.12870'. [ 1175.193395][T32162] validate_nla: 4 callbacks suppressed [ 1175.193416][T32162] netlink: 'syz.3.12868': attribute type 10 has an invalid length. [ 1175.252390][T32162] team0: Device vxcan1 is of different type [ 1177.475883][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.482333][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.238714][T32223] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12897'. [ 1178.695404][T32241] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.12902'. [ 1179.479415][T32259] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.12915'. [ 1179.524635][T32259] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.12915'. [ 1179.554536][T32259] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12915'. [ 1179.574514][T32259] tc_dump_action: action bad kind [ 1179.602896][T32261] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12916'. [ 1179.802768][T32271] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.12921'. [ 1180.236016][T32274] rxe_eth0 speed is unknown, defaulting to 1000 [ 1180.345397][T32296] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12932'. [ 1180.447562][T32299] netlink: 'syz.2.12934': attribute type 10 has an invalid length. [ 1180.480291][T32299] team0: Device vxcan1 is of different type [ 1182.347512][T32346] netlink: 'syz.0.12953': attribute type 9 has an invalid length. [ 1182.464095][T32346] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.12953'. [ 1183.224466][T32359] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.12963'. [ 1183.249124][T32359] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.12963'. [ 1183.258439][T32359] netlink: 6 bytes leftover after parsing attributes in process `syz.1.12963'. [ 1183.299192][T32359] tc_dump_action: action bad kind [ 1184.503928][T32401] netlink: 192852 bytes leftover after parsing attributes in process `syz.4.12976'. [ 1184.548178][T32401] netlink: get zone limit has 4 unknown bytes [ 1185.657000][T32435] netlink: 192852 bytes leftover after parsing attributes in process `syz.2.12994'. [ 1185.672035][T32435] netlink: get zone limit has 4 unknown bytes [ 1187.427254][T32467] netlink: 192852 bytes leftover after parsing attributes in process `syz.1.13010'. [ 1187.469210][T32467] netlink: get zone limit has 4 unknown bytes [ 1187.546238][T32463] rxe_eth0 speed is unknown, defaulting to 1000 [ 1189.946141][T32513] netlink: 'syz.1.13033': attribute type 29 has an invalid length. [ 1189.959529][T32513] netlink: 'syz.1.13033': attribute type 29 has an invalid length. [ 1189.998162][T32519] netlink: 'syz.1.13033': attribute type 29 has an invalid length. [ 1190.031484][T32513] netlink: 'syz.1.13033': attribute type 29 has an invalid length. [ 1190.049783][T32513] netlink: 'syz.1.13033': attribute type 29 has an invalid length. [ 1192.436277][T32573] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1192.449330][T32573] syzkaller1: tun_chr_ioctl cmd 1074025688 [ 1193.660417][T32579] rxe_eth0 speed is unknown, defaulting to 1000 [ 1198.277958][T32670] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13105'. [ 1198.522403][T32678] netlink: 'syz.0.13109': attribute type 29 has an invalid length. [ 1198.530944][T32678] netlink: 'syz.0.13109': attribute type 29 has an invalid length. [ 1198.540344][T32678] netlink: 'syz.0.13109': attribute type 29 has an invalid length. [ 1198.548887][T32678] netlink: 'syz.0.13109': attribute type 29 has an invalid length. [ 1198.589779][T32678] netlink: 'syz.0.13109': attribute type 29 has an invalid length. [ 1199.999716][T32710] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1200.011087][T32710] syzkaller1: tun_chr_ioctl cmd 1074025688 [ 1200.434370][T32716] netlink: 'syz.0.13124': attribute type 10 has an invalid length. [ 1200.515044][T32716] device veth0_macvtap left promiscuous mode [ 1200.741068][T32722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13126'. [ 1201.212077][T32746] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1201.218830][T32746] syzkaller1: tun_chr_ioctl cmd 1074025688 [ 1202.682917][ T324] netlink: 'syz.2.13159': attribute type 29 has an invalid length. [ 1202.709284][ T324] netlink: 'syz.2.13159': attribute type 29 has an invalid length. [ 1202.727718][ T324] netlink: 'syz.2.13159': attribute type 29 has an invalid length. [ 1202.737032][ T324] netlink: 'syz.2.13159': attribute type 29 has an invalid length. [ 1204.737058][ T415] validate_nla: 1 callbacks suppressed [ 1204.737075][ T415] netlink: 'syz.4.13202': attribute type 29 has an invalid length. [ 1204.779592][ T415] netlink: 'syz.4.13202': attribute type 29 has an invalid length. [ 1204.789655][ T416] netlink: 'syz.4.13202': attribute type 29 has an invalid length. [ 1204.816099][ T415] netlink: 'syz.4.13202': attribute type 29 has an invalid length. [ 1204.848413][T19820] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1204.860007][ T416] netlink: 'syz.4.13202': attribute type 29 has an invalid length. [ 1207.401620][ T516] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13252'. [ 1207.452280][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1207.508638][ T516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1207.652628][ T523] netlink: 'syz.0.13253': attribute type 1 has an invalid length. [ 1207.730988][ T523] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.13253'. [ 1207.878877][ T529] netlink: 'syz.1.13258': attribute type 10 has an invalid length. [ 1207.931449][ T529] bond0: (slave geneve1): Releasing backup interface [ 1207.962905][ T529] batman_adv: batadv0: Adding interface: geneve1 [ 1207.980836][ T529] batman_adv: batadv0: The MTU of interface geneve1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.019379][ T529] batman_adv: batadv0: Not using interface geneve1 (retrying later): interface not active [ 1208.094445][ T525] rxe_eth0 speed is unknown, defaulting to 1000 [ 1209.163137][ T562] netlink: 'syz.2.13271': attribute type 29 has an invalid length. [ 1209.175268][ T562] netlink: 'syz.2.13271': attribute type 29 has an invalid length. [ 1209.193709][ T562] netlink: 'syz.2.13271': attribute type 29 has an invalid length. [ 1209.261293][ T565] Q±6ã�`Ò˜: renamed from lo [ 1209.659659][ T570] rxe_eth0 speed is unknown, defaulting to 1000 [ 1210.864817][ T604] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.13291'. [ 1211.242186][ T614] rxe_eth0 speed is unknown, defaulting to 1000 [ 1211.725507][ T625] Q±6ã�`Ò˜: renamed from lo [ 1212.950949][ T656] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.13315'. [ 1212.965664][ T654] validate_nla: 2 callbacks suppressed [ 1212.965682][ T654] netlink: 'syz.3.13314': attribute type 29 has an invalid length. [ 1212.983936][ T656] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.13315'. [ 1212.996071][ T656] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13315'. [ 1213.139464][ T654] netlink: 'syz.3.13314': attribute type 29 has an invalid length. [ 1213.175210][ T658] netlink: 'syz.3.13314': attribute type 29 has an invalid length. [ 1213.277747][ T663] netlink: 'syz.3.13314': attribute type 29 has an invalid length. [ 1213.319772][ T668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13328'. [ 1213.347963][ T667] netlink: 'syz.3.13314': attribute type 29 has an invalid length. [ 1213.542637][ T675] Q±6ã�`Ò˜: renamed from lo [ 1214.045750][ T693] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13327'. [ 1214.217932][ T702] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.13330'. [ 1214.249423][ T702] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.13330'. [ 1214.272910][ T702] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13330'. [ 1214.325156][ T688] device pim6reg1 entered promiscuous mode [ 1214.502824][ T58] tipc: Subscription rejected, illegal request [ 1214.670205][ T716] netlink: 'syz.2.13338': attribute type 10 has an invalid length. [ 1214.689305][ T716] netlink: 'syz.2.13338': attribute type 19 has an invalid length. [ 1214.697389][ T716] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.13338'. [ 1214.817583][ T720] netlink: 'syz.0.13337': attribute type 10 has an invalid length. [ 1214.855416][ T720] bond0: (slave geneve1): Releasing backup interface [ 1214.875436][ T720] batman_adv: batadv0: Adding interface: geneve1 [ 1214.884605][ T720] batman_adv: batadv0: The MTU of interface geneve1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.939193][ T720] batman_adv: batadv0: Not using interface geneve1 (retrying later): interface not active [ 1215.189488][ T738] netlink: 176 bytes leftover after parsing attributes in process `syz.4.13346'. [ 1215.473213][ T741] rxe_eth0 speed is unknown, defaulting to 1000 [ 1216.145588][ T774] netlink: 'syz.1.13360': attribute type 10 has an invalid length. [ 1216.444928][ T780] netlink: 'syz.2.13361': attribute type 10 has an invalid length. [ 1216.474577][ T780] batman_adv: batadv0: Adding interface: geneve1 [ 1216.481530][ T780] batman_adv: batadv0: The MTU of interface geneve1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.556884][ T780] batman_adv: batadv0: Not using interface geneve1 (retrying later): interface not active [ 1218.340473][ T839] validate_nla: 2 callbacks suppressed [ 1218.340492][ T839] netlink: 'syz.4.13391': attribute type 10 has an invalid length. [ 1218.389148][ T839] __nla_validate_parse: 4 callbacks suppressed [ 1218.389166][ T839] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.13391'. [ 1218.479556][ T843] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.13396'. [ 1220.606464][ T874] netlink: 'syz.2.13408': attribute type 10 has an invalid length. [ 1220.625029][ T874] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.13408'. [ 1220.642452][ T878] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.13409'. [ 1224.998659][ T945] device pim6reg1 entered promiscuous mode [ 1225.169223][ T951] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.13434'. [ 1225.319947][T19705] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1225.490700][ T965] netlink: 'syz.2.13439': attribute type 10 has an invalid length. [ 1225.498802][ T965] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.13439'. [ 1225.801023][ T973] netlink: 'syz.2.13445': attribute type 28 has an invalid length. [ 1225.812793][ T973] netlink: 'syz.2.13445': attribute type 3 has an invalid length. [ 1225.847042][ T973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13445'. [ 1226.158824][ T979] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.13449'. [ 1226.330223][ T986] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.13451'. [ 1226.448547][T19705] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1226.509976][ T998] netlink: 'syz.4.13455': attribute type 10 has an invalid length. [ 1226.527233][ T998] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.13455'. [ 1226.828833][ T1004] rxe_eth0 speed is unknown, defaulting to 1000 [ 1227.353809][ T1026] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.13462'. [ 1228.283148][ T1041] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13470'. [ 1228.311086][T19705] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1228.357480][ T1045] netlink: 'syz.1.13472': attribute type 10 has an invalid length. [ 1228.366250][ T1045] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.13472'. [ 1229.025866][ T1067] netlink: 'syz.0.13489': attribute type 2 has an invalid length. [ 1229.099504][ T1067] netlink: 'syz.0.13489': attribute type 1 has an invalid length. [ 1229.155042][ T1067] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.13489'. [ 1230.183278][ T1078] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.13482'. [ 1232.130248][ T1116] netlink: 'syz.3.13498': attribute type 2 has an invalid length. [ 1232.171593][ T1116] netlink: 'syz.3.13498': attribute type 1 has an invalid length. [ 1232.190157][ T1116] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.13498'. [ 1235.994202][T19705] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 1236.080570][ T1120] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1238.903114][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.909569][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.513913][ T1216] netlink: 'syz.3.13540': attribute type 13 has an invalid length. [ 1239.539230][ T1216] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.13540'. [ 1239.764572][ T1219] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.13541'. [ 1240.937910][ T1245] netlink: 'syz.4.13553': attribute type 13 has an invalid length. [ 1240.957299][ T1245] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.13553'. [ 1241.886005][T19705] Bluetooth: hci0: unexpected event 0x20 length: 151 > 7 [ 1245.999717][ T1372] netlink: 'syz.3.13607': attribute type 4 has an invalid length. [ 1246.079124][ T1372] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13607'. [ 1248.279754][ T1427] netlink: 'syz.4.13636': attribute type 4 has an invalid length. [ 1248.288225][ T1427] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13636'. [ 1248.655418][ T1434] netlink: 'syz.1.13648': attribute type 4 has an invalid length. [ 1248.664533][ T1434] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13648'. [ 1248.834628][ T1442] netlink: 'syz.1.13639': attribute type 22 has an invalid length. [ 1250.991643][ T1484] netlink: 'syz.2.13662': attribute type 22 has an invalid length. [ 1252.121833][ T1516] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.13678'. [ 1252.465479][ T1525] netlink: 'syz.3.13676': attribute type 22 has an invalid length. [ 1257.039941][ T1644] netlink: 'syz.1.13737': attribute type 29 has an invalid length. [ 1257.058658][ T1644] netlink: 'syz.1.13737': attribute type 29 has an invalid length. [ 1257.070523][ T1644] netlink: 'syz.1.13737': attribute type 29 has an invalid length. [ 1257.080324][ T1644] netlink: 'syz.1.13737': attribute type 29 has an invalid length. [ 1257.089900][ T1644] netlink: 'syz.1.13737': attribute type 29 has an invalid length. [ 1258.806276][ T1690] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13756'. [ 1258.858148][ T1692] netlink: 'syz.1.13757': attribute type 10 has an invalid length. [ 1258.881784][ T1692] netlink: 56823 bytes leftover after parsing attributes in process `syz.1.13757'. [ 1259.759956][ T1726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13772'. [ 1260.517305][ T1759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13787'. [ 1260.627364][ T1765] netlink: 'syz.1.13789': attribute type 3 has an invalid length. [ 1260.638541][ T1763] netlink: 'syz.4.13790': attribute type 29 has an invalid length. [ 1260.646034][ T1765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13789'. [ 1260.661186][ T1763] netlink: 'syz.4.13790': attribute type 29 has an invalid length. [ 1260.678815][ T1763] netlink: 'syz.4.13790': attribute type 29 has an invalid length. [ 1260.694188][ T1763] netlink: 'syz.4.13790': attribute type 29 has an invalid length. [ 1260.708292][ T1763] netlink: 'syz.4.13790': attribute type 29 has an invalid length. [ 1262.155088][ T1802] netlink: 'syz.2.13804': attribute type 3 has an invalid length. [ 1262.163592][ T1802] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13804'. [ 1262.222105][ T1804] netlink: 'syz.3.13805': attribute type 29 has an invalid length. [ 1262.257909][ T1804] netlink: 'syz.3.13805': attribute type 29 has an invalid length. [ 1264.009968][ T1845] validate_nla: 3 callbacks suppressed [ 1264.009986][ T1845] netlink: 'syz.4.13820': attribute type 3 has an invalid length. [ 1264.034406][ T1845] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13820'. [ 1264.591212][ T1863] netlink: 'syz.1.13832': attribute type 10 has an invalid length. [ 1264.599538][ T1863] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.13832'. [ 1265.442017][ T1883] netlink: 'syz.3.13841': attribute type 3 has an invalid length. [ 1265.479263][ T1883] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13841'. [ 1265.588756][ T1890] netlink: 'syz.2.13847': attribute type 9 has an invalid length. [ 1267.107697][T19820] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1268.212204][T19705] Bluetooth: hci4: unexpected event 0x3d length: 151 > 14 [ 1268.997033][ T1963] cgroup: fork rejected by pids controller in /syz2 [ 1269.286551][T19705] Bluetooth: hci2: unexpected event 0x3d length: 151 > 14 [ 1272.271573][ T1996] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13889'. [ 1272.449242][ T4372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.604864][ T4372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.764637][T19705] Bluetooth: hci0: unexpected event 0x3d length: 151 > 14 [ 1272.801517][ T4372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.216970][ T4372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.446398][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1273.456260][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1273.464590][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1273.489112][ T2022] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1273.496923][ T2022] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1273.505877][ T2022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1273.667574][ T2021] rxe_eth0 speed is unknown, defaulting to 1000 [ 1274.593403][ T2054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13913'. [ 1274.613781][ T2022] Bluetooth: hci3: unexpected event 0x3d length: 151 > 14 [ 1275.328917][ T2021] chnl_net:caif_netlink_parms(): no params data found [ 1275.529561][ T2022] Bluetooth: hci1: command 0x0409 tx timeout [ 1275.788894][ T2092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13926'. [ 1276.328607][ T2021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.348042][ T2021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.358470][ T2021] device bridge_slave_0 entered promiscuous mode [ 1276.481599][ T2111] netlink: 'syz.1.13933': attribute type 16 has an invalid length. [ 1276.507821][ T2111] netlink: 'syz.1.13933': attribute type 25 has an invalid length. [ 1276.516409][ T2021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.545497][ T2111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13933'. [ 1276.557192][ T2021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.589384][ T2021] device bridge_slave_1 entered promiscuous mode [ 1276.604636][ T2115] syz.4.13935[2115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1276.604807][ T2115] syz.4.13935[2115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1276.926901][ T2021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.045289][ T2021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.196005][ T2021] team0: Port device team_slave_0 added [ 1277.215021][T19705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1277.239321][T19705] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1277.247872][T19705] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1277.257389][T19705] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1277.265177][T19705] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1277.273301][T19705] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1277.327384][ T2021] team0: Port device team_slave_1 added [ 1277.599154][ T2021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.606174][ T2021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.632506][ T2022] Bluetooth: hci1: command 0x041b tx timeout [ 1277.780733][ T2021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.860260][ T2133] rxe_eth0 speed is unknown, defaulting to 1000 [ 1277.998138][ T4372] device hsr_slave_0 left promiscuous mode [ 1278.072995][ T4372] device hsr_slave_1 left promiscuous mode [ 1278.121852][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.175067][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.241716][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.305993][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.416200][ T4372] batman_adv: batadv0: Removing interface: geneve1 [ 1278.449479][ T4372] device bridge_slave_1 left promiscuous mode [ 1278.486464][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.687134][ T4372] device bridge_slave_0 left promiscuous mode [ 1278.707631][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.760899][ T4372] device veth0_macvtap left promiscuous mode [ 1278.769310][ T4372] device veth1_vlan left promiscuous mode [ 1279.373896][ T2022] Bluetooth: hci4: command 0x0409 tx timeout [ 1279.418457][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 1279.491900][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.537698][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.690655][ T2022] Bluetooth: hci1: command 0x040f tx timeout [ 1279.844854][ T4372] bond0 (unregistering): Released all slaves [ 1279.899663][ T2021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.906727][ T2021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.939608][ T2021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.051228][ T2021] device hsr_slave_0 entered promiscuous mode [ 1280.058293][ T2021] device hsr_slave_1 entered promiscuous mode [ 1280.065102][ T2021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1280.079081][ T2021] Cannot create hsr debugfs directory [ 1280.386223][ T2133] chnl_net:caif_netlink_parms(): no params data found [ 1280.515212][ T2133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.524945][ T2133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.537959][ T2133] device bridge_slave_0 entered promiscuous mode [ 1280.584662][ T2133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.597258][ T2133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.620342][ T2133] device bridge_slave_1 entered promiscuous mode [ 1280.774988][ T4372] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.878846][ T2133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.923345][ T4372] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.945310][ T2133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.022488][ T4372] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.077297][ T4372] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.159108][ T2133] team0: Port device team_slave_0 added [ 1281.168745][ T2133] team0: Port device team_slave_1 added [ 1281.207909][ T2133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.216490][ T2133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.242892][ T2133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.255653][ T2133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.262809][ T2133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.288953][ T2133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.370783][ T2021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1281.386055][ T2021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1281.405624][ T2021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1281.440041][ T2021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1281.449456][ T2022] Bluetooth: hci4: command 0x041b tx timeout [ 1281.520731][ T2133] device hsr_slave_0 entered promiscuous mode [ 1281.529075][ T2133] device hsr_slave_1 entered promiscuous mode [ 1281.535822][ T2133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1281.544048][ T2133] Cannot create hsr debugfs directory [ 1281.765628][ T2021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.772871][ T2022] Bluetooth: hci1: command 0x0419 tx timeout [ 1281.838132][ T2021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1281.856494][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1281.868926][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1281.885766][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1281.897188][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1281.918561][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.925793][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.934228][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1281.977106][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1281.986853][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1281.997945][T23801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.005148][T23801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.015018][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1282.054988][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1282.085542][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1282.096065][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1282.114688][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1282.135151][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1282.199913][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1282.215811][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1282.226663][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1282.246237][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1282.258435][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1282.303824][ T2021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1282.651572][ T2133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1282.774797][ T2133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1282.820288][ T2133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1282.833312][ T2133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1282.852709][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1282.884066][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1282.914837][ T2021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.995784][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1283.005935][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1283.019547][ T4372] device hsr_slave_0 left promiscuous mode [ 1283.027188][ T4372] device hsr_slave_1 left promiscuous mode [ 1283.034468][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.042961][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.051257][ T4372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.058709][ T4372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.072833][ T4372] device bridge_slave_1 left promiscuous mode [ 1283.079227][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.087815][ T4372] device bridge_slave_0 left promiscuous mode [ 1283.094272][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.116226][ T4372] device veth0_macvtap left promiscuous mode [ 1283.123842][ T4372] device veth1_vlan left promiscuous mode [ 1283.533717][ T2022] Bluetooth: hci4: command 0x040f tx timeout [ 1283.655664][ T4372] team0 (unregistering): Port device team_slave_1 removed [ 1283.696863][ T4372] team0 (unregistering): Port device team_slave_0 removed [ 1283.735962][ T4372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.776640][ T4372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.054288][ T4372] bond0 (unregistering): Released all slaves [ 1284.154698][ T2021] device veth0_vlan entered promiscuous mode [ 1284.166319][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1284.184942][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1284.203915][ T2021] device veth1_vlan entered promiscuous mode [ 1284.221214][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1284.229911][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1284.250348][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1284.263435][ T2133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.317026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1284.326288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1284.336547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1284.360427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1284.370266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1284.380077][ T2133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.396549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1284.414524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1284.439184][ T2021] device veth0_macvtap entered promiscuous mode [ 1284.476255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1284.499936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1284.515938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1284.528757][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.536043][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.548227][ T2021] device veth1_macvtap entered promiscuous mode [ 1284.583540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1284.592559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1284.609977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1284.629526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1284.649766][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.656932][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.703632][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1284.718446][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1284.738024][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1284.756922][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1284.766146][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1284.776779][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1284.786084][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1284.798124][ T2021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.819933][ T2021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.839052][ T2021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.849871][ T2021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.860133][ T2021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.870964][ T2021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.882833][ T2021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.909443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1284.937027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1284.947567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1284.963723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1284.977472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1284.986720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1284.997822][ T2021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.019135][ T2021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.039067][ T2021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.049975][ T2021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.060574][ T2021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.071097][ T2021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.082380][ T2021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1285.091206][ T2133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1285.108396][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1285.123341][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1285.152631][ T2021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.164979][ T2021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.175055][ T2021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.184308][ T2021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.338949][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.347253][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.366678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1285.441114][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.459302][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.467906][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1285.610555][ T2022] Bluetooth: hci4: command 0x0419 tx timeout [ 1285.850997][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1285.860990][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1285.909817][ T2133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1286.049296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1286.077365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1286.170967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1286.217498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1286.307344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1286.346190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1286.411566][ T2133] device veth0_vlan entered promiscuous mode [ 1286.488789][ T2133] device veth1_vlan entered promiscuous mode [ 1286.631899][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1286.653491][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1286.693651][ T2133] device veth0_macvtap entered promiscuous mode [ 1286.707754][ T2133] device veth1_macvtap entered promiscuous mode [ 1286.768578][ T2133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.779919][ T2133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.789928][ T2133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.806966][ T2133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.817568][ T2133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.828540][ T2133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.849223][ T2133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.869786][ T2133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.888785][ T2133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1286.897520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1286.907053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1286.917023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1286.927174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1286.942087][ T2133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.955241][ T2133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.965756][ T2133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.979484][ T2133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.996256][ T2133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.016431][ T2133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.027150][ T2133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.044929][ T2133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.057401][ T2133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.071588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1287.081600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1287.093817][ T2133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.103084][ T2133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.113288][ T2133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.126328][ T2133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.265508][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.279559][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.312712][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1287.331047][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.340082][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.348363][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1287.666077][ T2291] syz.1.13972[2291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1287.666246][ T2291] syz.1.13972[2291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1287.728483][ T2288] netlink: 'syz.4.13971': attribute type 16 has an invalid length. [ 1287.766629][ T2288] netlink: 'syz.4.13971': attribute type 25 has an invalid length. [ 1287.777436][ T2288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13971'. [ 1288.465934][ T2324] syz.0.13985[2324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1288.466110][ T2324] syz.0.13985[2324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1288.911790][ T2344] netlink: 'syz.0.13986': attribute type 16 has an invalid length. [ 1288.965540][ T2344] netlink: 'syz.0.13986': attribute type 25 has an invalid length. [ 1288.978676][ T2344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13986'. [ 1292.583836][ T2499] netlink: 'syz.2.14045': attribute type 21 has an invalid length. [ 1292.592864][ T2499] netlink: 'syz.2.14045': attribute type 1 has an invalid length. [ 1292.777362][ T2504] netlink: 'syz.0.14049': attribute type 10 has an invalid length. [ 1293.048181][ T2521] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14062'. [ 1293.311894][ T2532] netlink: 'syz.1.14055': attribute type 2 has an invalid length. [ 1293.336981][ T2532] netlink: 'syz.1.14055': attribute type 2 has an invalid length. [ 1293.349433][ T2532] netlink: 198388 bytes leftover after parsing attributes in process `syz.1.14055'. [ 1294.810140][ T2572] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14068'. [ 1295.082218][ T2585] netlink: 'syz.4.14074': attribute type 21 has an invalid length. [ 1295.109516][ T2585] netlink: 'syz.4.14074': attribute type 1 has an invalid length. [ 1295.432788][ T2602] netlink: 'syz.4.14082': attribute type 2 has an invalid length. [ 1295.450999][ T2602] netlink: 'syz.4.14082': attribute type 2 has an invalid length. [ 1295.458896][ T2602] netlink: 198388 bytes leftover after parsing attributes in process `syz.4.14082'. [ 1295.718318][ T2612] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14086'. [ 1297.514598][ T2653] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14098'. [ 1300.349576][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.355983][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.427788][ T2876] netlink: 'syz.2.14174': attribute type 3 has an invalid length. [ 1307.449479][ T2876] netlink: 'syz.2.14174': attribute type 4 has an invalid length. [ 1307.458426][ T2876] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.14174'. [ 1308.786326][ T2915] netlink: 'syz.1.14190': attribute type 3 has an invalid length. [ 1308.819866][ T2915] netlink: 'syz.1.14190': attribute type 1 has an invalid length. [ 1308.847337][ T2915] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.14190'. [ 1309.635508][ T2940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.643620][ T2940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.782320][ T2943] device bridge_slave_1 left promiscuous mode [ 1309.789443][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.970257][ T2943] device bridge_slave_0 left promiscuous mode [ 1309.977706][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.784821][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.792109][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.817521][ T3016] device bridge0 left promiscuous mode [ 1312.853913][ T3017] netlink: 'syz.4.14232': attribute type 4 has an invalid length. [ 1312.862911][ T3019] device bridge_slave_1 left promiscuous mode [ 1312.870362][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.017181][ T3019] device bridge_slave_0 left promiscuous mode [ 1313.024640][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.214972][ T3019] bond0: (slave bridge0): Releasing backup interface [ 1314.966148][ T3061] netlink: 'syz.2.14245': attribute type 4 has an invalid length. [ 1315.350747][ T3066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.358019][ T3066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.426988][ T3066] device bridge0 left promiscuous mode [ 1315.497481][ T3067] device bridge_slave_1 left promiscuous mode [ 1315.529301][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.619721][ T3067] device bridge_slave_0 left promiscuous mode [ 1315.639369][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.582286][ T3115] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.14263'. [ 1322.177616][T19820] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.471859][T19820] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.751644][T19820] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.743458][ T2022] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1323.754112][ T2022] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1323.762216][ T2022] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1323.771290][ T2022] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1323.779368][ T2022] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1323.787182][ T2022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1324.027716][T19820] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.058756][ T3213] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.14308'. [ 1324.152825][ T3216] rxe_eth0 speed is unknown, defaulting to 1000 [ 1325.849207][T19705] Bluetooth: hci1: command 0x0409 tx timeout [ 1326.588646][ T3216] chnl_net:caif_netlink_parms(): no params data found [ 1326.645972][ T3257] netlink: 'syz.3.14324': attribute type 10 has an invalid length. [ 1326.995086][ T3257] team0: Device gre0 is of different type [ 1327.939171][T19705] Bluetooth: hci1: command 0x041b tx timeout [ 1328.494971][ T3310] netlink: 'syz.4.14350': attribute type 10 has an invalid length. [ 1328.600825][ T3310] team0: Device gre0 is of different type [ 1329.231759][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.239337][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.259819][ T3324] device bridge_slave_1 left promiscuous mode [ 1329.359474][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.422507][ T3324] device bridge_slave_0 left promiscuous mode [ 1329.428949][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.584181][ T3216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.591571][ T3216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.600906][ T3216] device bridge_slave_0 entered promiscuous mode [ 1329.610796][ T3216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.618076][ T3216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.626865][ T3216] device bridge_slave_1 entered promiscuous mode [ 1329.673726][ T3216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.788893][ T3216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.010871][T19705] Bluetooth: hci1: command 0x040f tx timeout [ 1330.857115][ T3216] team0: Port device team_slave_0 added [ 1330.864539][ T3364] netlink: 'syz.1.14358': attribute type 10 has an invalid length. [ 1330.951225][ T3364] team0: Device gre0 is of different type [ 1331.302423][ T3216] team0: Port device team_slave_1 added [ 1332.089116][T19705] Bluetooth: hci1: command 0x0419 tx timeout [ 1332.185433][ T3216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.195249][ T3216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.222160][ T3216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.235166][ T3409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.242446][ T3409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.346728][ T3416] device bridge_slave_1 left promiscuous mode [ 1332.354484][ T3416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.370834][ T3416] device bridge_slave_0 left promiscuous mode [ 1332.377534][ T3416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.461880][ T3416] bond0: (slave bridge0): Releasing backup interface [ 1332.526183][ T3216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.535215][ T3216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.569547][ T3216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.970098][ T3216] device hsr_slave_0 entered promiscuous mode [ 1333.106345][ T3216] device hsr_slave_1 entered promiscuous mode [ 1333.142708][ T3435] netlink: 'syz.0.14377': attribute type 10 has an invalid length. [ 1333.253349][ T3435] team0: Device gre0 is of different type [ 1333.337887][T19820] device hsr_slave_0 left promiscuous mode [ 1333.352500][T19820] device hsr_slave_1 left promiscuous mode [ 1333.475818][T19820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.486071][T19820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.502703][T19820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.510857][T19820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.558556][T19820] device veth1_macvtap left promiscuous mode [ 1333.565096][T19820] device