last executing test programs: 1.560850853s ago: executing program 1 (id=31937): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a800", 0x32}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d08000600", 0x16}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.536055824s ago: executing program 0 (id=31939): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x404008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 1.416175248s ago: executing program 4 (id=31941): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="0000ac0d9c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 1.372583099s ago: executing program 0 (id=31942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r1, 0x0, 0x3, &(0x7f0000000000)=']-\x00'}, 0x30) 1.34345059s ago: executing program 2 (id=31943): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x80001, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 1.296976141s ago: executing program 2 (id=31944): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1.143107076s ago: executing program 4 (id=31945): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2194037642dfcca0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.142138576s ago: executing program 0 (id=31956): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x100b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.141575956s ago: executing program 2 (id=31946): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) 1.031247759s ago: executing program 1 (id=31948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x8001}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) 823.120175ms ago: executing program 2 (id=31951): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 822.264275ms ago: executing program 4 (id=31962): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r0) 765.417447ms ago: executing program 1 (id=31952): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 646.911011ms ago: executing program 3 (id=31953): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x80000000, 0xc}, {0x1000000a, 0x84}], 0x10, 0x4}, 0x94) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x1d) 646.316531ms ago: executing program 0 (id=31954): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x404008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 645.14456ms ago: executing program 2 (id=31966): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) 537.156634ms ago: executing program 3 (id=31955): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x80001, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 536.375794ms ago: executing program 0 (id=31957): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="0000ac0d9c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 536.200354ms ago: executing program 1 (id=31958): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000016000000850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x60000, 0x0, 0x0, 0x0, 0x0, 0x0) 533.421244ms ago: executing program 4 (id=31968): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r0) 422.229198ms ago: executing program 2 (id=31959): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a800", 0x32}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d08000600", 0x16}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 421.594918ms ago: executing program 3 (id=31960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 407.576158ms ago: executing program 4 (id=31961): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x1}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c00)={r2, r0, 0x0, 0x13, 0xfffffffffffffffe}, 0x17) 389.663188ms ago: executing program 1 (id=31963): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000041) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}, 0x8) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) 19.913159ms ago: executing program 1 (id=31970): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe3, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 0s ago: executing program 3 (id=31971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000040850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 1379.514451][T30879] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.28048'. [ 1379.525990][T30878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28047'. [ 1380.127954][T30891] netlink: 'syz.4.28052': attribute type 2 has an invalid length. [ 1380.138438][T30891] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.28052'. [ 1380.381217][T30909] netlink: 'syz.0.28058': attribute type 22 has an invalid length. [ 1380.804538][T30918] netlink: 'syz.3.28064': attribute type 2 has an invalid length. [ 1380.832791][T30918] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.28064'. [ 1380.898733][T30926] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.28066'. [ 1381.005214][T30926] net_ratelimit: 193 callbacks suppressed [ 1381.005233][T30926] netlink: get zone limit has 8 unknown bytes [ 1381.180405][T30935] netlink: 168 bytes leftover after parsing attributes in process `syz.4.28071'. [ 1382.081740][T30966] netlink: 'syz.3.28083': attribute type 2 has an invalid length. [ 1382.122025][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28083'. [ 1382.334354][T30996] netlink: 58771 bytes leftover after parsing attributes in process `syz.0.28094'. [ 1385.131835][T31094] __nla_validate_parse: 2 callbacks suppressed [ 1385.131857][T31094] netlink: 168 bytes leftover after parsing attributes in process `syz.4.28140'. [ 1385.158628][T31095] validate_nla: 5 callbacks suppressed [ 1385.158648][T31095] netlink: 'syz.0.28137': attribute type 10 has an invalid length. [ 1385.342712][T31095] team0: Device wg1 is of different type [ 1389.055231][T31150] netlink: 'syz.4.28163': attribute type 21 has an invalid length. [ 1389.064041][T31150] netlink: 168 bytes leftover after parsing attributes in process `syz.4.28163'. [ 1389.602460][T31180] sctp: [Deprecated]: syz.4.28175 (pid 31180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1389.602460][T31180] Use struct sctp_sack_info instead [ 1389.641113][T31186] netlink: 'syz.2.28180': attribute type 10 has an invalid length. [ 1389.662015][T31186] device veth0_macvtap left promiscuous mode [ 1389.895273][T31195] netlink: 'syz.3.28184': attribute type 2 has an invalid length. [ 1389.941507][T31195] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.28184'. [ 1390.337447][T31216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28192'. [ 1390.397522][T31219] netlink: 'syz.1.28196': attribute type 3 has an invalid length. [ 1390.405427][T31219] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.28196'. [ 1390.487854][T31227] netlink: 'syz.1.28196': attribute type 3 has an invalid length. [ 1390.508358][T31228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.526904][T31227] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.28196'. [ 1391.652031][T31279] netlink: 125732 bytes leftover after parsing attributes in process `syz.2.28222'. [ 1392.154367][T31308] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.28235'. [ 1392.272177][T31310] device veth1_macvtap left promiscuous mode [ 1392.364087][T31315] device veth1_macvtap entered promiscuous mode [ 1392.382368][T31315] device macsec0 entered promiscuous mode [ 1393.102778][T31345] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.28252'. [ 1393.352020][T31350] ¥: port 1(team0) entered blocking state [ 1393.402371][T31350] ¥: port 1(team0) entered disabled state [ 1393.428656][T31350] device team0 entered promiscuous mode [ 1393.446261][T31350] device team_slave_0 entered promiscuous mode [ 1393.465794][T31350] device team_slave_1 entered promiscuous mode [ 1393.509269][T31337] chnl_net:caif_netlink_parms(): no params data found [ 1393.755904][T31372] netlink: 'syz.0.28262': attribute type 2 has an invalid length. [ 1393.764656][T31372] netlink: 'syz.0.28262': attribute type 8 has an invalid length. [ 1393.773321][T31372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28262'. [ 1393.811628][T31337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.866979][T31337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.887911][T31337] device bridge_slave_0 entered promiscuous mode [ 1393.943311][T31381] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.28266'. [ 1393.984647][T31337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.999055][T31337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.028029][T31337] device bridge_slave_1 entered promiscuous mode [ 1394.150564][T31337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.189131][T31389] netlink: 144 bytes leftover after parsing attributes in process `syz.4.28270'. [ 1394.239066][T31337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.347525][T31337] team0: Port device team_slave_0 added [ 1394.385674][T31337] team0: Port device team_slave_1 added [ 1394.433317][T31401] netlink: 'syz.0.28276': attribute type 3 has an invalid length. [ 1394.453119][T31401] netlink: 'syz.0.28276': attribute type 1 has an invalid length. [ 1394.479074][T31337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1394.519592][T31401] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.28276'. [ 1394.538244][T31337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1394.652001][T31337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1394.691258][T31337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.720374][T31337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1394.806230][T31337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.946609][T31337] device hsr_slave_0 entered promiscuous mode [ 1394.960401][T31337] device hsr_slave_1 entered promiscuous mode [ 1394.975578][T31337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1394.987596][T31337] Cannot create hsr debugfs directory [ 1394.996449][T29918] Bluetooth: hci3: command 0x0409 tx timeout [ 1395.251200][T31433] netlink: 'syz.4.28290': attribute type 3 has an invalid length. [ 1395.288713][T31433] netlink: 'syz.4.28290': attribute type 1 has an invalid length. [ 1395.484556][T31438] netlink: 'syz.1.28292': attribute type 10 has an invalid length. [ 1395.528892][T31438] bond0: (slave bridge0): Releasing backup interface [ 1395.613266][T31438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.621330][T31438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.634786][T31438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.643065][T31438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.703772][T31438] team0: Port device bridge0 added [ 1395.757265][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1395.875119][T17428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1396.090868][T31337] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.309262][T31337] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.416001][T31337] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.893629][T17437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1397.076328][T28458] Bluetooth: hci3: command 0x041b tx timeout [ 1397.332453][T31337] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.409488][T31492] __nla_validate_parse: 1 callbacks suppressed [ 1397.409510][T31492] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.28315'. [ 1397.579608][T31337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1397.612232][T31501] netlink: 'syz.1.28319': attribute type 4 has an invalid length. [ 1397.620695][T31501] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.28319'. [ 1397.690017][T31337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1397.733391][T31337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1397.782128][T31337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1397.875755][T31508] netlink: 'syz.1.28321': attribute type 1 has an invalid length. [ 1398.117269][T31516] netlink: 'syz.4.28326': attribute type 22 has an invalid length. [ 1398.176361][T31337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.234366][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1398.290336][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1398.327435][T31337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.355994][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1398.386743][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1398.395577][T13863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.402760][T13863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.423035][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1398.432928][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1398.459782][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1398.473850][T13863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.481077][T13863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.535195][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1398.559769][T31534] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.28334'. [ 1398.588178][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1398.636051][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1398.673467][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1398.725424][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1398.750262][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1398.801391][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1398.841718][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1398.878182][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1398.914866][T31337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1398.933706][T31337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1398.974770][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1398.994389][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1399.156633][ T3699] Bluetooth: hci3: command 0x040f tx timeout [ 1399.498394][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1399.527046][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1399.553525][T31337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.629350][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1399.671257][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1399.737878][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1399.754110][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1399.972896][T31337] device veth0_vlan entered promiscuous mode [ 1399.991437][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1400.004540][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1400.052711][T31337] device veth1_vlan entered promiscuous mode [ 1400.145678][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1400.166276][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1400.186570][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1400.195606][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1400.262100][T31337] device veth0_macvtap entered promiscuous mode [ 1400.313254][T31576] netlink: 'syz.0.28353': attribute type 3 has an invalid length. [ 1400.323724][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1400.344250][T31337] device veth1_macvtap entered promiscuous mode [ 1400.436511][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1400.463958][T31337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.498941][T31337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.516775][T31337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1400.532194][T31337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.544229][T31337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.558709][T31589] netlink: 'syz.1.28358': attribute type 10 has an invalid length. [ 1400.582140][T31589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28358'. [ 1400.644566][T31589] bridge0: port 3(ipvlan1) entered blocking state [ 1400.660524][T31589] bridge0: port 3(ipvlan1) entered disabled state [ 1400.754692][T31589] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1400.856382][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1400.869604][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1400.915238][T31337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.954009][T31337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.985730][T31337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.011836][T31337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.052301][T31337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.083527][T31337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.128100][T31337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.157889][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1401.178333][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1401.207511][T31337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.229690][T31337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.239030][ T3699] Bluetooth: hci3: command 0x0419 tx timeout [ 1401.267390][T31337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.317000][T31337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.695364][T31622] netlink: 16374 bytes leftover after parsing attributes in process `syz.0.28375'. [ 1401.803736][T17428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1402.194808][T31626] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.28377'. [ 1402.401194][T31626] netlink: 'syz.0.28377': attribute type 1 has an invalid length. [ 1402.421501][T31626] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.28377'. [ 1402.814719][T17428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.836358][T17428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.892356][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1402.979310][T21420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.992316][T21420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.035787][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1403.285056][T31656] netlink: 16374 bytes leftover after parsing attributes in process `syz.4.28387'. [ 1403.400148][T31660] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.28389'. [ 1403.593598][T31671] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.28395'. [ 1403.627580][T31671] netlink: 'syz.1.28395': attribute type 1 has an invalid length. [ 1403.690054][T31671] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.28395'. [ 1404.670894][ T4269] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1404.699158][T31690] netlink: 16374 bytes leftover after parsing attributes in process `syz.3.28403'. [ 1405.631578][T31706] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.28408'. [ 1405.695903][T24844] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1406.089716][T31719] netlink: 'syz.2.28418': attribute type 11 has an invalid length. [ 1406.344699][T31732] device syzkaller0 entered promiscuous mode [ 1406.420548][T31739] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.28426'. [ 1406.595529][T31738] device syzkaller0 entered promiscuous mode [ 1407.119019][T31769] netlink: 830 bytes leftover after parsing attributes in process `syz.4.28443'. [ 1407.412750][T31786] netlink: 'syz.3.28446': attribute type 11 has an invalid length. [ 1407.581674][T31791] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.28451'. [ 1407.786072][T31804] netlink: 'syz.2.28458': attribute type 10 has an invalid length. [ 1407.826297][T31804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.28458'. [ 1407.850711][T31808] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.28459'. [ 1407.903573][T31804] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1407.916814][T31811] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.28459'. [ 1407.917745][T31804] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.004909][T31804] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1408.433149][T31824] device syzkaller0 entered promiscuous mode [ 1408.458015][T31827] netlink: 'syz.1.28467': attribute type 11 has an invalid length. [ 1409.405094][T31838] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.28485'. [ 1409.501657][T31844] device syzkaller0 entered promiscuous mode [ 1410.475306][T31887] device syzkaller0 entered promiscuous mode [ 1410.528990][T31894] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.28497'. [ 1410.565979][T31901] device syzkaller0 entered promiscuous mode [ 1411.368526][T31934] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.28516'. [ 