veth0_macvtap left promiscuous mode [ 1333.576869][T19820] device veth1_vlan left promiscuous mode [ 1333.583115][T19820] device veth0_vlan left promiscuous mode [ 1334.478709][T19820] team0 (unregistering): Port device team_slave_1 removed [ 1334.535091][T19820] team0 (unregistering): Port device team_slave_0 removed [ 1334.590489][T19820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.692211][T19820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.016563][T19820] bond0 (unregistering): Released all slaves [ 1335.567090][ T3474] netlink: 'syz.1.14395': attribute type 3 has an invalid length. [ 1335.587963][ T3474] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.14395'. [ 1335.601173][ T3476] rxe_eth0 speed is unknown, defaulting to 1000 [ 1336.727707][ T3216] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1336.757797][ T3216] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1336.809805][ T3216] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1336.827032][ T3216] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1336.925262][ T3216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.948764][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1336.958648][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1336.977415][ T3216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.997163][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1337.013975][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1337.025357][T23801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.032589][T23801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.065876][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1337.074639][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1337.090716][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1337.105661][T23801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.112850][T23801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.126977][T23801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1337.142162][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1337.169049][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1337.190940][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1337.210319][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1337.238673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1337.249769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1337.267771][ T3216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1337.285509][ T3216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1337.307227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1337.318778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1337.330095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1337.338766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1337.357057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1337.820376][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1337.827880][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1337.846289][ T3216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.885604][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1337.897795][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1337.928733][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1337.938207][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1337.949589][ T3216] device veth0_vlan entered promiscuous mode [ 1337.961826][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1337.971951][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1337.984277][ T3216] device veth1_vlan entered promiscuous mode [ 1338.022920][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1338.039946][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 1338.048427][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1338.063289][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1338.075729][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1338.094820][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1338.110387][ T3216] device veth0_macvtap entered promiscuous mode [ 1338.128408][ T3216] device veth1_macvtap entered promiscuous mode [ 1338.150085][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1338.169983][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1338.185222][ T3216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.202416][ T3216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.215070][ T3216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.226383][ T3216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.238767][ T3216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.250563][ T3216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.260837][ T3216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.271663][ T3216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.284294][ T3216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.295614][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1338.305473][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1338.318207][ T3216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.335748][ T3216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.346326][ T3216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.363310][ T3216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.373366][ T3216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.384430][ T3216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.394382][ T3216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.405067][ T3216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.429520][ T3216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.451165][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1338.470386][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1338.493416][ T3216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.502439][ T3216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.511557][ T3216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.520611][ T3216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.633342][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.649340][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.663664][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1338.696477][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.704576][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.714044][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1338.904481][ T3535] netlink: 'syz.2.14397': attribute type 10 has an invalid length. [ 1339.171420][ T3535] team0: Device gre0 is of different type [ 1339.507835][ T3560] netlink: 'syz.0.14403': attribute type 1 has an invalid length. [ 1339.529279][ T3560] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.14403'. [ 1341.996222][ T3664] netlink: 'syz.4.14453': attribute type 10 has an invalid length. [ 1342.073544][ T3664] team0: Device gre0 is of different type [ 1343.217685][ T3688] netlink: 'syz.1.14462': attribute type 10 has an invalid length. [ 1343.329771][ T3688] team0: Device gre0 is of different type [ 1343.580987][ T3699] netlink: 'syz.2.14456': attribute type 3 has an invalid length. [ 1343.591000][ T3699] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.14456'. [ 1344.342606][ T3726] netlink: 'syz.4.14466': attribute type 22 has an invalid length. [ 1344.376014][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14466'. [ 1344.673225][ T3730] device syzkaller0 entered promiscuous mode [ 1353.466718][T19705] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1356.538121][ T3866] rxe_eth0 speed is unknown, defaulting to 1000 [ 1358.150783][ T3904] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.14540'. [ 1359.345809][T19705] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1360.144428][ T3913] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.14554'. [ 1360.583040][ T3926] rxe_eth0 speed is unknown, defaulting to 1000 [ 1361.699643][ T3950] netlink: 'syz.1.14556': attribute type 2 has an invalid length. [ 1361.708369][ T3950] netlink: 10 bytes leftover after parsing attributes in process `syz.1.14556'. [ 1361.782104][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.788512][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.204879][T19705] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 1362.416074][ T3967] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.14560'. [ 1362.619682][ T3970] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.14565'. [ 1362.659250][ T3970] netlink: zone id is out of range [ 1362.664540][ T3970] netlink: zone id is out of range [ 1362.679295][ T3970] netlink: zone id is out of range [ 1362.684497][ T3970] netlink: zone id is out of range [ 1362.689991][ T3970] netlink: zone id is out of range [ 1362.695182][ T3970] netlink: zone id is out of range [ 1362.719352][ T3970] netlink: zone id is out of range [ 1362.725091][ T3970] netlink: zone id is out of range [ 1362.739120][ T3970] netlink: zone id is out of range [ 1362.744540][ T3970] netlink: zone id is out of range [ 1363.355004][ T3982] device syzkaller0 entered promiscuous mode [ 1363.421085][ T3985] netlink: 'syz.2.14571': attribute type 2 has an invalid length. [ 1363.430215][ T3985] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14571'. [ 1363.751574][ T3978] netlink: 'syz.0.14568': attribute type 3 has an invalid length. [ 1363.894720][ T3978] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14568'. [ 1367.181595][ T4022] netlink: 'syz.4.14583': attribute type 2 has an invalid length. [ 1367.203142][ T4022] netlink: 10 bytes leftover after parsing attributes in process `syz.4.14583'. [ 1368.144482][ T4053] device syzkaller0 entered promiscuous mode [ 1368.217034][ T4057] netlink: 'syz.4.14597': attribute type 3 has an invalid length. [ 1368.228374][ T4057] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14597'. [ 1368.629344][ T4073] netlink: 'syz.0.14600': attribute type 2 has an invalid length. [ 1368.638331][ T4073] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14600'. [ 1370.634219][ T4091] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.14607'. [ 1370.649874][ T4091] net_ratelimit: 154 callbacks suppressed [ 1370.649892][ T4091] netlink: zone id is out of range [ 1370.699278][ T4091] netlink: zone id is out of range [ 1370.704753][ T4091] netlink: zone id is out of range [ 1370.719229][ T4091] netlink: zone id is out of range [ 1370.734516][ T4091] netlink: zone id is out of range [ 1370.748136][ T4091] netlink: zone id is out of range [ 1370.754047][ T4091] netlink: zone id is out of range [ 1370.759738][ T4091] netlink: zone id is out of range [ 1370.766009][ T4091] netlink: zone id is out of range [ 1370.785672][ T4091] netlink: zone id is out of range [ 1370.836430][ T4101] rxe_eth0 speed is unknown, defaulting to 1000 [ 1371.223679][ T4108] netlink: 'syz.2.14613': attribute type 3 has an invalid length. [ 1371.251134][ T4110] netlink: 'syz.4.14616': attribute type 9 has an invalid length. [ 1371.269433][ T4108] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.14613'. [ 1371.295009][ T4110] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.14616'. [ 1372.790782][ T4138] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.14627'. [ 1372.958438][ T4126] device syzkaller0 entered promiscuous mode [ 1375.813900][ T4153] netlink: 'syz.3.14632': attribute type 3 has an invalid length. [ 1375.846944][ T4153] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.14632'. [ 1376.034943][T19705] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 1376.608911][ T4183] device syzkaller0 entered promiscuous mode [ 1379.701861][ T4204] syzkaller0: tun_chr_ioctl cmd 35111 [ 1379.844382][ T4212] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.14659'. [ 1380.137639][ T4221] netlink: 176 bytes leftover after parsing attributes in process `syz.3.14661'. [ 1380.163501][ T4223] netlink: 'syz.1.14665': attribute type 25 has an invalid length. [ 1380.179288][ T4223] netlink: 'syz.1.14665': attribute type 3 has an invalid length. [ 1380.208174][ T4223] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14665'. [ 1381.775999][ T4258] rxe_eth0 speed is unknown, defaulting to 1000 [ 1383.257362][ T4294] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.14689'. [ 1383.374099][ T4295] : renamed from syzkaller0 [ 1385.667390][ T4341] rxe_eth0 speed is unknown, defaulting to 1000 [ 1386.688425][ T4376] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14721'. [ 1386.700915][ T4378] netlink: 'syz.1.14722': attribute type 29 has an invalid length. [ 1388.143477][ T4378] netlink: 'syz.1.14722': attribute type 29 has an invalid length. [ 1388.703015][ T4406] netlink: 'syz.3.14731': attribute type 25 has an invalid length. [ 1388.712667][ T4406] netlink: 'syz.3.14731': attribute type 3 has an invalid length. [ 1388.721332][ T4406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14731'. [ 1389.254052][ T4402] rxe_eth0 speed is unknown, defaulting to 1000 [ 1389.687850][ T4420] sctp: [Deprecated]: syz.0.14738 (pid 4420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1389.687850][ T4420] Use struct sctp_sack_info instead [ 1391.596734][ T4447] netlink: 'syz.0.14748': attribute type 25 has an invalid length. [ 1391.621227][ T4447] netlink: 'syz.0.14748': attribute type 3 has an invalid length. [ 1391.660095][ T4447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14748'. [ 1391.876499][ T4453] : renamed from syzkaller0 [ 1394.463906][ T4496] : renamed from syzkaller0 [ 1394.935438][ T4507] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14786'. [ 1395.591727][ T4514] sctp: [Deprecated]: syz.1.14780 (pid 4514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1395.591727][ T4514] Use struct sctp_sack_info instead [ 1399.689237][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 1399.997467][ T4540] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14790'. [ 1401.634055][ T4570] sctp: [Deprecated]: syz.0.14804 (pid 4570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1401.634055][ T4570] Use struct sctp_sack_info instead [ 1406.355625][ T4633] netlink: 'syz.2.14830': attribute type 2 has an invalid length. [ 1406.363702][ T4633] netlink: 'syz.2.14830': attribute type 1 has an invalid length. [ 1407.928317][ T4663] rxe_eth0 speed is unknown, defaulting to 1000 [ 1409.327401][ T4690] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.14852'. [ 1411.551023][ T4717] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.14865'. [ 1411.743922][ T4721] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.14867'. [ 1414.987983][ T4745] netlink: 125520 bytes leftover after parsing attributes in process `syz.1.14878'. [ 1418.371793][ T4827] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.14922'. [ 1419.044289][ T4841] rxe_eth0 speed is unknown, defaulting to 1000 [ 1420.393369][ T4872] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.14931'. [ 1420.452073][ T4872] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1421.619307][ T4897] netlink: 'syz.2.14942': attribute type 27 has an invalid length. [ 1421.913667][ T4905] rxe_eth0 speed is unknown, defaulting to 1000 [ 1422.612734][ T4930] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.14956'. [ 1422.706529][ T4930] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1423.219888][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.226368][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.825862][ T4972] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.14974'. [ 1426.458271][ T4972] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1426.537583][ T4964] rxe_eth0 speed is unknown, defaulting to 1000 [ 1427.392914][ T4997] netlink: 'syz.4.14985': attribute type 27 has an invalid length. [ 1428.655875][ T5023] rxe_eth0 speed is unknown, defaulting to 1000 [ 1429.203461][ T5037] netlink: 'syz.3.15000': attribute type 27 has an invalid length. [ 1429.711968][ T4292] Bluetooth: hci0: unknown advertising packet type: 0x10 [ 1429.712075][ T4292] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1430.107036][ T5063] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.15013'. [ 1430.249299][ T4292] Bluetooth: hci1: command 0x206e tx timeout [ 1432.329249][ T4292] Bluetooth: hci1: command 0x206e tx timeout [ 1432.614632][ T5080] device syzkaller0 entered promiscuous mode [ 1432.715806][T19705] Bluetooth: hci3: unknown advertising packet type: 0x10 [ 1432.715916][T19705] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1433.024431][ T5097] netlink: 'syz.0.15028': attribute type 1 has an invalid length. [ 1433.058529][ T5097] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.15028'. [ 1434.416239][T19705] Bluetooth: hci1: command 0x206e tx timeout [ 1434.739150][ T4292] Bluetooth: hci4: command 0x206e tx timeout [ 1436.499167][ T4292] Bluetooth: hci1: command 0x206e tx timeout [ 1436.819102][ T4292] Bluetooth: hci4: command 0x206e tx timeout [ 1437.239039][ T5106] netlink: 'syz.4.15041': attribute type 3 has an invalid length. [ 1437.247105][ T5106] netlink: 'syz.4.15041': attribute type 1 has an invalid length. [ 1437.259111][ T5106] netlink: 128 bytes leftover after parsing attributes in process `syz.4.15041'. [ 1437.418670][ T5114] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.15033'. [ 1438.058116][ T5140] netlink: 'syz.1.15045': attribute type 29 has an invalid length. [ 1438.099526][ T5140] netlink: 'syz.1.15045': attribute type 29 has an invalid length. [ 1438.109785][ T5141] netlink: 'syz.1.15045': attribute type 29 has an invalid length. [ 1438.143470][ T5140] netlink: 'syz.1.15045': attribute type 29 has an invalid length. [ 1438.160465][ T5140] netlink: 'syz.1.15045': attribute type 29 has an invalid length. [ 1438.569889][T19705] Bluetooth: hci1: command 0x206e tx timeout [ 1438.889147][T19705] Bluetooth: hci4: command 0x206e tx timeout [ 1439.719151][T19705] Bluetooth: hci2: command 0x206e tx timeout [ 1440.652259][T19705] Bluetooth: hci1: command 0x206e tx timeout [ 1440.979664][ T4292] Bluetooth: hci4: command 0x206e tx timeout [ 1441.485246][ T5232] netlink: 'syz.0.15092': attribute type 29 has an invalid length. [ 1441.519788][ T5232] netlink: 'syz.0.15092': attribute type 29 has an invalid length. [ 1441.572122][ T5232] netlink: 'syz.0.15092': attribute type 29 has an invalid length. [ 1441.591632][ T5232] netlink: 'syz.0.15092': attribute type 29 has an invalid length. [ 1441.609173][ T5232] netlink: 'syz.0.15092': attribute type 29 has an invalid length. [ 1441.769026][ T4292] Bluetooth: hci2: command 0x206e tx timeout [ 1442.646053][ T5248] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15102'. [ 1443.049536][ T4292] Bluetooth: hci4: command 0x206e tx timeout [ 1443.849214][ T4292] Bluetooth: hci2: command 0x206e tx timeout [ 1444.759537][ T5298] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15109'. [ 1445.129034][ T4292] Bluetooth: hci4: command 0x206e tx timeout [ 1445.929100][T19705] Bluetooth: hci2: command 0x206e tx timeout [ 1446.511806][ T5339] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15128'. [ 1447.258586][ T5353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15134'. [ 1447.606102][ T5365] netlink: 'syz.2.15140': attribute type 8 has an invalid length. [ 1447.640297][ T5365] netlink: 'syz.2.15140': attribute type 1 has an invalid length. [ 1447.648835][ T5365] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.15140'. [ 1448.016180][T19705] Bluetooth: hci2: command 0x206e tx timeout [ 1448.601947][ T5373] netlink: 'syz.4.15156': attribute type 8 has an invalid length. [ 1448.650831][ T5373] netlink: 'syz.4.15156': attribute type 1 has an invalid length. [ 1448.679161][ T5373] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.15156'. [ 1449.022599][ T5385] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15146'. [ 1450.072480][T19705] Bluetooth: hci2: ISO packet too small [ 1450.099136][T19705] Bluetooth: hci2: command 0x206e tx timeout [ 1450.899272][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 1451.185808][ T5423] netlink: 'syz.0.15159': attribute type 8 has an invalid length. [ 1451.194391][ T5423] netlink: 'syz.0.15159': attribute type 1 has an invalid length. [ 1451.202943][ T5423] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.15159'. [ 1457.669404][ T5538] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15224'. [ 1458.206410][ T5562] device pim6reg1 entered promiscuous mode [ 1459.632200][ T5570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15228'. [ 1459.969341][ T5586] netlink: 143828 bytes leftover after parsing attributes in process `syz.4.15234'. [ 1460.017356][ T5586] net_ratelimit: 318 callbacks suppressed [ 1460.017377][ T5586] netlink: del zone limit has 4 unknown bytes [ 1460.613731][ T5611] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.15247'. [ 1460.980987][ T5622] netlink: 143828 bytes leftover after parsing attributes in process `syz.2.15253'. [ 1460.990754][ T5622] netlink: del zone limit has 4 unknown bytes [ 1461.666503][ T5647] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15265'. [ 1461.833839][ T5653] netlink: 143828 bytes leftover after parsing attributes in process `syz.0.15267'. [ 1461.853027][ T5653] netlink: del zone limit has 4 unknown bytes [ 1464.011738][ T5722] device syzkaller0 entered promiscuous mode [ 1467.830973][ T5780] device syzkaller0 entered promiscuous mode [ 1468.036393][ T5791] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.15327'. [ 1470.783062][ T5801] device syzkaller0 entered promiscuous mode [ 1470.925283][ T5822] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.15341'. [ 1471.770803][ T5843] netlink: 'syz.2.15350': attribute type 3 has an invalid length. [ 1471.778836][ T5843] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15350'. [ 1474.024953][ T5849] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15351'. [ 1474.037882][ T5849] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1474.129419][ T5863] device syzkaller0 entered promiscuous mode [ 1474.519759][ T5882] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1478.031826][ T5953] netlink: 128 bytes leftover after parsing attributes in process `syz.4.15398'. [ 1478.044681][ T5953] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1478.289543][T19705] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1478.795175][ T5978] netlink: 'syz.4.15410': attribute type 10 has an invalid length. [ 1478.852817][ T5978] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15410'. [ 1478.885434][ T5978] device ipvlan0 entered promiscuous mode [ 1478.955309][ T5978] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1479.099543][ T5987] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15412'. [ 1479.109638][ T5987] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1483.037809][ T6111] netlink: 'syz.4.15471': attribute type 10 has an invalid length. [ 1483.093751][ T6111] team0: Device vxcan1 is of different type [ 1483.258031][ T6119] device syzkaller0 entered promiscuous mode [ 1484.211649][ T6142] netlink: 'syz.0.15482': attribute type 11 has an invalid length. [ 1484.232689][ T6142] netlink: 198800 bytes leftover after parsing attributes in process `syz.0.15482'. [ 1484.662216][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.668634][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.514152][ T6128] netlink: 'syz.1.15476': attribute type 10 has an invalid length. [ 1486.522564][ T6128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15476'. [ 1486.532087][ T6128] device ipvlan0 entered promiscuous mode [ 1486.538548][ T6128] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1487.197147][ T6174] netlink: 'syz.4.15497': attribute type 11 has an invalid length. [ 1487.259400][ T6174] netlink: 198800 bytes leftover after parsing attributes in process `syz.4.15497'. [ 1487.479846][ T6181] netlink: 'syz.2.15500': attribute type 10 has an invalid length. [ 1487.488130][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15500'. [ 1487.529343][ T6181] device ipvlan0 entered promiscuous mode [ 1487.543335][ T6181] bridge0: port 3(ipvlan0) entered blocking state [ 1487.557049][ T6185] netlink: 'syz.1.15510': attribute type 11 has an invalid length. [ 1487.560819][ T6181] bridge0: port 3(ipvlan0) entered disabled state [ 1487.569187][ T6185] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.15510'. [ 1487.599485][ T6181] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1489.230061][ T6229] netlink: 'syz.3.15518': attribute type 10 has an invalid length. [ 1489.240122][ T6229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15518'. [ 1489.337275][ T6229] device ipvlan0 entered promiscuous mode [ 1489.493160][ T6229] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1491.804032][ T6275] netlink: 'syz.3.15550': attribute type 10 has an invalid length. [ 1491.982981][ T6275] team0: Device vxcan1 is of different type [ 1492.879258][ T6283] netlink: 'syz.0.15540': attribute type 10 has an invalid length. [ 1492.887636][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15540'. [ 1492.939286][ T6283] device ipvlan0 entered promiscuous mode [ 1492.979438][ T6283] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1494.226718][ T6312] netlink: 'syz.1.15557': attribute type 10 has an invalid length. [ 1494.311909][ T6312] team0: Device vxcan1 is of different type [ 1494.414323][ T6315] netlink: 'syz.2.15559': attribute type 10 has an invalid length. [ 1494.440598][ T6315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15559'. [ 1494.463847][ T6315] bridge0: port 3(ipvlan0) entered blocking state [ 1494.474858][ T6315] bridge0: port 3(ipvlan0) entered disabled state [ 1494.522218][ T6315] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1494.684926][ T6328] netlink: 'syz.2.15574': attribute type 10 has an invalid length. [ 1495.235832][ T6328] team0: Device vxcan1 is of different type [ 1496.248413][ T6350] netlink: 'syz.4.15575': attribute type 10 has an invalid length. [ 1496.279624][ T6350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15575'. [ 1496.315174][ T6350] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1496.332601][ T6352] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.15576'. [ 1496.527939][ T6359] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15577'. [ 1498.293654][ T6413] netlink: 'syz.2.15600': attribute type 10 has an invalid length. [ 1498.302428][ T6413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15600'. [ 1498.325743][ T6413] bridge0: port 3(ipvlan0) entered blocking state [ 1498.341667][ T6413] bridge0: port 3(ipvlan0) entered disabled state [ 1498.373279][ T6413] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1499.462981][ T6446] netlink: 'syz.2.15614': attribute type 10 has an invalid length. [ 1499.482960][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15614'. [ 1499.503116][ T6446] bridge0: port 3(ipvlan0) entered blocking state [ 1499.511212][ T6446] bridge0: port 3(ipvlan0) entered disabled state [ 1499.572516][ T6446] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1499.835701][ T6452] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15616'. [ 1500.490444][ T6479] netlink: 'syz.2.15628': attribute type 10 has an invalid length. [ 1500.505019][ T6479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15628'. [ 1500.531089][ T6479] bridge0: port 3(ipvlan0) entered blocking state [ 1500.550073][ T6479] bridge0: port 3(ipvlan0) entered disabled state [ 1500.582576][ T6479] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1501.307325][ T6500] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15637'. [ 1501.658547][ T6511] netlink: 'syz.0.15640': attribute type 10 has an invalid length. [ 1501.884886][ T6511] team0: Device vxcan1 is of different type [ 1502.877755][ T6553] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15660'. [ 1503.550772][ T6570] netlink: 'syz.0.15664': attribute type 10 has an invalid length. [ 1503.613472][ T6570] team0: Device vxcan1 is of different type [ 1503.683738][ T6573] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.15668'. [ 1504.185065][ T6596] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15676'. [ 1505.793990][ T6620] netlink: 'syz.1.15685': attribute type 10 has an invalid length. [ 1505.819377][ T6620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15685'. [ 1505.837849][ T6620] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1506.276080][ T6632] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15693'. [ 1506.625762][ T6643] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.15696'. [ 1507.767389][ T6669] netlink: 'syz.0.15705': attribute type 10 has an invalid length. [ 1507.914465][ T6669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15705'. [ 1508.041839][ T6669] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1508.125580][ T6671] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15708'. [ 1510.011603][ T6709] netlink: 'syz.4.15725': attribute type 10 has an invalid length. [ 1510.024357][ T6709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15725'. [ 1510.057399][ T6709] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1510.365343][ T6713] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15727'. [ 1514.507169][ T6739] netlink: 'syz.4.15738': attribute type 10 has an invalid length. [ 1514.529195][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15738'. [ 1514.552921][ T6739] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1514.653498][ T6746] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.15739'. [ 1515.048302][ T6756] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15742'. [ 1515.623015][ T6765] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15757'. [ 1517.964764][ T6788] netlink: 'syz.3.15753': attribute type 10 has an invalid length. [ 1518.009146][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15753'. [ 1518.082647][ T6788] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1518.364187][ T6801] netlink: 'syz.2.15772': attribute type 10 has an invalid length. [ 1518.381450][ T6801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15772'. [ 1518.441730][ T6801] bridge0: port 3(ipvlan0) entered blocking state [ 1518.474358][ T6801] bridge0: port 3(ipvlan0) entered disabled state [ 1518.522127][ T6801] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1519.005959][ T6809] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15764'. [ 1519.327820][ T6812] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.15765'. [ 1519.558003][ T6818] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15778'. [ 1521.141687][ T6854] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.15782'. [ 1521.216663][ T6856] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.15784'. [ 1523.099755][ T6887] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.15798'. [ 1524.834385][ T6919] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.15812'. [ 1524.908818][ T6921] netlink: 'syz.2.15813': attribute type 22 has an invalid length. [ 1525.722887][ T6939] netlink: 'syz.3.15821': attribute type 12 has an invalid length. [ 1525.741491][ T6939] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15821'. [ 1527.078007][ T6976] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.15839'. [ 1531.331315][ T7036] device syzkaller0 entered promiscuous mode [ 1536.704116][ T7095] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.15889'. [ 1537.996307][ T7090] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.15898'. [ 1538.238353][ T7114] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.15908'. [ 1538.370544][ T7116] netlink: 'syz.1.15900': attribute type 153 has an invalid length. [ 1538.389139][ T7116] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.15900'. [ 1538.719165][T19705] Bluetooth: hci2: Malformed LE Event: 0x1b [ 1539.622225][ T7137] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.15909'. [ 1539.921098][ T7147] netlink: 'syz.2.15914': attribute type 22 has an invalid length. [ 1540.091908][ T7155] netlink: 'syz.2.15918': attribute type 10 has an invalid length. [ 1540.104057][ T7155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15918'. [ 1540.127850][ T7155] bridge0: port 3(ipvlan0) entered blocking state [ 1540.140536][ T7155] bridge0: port 3(ipvlan0) entered disabled state [ 1540.170205][T19705] Bluetooth: hci4: Malformed LE Event: 0x1b [ 1540.181132][ T7155] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1541.543765][T19705] Bluetooth: hci0: Malformed LE Event: 0x1b [ 1542.605918][ T7195] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15935'. [ 1546.093154][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.099616][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.230274][ T7248] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.15971'. [ 1548.891805][ T7290] rxe_eth0 speed is unknown, defaulting to 1000 [ 1552.111977][ T7326] netlink: 'syz.4.15996': attribute type 153 has an invalid length. [ 1552.125377][ T7326] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.15996'. [ 1553.399396][ T7367] netlink: 'syz.2.16014': attribute type 153 has an invalid length. [ 1553.429200][ T7367] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.16014'. [ 1554.017002][ T7381] netlink: 'syz.4.16024': attribute type 3 has an invalid length. [ 1554.025557][ T7381] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.16024'. [ 1554.148794][ T7388] sock: sock_timestamping_bind_phc: sock not bind to device [ 1554.549632][ T7403] netlink: 'syz.1.16033': attribute type 10 has an invalid length. [ 1554.591581][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16033'. [ 1554.617416][ T7401] netlink: 'syz.0.16030': attribute type 153 has an invalid length. [ 1554.643797][ T7403] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1554.679512][ T7401] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.16030'. [ 1554.831032][ T7410] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.16036'. [ 1555.124893][ T7408] device syzkaller0 entered promiscuous mode [ 1560.056593][ T7440] netlink: 'syz.0.16049': attribute type 10 has an invalid length. [ 1560.068629][ T7440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16049'. [ 1560.082364][ T7440] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1562.284098][ T7477] device syzkaller0 entered promiscuous mode [ 1565.459598][ T7522] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1565.584039][ T7524] syz.2.16087[7524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1565.584198][ T7524] syz.2.16087[7524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1568.210387][ T7552] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1568.258486][ T7546] rxe_eth0 speed is unknown, defaulting to 1000 [ 1569.017427][ T7568] device syzkaller0 entered promiscuous mode [ 1569.463260][ T7585] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1573.709672][ T7634] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.16133'. [ 1573.733256][ T7632] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.16128'. [ 1574.033388][ T7624] rxe_eth0 speed is unknown, defaulting to 1000 [ 1574.391459][ T7653] netlink: 'syz.3.16141': attribute type 2 has an invalid length. [ 1574.418926][ T7653] netlink: 'syz.3.16141': attribute type 4 has an invalid length. [ 1574.447387][ T7653] netlink: 'syz.3.16141': attribute type 8 has an invalid length. [ 1574.519233][ T7653] netlink: 'syz.3.16141': attribute type 9 has an invalid length. [ 1574.559049][ T7653] netlink: 'syz.3.16141': attribute type 10 has an invalid length. [ 1574.574933][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16141'. [ 1574.997130][ T7666] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.16148'. [ 1575.684437][ T7684] netlink: 'syz.2.16157': attribute type 2 has an invalid length. [ 1575.694830][ T7684] netlink: 'syz.2.16157': attribute type 4 has an invalid length. [ 1575.703776][ T7684] netlink: 'syz.2.16157': attribute type 8 has an invalid length. [ 1575.723067][ T7684] netlink: 'syz.2.16157': attribute type 9 has an invalid length. [ 1575.751344][ T7684] netlink: 'syz.2.16157': attribute type 10 has an invalid length. [ 1575.776219][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16157'. [ 1575.823542][ T7690] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.16161'. [ 1576.031912][ T7698] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.16164'. [ 1576.602864][ T7701] rxe_eth0 speed is unknown, defaulting to 1000 [ 1576.681513][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16173'. [ 1576.858582][ T7720] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.16175'. [ 1577.102232][ T7727] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.16176'. [ 1577.467315][ T7736] device syzkaller0 entered promiscuous mode [ 1579.937067][ T7765] validate_nla: 8 callbacks suppressed [ 1579.937088][ T7765] netlink: 'syz.4.16193': attribute type 7 has an invalid length. [ 1579.995157][ T7765] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.16193'. [ 1580.188130][ T7771] netlink: 'syz.1.16197': attribute type 6 has an invalid length. [ 1580.208394][ T7771] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.16197'. [ 1580.537905][ T7775] device syzkaller0 entered promiscuous mode [ 1584.238275][ T7824] netlink: 'syz.2.16218': attribute type 6 has an invalid length. [ 1584.260044][ T7824] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.16218'. [ 1584.724191][ T7846] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.16234'. [ 1585.050195][ T7865] netlink: 'syz.3.16240': attribute type 2 has an invalid length. [ 1585.058217][ T7865] netlink: 199540 bytes leftover after parsing attributes in process `syz.3.16240'. [ 1585.203551][ T7871] netlink: 'syz.1.16253': attribute type 7 has an invalid length. [ 1585.222950][ T7871] netlink: 'syz.1.16253': attribute type 7 has an invalid length. [ 1585.243357][ T7871] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.16253'. [ 1588.602226][ T8003] netlink: 'syz.4.16269': attribute type 7 has an invalid length. [ 1588.619148][ T8003] netlink: 'syz.4.16269': attribute type 7 has an invalid length. [ 1588.638525][ T8003] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.16269'. [ 1589.811349][ T8036] netlink: 'syz.1.16280': attribute type 2 has an invalid length. [ 1589.821845][ T8036] netlink: 199540 bytes leftover after parsing attributes in process `syz.1.16280'. [ 1590.045845][ T8039] netlink: 'syz.3.16281': attribute type 7 has an invalid length. [ 1590.160212][ T8039] netlink: 'syz.3.16281': attribute type 7 has an invalid length. [ 1590.169431][ T8039] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.16281'. [ 1590.185904][ T8050] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.16288'. [ 1594.231564][ T8120] netlink: 140 bytes leftover after parsing attributes in process `syz.4.16316'. [ 1595.866598][ T8133] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.16319'. [ 1598.487031][ T8208] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16351'. [ 1600.657129][ T8298] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16369'. [ 1602.321508][ T8366] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.16384'. [ 1607.521076][ T8505] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.16429'. [ 1607.542557][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.549057][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.140763][ T8587] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.16448'. [ 1611.264252][ T8595] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.16451'. [ 1611.834363][T19705] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1612.203439][ T8637] sctp: [Deprecated]: syz.1.16481 (pid 8637) Use of int in maxseg socket option. [ 1612.203439][ T8637] Use struct sctp_assoc_value instead [ 1612.921494][ T8685] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.16479'. [ 1617.043497][ T8733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16503'. [ 1617.083758][ T8733] netlink: 'syz.2.16503': attribute type 12 has an invalid length. [ 1617.099027][ T8733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16503'. [ 1617.209736][ T8739] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.16504'. [ 1617.319283][ T8746] netlink: 'syz.0.16505': attribute type 7 has an invalid length. [ 1617.396362][ T8746] netlink: 'syz.0.16505': attribute type 7 has an invalid length. [ 1617.438373][ T8746] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.16505'. [ 1617.564431][ T8754] netlink: 'syz.1.16511': attribute type 2 has an invalid length. [ 1617.587042][ T8754] netlink: 'syz.1.16511': attribute type 1 has an invalid length. [ 1617.638150][ T8754] netlink: 'syz.1.16511': attribute type 4 has an invalid length. [ 1617.669016][ T8754] netlink: 'syz.1.16511': attribute type 3 has an invalid length. [ 1617.677169][ T8754] netlink: 'syz.1.16511': attribute type 4 has an invalid length. [ 1617.713917][ T8754] netlink: 'syz.1.16511': attribute type 5 has an invalid length. [ 1617.728015][ T8754] netlink: 'syz.1.16511': attribute type 6 has an invalid length. [ 1617.738377][ T8754] netlink: 206036 bytes leftover after parsing attributes in process `syz.1.16511'. [ 1619.230558][ T8786] IPv6: Can't replace route, no match found [ 1620.967535][ T8828] IPv6: Can't replace route, no match found [ 1621.802568][ T8841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16551'. [ 1621.862322][ T8843] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16551'. [ 1622.127762][ T8866] validate_nla: 5 callbacks suppressed [ 1622.127779][ T8866] netlink: 'syz.4.16553': attribute type 2 has an invalid length. [ 1622.199091][ T8866] netlink: 'syz.4.16553': attribute type 1 has an invalid length. [ 1622.206981][ T8866] netlink: 'syz.4.16553': attribute type 4 has an invalid length. [ 1622.286911][ T8866] netlink: 'syz.4.16553': attribute type 3 has an invalid length. [ 1622.313373][ T8866] netlink: 'syz.4.16553': attribute type 4 has an invalid length. [ 1622.366622][ T8866] netlink: 'syz.4.16553': attribute type 5 has an invalid length. [ 1622.438978][ T8866] netlink: 'syz.4.16553': attribute type 6 has an invalid length. [ 1622.446893][ T8866] netlink: 'syz.4.16553': attribute type 7 has an invalid length. [ 1622.478953][ T8866] netlink: 'syz.4.16553': attribute type 8 has an invalid length. [ 1622.486868][ T8866] netlink: 'syz.4.16553': attribute type 9 has an invalid length. [ 1622.529052][ T8866] netlink: 206036 bytes leftover after parsing attributes in process `syz.4.16553'. [ 1622.583045][ T8874] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.16558'. [ 1623.191596][ T8891] IPv6: Can't replace route, no match found [ 1623.515157][ T8898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16565'. [ 1623.615660][ T8898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16565'. [ 1624.705205][ T8919] netlink: 206036 bytes leftover after parsing attributes in process `syz.0.16571'. [ 1626.271739][ T8948] IPv6: Can't replace route, no match found [ 1626.382102][ T8952] device syzkaller0 entered promiscuous mode [ 1626.757197][ T8962] device syzkaller0 entered promiscuous mode [ 1627.037130][ T8967] netlink: 206036 bytes leftover after parsing attributes in process `syz.3.16585'. [ 1627.503624][ T8977] IPv6: Can't replace route, no match found [ 1628.862403][ T9031] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16615'. [ 1628.925068][ T9034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16617'. [ 1628.938150][ T9031] validate_nla: 26 callbacks suppressed [ 1628.938187][ T9031] netlink: 'syz.4.16615': attribute