1411.661732][T31946] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.28530'. [ 1411.808647][T31949] device syzkaller0 entered promiscuous mode [ 1413.363870][T32016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28555'. [ 1413.757654][T32038] netlink: 830 bytes leftover after parsing attributes in process `syz.3.28561'. [ 1414.022019][T32048] device syzkaller0 entered promiscuous mode [ 1414.811070][T32081] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 1414.920265][T32084] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.28584'. [ 1415.138684][T32095] netlink: 'syz.3.28589': attribute type 29 has an invalid length. [ 1415.168594][T32095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28589'. [ 1415.186598][T32095] netlink: 'syz.3.28589': attribute type 29 has an invalid length. [ 1415.197833][T32095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28589'. [ 1415.300950][T32104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28592'. [ 1417.583801][T32143] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.28609'. [ 1418.230536][T32173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28623'. [ 1418.342768][T32178] sock: sock_timestamping_bind_phc: sock not bind to device [ 1418.551251][ T4194] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1418.571300][T32191] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.28630'. [ 1419.198062][T32219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28640'. [ 1420.580250][T32300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28680'. [ 1420.751356][T32307] netlink: 'syz.0.28685': attribute type 1 has an invalid length. [ 1420.885386][T32315] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.28690'. [ 1421.649520][T32349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28701'. [ 1422.324352][T32371] device syzkaller0 entered promiscuous mode [ 1422.839231][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.845603][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.075854][T32418] netlink: 'syz.2.28734': attribute type 10 has an invalid length. [ 1423.117121][T32416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28735'. [ 1423.395366][T32432] netlink: 'syz.4.28741': attribute type 46 has an invalid length. [ 1423.424953][T32432] netlink: 55 bytes leftover after parsing attributes in process `syz.4.28741'. [ 1424.635051][T32493] netlink: 'syz.3.28768': attribute type 3 has an invalid length. [ 1424.657115][T32493] netlink: 152 bytes leftover after parsing attributes in process `syz.3.28768'. [ 1424.703051][T32497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1424.713926][T32497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.723527][T32497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1424.731428][T32497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.739710][T32497] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1424.750354][T32497] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1424.954467][T32510] netlink: 'syz.1.28775': attribute type 11 has an invalid length. [ 1424.982332][T32510] netlink: 'syz.1.28775': attribute type 2 has an invalid length. [ 1425.023185][T32510] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.28775'. [ 1425.331431][T32507] netlink: 168 bytes leftover after parsing attributes in process `syz.4.28772'. [ 1426.541608][T32572] netlink: 830 bytes leftover after parsing attributes in process `syz.0.28810'. [ 1427.007553][T32599] netlink: 'syz.3.28813': attribute type 22 has an invalid length. [ 1427.041797][T32601] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.28814'. [ 1427.088813][T32601] netlink: 'syz.4.28814': attribute type 1 has an invalid length. [ 1427.150166][T32601] netlink: 'syz.4.28814': attribute type 2 has an invalid length. [ 1427.192891][T32601] netlink: 'syz.4.28814': attribute type 3 has an invalid length. [ 1427.229997][T32601] netlink: 'syz.4.28814': attribute type 4 has an invalid length. [ 1428.332982][T17428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1429.047306][T32647] device syzkaller0 entered promiscuous mode [ 1429.939775][T32688] netlink: 'syz.3.28852': attribute type 10 has an invalid length. [ 1429.973742][T32688] team0: Device hsr0 is up. Set it down before adding it as a team port [ 1430.804073][T32717] netlink: 'syz.0.28863': attribute type 9 has an invalid length. [ 1430.849520][T32717] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.28863'. [ 1430.914454][T32724] netlink: 'syz.2.28866': attribute type 4 has an invalid length. [ 1430.951259][T32724] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.28866'. [ 1432.914632][ T328] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.28897'. [ 1433.287359][ T339] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.28902'. [ 1433.336136][ T339] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.28902'. [ 1434.438263][ T358] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.28910'. [ 1434.501794][ T358] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.28910'. [ 1434.858872][ T375] sock: sock_timestamping_bind_phc: sock not bind to device [ 1434.938215][ T377] mac80211_hwsim hwsim77 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1435.546664][ T404] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.28928'. [ 1436.600531][ T439] netlink: 'syz.1.28944': attribute type 1 has an invalid length. [ 1436.632141][ T439] netlink: 'syz.1.28944': attribute type 3 has an invalid length. [ 1436.641174][ T439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.28944'. [ 1436.914516][ T452] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.28949'. [ 1436.932737][ T451] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.28952'. [ 1437.035460][T17428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1437.214053][ T468] syz.3.28959[468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1437.214232][ T468] syz.3.28959[468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1437.636214][T17428] wlan1: Trigger new scan to find an IBSS to join [ 1437.921342][ T481] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.28964'. [ 1438.360042][ T488] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.28967'. [ 1438.386379][ T488] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1439.088465][ T520] netlink: 'syz.0.28981': attribute type 39 has an invalid length. [ 1439.298203][ T529] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.28987'. [ 1439.310150][ T520] device hsr_slave_0 left promiscuous mode [ 1439.914061][ T561] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.29010'. [ 1440.596484][T13863] wlan1: Trigger new scan to find an IBSS to join [ 1440.993134][ T600] netlink: 176 bytes leftover after parsing attributes in process `syz.3.29019'. [ 1442.567025][T13863] wlan1: Creating new IBSS