type 12 has an invalid length. [ 1628.976460][ T9031] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16615'. [ 1630.215665][ T9080] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.16637'. [ 1630.299551][ T9080] netlink: zone id is out of range [ 1630.309728][ T9080] netlink: zone id is out of range [ 1630.355987][ T9080] netlink: zone id is out of range [ 1630.408991][ T9080] netlink: zone id is out of range [ 1630.414578][ T9080] netlink: zone id is out of range [ 1630.469357][ T9080] netlink: zone id is out of range [ 1630.474775][ T9080] netlink: zone id is out of range [ 1630.480445][ T9080] netlink: zone id is out of range [ 1630.485782][ T9080] netlink: zone id is out of range [ 1630.491549][ T9080] netlink: zone id is out of range [ 1633.013366][ T9157] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.16675'. [ 1633.174146][ T9161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16673'. [ 1633.213877][ T9161] netlink: 'syz.3.16673': attribute type 12 has an invalid length. [ 1633.233092][ T9161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16673'. [ 1634.047714][ T9189] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.16690'. [ 1634.544517][ T9203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16694'. [ 1634.560626][ T9203] netlink: 'syz.3.16694': attribute type 12 has an invalid length. [ 1634.572253][ T9203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16694'. [ 1638.652274][ T9282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16731'. [ 1638.673722][ T9282] netlink: 'syz.2.16731': attribute type 12 has an invalid length. [ 1638.684232][ T9282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16731'. [ 1639.777274][ T9292] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.16734'. [ 1641.607229][ T9331] netlink: 'syz.4.16753': attribute type 2 has an invalid length. [ 1641.635117][ T9331] netlink: 'syz.4.16753': attribute type 1 has an invalid length. [ 1641.659324][ T9331] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.16753'. [ 1641.858266][ T9340] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.16754'. [ 1642.809649][ T9373] netlink: 'syz.2.16771': attribute type 25 has an invalid length. [ 1642.824913][ T9373] netlink: 'syz.2.16771': attribute type 3 has an invalid length. [ 1642.849509][ T9373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16771'. [ 1643.207410][ T9384] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.16773'. [ 1644.098420][ T9411] netlink: 'syz.4.16787': attribute type 21 has an invalid length. [ 1644.136432][ T9411] netlink: 'syz.4.16787': attribute type 22 has an invalid length. [ 1644.179756][ T9411] netlink: 'syz.4.16787': attribute type 13 has an invalid length. [ 1644.187787][ T9411] netlink: 6188 bytes leftover after parsing attributes in process `syz.4.16787'. [ 1644.203629][ T9413] netlink: 'syz.1.16789': attribute type 1 has an invalid length. [ 1644.212175][ T9413] netlink: 'syz.1.16789': attribute type 4 has an invalid length. [ 1644.229011][ T9413] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.16789'. [ 1644.617795][ T9424] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.16790'. [ 1646.422956][ T9424] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1646.432545][ T9424] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1646.442493][ T9424] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1646.598112][ T9431] netlink: 'syz.4.16798': attribute type 25 has an invalid length. [ 1646.614482][ T9430] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.16797'. [ 1646.619669][ T9431] netlink: 'syz.4.16798': attribute type 3 has an invalid length. [ 1646.638125][ T9431] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16798'. [ 1646.647871][ T9430] net_ratelimit: 312 callbacks suppressed [ 1646.647889][ T9430] netlink: zone id is out of range [ 1646.679381][ T9430] netlink: zone id is out of range [ 1646.697142][ T9430] netlink: del zone limit has 4 unknown bytes [ 1648.820923][ T9441] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.16813'. [ 1648.888979][ T9441] netlink: zone id is out of range [ 1648.922946][ T9441] netlink: zone id is out of range [ 1648.933118][ T9441] netlink: del zone limit has 4 unknown bytes [ 1651.950834][ T9452] netlink: 'syz.4.16808': attribute type 1 has an invalid length. [ 1651.958736][ T9452] netlink: 'syz.4.16808': attribute type 4 has an invalid length. [ 1651.982459][ T9452] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.16808'. [ 1653.211456][T19705] Bluetooth: hci1: Malformed HCI Event [ 1656.132559][ T9516] netlink: 'syz.1.16832': attribute type 4 has an invalid length. [ 1656.140774][ T9516] netlink: 'syz.1.16832': attribute type 7 has an invalid length. [ 1656.148643][ T9516] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.16832'. [ 1657.176322][ T9491] netlink: 'syz.3.16823': attribute type 1 has an invalid length. [ 1657.184326][ T9491] netlink: 'syz.3.16823': attribute type 4 has an invalid length. [ 1657.192476][ T9491] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.16823'. [ 1657.239157][ T9498] tap0: tun_chr_ioctl cmd 1074025675 [ 1657.244531][ T9498] tap0: persist enabled [ 1661.950987][ T9566] netlink: 'syz.4.16855': attribute type 4 has an invalid length. [ 1661.966959][ T9566] netlink: 'syz.4.16855': attribute type 7 has an invalid length. [ 1662.033867][ T9566] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.16855'. [ 1662.992260][ T9589] netlink: 125520 bytes leftover after parsing attributes in process `syz.1.16862'. [ 1663.656400][T19705] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 1666.187403][ T9630] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16883'. [ 1667.262488][ T4292] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1667.387726][ T9670] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.16899'. [ 1667.407056][ T9670] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1667.478736][ T9674] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16901'. [ 1667.893677][ T9691] device syzkaller0 entered promiscuous mode [ 1668.220571][ T9664] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1668.925612][ T9715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16917'. [ 1668.972766][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.979160][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.504470][ T9664] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1670.217820][ T9748] netlink: 'syz.4.16934': attribute type 21 has an invalid length. [ 1670.234156][ T9748] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.16934'. [ 1671.120806][ T9664] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1673.767045][ T9664] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1673.913819][ T9812] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.16957'. [ 1677.275206][ T9808] netlink: 'syz.3.16967': attribute type 21 has an invalid length. [ 1677.296127][ T9808] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.16967'. [ 1677.330923][ T9812] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1679.389334][ T9873] netlink: 'syz.2.16985': attribute type 21 has an invalid length. [ 1679.397320][ T9873] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.16985'. [ 1679.475087][ T9875] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.16984'. [ 1679.581298][ T9875] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1679.639453][ T9875] CPU: 1 PID: 9875 Comm: syz.0.16984 Not tainted syzkaller #0 [ 1679.646996][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1679.657104][ T9875] Call Trace: [ 1679.660429][ T9875] [ 1679.663402][ T9875] dump_stack_lvl+0x188/0x24e [ 1679.668146][ T9875] ? show_regs_print_info+0x12/0x12 [ 1679.673413][ T9875] ? load_image+0x410/0x410 [ 1679.677986][ T9875] sysfs_warn_dup+0x8a/0xa0 [ 1679.682547][ T9875] sysfs_do_create_link_sd+0xc0/0x110 [ 1679.687986][ T9875] device_add+0x83b/0x1050 [ 1679.692465][ T9875] wiphy_register+0x1f16/0x2c50 [ 1679.697410][ T9875] ? cfg80211_event_work+0x40/0x40 [ 1679.702579][ T9875] ? minstrel_ht_alloc+0x894/0xa20 [ 1679.707759][ T9875] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1679.713889][ T9875] ieee80211_register_hw+0x2e33/0x3b00 [ 1679.719438][ T9875] ? ieee80211_register_hw+0xec1/0x3b00 [ 1679.725080][ T9875] ? ieee80211_register_hw+0xec1/0x3b00 [ 1679.730701][ T9875] ? ieee80211_tasklet_handler+0x20/0x20 [ 1679.736389][ T9875] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1679.742447][ T9875] ? __debug_object_init+0xed/0x440 [ 1679.747719][ T9875] ? memset+0x1e/0x40 [ 1679.751757][ T9875] ? __hrtimer_init+0x189/0x270 [ 1679.756693][ T9875] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1679.762522][ T9875] ? memcpy+0x3c/0x60 [ 1679.766567][ T9875] hwsim_new_radio_nl+0xab7/0xc90 [ 1679.771668][ T9875] genl_family_rcv_msg_doit+0x22f/0x350 [ 1679.777291][ T9875] ? end_current_label_crit_section+0x170/0x170 [ 1679.783609][ T9875] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1679.789584][ T9875] ? bpf_lsm_capable+0x5/0x10 [ 1679.794331][ T9875] ? security_capable+0x85/0xb0 [ 1679.799261][ T9875] genl_rcv_msg+0x601/0x790 [ 1679.803841][ T9875] ? genl_bind+0x360/0x360 [ 1679.808328][ T9875] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1679.814749][ T9875] netlink_rcv_skb+0x1ef/0x440 [ 1679.819578][ T9875] ? genl_bind+0x360/0x360 [ 1679.824065][ T9875] ? netlink_ack+0x1160/0x1160 [ 1679.828899][ T9875] ? down_read+0x1a8/0x2d0 [ 1679.833371][ T9875] genl_rcv+0x24/0x40 [ 1679.837416][ T9875] netlink_unicast+0x7ad/0x920 [ 1679.842248][ T9875] netlink_sendmsg+0x8ad/0xbd0 [ 1679.847082][ T9875] ? netlink_getsockopt+0x550/0x550 [ 1679.852343][ T9875] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1679.857952][ T9875] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1679.863282][ T9875] ? security_socket_sendmsg+0x7c/0xa0 [ 1679.868790][ T9875] ? netlink_getsockopt+0x550/0x550 [ 1679.874056][ T9875] ____sys_sendmsg+0x5ed/0x9a0 [ 1679.878884][ T9875] ? __sys_sendmsg_sock+0x30/0x30 [ 1679.883962][ T9875] ? __import_iovec+0x306/0x510 [ 1679.888891][ T9875] ? import_iovec+0x6f/0xa0 [ 1679.893460][ T9875] ___sys_sendmsg+0x2a2/0x360 [ 1679.898208][ T9875] ? __sys_sendmsg+0x2a0/0x2a0 [ 1679.903092][ T9875] __se_sys_sendmsg+0x1c3/0x2b0 [ 1679.908007][ T9875] ? ct_nmi_exit+0x145/0x1c0 [ 1679.912649][ T9875] ? __x64_sys_sendmsg+0x80/0x80 [ 1679.917660][ T9875] ? lockdep_hardirqs_on+0x94/0x140 [ 1679.922918][ T9875] do_syscall_64+0x4c/0xa0 [ 1679.927390][ T9875] ? clear_bhb_loop+0x60/0xb0 [ 1679.932125][ T9875] ? clear_bhb_loop+0x60/0xb0 [ 1679.936865][ T9875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1679.942807][ T9875] RIP: 0033:0x7f4aa7ba8fd9 [ 1679.947276][ T9875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.967024][ T9875] RSP: 002b:00007f4aa8ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1679.975495][ T9875] RAX: ffffffffffffffda RBX: 00007f4aa7e25fa0 RCX: 00007f4aa7ba8fd9 [ 1679.983525][ T9875] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1679.991541][ T9875] RBP: 00007f4aa7c37fed R08: 0000000000000000 R09: 0000000000000000 [ 1679.999567][ T9875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1680.007591][ T9875] R13: 00007f4aa7e26038 R14: 00007f4aa7e25fa0 R15: 00007fff42a51ae8 [ 1680.015643][ T9875] [ 1680.311468][ T9885] netlink: 'syz.2.16992': attribute type 39 has an invalid length. [ 1681.027362][ T9906] device syzkaller0 entered promiscuous mode [ 1682.055099][ T9920] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.17006'. [ 1682.066611][ T9920] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1682.083996][ T9920] CPU: 0 PID: 9920 Comm: syz.1.17006 Not tainted syzkaller #0 [ 1682.091552][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1682.101655][ T9920] Call Trace: [ 1682.104979][ T9920] [ 1682.107992][ T9920] dump_stack_lvl+0x188/0x24e [ 1682.112751][ T9920] ? show_regs_print_info+0x12/0x12 [ 1682.118025][ T9920] ? load_image+0x410/0x410 [ 1682.122635][ T9920] sysfs_warn_dup+0x8a/0xa0 [ 1682.127199][ T9920] sysfs_do_create_link_sd+0xc0/0x110 [ 1682.132641][ T9920] device_add+0x83b/0x1050 [ 1682.137119][ T9920] wiphy_register+0x1f16/0x2c50 [ 1682.142063][ T9920] ? cfg80211_event_work+0x40/0x40 [ 1682.147232][ T9920] ? minstrel_ht_alloc+0x894/0xa20 [ 1682.152403][ T9920] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1682.158567][ T9920] ieee80211_register_hw+0x2e33/0x3b00 [ 1682.164108][ T9920] ? ieee80211_register_hw+0xec1/0x3b00 [ 1682.169723][ T9920] ? ieee80211_register_hw+0xec1/0x3b00 [ 1682.175337][ T9920] ? ieee80211_tasklet_handler+0x20/0x20 [ 1682.181118][ T9920] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1682.187074][ T9920] ? __debug_object_init+0xed/0x440 [ 1682.192342][ T9920] ? memset+0x1e/0x40 [ 1682.196374][ T9920] ? __hrtimer_init+0x189/0x270 [ 1682.201274][ T9920] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1682.207053][ T9920] ? memcpy+0x3c/0x60 [ 1682.211095][ T9920] hwsim_new_radio_nl+0xab7/0xc90 [ 1682.216202][ T9920] genl_family_rcv_msg_doit+0x22f/0x350 [ 1682.221786][ T9920] ? end_current_label_crit_section+0x170/0x170 [ 1682.228059][ T9920] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1682.234086][ T9920] ? bpf_lsm_capable+0x5/0x10 [ 1682.238798][ T9920] ? security_capable+0x85/0xb0 [ 1682.243713][ T9920] genl_rcv_msg+0x601/0x790 [ 1682.248269][ T9920] ? genl_bind+0x360/0x360 [ 1682.252726][ T9920] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1682.259099][ T9920] netlink_rcv_skb+0x1ef/0x440 [ 1682.263898][ T9920] ? genl_bind+0x360/0x360 [ 1682.268353][ T9920] ? netlink_ack+0x1160/0x1160 [ 1682.273176][ T9920] ? down_read+0x1a8/0x2d0 [ 1682.277626][ T9920] genl_rcv+0x24/0x40 [ 1682.281647][ T9920] netlink_unicast+0x7ad/0x920 [ 1682.286482][ T9920] netlink_sendmsg+0x8ad/0xbd0 [ 1682.291292][ T9920] ? netlink_getsockopt+0x550/0x550 [ 1682.296521][ T9920] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1682.302105][ T9920] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1682.307420][ T9920] ? security_socket_sendmsg+0x7c/0xa0 [ 1682.312910][ T9920] ? netlink_getsockopt+0x550/0x550 [ 1682.318148][ T9920] ____sys_sendmsg+0x5ed/0x9a0 [ 1682.323036][ T9920] ? __sys_sendmsg_sock+0x30/0x30 [ 1682.328094][ T9920] ? __import_iovec+0x306/0x510 [ 1682.332982][ T9920] ? import_iovec+0x6f/0xa0 [ 1682.337553][ T9920] ___sys_sendmsg+0x2a2/0x360 [ 1682.342279][ T9920] ? __sys_sendmsg+0x2a0/0x2a0 [ 1682.347095][ T9920] ? rcu_read_lock_any_held+0xb0/0x130 [ 1682.352712][ T9920] __se_sys_sendmsg+0x1c3/0x2b0 [ 1682.357624][ T9920] ? __x64_sys_sendmsg+0x80/0x80 [ 1682.362616][ T9920] ? lockdep_hardirqs_on+0x94/0x140 [ 1682.367847][ T9920] do_syscall_64+0x4c/0xa0 [ 1682.372297][ T9920] ? clear_bhb_loop+0x60/0xb0 [ 1682.377004][ T9920] ? clear_bhb_loop+0x60/0xb0 [ 1682.381715][ T9920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.387642][ T9920] RIP: 0033:0x7f00f17a8fd9 [ 1682.392100][ T9920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.411740][ T9920] RSP: 002b:00007f00f25cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.420179][ T9920] RAX: ffffffffffffffda RBX: 00007f00f1a25fa0 RCX: 00007f00f17a8fd9 [ 1682.428191][ T9920] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1682.436185][ T9920] RBP: 00007f00f1837fed R08: 0000000000000000 R09: 0000000000000000 [ 1682.444179][ T9920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.452194][ T9920] R13: 00007f00f1a26038 R14: 00007f00f1a25fa0 R15: 00007fffe19d7a88 [ 1682.460228][ T9920] [ 1687.278896][ T9970] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.17028'. [ 1687.331529][ T9970] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1687.559857][ T9981] sctp: [Deprecated]: syz.0.17040 (pid 9981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1687.559857][ T9981] Use struct sctp_sack_info instead [ 1687.723882][ T9985] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.17046'. [ 1691.137813][T10008] netlink: 'syz.3.17039': attribute type 39 has an invalid length. [ 1691.224916][T10006] netlink: 'syz.2.17044': attribute type 21 has an invalid length. [ 1691.233148][T10006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17044'. [ 1691.247285][ T9985] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1691.257606][ T9985] CPU: 1 PID: 9985 Comm: syz.1.17046 Not tainted syzkaller #0 [ 1691.265140][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1691.275256][ T9985] Call Trace: [ 1691.278577][ T9985] [ 1691.281547][ T9985] dump_stack_lvl+0x188/0x24e [ 1691.286318][ T9985] ? show_regs_print_info+0x12/0x12 [ 1691.291575][ T9985] ? load_image+0x410/0x410 [ 1691.296143][ T9985] sysfs_warn_dup+0x8a/0xa0 [ 1691.300712][ T9985] sysfs_do_create_link_sd+0xc0/0x110 [ 1691.306151][ T9985] device_add+0x83b/0x1050 [ 1691.310628][ T9985] wiphy_register+0x1f16/0x2c50 [ 1691.315592][ T9985] ? cfg80211_event_work+0x40/0x40 [ 1691.320761][ T9985] ? minstrel_ht_alloc+0x894/0xa20 [ 1691.325936][ T9985] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1691.332061][ T9985] ieee80211_register_hw+0x2e33/0x3b00 [ 1691.337596][ T9985] ? ieee80211_register_hw+0xec1/0x3b00 [ 1691.343203][ T9985] ? ieee80211_register_hw+0xec1/0x3b00 [ 1691.348823][ T9985] ? ieee80211_tasklet_handler+0x20/0x20 [ 1691.354509][ T9985] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1691.360737][ T9985] ? __debug_object_init+0xed/0x440 [ 1691.365978][ T9985] ? memset+0x1e/0x40 [ 1691.369994][ T9985] ? __hrtimer_init+0x189/0x270 [ 1691.374881][ T9985] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1691.380646][ T9985] ? memcpy+0x3c/0x60 [ 1691.384680][ T9985] hwsim_new_radio_nl+0xab7/0xc90 [ 1691.389755][ T9985] genl_family_rcv_msg_doit+0x22f/0x350 [ 1691.395341][ T9985] ? end_current_label_crit_section+0x170/0x170 [ 1691.401614][ T9985] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1691.407552][ T9985] ? bpf_lsm_capable+0x5/0x10 [ 1691.412262][ T9985] ? security_capable+0x85/0xb0 [ 1691.417149][ T9985] genl_rcv_msg+0x601/0x790 [ 1691.421691][ T9985] ? genl_bind+0x360/0x360 [ 1691.426141][ T9985] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1691.432521][ T9985] netlink_rcv_skb+0x1ef/0x440 [ 1691.437319][ T9985] ? genl_bind+0x360/0x360 [ 1691.441770][ T9985] ? netlink_ack+0x1160/0x1160 [ 1691.446591][ T9985] ? down_read+0x1a8/0x2d0 [ 1691.451040][ T9985] genl_rcv+0x24/0x40 [ 1691.455055][ T9985] netlink_unicast+0x7ad/0x920 [ 1691.459860][ T9985] netlink_sendmsg+0x8ad/0xbd0 [ 1691.464662][ T9985] ? netlink_getsockopt+0x550/0x550 [ 1691.469896][ T9985] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1691.475479][ T9985] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1691.480796][ T9985] ? security_socket_sendmsg+0x7c/0xa0 [ 1691.486278][ T9985] ? netlink_getsockopt+0x550/0x550 [ 1691.491517][ T9985] ____sys_sendmsg+0x5ed/0x9a0 [ 1691.496343][ T9985] ? __sys_sendmsg_sock+0x30/0x30 [ 1691.501402][ T9985] ? __import_iovec+0x306/0x510 [ 1691.506295][ T9985] ? import_iovec+0x6f/0xa0 [ 1691.510838][ T9985] ___sys_sendmsg+0x2a2/0x360 [ 1691.515552][ T9985] ? __sys_sendmsg+0x2a0/0x2a0 [ 1691.520362][ T9985] ? rcu_read_lock_any_held+0xb0/0x130 [ 1691.525875][ T9985] __se_sys_sendmsg+0x1c3/0x2b0 [ 1691.530761][ T9985] ? __x64_sys_sendmsg+0x80/0x80 [ 1691.535741][ T9985] ? lockdep_hardirqs_on+0x94/0x140 [ 1691.540964][ T9985] do_syscall_64+0x4c/0xa0 [ 1691.545414][ T9985] ? clear_bhb_loop+0x60/0xb0 [ 1691.550125][ T9985] ? clear_bhb_loop+0x60/0xb0 [ 1691.554841][ T9985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1691.560961][ T9985] RIP: 0033:0x7f00f17a8fd9 [ 1691.565413][ T9985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.585044][ T9985] RSP: 002b:00007f00f25cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1691.593489][ T9985] RAX: ffffffffffffffda RBX: 00007f00f1a25fa0 RCX: 00007f00f17a8fd9 [ 1691.601488][ T9985] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1691.609515][ T9985] RBP: 00007f00f1837fed R08: 0000000000000000 R09: 0000000000000000 [ 1691.617507][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1691.625856][ T9985] R13: 00007f00f1a26038 R14: 00007f00f1a25fa0 R15: 00007fffe19d7a88 [ 1691.633869][ T9985] [ 1692.229194][T10039] device syzkaller0 entered promiscuous mode [ 1692.263465][T10047] sctp: [Deprecated]: syz.1.17063 (pid 10047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1692.263465][T10047] Use struct sctp_sack_info instead [ 1695.967041][T10056] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.17065'. [ 1695.977838][T10069] netlink: 'syz.0.17071': attribute type 39 has an invalid length. [ 1696.527187][T10081] sctp: [Deprecated]: syz.2.17076 (pid 10081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1696.527187][T10081] Use struct sctp_sack_info instead [ 1698.323787][T10115] sctp: [Deprecated]: syz.3.17090 (pid 10115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1698.323787][T10115] Use struct sctp_sack_info instead [ 1698.804969][T10125] netlink: 'syz.2.17097': attribute type 15 has an invalid length. [ 1698.817865][T10125] netlink: 'syz.2.17097': attribute type 16 has an invalid length. [ 1698.834074][T10125] netlink: 'syz.2.17097': attribute type 4 has an invalid length. [ 1698.847955][T10125] netlink: 'syz.2.17097': attribute type 6 has an invalid length. [ 1698.866621][T10125] netlink: 'syz.2.17097': attribute type 15 has an invalid length. [ 1698.875445][T10125] netlink: 'syz.2.17097': attribute type 16 has an invalid length. [ 1698.890476][T10125] netlink: 'syz.2.17097': attribute type 20 has an invalid length. [ 1698.898560][T10125] netlink: 'syz.2.17097': attribute type 21 has an invalid length. [ 1698.922945][T10125] netlink: 'syz.2.17097': attribute type 23 has an invalid length. [ 1698.946494][T10125] netlink: 'syz.2.17097': attribute type 25 has an invalid length. [ 1698.959114][T10125] netlink: 13226 bytes leftover after parsing attributes in process `syz.2.17097'. [ 1702.774337][ T9664] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 1704.809852][ T9664] Bluetooth: hci1: command 0x201b tx timeout [ 1711.185767][ T9664] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 1711.190503][T10297] validate_nla: 3 callbacks suppressed [ 1711.190521][T10297] netlink: 'syz.3.17168': attribute type 15 has an invalid length. [ 1711.249602][T10297] netlink: 'syz.3.17168': attribute type 16 has an invalid length. [ 1711.267957][T10297] netlink: 'syz.3.17168': attribute type 4 has an invalid length. [ 1711.308476][T10297] netlink: 'syz.3.17168': attribute type 6 has an invalid length. [ 1711.359031][T10297] netlink: 'syz.3.17168': attribute type 15 has an invalid length. [ 1711.397569][T10297] netlink: 'syz.3.17168': attribute type 16 has an invalid length. [ 1711.413692][T10297] netlink: 'syz.3.17168': attribute type 20 has an invalid length. [ 1711.469133][T10297] netlink: 'syz.3.17168': attribute type 21 has an invalid length. [ 1711.507989][T10297] netlink: 'syz.3.17168': attribute type 23 has an invalid length. [ 1711.526247][T10297] netlink: 'syz.3.17168': attribute type 25 has an invalid length. [ 1711.570466][T10297] netlink: 13226 bytes leftover after parsing attributes in process `syz.3.17168'. [ 1711.649024][T10313] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.17180'. [ 1712.684138][T10330] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.17187'. [ 1712.711916][T10330] netlink: zone id is out of range [ 1712.718419][T10330] netlink: zone id is out of range [ 1712.825363][T10330] netlink: del zone limit has 4 unknown bytes [ 1712.955882][T19705] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1713.209150][T19705] Bluetooth: hci2: command 0x0409 tx timeout [ 1713.919542][T10313] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1713.927438][T10313] CPU: 1 PID: 10313 Comm: syz.1.17180 Not tainted syzkaller #0 [ 1713.935040][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1713.945143][T10313] Call Trace: [ 1713.948484][T10313] [ 1713.951460][T10313] dump_stack_lvl+0x188/0x24e [ 1713.956216][T10313] ? show_regs_print_info+0x12/0x12 [ 1713.961499][T10313] ? load_image+0x410/0x410 [ 1713.966102][T10313] sysfs_warn_dup+0x8a/0xa0 [ 1713.970675][T10313] sysfs_do_create_link_sd+0xc0/0x110 [ 1713.976105][T10313] device_add+0x83b/0x1050 [ 1713.980586][T10313] wiphy_register+0x1f16/0x2c50 [ 1713.985515][T10313] ? cfg80211_event_work+0x40/0x40 [ 1713.990723][T10313] ? minstrel_ht_alloc+0x894/0xa20 [ 1713.995901][T10313] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1714.002045][T10313] ieee80211_register_hw+0x2e33/0x3b00 [ 1714.007582][T10313] ? ieee80211_register_hw+0xec1/0x3b00 [ 1714.013189][T10313] ? ieee80211_register_hw+0xec1/0x3b00 [ 1714.018809][T10313] ? ieee80211_tasklet_handler+0x20/0x20 [ 1714.024489][T10313] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1714.030418][T10313] ? __debug_object_init+0xed/0x440 [ 1714.035674][T10313] ? memset+0x1e/0x40 [ 1714.039683][T10313] ? __hrtimer_init+0x189/0x270 [ 1714.044562][T10313] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1714.050327][T10313] ? memcpy+0x3c/0x60 [ 1714.054343][T10313] hwsim_new_radio_nl+0xab7/0xc90 [ 1714.059420][T10313] genl_family_rcv_msg_doit+0x22f/0x350 [ 1714.065002][T10313] ? end_current_label_crit_section+0x170/0x170 [ 1714.071279][T10313] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1714.077237][T10313] ? bpf_lsm_capable+0x5/0x10 [ 1714.081955][T10313] ? security_capable+0x85/0xb0 [ 1714.086851][T10313] genl_rcv_msg+0x601/0x790 [ 1714.091405][T10313] ? genl_bind+0x360/0x360 [ 1714.095858][T10313] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1714.102406][T10313] netlink_rcv_skb+0x1ef/0x440 [ 1714.107206][T10313] ? genl_bind+0x360/0x360 [ 1714.111667][T10313] ? netlink_ack+0x1160/0x1160 [ 1714.116468][T10313] ? down_read+0x1a8/0x2d0 [ 1714.121002][T10313] genl_rcv+0x24/0x40 [ 1714.125016][T10313] netlink_unicast+0x7ad/0x920 [ 1714.129817][T10313] netlink_sendmsg+0x8ad/0xbd0 [ 1714.134625][T10313] ? netlink_getsockopt+0x550/0x550 [ 1714.139860][T10313] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1714.145436][T10313] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1714.150833][T10313] ? security_socket_sendmsg+0x7c/0xa0 [ 1714.156321][T10313] ? netlink_getsockopt+0x550/0x550 [ 1714.161578][T10313] ____sys_sendmsg+0x5ed/0x9a0 [ 1714.166385][T10313] ? __sys_sendmsg_sock+0x30/0x30 [ 1714.171454][T10313] ? __import_iovec+0x306/0x510 [ 1714.176370][T10313] ? import_iovec+0x6f/0xa0 [ 1714.180910][T10313] ___sys_sendmsg+0x2a2/0x360 [ 1714.185632][T10313] ? __sys_sendmsg+0x2a0/0x2a0 [ 1714.190575][T10313] __se_sys_sendmsg+0x1c3/0x2b0 [ 1714.195472][T10313] ? __x64_sys_sendmsg+0x80/0x80 [ 1714.200461][T10313] ? lockdep_hardirqs_on+0x94/0x140 [ 1714.205708][T10313] do_syscall_64+0x4c/0xa0 [ 1714.210158][T10313] ? clear_bhb_loop+0x60/0xb0 [ 1714.214872][T10313] ? clear_bhb_loop+0x60/0xb0 [ 1714.219587][T10313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1714.225509][T10313] RIP: 0033:0x7f00f17a8fd9 [ 1714.229948][T10313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.249590][T10313] RSP: 002b:00007f00f25cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1714.258057][T10313] RAX: ffffffffffffffda RBX: 00007f00f1a25fa0 RCX: 00007f00f17a8fd9 [ 1714.266054][T10313] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1714.274050][T10313] RBP: 00007f00f1837fed R08: 0000000000000000 R09: 0000000000000000 [ 1714.282048][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1714.290046][T10313] R13: 00007f00f1a26038 R14: 00007f00f1a25fa0 R15: 00007fffe19d7a88 [ 1714.298058][T10313] [ 1715.891643][T10370] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.17204'. [ 1715.905717][T19705] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1715.937124][T10370] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1715.980910][T10370] CPU: 1 PID: 10370 Comm: syz.2.17204 Not tainted syzkaller #0 [ 1715.988650][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1715.998786][T10370] Call Trace: [ 1716.002131][T10370] [ 1716.005133][T10370] dump_stack_lvl+0x188/0x24e [ 1716.009920][T10370] ? show_regs_print_info+0x12/0x12 [ 1716.015244][T10370] ? load_image+0x410/0x410 [ 1716.019906][T10370] sysfs_warn_dup+0x8a/0xa0 [ 1716.024646][T10370] sysfs_do_create_link_sd+0xc0/0x110 [ 1716.030113][T10370] device_add+0x83b/0x1050 [ 1716.034624][T10370] wiphy_register+0x1f16/0x2c50 [ 1716.039604][T10370] ? cfg80211_event_work+0x40/0x40 [ 1716.044801][T10370] ? minstrel_ht_alloc+0x894/0xa20 [ 1716.050008][T10370] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1716.056162][T10370] ieee80211_register_hw+0x2e33/0x3b00 [ 1716.061735][T10370] ? ieee80211_register_hw+0xec1/0x3b00 [ 1716.067356][T10370] ? ieee80211_register_hw+0xec1/0x3b00 [ 1716.073004][T10370] ? ieee80211_tasklet_handler+0x20/0x20 [ 1716.078713][T10370] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1716.084693][T10370] ? __debug_object_init+0xed/0x440 [ 1716.089984][T10370] ? memset+0x1e/0x40 [ 1716.094035][T10370] ? __hrtimer_init+0x189/0x270 [ 1716.098969][T10370] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1716.104789][T10370] ? memcpy+0x3c/0x60 [ 1716.108850][T10370] hwsim_new_radio_nl+0xab7/0xc90 [ 1716.113991][T10370] genl_family_rcv_msg_doit+0x22f/0x350 [ 1716.119623][T10370] ? end_current_label_crit_section+0x170/0x170 [ 1716.126051][T10370] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1716.132054][T10370] ? bpf_lsm_capable+0x5/0x10 [ 1716.136804][T10370] ? security_capable+0x85/0xb0 [ 1716.141760][T10370] genl_rcv_msg+0x601/0x790 [ 1716.146397][T10370] ? genl_bind+0x360/0x360 [ 1716.151071][T10370] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1716.157524][T10370] netlink_rcv_skb+0x1ef/0x440 [ 1716.162419][T10370] ? genl_bind+0x360/0x360 [ 1716.166922][T10370] ? netlink_ack+0x1160/0x1160 [ 1716.171819][T10370] ? down_read+0x1a8/0x2d0 [ 1716.176319][T10370] genl_rcv+0x24/0x40 [ 1716.180531][T10370] netlink_unicast+0x7ad/0x920 [ 1716.185490][T10370] netlink_sendmsg+0x8ad/0xbd0 [ 1716.190362][T10370] ? netlink_getsockopt+0x550/0x550 [ 1716.195734][T10370] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1716.201369][T10370] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1716.206725][T10370] ? security_socket_sendmsg+0x7c/0xa0 [ 1716.212252][T10370] ? netlink_getsockopt+0x550/0x550 [ 1716.217537][T10370] ____sys_sendmsg+0x5ed/0x9a0 [ 1716.222668][T10370] ? __sys_sendmsg_sock+0x30/0x30 [ 1716.227759][T10370] ? __import_iovec+0x306/0x510 [ 1716.232700][T10370] ? import_iovec+0x6f/0xa0 [ 1716.237322][T10370] ___sys_sendmsg+0x2a2/0x360 [ 1716.242140][T10370] ? __sys_sendmsg+0x2a0/0x2a0 [ 1716.247034][T10370] ? trace_call_bpf+0xbf/0x6b0 [ 1716.252024][T10370] __se_sys_sendmsg+0x1c3/0x2b0 [ 1716.257731][T10370] ? perf_trace_preemptirq_template+0x268/0x320 [ 1716.264089][T10370] ? __x64_sys_sendmsg+0x80/0x80 [ 1716.269177][T10370] ? lockdep_hardirqs_on+0x94/0x140 [ 1716.274463][T10370] do_syscall_64+0x4c/0xa0 [ 1716.278960][T10370] ? clear_bhb_loop+0x60/0xb0 [ 1716.283720][T10370] ? clear_bhb_loop+0x60/0xb0 [ 1716.288608][T10370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1716.294598][T10370] RIP: 0033:0x7fb5c0fa8fd9 [ 1716.299085][T10370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.320710][T10370] RSP: 002b:00007fb5c1db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1716.329494][T10370] RAX: ffffffffffffffda RBX: 00007fb5c1225fa0 RCX: 00007fb5c0fa8fd9 [ 1716.337534][T10370] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1716.345558][T10370] RBP: 00007fb5c1037fed R08: 0000000000000000 R09: 0000000000000000 [ 1716.353575][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1716.361602][T10370] R13: 00007fb5c1226038 R14: 00007fb5c1225fa0 R15: 00007ffc69a46a18 [ 1716.369695][T10370] [ 1718.124191][T10418] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.17221'. [ 1718.140374][T10418] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1718.148404][T10418] CPU: 0 PID: 10418 Comm: syz.0.17221 Not tainted syzkaller #0 [ 1718.156019][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1718.166138][T10418] Call Trace: [ 1718.169472][T10418] [ 1718.172492][T10418] dump_stack_lvl+0x188/0x24e [ 1718.177244][T10418] ? show_regs_print_info+0x12/0x12 [ 1718.182529][T10418] ? load_image+0x410/0x410 [ 1718.184060][T10420] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.17224'. [ 1718.187112][T10418] sysfs_warn_dup+0x8a/0xa0 [ 1718.187216][T10418] sysfs_do_create_link_sd+0xc0/0x110 [ 1718.187262][T10418] device_add+0x83b/0x1050 [ 1718.187309][T10418] wiphy_register+0x1f16/0x2c50 [ 1718.187388][T10418] ? cfg80211_event_work+0x40/0x40 [ 1718.187424][T10418] ? minstrel_ht_alloc+0x894/0xa20 [ 1718.187477][T10418] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1718.197927][T10420] netlink: zone id is out of range [ 1718.201405][T10418] ieee80211_register_hw+0x2e33/0x3b00 [ 1718.201481][T10418] ? ieee80211_register_hw+0xec1/0x3b00 [ 1718.201517][T10418] ? ieee80211_register_hw+0xec1/0x3b00 [ 1718.201569][T10418] ? ieee80211_tasklet_handler+0x20/0x20 [ 1718.201603][T10418] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1718.201640][T10418] ? __debug_object_init+0xed/0x440 [ 1718.201687][T10418] ? memset+0x1e/0x40 [ 1718.201716][T10418] ? __hrtimer_init+0x189/0x270 [ 1718.201755][T10418] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1718.201827][T10418] ? memcpy+0x3c/0x60 [ 1718.201869][T10418] hwsim_new_radio_nl+0xab7/0xc90 [ 1718.201940][T10418] genl_family_rcv_msg_doit+0x22f/0x350 [ 1718.201980][T10418] ? end_current_label_crit_section+0x170/0x170 [ 1718.202023][T10418] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1718.202091][T10418] ? bpf_lsm_capable+0x5/0x10 [ 1718.202122][T10418] ? security_capable+0x85/0xb0 [ 1718.202175][T10418] genl_rcv_msg+0x601/0x790 [ 1718.202236][T10418] ? genl_bind+0x360/0x360 [ 1718.202268][T10418] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1718.202341][T10418] netlink_rcv_skb+0x1ef/0x440 [ 1718.202376][T10418] ? genl_bind+0x360/0x360 [ 1718.202419][T10418] ? netlink_ack+0x1160/0x1160 [ 1718.202476][T10418] ? down_read+0x1a8/0x2d0 [ 1718.202510][T10418] genl_rcv+0x24/0x40 [ 1718.202543][T10418] netlink_unicast+0x7ad/0x920 [ 1718.202601][T10418] netlink_sendmsg+0x8ad/0xbd0 [ 1718.202656][T10418] ? netlink_getsockopt+0x550/0x550 [ 1718.202696][T10418] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1718.202732][T10418] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1718.202758][T10418] ? security_socket_sendmsg+0x7c/0xa0 [ 1718.202790][T10418] ? netlink_getsockopt+0x550/0x550 [ 1718.202830][T10418] ____sys_sendmsg+0x5ed/0x9a0 [ 1718.202887][T10418] ? __sys_sendmsg_sock+0x30/0x30 [ 1718.202917][T10418] ? __import_iovec+0x306/0x510 [ 1718.202971][T10418] ? import_iovec+0x6f/0xa0 [ 1718.203020][T10418] ___sys_sendmsg+0x2a2/0x360 [ 1718.203066][T10418] ? __sys_sendmsg+0x2a0/0x2a0 [ 1718.203227][T10418] __se_sys_sendmsg+0x1c3/0x2b0 [ 1718.203270][T10418] ? __x64_sys_sendmsg+0x80/0x80 [ 1718.203342][T10418] ? lockdep_hardirqs_on+0x94/0x140 [ 1718.203382][T10418] do_syscall_64+0x4c/0xa0 [ 1718.203415][T10418] ? clear_bhb_loop+0x60/0xb0 [ 1718.203448][T10418] ? clear_bhb_loop+0x60/0xb0 [ 1718.203497][T10418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1718.203531][T10418] RIP: 0033:0x7f4aa7ba8fd9 [ 1718.203558][T10418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.203580][T10418] RSP: 002b:00007f4aa8ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1718.203611][T10418] RAX: ffffffffffffffda RBX: 00007f4aa7e25fa0 RCX: 00007f4aa7ba8fd9 [ 1718.203630][T10418] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1718.203647][T10418] RBP: 00007f4aa7c37fed R08: 0000000000000000 R09: 0000000000000000 [ 1718.203664][T10418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.203680][T10418] R13: 00007f4aa7e26038 R14: 00007f4aa7e25fa0 R15: 00007fff42a51ae8 [ 1718.203731][T10418] [ 1718.547875][T10420] netlink: zone id is out of range [ 1718.618706][T10420] netlink: del zone limit has 4 unknown bytes [ 1719.498484][T10453] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.17238'. [ 1719.513916][T10453] netlink: zone id is out of range [ 1719.521805][T10453] netlink: zone id is out of range [ 1719.589496][T10453] netlink: del zone limit has 4 unknown bytes [ 1719.975712][T10467] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.17244'. [ 1722.559835][T10466] device veth1_macvtap left promiscuous mode [ 1722.566005][T10466] device macsec0 entered promiscuous mode [ 1722.591887][T10467] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1722.625846][T10471] device veth1_macvtap entered promiscuous mode [ 1723.089663][T10494] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.17252'. [ 1723.119264][T10494] netlink: zone id is out of range [ 1723.161646][T10494] netlink: zone id is out of range [ 1723.209991][T10494] netlink: del zone limit has 4 unknown bytes [ 1723.507071][T10505] validate_nla: 3 callbacks suppressed [ 1723.507109][T10505] netlink: 'syz.1.17257': attribute type 12 has an invalid length. [ 1723.530255][T10505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17257'. [ 1724.812836][T10529] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.17266'. [ 1724.829909][T10529] netlink: zone id is out of range [ 1724.838472][T10529] netlink: zone id is out of range [ 1724.895836][T10529] netlink: del zone limit has 4 unknown bytes [ 1726.940701][T10566] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.17283'. [ 1726.966681][T10566] netlink: zone id is out of range [ 1726.985373][T10566] netlink: zone id is out of range [ 1727.172070][T10566] netlink: del zone limit has 4 unknown bytes [ 1730.211139][T10592] delete_channel: no stack [ 1730.223798][T10592] delete_channel: no stack [ 1730.411568][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.417944][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.471165][T10594] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.17297'. [ 1730.528908][T10594] netlink: zone id is out of range [ 1730.563204][T10594] netlink: zone id is out of range [ 1730.733261][T10594] netlink: del zone limit has 4 unknown bytes [ 1732.683905][T10625] device syzkaller0 entered promiscuous mode [ 1737.031308][T10635] netlink: 'syz.2.17311': attribute type 12 has an invalid length. [ 1737.044177][T10635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17311'. [ 1740.674721][T10681] netlink: 'syz.3.17329': attribute type 12 has an invalid length. [ 1740.711570][T10681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17329'. [ 1740.766421][T10683] netlink: 'syz.2.17331': attribute type 11 has an invalid length. [ 1740.789103][T10683] netlink: 'syz.2.17331': attribute type 2 has an invalid length. [ 1740.797244][T10683] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.17331'. [ 1743.223049][T10704] device syzkaller0 entered promiscuous mode [ 1745.101722][T10761] device syzkaller0 entered promiscuous mode [ 1745.119660][T10761] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 1745.424693][T10770] netlink: 'syz.4.17369': attribute type 11 has an invalid length. [ 1745.444829][T10770] netlink: 'syz.4.17369': attribute type 2 has an invalid length. [ 1745.459188][T10770] netlink: 126196 bytes leftover after parsing attributes in process `syz.4.17369'. [ 1745.674991][T10780] netlink: 'syz.3.17382': attribute type 11 has an invalid length. [ 1745.779951][T10780] netlink: 'syz.3.17382': attribute type 2 has an invalid length. [ 1745.828679][T10780] netlink: 126196 bytes leftover after parsing attributes in process `syz.3.17382'. [ 1750.922001][T10808] device syzkaller0 entered promiscuous mode [ 1751.115334][T10830] netlink: 'syz.1.17389': attribute type 11 has an invalid length. [ 1751.144610][T10830] netlink: 'syz.1.17389': attribute type 2 has an invalid length. [ 1751.159664][T10830] netlink: 126196 bytes leftover after parsing attributes in process `syz.1.17389'. [ 1754.091591][T10867] device syzkaller0 entered promiscuous mode [ 1755.938220][T19705] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 1757.261720][ T9664] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 1758.012402][ T9664] Bluetooth: hci0: command 0x0409 tx timeout [ 1759.322183][ T9664] Bluetooth: hci2: command 0x0409 tx timeout [ 1761.730437][ T9664] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 1763.597727][T11005] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.17463'. [ 1763.769007][T19705] Bluetooth: hci3: command 0x0409 tx timeout [ 1766.375796][T11035] netlink: 'syz.3.17475': attribute type 3 has an invalid length. [ 1766.436061][T11035] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.17475'. [ 1766.599830][T11046] netlink: 'syz.0.17480': attribute type 11 has an invalid length. [ 1766.607833][T11046] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17480'. [ 1766.781648][T11044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.956680][T11090] netlink: 'syz.2.17501': attribute type 11 has an invalid length. [ 1767.975255][T11090] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17501'. [ 1768.013066][T11089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1769.520074][T11133] netlink: 'syz.3.17515': attribute type 11 has an invalid length. [ 1769.584340][T11133] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17515'. [ 1769.623977][T11132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.181381][T11162] netlink: 'syz.1.17532': attribute type 11 has an invalid length. [ 1771.195421][T11162] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17532'. [ 1771.234687][T11161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1773.686670][T11200] netlink: 'syz.1.17547': attribute type 3 has an invalid length. [ 1773.715097][T11200] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.17547'. [ 1774.841587][T11239] netlink: 'syz.0.17564': attribute type 3 has an invalid length. [ 1774.866154][T11239] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.17564'. [ 1776.383736][T11264] netlink: 'syz.4.17573': attribute type 14 has an invalid length. [ 1776.402977][T11264] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.17573'. [ 1776.553121][T11274] sctp: [Deprecated]: syz.2.17578 (pid 11274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1776.553121][T11274] Use struct sctp_sack_info instead [ 1777.024437][T11292] netlink: 'syz.1.17589': attribute type 3 has an invalid length. [ 1777.056767][T11292] netlink: 'syz.1.17589': attribute type 8 has an invalid length. [ 1777.072191][T11292] netlink: 'syz.1.17589': attribute type 7 has an invalid length. [ 1777.087445][T11292] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.17589'. [ 1777.638697][T11313] sctp: [Deprecated]: syz.1.17598 (pid 11313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1777.638697][T11313] Use struct sctp_sack_info instead [ 1779.148231][T11350] sctp: [Deprecated]: syz.0.17611 (pid 11350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1779.148231][T11350] Use struct sctp_sack_info instead [ 1779.446759][T11356] netlink: 126324 bytes leftover after parsing attributes in process `syz.0.17616'. [ 1781.606851][T11393] netlink: 'syz.4.17631': attribute type 3 has an invalid length. [ 1781.630217][T11393] netlink: 'syz.4.17631': attribute type 8 has an invalid length. [ 1781.646227][T11393] netlink: 'syz.4.17631': attribute type 7 has an invalid length. [ 1781.697429][T11393] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.17631'. [ 1783.448551][T11424] netlink: 'syz.2.17646': attribute type 3 has an invalid length. [ 1783.457848][T11424] netlink: 