network, BSSID 46:66:38:f3:ef:b7 [ 1443.134444][ T652] netlink: 'syz.2.29052': attribute type 1 has an invalid length. [ 1443.153350][ T652] netlink: 'syz.2.29052': attribute type 4 has an invalid length. [ 1443.170373][ T652] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.29052'. [ 1443.226049][ T658] netlink: 'syz.4.29039': attribute type 1 has an invalid length. [ 1443.246331][ T658] netlink: 'syz.4.29039': attribute type 4 has an invalid length. [ 1443.258077][ T658] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.29039'. [ 1443.773508][ T692] netlink: 'syz.2.29059': attribute type 21 has an invalid length. [ 1443.810723][ T692] netlink: 'syz.2.29059': attribute type 22 has an invalid length. [ 1443.844521][ T692] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.29059'. [ 1443.921209][ T698] netlink: 'syz.4.29064': attribute type 10 has an invalid length. [ 1443.939797][ T698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.29064'. [ 1443.987611][ T698] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1444.026761][ T694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.29060'. [ 1444.621412][ T715] netlink: 'syz.1.29069': attribute type 2 has an invalid length. [ 1444.666631][ T715] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.29069'. [ 1444.911244][ T725] netlink: 'syz.1.29073': attribute type 22 has an invalid length. [ 1445.370564][ T742] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.29081'. [ 1445.413806][ T742] netlink: get zone limit has 8 unknown bytes [ 1445.500466][ T744] netlink: 'syz.2.29080': attribute type 2 has an invalid length. [ 1445.527041][ T744] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.29080'. [ 1445.661243][ T756] netlink: 168 bytes leftover after parsing attributes in process `syz.3.29083'. [ 1446.172327][ T777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29094'. [ 1446.207530][ T777] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1446.220509][ T777] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.338780][ T777] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1447.106024][ T820] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1447.120465][ T820] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.196609][ T820] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1449.976892][ T885] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1449.996341][ T885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.123799][ T893] __nla_validate_parse: 9 callbacks suppressed [ 1450.123826][ T893] netlink: 168 bytes leftover after parsing attributes in process `syz.3.29152'. [ 1450.388550][ T908] validate_nla: 8 callbacks suppressed [ 1450.388569][ T908] netlink: 'syz.4.29158': attribute type 10 has an invalid length. [ 1450.539658][ T908] team0: Device wg1 is of different type [ 1454.112695][ T959] netlink: 'syz.3.29178': attribute type 21 has an invalid length. [ 1454.138271][ T959] netlink: 168 bytes leftover after parsing attributes in process `syz.3.29178'. [ 1454.515346][ T980] sctp: [Deprecated]: syz.3.29192 (pid 980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1454.515346][ T980] Use struct sctp_sack_info instead [ 1454.809866][ T996] netlink: 'syz.4.29198': attribute type 10 has an invalid length. [ 1454.850142][ T996] device veth0_macvtap left promiscuous mode [ 1455.329773][ T1016] netlink: 132 bytes leftover after parsing attributes in process `syz.2.29209'. [ 1455.658459][ T1039] netlink: 'syz.4.29216': attribute type 3 has an invalid length. [ 1455.696161][ T1039] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.29216'. [ 1455.748682][ T1044] netlink: 'syz.4.29216': attribute type 3 has an invalid length. [ 1455.769466][ T1044] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.29216'. [ 1455.795561][ T1045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.808110][ T1050] netlink: 'syz.4.29216': attribute type 3 has an invalid length. [ 1455.816025][ T1050] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.29216'. [ 1455.829573][ T1045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.192584][ T1062] netlink: 125732 bytes leftover after parsing attributes in process `syz.1.29236'. [ 1456.559795][T21420] device hsr_slave_1 left promiscuous mode [ 1456.590925][T21420] device bridge_slave_1 left promiscuous mode [ 1456.613314][T21420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.664519][T21420] device bridge_slave_0 left promiscuous mode [ 1456.679797][T21420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.742487][T21420] device veth1_macvtap left promiscuous mode [ 1456.796307][T21420] device veth0_macvtap left promiscuous mode [ 1456.820077][T21420] device veth1_vlan left promiscuous mode [ 1456.833326][T21420] device veth0_vlan left promiscuous mode [ 1456.888758][ T1105] cgroup: fork rejected by pids controller in /syz2 [ 1457.385806][T21420] team0 (unregistering): Port device team_slave_1 removed [ 1457.422675][T21420] team0 (unregistering): Port device team_slave_0 removed [ 1457.447086][T21420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.472830][T21420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.595458][T21420] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1457.642904][T21420] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1457.660352][T21420] bond0 (unregistering): Released all slaves [ 1457.745323][ T1116] device veth1_macvtap left promiscuous mode [ 1457.764465][ T1117] device veth1_macvtap entered promiscuous mode [ 1457.811965][ T1117] device macsec0 entered promiscuous mode [ 1458.222082][ T1135] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.29255'. [ 1458.666755][ T1154] ¥: port 1(team0) entered blocking state [ 1458.690231][ T1154] ¥: port 1(team0) entered disabled state [ 1458.714964][ T1154] device team0 entered promiscuous mode [ 1458.748340][ T1154] device team_slave_0 entered promiscuous mode [ 1458.787911][ T1154] device team_slave_1 entered promiscuous mode [ 1459.010006][ T1168] netlink: 'syz.3.29268': attribute type 2 has an invalid length. [ 1459.054813][ T1168] netlink: 'syz.3.29268': attribute type 8 has an invalid length. [ 1459.110788][ T1168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.29268'. [ 1459.163903][ T1175] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.29270'. [ 1459.357292][T17428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1459.439848][ T1155] chnl_net:caif_netlink_parms(): no params data found [ 1459.783657][ T1210] netlink: 144 bytes leftover after parsing attributes in process `syz.0.29279'. [ 1459.806552][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.824688][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.836214][ T1155] device bridge_slave_0 entered promiscuous mode [ 