'syz.2.17646': attribute type 8 has an invalid length. [ 1783.476988][T11424] netlink: 'syz.2.17646': attribute type 7 has an invalid length. [ 1783.562411][T11424] netlink: 194740 bytes leftover after parsing attributes in process `syz.2.17646'. [ 1791.616359][T11554] netlink: 126324 bytes leftover after parsing attributes in process `syz.1.17700'. [ 1791.851957][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.858423][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.366662][T11581] netlink: 126324 bytes leftover after parsing attributes in process `syz.2.17714'. [ 1796.909995][T11619] netlink: 126324 bytes leftover after parsing attributes in process `syz.4.17728'. [ 1801.430077][T11697] netlink: 'syz.2.17765': attribute type 27 has an invalid length. [ 1801.469137][T11697] netlink: 'syz.2.17765': attribute type 25 has an invalid length. [ 1809.792141][T11855] netlink: 'syz.3.17834': attribute type 2 has an invalid length. [ 1809.850422][T11855] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17834'. [ 1812.351133][T11863] sctp: [Deprecated]: syz.2.17845 (pid 11863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1812.351133][T11863] Use struct sctp_sack_info instead [ 1812.570970][T11874] netlink: 'syz.2.17851': attribute type 2 has an invalid length. [ 1812.587215][T11874] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17851'. [ 1815.074555][T11904] netlink: 'syz.4.17853': attribute type 2 has an invalid length. [ 1815.097126][T11904] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17853'. [ 1817.875778][T11933] netlink: 'syz.0.17867': attribute type 2 has an invalid length. [ 1817.929748][T11933] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17867'. [ 1822.209747][T19705] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 1828.621136][T12050] device syzkaller0 entered promiscuous mode [ 1828.632602][T12050] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 1828.810807][T12056] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.17917'. [ 1828.981324][T12062] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.17931'. [ 1829.003406][T12062] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1829.041542][T12062] CPU: 1 PID: 12062 Comm: syz.2.17931 Not tainted syzkaller #0 [ 1829.049210][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1829.059372][T12062] Call Trace: [ 1829.062699][T12062] [ 1829.065683][T12062] dump_stack_lvl+0x188/0x24e [ 1829.070422][T12062] ? show_regs_print_info+0x12/0x12 [ 1829.075670][T12062] ? load_image+0x410/0x410 [ 1829.080225][T12062] sysfs_warn_dup+0x8a/0xa0 [ 1829.084767][T12062] sysfs_do_create_link_sd+0xc0/0x110 [ 1829.090179][T12062] device_add+0x83b/0x1050 [ 1829.095369][T12062] wiphy_register+0x1f16/0x2c50 [ 1829.100284][T12062] ? cfg80211_event_work+0x40/0x40 [ 1829.105429][T12062] ? minstrel_ht_alloc+0x894/0xa20 [ 1829.110623][T12062] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1829.116731][T12062] ieee80211_register_hw+0x2e33/0x3b00 [ 1829.122243][T12062] ? ieee80211_register_hw+0xec1/0x3b00 [ 1829.127827][T12062] ? ieee80211_register_hw+0xec1/0x3b00 [ 1829.133418][T12062] ? ieee80211_tasklet_handler+0x20/0x20 [ 1829.139090][T12062] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1829.145021][T12062] ? __debug_object_init+0xed/0x440 [ 1829.150264][T12062] ? memset+0x1e/0x40 [ 1829.154276][T12062] ? __hrtimer_init+0x189/0x270 [ 1829.159166][T12062] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1829.164930][T12062] ? memcpy+0x3c/0x60 [ 1829.168940][T12062] hwsim_new_radio_nl+0xab7/0xc90 [ 1829.174011][T12062] genl_family_rcv_msg_doit+0x22f/0x350 [ 1829.179598][T12062] ? end_current_label_crit_section+0x170/0x170 [ 1829.185874][T12062] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1829.191817][T12062] ? bpf_lsm_capable+0x5/0x10 [ 1829.196524][T12062] ? security_capable+0x85/0xb0 [ 1829.201419][T12062] genl_rcv_msg+0x601/0x790 [ 1829.205965][T12062] ? genl_bind+0x360/0x360 [ 1829.210410][T12062] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1829.216814][T12062] netlink_rcv_skb+0x1ef/0x440 [ 1829.221617][T12062] ? genl_bind+0x360/0x360 [ 1829.226061][T12062] ? netlink_ack+0x1160/0x1160 [ 1829.230863][T12062] ? down_read+0x1a8/0x2d0 [ 1829.235303][T12062] genl_rcv+0x24/0x40 [ 1829.239315][T12062] netlink_unicast+0x7ad/0x920 [ 1829.244119][T12062] netlink_sendmsg+0x8ad/0xbd0 [ 1829.248923][T12062] ? netlink_getsockopt+0x550/0x550 [ 1829.254150][T12062] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1829.259723][T12062] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1829.265035][T12062] ? security_socket_sendmsg+0x7c/0xa0 [ 1829.270517][T12062] ? netlink_getsockopt+0x550/0x550 [ 1829.275758][T12062] ____sys_sendmsg+0x5ed/0x9a0 [ 1829.280563][T12062] ? __sys_sendmsg_sock+0x30/0x30 [ 1829.285614][T12062] ? __import_iovec+0x306/0x510 [ 1829.290504][T12062] ? import_iovec+0x6f/0xa0 [ 1829.295035][T12062] ___sys_sendmsg+0x2a2/0x360 [ 1829.299748][T12062] ? __sys_sendmsg+0x2a0/0x2a0 [ 1829.304591][T12062] __se_sys_sendmsg+0x1c3/0x2b0 [ 1829.309488][T12062] ? __x64_sys_sendmsg+0x80/0x80 [ 1829.314493][T12062] ? lockdep_hardirqs_on+0x94/0x140 [ 1829.319743][T12062] do_syscall_64+0x4c/0xa0 [ 1829.324209][T12062] ? clear_bhb_loop+0x60/0xb0 [ 1829.328922][T12062] ? clear_bhb_loop+0x60/0xb0 [ 1829.333630][T12062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1829.339549][T12062] RIP: 0033:0x7fb5c0fa8fd9 [ 1829.343985][T12062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.363615][T12062] RSP: 002b:00007fb5c1db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1829.372061][T12062] RAX: ffffffffffffffda RBX: 00007fb5c1225fa0 RCX: 00007fb5c0fa8fd9 [ 1829.380057][T12062] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1829.388068][T12062] RBP: 00007fb5c1037fed R08: 0000000000000000 R09: 0000000000000000 [ 1829.396318][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.404309][T12062] R13: 00007fb5c1226038 R14: 00007fb5c1225fa0 R15: 00007ffc69a46a18 [ 1829.412324][T12062] [ 1830.861794][T12094] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.17935'. [ 1833.610861][T12131] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.17949'. [ 1834.423377][T12157] device syzkaller0 entered promiscuous mode [ 1835.613776][T12187] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.17969'. [ 1835.676920][T12187] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1835.738869][T12187] CPU: 1 PID: 12187 Comm: syz.0.17969 Not tainted syzkaller #0 [ 1835.746510][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1835.756625][T12187] Call Trace: [ 1835.759973][T12187] [ 1835.762977][T12187] dump_stack_lvl+0x188/0x24e [ 1835.767723][T12187] ? show_regs_print_info+0x12/0x12 [ 1835.772999][T12187] ? load_image+0x410/0x410 [ 1835.777571][T12187] sysfs_warn_dup+0x8a/0xa0 [ 1835.782131][T12187] sysfs_do_create_link_sd+0xc0/0x110 [ 1835.787562][T12187] device_add+0x83b/0x1050 [ 1835.792028][T12187] wiphy_register+0x1f16/0x2c50 [ 1835.796927][T12187] ? cfg80211_event_work+0x40/0x40 [ 1835.802070][T12187] ? minstrel_ht_alloc+0x894/0xa20 [ 1835.807226][T12187] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1835.813335][T12187] ieee80211_register_hw+0x2e33/0x3b00 [ 1835.818841][T12187] ? ieee80211_register_hw+0xec1/0x3b00 [ 1835.824419][T12187] ? ieee80211_register_hw+0xec1/0x3b00 [ 1835.830007][T12187] ? ieee80211_tasklet_handler+0x20/0x20 [ 1835.835669][T12187] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1835.841606][T12187] ? __debug_object_init+0xed/0x440 [ 1835.846842][T12187] ? memset+0x1e/0x40 [ 1835.850854][T12187] ? __hrtimer_init+0x189/0x270 [ 1835.855740][T12187] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1835.861510][T12187] ? memcpy+0x3c/0x60 [ 1835.865525][T12187] hwsim_new_radio_nl+0xab7/0xc90 [ 1835.870593][T12187] genl_family_rcv_msg_doit+0x22f/0x350 [ 1835.876183][T12187] ? end_current_label_crit_section+0x170/0x170 [ 1835.882465][T12187] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1835.888405][T12187] ? bpf_lsm_capable+0x5/0x10 [ 1835.893113][T12187] ? security_capable+0x85/0xb0 [ 1835.898001][T12187] genl_rcv_msg+0x601/0x790 [ 1835.902573][T12187] ? genl_bind+0x360/0x360 [ 1835.907043][T12187] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1835.913457][T12187] netlink_rcv_skb+0x1ef/0x440 [ 1835.918266][T12187] ? genl_bind+0x360/0x360 [ 1835.922725][T12187] ? netlink_ack+0x1160/0x1160 [ 1835.927540][T12187] ? down_read+0x1a8/0x2d0 [ 1835.931987][T12187] genl_rcv+0x24/0x40 [ 1835.936001][T12187] netlink_unicast+0x7ad/0x920 [ 1835.940800][T12187] netlink_sendmsg+0x8ad/0xbd0 [ 1835.945602][T12187] ? netlink_getsockopt+0x550/0x550 [ 1835.950841][T12187] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1835.956413][T12187] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1835.961719][T12187] ? security_socket_sendmsg+0x7c/0xa0 [ 1835.967206][T12187] ? netlink_getsockopt+0x550/0x550 [ 1835.972467][T12187] ____sys_sendmsg+0x5ed/0x9a0 [ 1835.977275][T12187] ? __sys_sendmsg_sock+0x30/0x30 [ 1835.982330][T12187] ? __import_iovec+0x306/0x510 [ 1835.987219][T12187] ? import_iovec+0x6f/0xa0 [ 1835.991761][T12187] ___sys_sendmsg+0x2a2/0x360 [ 1835.996472][T12187] ? __sys_sendmsg+0x2a0/0x2a0 [ 1836.001334][T12187] __se_sys_sendmsg+0x1c3/0x2b0 [ 1836.006223][T12187] ? __x64_sys_sendmsg+0x80/0x80 [ 1836.011225][T12187] ? lockdep_hardirqs_on+0x94/0x140 [ 1836.016461][T12187] do_syscall_64+0x4c/0xa0 [ 1836.020905][T12187] ? clear_bhb_loop+0x60/0xb0 [ 1836.025635][T12187] ? clear_bhb_loop+0x60/0xb0 [ 1836.030347][T12187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1836.036267][T12187] RIP: 0033:0x7f4aa7ba8fd9 [ 1836.040711][T12187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.060343][T12187] RSP: 002b:00007f4aa8ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1836.068793][T12187] RAX: ffffffffffffffda RBX: 00007f4aa7e25fa0 RCX: 00007f4aa7ba8fd9 [ 1836.076796][T12187] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1836.084809][T12187] RBP: 00007f4aa7c37fed R08: 0000000000000000 R09: 0000000000000000 [ 1836.092803][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1836.100792][T12187] R13: 00007f4aa7e26038 R14: 00007f4aa7e25fa0 R15: 00007fff42a51ae8 [ 1836.108889][T12187] [ 1840.760734][T12233] netlink: 'syz.1.17999': attribute type 17 has an invalid length. [ 1840.770042][T12233] netlink: 'syz.1.17999': attribute type 16 has an invalid length. [ 1840.778645][T12233] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17999'. [ 1840.971562][T12239] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.17992'. [ 1841.791125][T12253] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.17993'. [ 1842.050781][T12253] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1842.218970][T12253] CPU: 1 PID: 12253 Comm: syz.3.17993 Not tainted syzkaller #0 [ 1842.226620][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1842.236728][T12253] Call Trace: [ 1842.240052][T12253] [ 1842.243026][T12253] dump_stack_lvl+0x188/0x24e [ 1842.247765][T12253] ? show_regs_print_info+0x12/0x12 [ 1842.253021][T12253] ? load_image+0x410/0x410 [ 1842.257629][T12253] sysfs_warn_dup+0x8a/0xa0 [ 1842.262189][T12253] sysfs_do_create_link_sd+0xc0/0x110 [ 1842.267632][T12253] device_add+0x83b/0x1050 [ 1842.272119][T12253] wiphy_register+0x1f16/0x2c50 [ 1842.277052][T12253] ? cfg80211_event_work+0x40/0x40 [ 1842.282219][T12253] ? minstrel_ht_alloc+0x894/0xa20 [ 1842.287401][T12253] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1842.293523][T12253] ieee80211_register_hw+0x2e33/0x3b00 [ 1842.299060][T12253] ? ieee80211_register_hw+0xec1/0x3b00 [ 1842.304663][T12253] ? ieee80211_register_hw+0xec1/0x3b00 [ 1842.310281][T12253] ? ieee80211_tasklet_handler+0x20/0x20 [ 1842.315969][T12253] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1842.321952][T12253] ? __debug_object_init+0xed/0x440 [ 1842.327222][T12253] ? memset+0x1e/0x40 [ 1842.331281][T12253] ? __hrtimer_init+0x189/0x270 [ 1842.336184][T12253] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1842.341971][T12253] ? memcpy+0x3c/0x60 [ 1842.346019][T12253] hwsim_new_radio_nl+0xab7/0xc90 [ 1842.351152][T12253] genl_family_rcv_msg_doit+0x22f/0x350 [ 1842.356764][T12253] ? end_current_label_crit_section+0x170/0x170 [ 1842.363063][T12253] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1842.369031][T12253] ? bpf_lsm_capable+0x5/0x10 [ 1842.373758][T12253] ? security_capable+0x85/0xb0 [ 1842.378672][T12253] genl_rcv_msg+0x601/0x790 [ 1842.383257][T12253] ? genl_bind+0x360/0x360 [ 1842.387723][T12253] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1842.394169][T12253] netlink_rcv_skb+0x1ef/0x440 [ 1842.399001][T12253] ? genl_bind+0x360/0x360 [ 1842.403472][T12253] ? netlink_ack+0x1160/0x1160 [ 1842.408298][T12253] ? down_read+0x1a8/0x2d0 [ 1842.412768][T12253] genl_rcv+0x24/0x40 [ 1842.416802][T12253] netlink_unicast+0x7ad/0x920 [ 1842.421634][T12253] netlink_sendmsg+0x8ad/0xbd0 [ 1842.426467][T12253] ? netlink_getsockopt+0x550/0x550 [ 1842.431722][T12253] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1842.437316][T12253] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1842.442647][T12253] ? security_socket_sendmsg+0x7c/0xa0 [ 1842.448147][T12253] ? netlink_getsockopt+0x550/0x550 [ 1842.453401][T12253] ____sys_sendmsg+0x5ed/0x9a0 [ 1842.458223][T12253] ? __sys_sendmsg_sock+0x30/0x30 [ 1842.463307][T12253] ? __import_iovec+0x306/0x510 [ 1842.468219][T12253] ? import_iovec+0x6f/0xa0 [ 1842.472780][T12253] ___sys_sendmsg+0x2a2/0x360 [ 1842.477522][T12253] ? __sys_sendmsg+0x2a0/0x2a0 [ 1842.482408][T12253] __se_sys_sendmsg+0x1c3/0x2b0 [ 1842.487310][T12253] ? __x64_sys_sendmsg+0x80/0x80 [ 1842.492325][T12253] ? lockdep_hardirqs_on+0x94/0x140 [ 1842.497586][T12253] do_syscall_64+0x4c/0xa0 [ 1842.502069][T12253] ? clear_bhb_loop+0x60/0xb0 [ 1842.506803][T12253] ? clear_bhb_loop+0x60/0xb0 [ 1842.511539][T12253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1842.517494][T12253] RIP: 0033:0x7f21b97a8fd9 [ 1842.521955][T12253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1842.541619][T12253] RSP: 002b:00007f21ba71f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1842.550085][T12253] RAX: ffffffffffffffda RBX: 00007f21b9a25fa0 RCX: 00007f21b97a8fd9 [ 1842.558106][T12253] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1842.566122][T12253] RBP: 00007f21b9837fed R08: 0000000000000000 R09: 0000000000000000 [ 1842.574137][T12253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1842.582158][T12253] R13: 00007f21b9a26038 R14: 00007f21b9a25fa0 R15: 00007ffe8a61a138 [ 1842.590192][T12253] [ 1842.841802][T12269] netlink: 'syz.4.18006': attribute type 17 has an invalid length. [ 1842.863683][T12269] netlink: 'syz.4.18006': attribute type 16 has an invalid length. [ 1842.903306][T12269] netlink: 152 bytes leftover after parsing attributes in process `syz.4.18006'. [ 1852.595783][T12308] netlink: 'syz.3.18022': attribute type 17 has an invalid length. [ 1852.603854][T12308] netlink: 'syz.3.18022': attribute type 16 has an invalid length. [ 1852.611983][T12308] netlink: 152 bytes leftover after parsing attributes in process `syz.3.18022'. [ 1853.324198][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.330735][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.708610][T12405] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1856.628675][T12422] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1856.850323][T12432] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.18077'. [ 1859.767722][T12446] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.18081'. [ 1859.789980][T12446] netlink: zone id is out of range [ 1859.797607][T12446] netlink: get zone limit has 8 unknown bytes [ 1860.749565][T12462] netlink: 'syz.1.18092': attribute type 2 has an invalid length. [ 1860.768150][T12462] netlink: 'syz.1.18092': attribute type 1 has an invalid length. [ 1860.806448][T12462] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.18092'. [ 1861.435028][T12485] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.18100'. [ 1861.451202][T12485] netlink: zone id is out of range [ 1861.479908][T12485] netlink: get zone limit has 8 unknown bytes [ 1861.735649][T12496] netlink: 'syz.1.18106': attribute type 29 has an invalid length. [ 1861.759269][T12496] netlink: 'syz.1.18106': attribute type 29 has an invalid length. [ 1861.788515][T12502] netlink: 'syz.1.18106': attribute type 29 has an invalid length. [ 1861.806811][T12501] netlink: 'syz.4.18108': attribute type 2 has an invalid length. [ 1861.828402][T12496] netlink: 'syz.1.18106': attribute type 29 has an invalid length. [ 1861.840525][T12501] netlink: 'syz.4.18108': attribute type 1 has an invalid length. [ 1861.848719][T12501] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.18108'. [ 1861.859713][T12496] netlink: 'syz.1.18106': attribute type 29 has an invalid length. [ 1863.111054][T12518] sock: sock_timestamping_bind_phc: sock not bind to device [ 1863.668178][T12538] netlink: 'syz.2.18124': attribute type 2 has an invalid length. [ 1863.699068][T12538] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.18124'. [ 1864.074519][T12548] sock: sock_timestamping_bind_phc: sock not bind to device [ 1864.483488][T12544] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.18127'. [ 1864.548614][T12544] netlink: zone id is out of range [ 1864.624899][T12544] netlink: get zone limit has 8 unknown bytes [ 1865.680267][T12582] sock: sock_timestamping_bind_phc: sock not bind to device [ 1865.906211][T12588] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.18148'. [ 1865.937286][T12588] netlink: zone id is out of range [ 1865.965069][T12588] netlink: get zone limit has 8 unknown bytes [ 1866.322740][T12600] validate_nla: 1 callbacks suppressed [ 1866.322762][T12600] netlink: 'syz.4.18153': attribute type 29 has an invalid length. [ 1866.379857][T12600] netlink: 'syz.4.18153': attribute type 29 has an invalid length. [ 1866.388394][T12603] netlink: 'syz.4.18153': attribute type 29 has an invalid length. [ 1866.435073][T12600] netlink: 'syz.4.18153': attribute type 29 has an invalid length. [ 1866.578171][T12603] netlink: 'syz.4.18153': attribute type 29 has an invalid length. [ 1867.953503][T12641] netlink: 'syz.3.18167': attribute type 29 has an invalid length. [ 1868.135920][T12641] netlink: 'syz.3.18167': attribute type 29 has an invalid length. [ 1868.357424][T12642] netlink: 'syz.3.18167': attribute type 29 has an invalid length. [ 1868.439301][T12643] netlink: 'syz.3.18167': attribute type 29 has an invalid length. [ 1868.529028][T12639] netlink: 'syz.3.18167': attribute type 29 has an invalid length. [ 1880.290338][T12814] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.18245'. [ 1881.413555][T12843] device syzkaller0 entered promiscuous mode [ 1881.442483][T12843] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1882.862833][T12877] device syzkaller0 entered promiscuous mode [ 1883.307467][T12893] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.18277'. [ 1884.506155][T12923] device syzkaller0 entered promiscuous mode [ 1885.334016][T12928] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.18292'. [ 1895.012009][T13114] device syzkaller0 entered promiscuous mode [ 1897.375601][T19705] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1899.164641][T13149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18391'. [ 1907.686625][T13252] device syzkaller0 entered promiscuous mode [ 1910.909965][T13289] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1910.920577][T13289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1911.656516][T13314] device syzkaller0 entered promiscuous mode [ 1914.740534][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.746925][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.810833][T13362] netlink: 60583 bytes leftover after parsing attributes in process `syz.2.18469'. [ 1915.820545][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18469'. [ 1915.997876][T13369] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.18472'. [ 1916.035973][T13369] netlink: zone id is out of range [ 1916.049255][T13369] netlink: zone id is out of range [ 1916.065501][T13369] netlink: zone id is out of range [ 1916.107062][T13369] netlink: get zone limit has 8 unknown bytes [ 1917.126796][T13395] device syzkaller0 entered promiscuous mode [ 1920.774606][T13405] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.18484'. [ 1920.786492][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18484'. [ 1920.797664][T13414] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1920.816286][T13414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.834268][T13414] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1920.868878][T13414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.424355][T13452] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.18503'. [ 1921.479585][T13452] netlink: zone id is out of range [ 1921.503937][T13452] netlink: zone id is out of range [ 1921.559333][T13452] netlink: zone id is out of range [ 1921.637868][T13452] netlink: get zone limit has 8 unknown bytes [ 1924.594207][T13471] device syzkaller0 entered promiscuous mode [ 1924.602373][T13476] netlink: 60583 bytes leftover after parsing attributes in process `syz.0.18512'. [ 1924.659158][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18512'. [ 1925.356382][T13503] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.18526'. [ 1925.377602][T13503] netlink: zone id is out of range [ 1925.383729][T13503] netlink: zone id is out of range [ 1925.399040][T13503] netlink: zone id is out of range [ 1925.410278][T13503] netlink: get zone limit has 8 unknown bytes [ 1929.208583][T13544] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.18543'. [ 1929.220423][T13544] netlink: zone id is out of range [ 1929.228493][T13544] netlink: zone id is out of range [ 1929.236894][T13544] netlink: zone id is out of range [ 1929.245809][T13544] netlink: get zone limit has 8 unknown bytes [ 1930.920328][T13572] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.18558'. [ 1930.949695][T13572] netlink: zone id is out of range [ 1930.969056][T13572] netlink: zone id is out of range [ 1930.974782][T13572] netlink: zone id is out of range [ 1930.992339][T13572] netlink: get zone limit has 8 unknown bytes [ 1931.016141][T13574] device syzkaller0 entered promiscuous mode [ 1938.206746][T13637] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.18583'. [ 1938.216427][T13642] netlink: 'syz.3.18584': attribute type 10 has an invalid length. [ 1938.224628][T13642] netlink: 'syz.3.18584': attribute type 11 has an invalid length. [ 1938.233416][T13642] netlink: 5145 bytes leftover after parsing attributes in process `syz.3.18584'. [ 1943.026980][T13706] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.18613'. [ 1943.083049][T13706] netlink: zone id is out of range [ 1943.105486][T13706] netlink: zone id is out of range [ 1943.135295][T13706] netlink: zone id is out of range [ 1943.158478][T13706] netlink: get zone limit has 8 unknown bytes [ 1947.422436][T13745] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.18630'. [ 1947.479602][T13745] netlink: zone id is out of range [ 1947.496131][T13745] netlink: zone id is out of range [ 1947.502688][T13745] netlink: zone id is out of range [ 1947.509698][T13745] netlink: get zone limit has 8 unknown bytes [ 1951.230194][T13775] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.18643'. [ 1951.242998][T13775] netlink: zone id is out of range [ 1951.249057][T13775] netlink: zone id is out of range [ 1951.254573][T13775] netlink: zone id is out of range [ 1951.261840][T13775] netlink: get zone limit has 8 unknown bytes [ 1951.390299][T13780] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.18645'. [ 1951.406948][T13780] netlink: zone id is out of range [ 1951.417525][T13780] netlink: zone id is out of range [ 1951.449213][T13780] netlink: zone id is out of range [ 1951.454715][T13780] netlink: zone id is out of range [ 1951.463319][T13780] netlink: zone id is out of range [ 1951.476597][T13780] netlink: zone id is out of range [ 1951.720321][T19705] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1955.041503][T13812] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.18659'. [ 1959.752658][T13839] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.18672'. [ 1959.773998][T13839] net_ratelimit: 3668 callbacks suppressed [ 1959.774038][T13839] netlink: zone id is out of range [ 1959.790223][T13839] netlink: zone id is out of range [ 1959.796083][T13839] netlink: zone id is out of range [ 1959.803416][T13839] netlink: get zone limit has 8 unknown bytes [ 1960.281377][T13843] netlink: 'syz.1.18674': attribute type 1 has an invalid length. [ 1960.289726][T13843] netlink: 'syz.1.18674': attribute type 3 has an invalid length. [ 1960.297643][T13843] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18674'. [ 1961.568679][T13850] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.18686'. [ 1962.288217][T19705] Bluetooth: hci2: Dropping invalid advertising data [ 1962.295103][T19705] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1963.003810][T13872] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.18684'. [ 1963.048537][T13872] netlink: zone id is out of range [ 1963.073161][T13872] netlink: zone id is out of range [ 1963.092150][T13872] netlink: zone id is out of range [ 1963.127750][T13872] netlink: get zone limit has 8 unknown bytes [ 1963.314107][T13882] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.18691'. [ 1964.720185][T13906] netlink: 'syz.2.18701': attribute type 1 has an invalid length. [ 1964.728358][T13906] netlink: 'syz.2.18701': attribute type 3 has an invalid length. [ 1964.750567][T13906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18701'. [ 1965.889880][T13921] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.18705'. [ 1966.064399][T13922] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.18706'. [ 1966.084809][T13922] netlink: zone id is out of range [ 1966.093271][T13922] netlink: zone id is out of range [ 1966.099210][T13922] netlink: zone id is out of range [ 1966.106323][T13922] netlink: get zone limit has 8 unknown bytes [ 1966.560097][T19705] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1968.111746][T13965] netlink: 'syz.4.18722': attribute type 1 has an invalid length. [ 1968.123735][T13965] netlink: 'syz.4.18722': attribute type 3 has an invalid length. [ 1968.136889][T13965] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18722'. [ 1968.435461][T13967] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.18723'. [ 1968.456375][T13967] netlink: zone id is out of range [ 1968.469886][T13967] netlink: zone id is out of range [ 1968.478290][T13967] netlink: zone id is out of range [ 1968.498371][T13967] netlink: get zone limit has 8 unknown bytes [ 1970.375059][T13976] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.18735'. [ 1970.539907][T13976] netlink: zone id is out of range [ 1970.546777][T13976] netlink: zone id is out of range [ 1970.828525][T19705] Bluetooth: hci3: Dropping invalid advertising data [ 1970.835477][T19705] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1972.753011][T19705] Bluetooth: hci0: Dropping invalid advertising data [ 1972.759975][T19705] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1972.923127][T14014] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.18745'. [ 1972.946850][T14014] net_ratelimit: 2 callbacks suppressed [ 1972.946869][T14014] netlink: zone id is out of range [ 1972.971431][T14014] netlink: zone id is out of range [ 1973.000053][T14014] netlink: zone id is out of range [ 1973.005465][T14014] netlink: get zone limit has 8 unknown bytes [ 1975.661345][T14071] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18764'. [ 1976.047373][T14086] netlink: 'syz.3.18771': attribute type 2 has an invalid length. [ 1976.142140][T14086] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.18771'. [ 1976.179508][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.186332][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.239867][T14112] netlink: 'syz.0.18783': attribute type 3 has an invalid length. [ 1978.291235][T14112] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.18783'. [ 1978.800323][T14133] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18791'. [ 1979.059052][T19705] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1979.066640][T19705] Bluetooth: hci2: Invalid handle: 0xffff > 0x0eff [ 1980.639026][T14176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18810'. [ 1983.029045][T14220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18827'. [ 1987.084886][T14264] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18840'. [ 1987.415370][T14276] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18858'. [ 1993.062813][T14294] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18855'. [ 1993.554926][T14341] device syzkaller0 entered promiscuous mode [ 1997.832575][T14431] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.18912'. [ 1997.862615][T14431] netlink: zone id is out of range [ 1997.875129][T14431] netlink: zone id is out of range [ 1997.886261][T14431] netlink: zone id is out of range [ 1997.901679][T14431] netlink: zone id is out of range [ 1997.915344][T14431] netlink: zone id is out of range [ 1997.923584][T14431] netlink: zone id is out of range [ 1997.939420][T14431] netlink: zone id is out of range [ 1997.952773][T14431] netlink: zone id is out of range [ 1997.966238][T14431] netlink: zone id is out of range [ 1997.987318][T14431] netlink: zone id is out of range [ 1998.331573][T14436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18917'. [ 1999.678854][T14458] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.18927'. [ 2000.125860][T14474] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.18940'. [ 2000.217997][T14478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18932'. [ 2000.371152][T14484] netlink: 'syz.2.18946': attribute type 3 has an invalid length. [ 2000.394868][T14484] netlink: 'syz.2.18946': attribute type 1 has an invalid length. [ 2000.418783][T14484] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.18946'. [ 2002.389024][T14509] netlink: 'syz.0.18945': attribute type 2 has an invalid length. [ 2002.397202][T14509] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.18945'. [ 2003.006181][T14529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18949'. [ 2006.311007][T14546] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.18961'. [ 2006.326840][T14546] net_ratelimit: 10649 callbacks suppressed [ 2006.326857][T14546] netlink: zone id is out of range [ 2006.355068][T14546] netlink: zone id is out of range [ 2006.438805][T14546] netlink: zone id is out of range [ 2006.444006][T14546] netlink: zone id is out of range [ 2006.449797][T14546] netlink: zone id is out of range [ 2006.454972][T14546] netlink: zone id is out of range [ 2006.480852][T14546] netlink: zone id is out of range [ 2006.489194][T14546] netlink: zone id is out of range [ 2006.495327][T14546] netlink: zone id is out of range [ 2006.510879][T14546] netlink: zone id is out of range [ 2008.124137][T14565] netlink: 3807 bytes leftover after parsing attributes in process `syz.3.18970'. [ 2008.370920][T14574] sctp: [Deprecated]: syz.1.18984 (pid 14574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2008.370920][T14574] Use struct sctp_sack_info instead [ 2008.756820][ T9664] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 2009.211086][T14603] device syzkaller0 entered promiscuous mode [ 2015.020758][T14666] netlink: 'syz.2.19012': attribute type 5 has an invalid length. [ 2016.290035][ T9664] Bluetooth: hci2: unexpected event 0x30 length: 151 > 3 [ 2020.158172][ T9664] Bluetooth: hci3: unexpected event 0x30 length: 151 > 3 [ 2020.844508][T14809] sctp: [Deprecated]: syz.1.19076 (pid 14809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2020.844508][T14809] Use struct sctp_sack_info instead [ 2022.046368][ T9664] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 2030.140614][T14906] sctp: [Deprecated]: syz.0.19112 (pid 14906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2030.140614][T14906] Use struct sctp_sack_info instead [ 2032.102394][T14950] sctp: [Deprecated]: syz.4.19132 (pid 14950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2032.102394][T14950] Use struct sctp_sack_info instead [ 2035.474578][T14993] device syzkaller0 entered promiscuous mode [ 2037.619791][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.626156][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2040.488707][T15060] net_ratelimit: 3544 callbacks suppressed [ 2040.488729][T15060] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2040.762215][ T9664] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 2041.088377][T15077] device syzkaller0 entered promiscuous mode [ 2045.037155][T15084] rxe_eth0 speed is unknown, defaulting to 1000 [ 2050.881135][ T9664] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 2051.044529][T15204] device syzkaller0 entered promiscuous mode [ 2052.151278][T15247] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2055.992388][T15300] device syzkaller0 entered promiscuous mode [ 2056.792980][T15325] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2060.114309][T15383] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2064.072972][T15416] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2070.551444][T15445] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.19340'. [ 2071.823921][T15465] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2071.833841][T15465] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2071.842722][T15465] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2071.861766][T15465] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2071.872150][T15465] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2071.888956][T15465] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2073.931451][ T9664] Bluetooth: hci4: command 0x0409 tx timeout [ 2074.849180][T15471] netlink: 'syz.0.19346': attribute type 7 has an invalid length. [ 2074.942653][T15464] rxe_eth0 speed is unknown, defaulting to 1000 [ 2076.009046][ T9664] Bluetooth: hci4: command 0x041b tx timeout [ 2076.020509][ T7949] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.211408][ T7949] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.333562][T15495] device syzkaller0 entered promiscuous mode [ 2076.387593][ T7949] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.093831][T15465] Bluetooth: hci4: command 0x040f tx timeout [ 2078.393097][T15464] chnl_net:caif_netlink_parms(): no params data found [ 2078.438354][ T7949] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.512952][T15464] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.520322][T15464] bridge0: port 1(bridge_slave_0) entered disabled state [ 2078.529191][T15464] device bridge_slave_0 entered promiscuous mode [ 2078.539719][T15464] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.546924][T15464] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.555548][T15464] device bridge_slave_1 entered promiscuous mode [ 2078.586418][T15464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2078.604212][T15464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2078.638079][T15464] team0: Port device team_slave_0 added [ 2078.646691][T15464] team0: Port device team_slave_1 added [ 2078.696934][T15464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2078.708839][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2078.747770][T15464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2078.760889][T15464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2078.767906][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2078.794912][T15464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2078.914866][T15464] device hsr_slave_0 entered promiscuous mode [ 2078.922847][T15464] device hsr_slave_1 entered promiscuous mode [ 2078.930054][T15464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2078.937968][T15464] Cannot create hsr debugfs directory [ 2079.301202][T15464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2079.311999][T15464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2079.366295][T15464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2079.381007][T15464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2079.438187][T15464] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.445344][T15464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2079.452837][T15464] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.460062][T15464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2079.479683][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.488450][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2079.613067][T15464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2079.672069][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2079.685219][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2079.709347][T15464] 8021q: adding VLAN 0 to HW filter on device team0 [ 2079.763588][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2079.773738][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2079.782460][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.789631][ T7975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2079.797454][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2079.806914][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2079.816348][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.823590][ T7975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2079.860665][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2079.875398][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2079.885567][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2079.896804][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2079.924562][T15464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2079.935576][T15464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2079.949929][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2079.958247][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2079.973996][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2079.983541][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2079.993752][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2080.008585][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2080.027978][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2080.037158][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2080.179025][T15465] Bluetooth: hci4: command 0x0419 tx timeout [ 2080.463314][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2080.471687][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2080.497079][T15464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2080.646110][ T7949] device hsr_slave_0 left promiscuous mode [ 2080.659428][ T7949] device hsr_slave_1 left promiscuous mode [ 2080.667800][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2080.675844][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2080.690947][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2080.698434][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2080.738353][ T7949] device veth1_macvtap left promiscuous mode [ 2080.748032][ T7949] device veth0_macvtap left promiscuous mode [ 2080.758030][ T7949] device veth1_vlan left promiscuous mode [ 2080.770264][ T7949] device veth0_vlan left promiscuous mode [ 2081.525514][ T7949] team0 (unregistering): Port device team_slave_1 removed [ 2081.572619][ T7949] team0 (unregistering): Port device team_slave_0 removed [ 2081.619468][ T7949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2081.667357][ T7949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2082.005269][ T7949] bond0 (unregistering): Released all slaves [ 2082.492825][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2082.506422][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2082.542205][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2082.554480][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2082.566673][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2082.580559][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2082.590170][T15464] device veth0_vlan entered promiscuous mode [ 2082.614077][T15464] device veth1_vlan entered promiscuous mode [ 2082.648907][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 2082.666596][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 2082.676354][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2082.689827][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2082.698265][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2082.716327][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2082.731190][T15464] device veth0_macvtap entered promiscuous mode [ 2082.752273][T15464] device veth1_macvtap entered promiscuous mode [ 2082.786022][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2082.796942][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.817883][T15464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2082.840530][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2082.854003][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2082.863692][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2082.878013][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2082.889976][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2082.908352][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.918372][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2082.929092][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.939303][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2082.950091][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.960379][T15464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2082.972327][T15464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2082.984727][T15464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2082.993861][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2083.009034][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2083.020735][T15464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.037314][T15464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.058723][T15464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.067572][T15464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.161836][ T7949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.172223][ T7949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.181401][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2083.218890][ T7949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2083.226780][ T7949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.249295][ T7949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2099.051475][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.057850][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.491707][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.498086][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2198.408778][ T9664] Bluetooth: hci4: command 0x0406 tx timeout [ 2221.932024][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.938403][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.370550][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.376921][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.810378][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.816750][ T1284] ieee802154 phy1 wpan1: encryption failed: -22