1459.859098][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.884798][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.914159][ T1155] device bridge_slave_1 entered promiscuous mode [ 1460.026902][ T1217] netlink: 'syz.4.29283': attribute type 19 has an invalid length. [ 1460.061797][ T1217] netlink: 156 bytes leftover after parsing attributes in process `syz.4.29283'. [ 1460.099550][ T1155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.164723][ T1155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.253292][ T1155] team0: Port device team_slave_0 added [ 1460.275674][ T1155] team0: Port device team_slave_1 added [ 1460.376048][ T1155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.412492][ T1155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.470033][ T1238] netlink: 'syz.1.29293': attribute type 3 has an invalid length. [ 1460.488533][ T1238] netlink: 'syz.1.29293': attribute type 1 has an invalid length. [ 1460.504822][ T1238] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.29293'. [ 1460.525594][ T1155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1460.544628][ T1155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1460.553019][ T1155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.586846][ T1155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.715617][ T1155] device hsr_slave_0 entered promiscuous mode [ 1460.773272][ T1155] device hsr_slave_1 entered promiscuous mode [ 1460.788100][ T1155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1460.795740][ T1155] Cannot create hsr debugfs directory [ 1460.836223][ T3700] Bluetooth: hci1: command 0x0409 tx timeout [ 1461.294798][ T1261] netlink: 'syz.0.29301': attribute type 10 has an invalid length. [ 1461.381688][ T1155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.613951][ T1155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.709335][ T1155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.777698][ T1276] netlink: 'syz.0.29321': attribute type 4 has an invalid length. [ 1461.812537][ T1155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.817011][ T1276] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.29321'. [ 1462.097594][ T1155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1462.907468][ T1155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1462.917224][ T3700] Bluetooth: hci1: command 0x041b tx timeout [ 1463.008792][ T1155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1463.064273][ T1155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1463.126427][ T1295] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.29317'. [ 1463.460581][ T1155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.541996][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1463.580202][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1463.633759][ T1155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.694066][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1463.721429][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1463.775548][T17428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.782793][T17428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.880315][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1463.936912][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1463.974535][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1463.999434][T17428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.006668][T17428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.050761][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1464.071854][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1464.095615][ T1319] netlink: 'syz.1.29330': attribute type 22 has an invalid length. [ 1464.114270][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1464.136739][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1464.176259][ T1321] netlink: 'syz.0.29331': attribute type 1 has an invalid length. [ 1464.235142][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1464.257960][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1464.288012][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1464.314380][T17435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1464.324120][T17435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1464.390095][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1464.427662][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1464.458802][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1464.631686][ T1339] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.29338'. [ 1464.996777][ T1326] Bluetooth: hci1: command 0x040f tx timeout [ 1465.117149][ T1361] netlink: 'syz.1.29345': attribute type 10 has an invalid length. [ 1465.182068][ T1361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.29345'. [ 1465.217701][ T1361] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1465.284823][ T1361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1465.355774][T17437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1465.367237][T17437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1465.402929][ T1155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.477311][T17435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1465.487128][T17435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1465.630959][T17437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1465.648749][T17437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1465.688929][T17437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1465.707258][T17437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1465.725912][ T1155] device veth0_vlan entered promiscuous mode [ 1465.834473][ T1155] device veth1_vlan entered promiscuous mode [ 1466.141169][T17435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1466.164518][T17435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1466.184755][ T1155] device veth0_macvtap entered promiscuous mode [ 1466.237543][ T1155] device veth1_macvtap entered promiscuous mode [ 1466.274624][ T1155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.291318][ T1155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.303103][ T1155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.342718][ T1395] netlink: 'syz.0.29361': attribute type 10 has an invalid length. [ 1466.362256][ T1395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.29361'. [ 1466.401699][ T1395] device ipvlan1 entered promiscuous mode [ 1466.462663][ T1395] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1466.491071][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1466.508487][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1466.527352][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1466.547176][T24844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1466.565620][ T1155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.582097][ T1155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.593083][ T1155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.607102][ T1155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.624951][ T1155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.642600][ T1155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.692400][ T1155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.755749][ T1400] netlink: 'syz.1.29363': attribute type 3 has an invalid length. [ 1466.770156][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1466.785104][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1466.837909][ T1155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.871700][ T1155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.893449][ T1155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.920638][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.968923][ T1418] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.29370'. [ 1467.082163][T29918] Bluetooth: hci1: command 0x0419 tx timeout [ 1467.212336][ T1431] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.29374'. [ 1467.377928][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.395939][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.480283][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1467.598791][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.620796][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.662532][T17435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1467.871867][ T1456] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.29384'. [ 1468.062259][ T1472] netlink: 132 bytes leftover after parsing attributes in process `syz.4.29387'. [ 1468.391206][ T1483] netlink: 'syz.0.29396': attribute type 3 has an invalid length. [ 1468.426738][ T1483] netlink: 'syz.0.29396': attribute type 1 has an invalid length. [ 1468.434642][ T1483] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.29396'. [ 1468.775736][ T1503] netlink: 'syz.4.29416': attribute type 4 has an invalid length. [ 1468.816387][ T1503] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.29416'. [ 1468.973962][ T1514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.29407'. [ 1469.253689][T21420] device hsr_slave_1 left promiscuous mode [ 1469.262188][T21420] device veth1_macvtap left promiscuous mode [ 1469.420939][ T1529] sctp: [Deprecated]: syz.1.29417 (pid 1529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1469.420939][ T1529] Use struct sctp_sack_info instead [ 1469.894652][ T1549] netlink: 'syz.2.29423': attribute type 22 has an invalid length. [ 1470.222654][ T1562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.29428'. [ 1470.333400][ T1567] netlink: 'syz.3.29432': attribute type 10 has an invalid length. [ 1470.398148][ T1567] device veth0_macvtap left promiscuous mode [ 1470.807321][ T1585] netlink: 'syz.0.29441': attribute type 21 has an invalid length. [ 1470.815310][ T1585] netlink: 168 bytes leftover after parsing attributes in process `syz.0.29441'. [ 1471.462430][ T1615] netlink: 'syz.0.29454': attribute type 10 has an invalid length. [ 1471.542625][ T1615] device veth0_macvtap left promiscuous mode [ 1471.790700][ T1613] netlink: 132 bytes leftover after parsing attributes in process `syz.4.29453'. [ 1472.663952][T17435] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1472.707687][ T1662] netlink: 'syz.1.29472': attribute type 10 has an invalid length. [ 1472.800694][ T1662] device veth0_macvtap left promiscuous mode [ 1473.218620][ T1670] netlink: 'syz.0.29487': attribute type 10 has an invalid length. [ 1473.517209][ T1686] netlink: 'syz.0.29486': attribute type 4 has an invalid length. [ 1473.525117][ T1686] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.29486'. [ 1477.222058][ T1737] netlink: 'syz.2.29505': attribute type 3 has an invalid length. [ 1477.230432][ T1737] netlink: 'syz.2.29505': attribute type 1 has an invalid length. [ 1477.238878][ T1737] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.29505'. [ 1477.627511][ T1754] netlink: 168 bytes leftover after parsing attributes in process `syz.0.29507'. [ 1477.681354][ T1762] netlink: 'syz.1.29512': attribute type 10 has an invalid length. [ 1477.905511][ T1762] team0: Device wg1 is of different type [ 1478.845919][ T1802] netlink: 'syz.2.29530': attribute type 10 has an invalid length. [ 1478.958520][ T1802] team0: Device wg1 is of different type [ 1479.055855][ T1812] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.29534'. [ 1479.580615][ T1830] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1479.606219][ T1830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.623091][ T1830] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1479.655897][ T1830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.028362][ T1853] netlink: 'syz.3.29550': attribute type 10 has an invalid length. [ 1481.071284][ T1853] team0: Device wg1 is of different type [ 1481.560882][ T1878] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1481.609237][ T1878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.679679][ T1878] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1481.722599][ T1878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.771906][ T1878] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1481.811495][ T1878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.872432][ T1883] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.29562'. [ 1481.916853][ T1884] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1481.958253][ T1884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.996166][ T1884] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1482.026173][ T1884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.041457][ T1891] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.29569'. [ 1482.046355][ T1884] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1482.081809][ T1884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.570704][ T1915] netlink: 'syz.4.29579': attribute type 10 has an invalid length. [ 1482.589105][ T1915] netlink: 58771 bytes leftover after parsing attributes in process `syz.4.29579'. [ 1482.760020][ T1927] netlink: 'syz.4.29587': attribute type 2 has an invalid length. [ 1482.816332][ T1927] netlink: 'syz.4.29587': attribute type 4 has an invalid length. [ 1482.846411][ T1927] netlink: 'syz.4.29587': attribute type 8 has an invalid length. [ 1482.854315][ T1927] netlink: 'syz.4.29587': attribute type 9 has an invalid length. [ 1482.917382][ T1927] netlink: 'syz.4.29587': attribute type 10 has an invalid length. [ 1482.925358][ T1927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29587'. [ 1482.993611][ T1937] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.29593'. [ 1483.439902][ T1960] netlink: 168 bytes leftover after parsing attributes in process `syz.1.29613'. [ 1484.288140][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.294722][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.514746][ T1982] netlink: 'syz.2.29609': attribute type 2 has an invalid length. [ 1484.570793][ T1982] netlink: 'syz.2.29609': attribute type 4 has an invalid length. [ 1484.617175][ T1982] netlink: 'syz.2.29609': attribute type 8 has an invalid length. [ 1484.693054][ T1982] netlink: 'syz.2.29609': attribute type 9 has an invalid length. [ 1484.777753][ T1982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29609'. [ 1485.047911][ T1997] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.29619'. [ 1485.399417][ T2003] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.29620'. [ 1485.447671][ T2003] netlink: get zone limit has 8 unknown bytes [ 1486.350982][ T2023] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.29630'. [ 1486.611604][ T2036] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.29636'. [ 1487.142486][ T2049] netlink: 132 bytes leftover after parsing attributes in process `syz.1.29641'. [ 1487.693558][ T2072] validate_nla: 6 callbacks suppressed [ 1487.693576][ T2072] netlink: 'syz.2.29653': attribute type 1 has an invalid length. [ 1487.720036][ T2072] netlink: 'syz.2.29653': attribute type 4 has an invalid length. [ 1487.729193][ T2072] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.29653'. [ 1487.757057][ T2076] netlink: 'syz.1.29652': attribute type 1 has an invalid length. [ 1487.764972][ T2076] netlink: 'syz.1.29652': attribute type 4 has an invalid length. [ 1487.773385][ T2076] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.29652'. [ 1489.054934][ T2115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.29684'. [ 1490.229101][ T2151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.29690'. [ 1490.379249][T17428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1491.405719][T17428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1494.262821][ T2197] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.29722'. [ 1494.306600][ T2197] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1494.445193][ T2202] netlink: 176 bytes leftover after parsing attributes in process `syz.0.29711'. [ 1494.799253][ T2227] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.29728'. [ 1497.553768][ T2244] syz.2.29733[2244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1497.553925][ T2244] syz.2.29733[2244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1497.847145][ T2258] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.29741'. [ 1498.767077][ T2302] sock: sock_timestamping_bind_phc: sock not bind to device [ 1499.037512][ T2314] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1499.729407][ T2341] netlink: 'syz.3.29777': attribute type 1 has an invalid length. [ 1499.756175][ T2341] netlink: 'syz.3.29777': attribute type 3 has an invalid length. [ 1499.790221][ T2341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.29777'. [ 1500.077585][ T2357] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.29785'. [ 1500.127897][ T2357] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.29785'. [ 1500.238711][ T2367] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.29789'. [ 1500.292777][ T2367] netlink: 6328 bytes leftover after parsing attributes in process `syz.0.29789'. [ 1500.470176][ T2378] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.29794'. [ 1501.636328][T17428] wlan1: Trigger new scan to find an IBSS to join [ 1502.352953][ T2462] netlink: 'syz.3.29829': attribute type 4 has an invalid length. [ 1502.379988][ T2462] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.29829'. [ 1503.482411][ T2498] device syzkaller0 entered promiscuous mode [ 1503.691201][T17428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1503.789580][ T2511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.797158][ T2511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.677525][T21420] wlan1: Trigger new scan to find an IBSS to join [ 1504.720089][T21420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1505.218023][ T2556] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1505.613259][ T2578] netlink: 'syz.4.29887': attribute type 10 has an invalid length. [ 1505.650144][ T2578] bridge0: port 3(syz_tun) entered disabled state [ 1505.661271][ T2578] device bridge0 left promiscuous mode [ 1505.859754][ T2593] netlink: 'syz.2.29883': attribute type 46 has an invalid length. [ 1505.869039][ T2593] netlink: 55 bytes leftover after parsing attributes in process `syz.2.29883'. [ 1506.746276][ T2656] device syzkaller0 entered promiscuous mode [ 1507.636533][T17435] wlan1: Trigger new scan to find an IBSS to join [ 1508.550619][ T2802] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.29973'. [ 1508.585786][ T4194] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1508.601592][T21420] wlan1: Creating new IBSS network, BSSID 96:9a:7b:e9:4a:dc [ 1509.787546][ T2854] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 1511.571782][ T2936] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.30024'. [ 1511.901269][ T2966] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.30032'. [ 1513.973140][ T3020] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.30045'. [ 1513.988304][ T3020] netlink: 'syz.2.30045': attribute type 1 has an invalid length. [ 1514.000009][ T3020] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.30045'. [ 1515.455641][ T3082] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.30073'. [ 1515.952652][ T3110] cgroup: fork rejected by pids controller in /syz4 [ 1516.507665][ T4199] device syz_tun left promiscuous mode [ 1516.521593][ T4199] bridge0: port 3(syz_tun) entered disabled state [ 1517.076290][T22940] Bluetooth: hci3: command 0x0406 tx timeout [ 1518.174383][ T3147] chnl_net:caif_netlink_parms(): no params data found [ 1518.462705][ T3179] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.30115'. [ 1518.491659][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.499399][ T3147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.508638][ T3147] device bridge_slave_0 entered promiscuous mode [ 1518.556492][ T3147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.570222][ T3147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.580697][ T3147] device bridge_slave_1 entered promiscuous mode [ 1518.671162][ T3147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.709118][ T3147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.802720][ T3147] team0: Port device team_slave_0 added [ 1518.818350][ T3147] team0: Port device team_slave_1 added [ 1518.894798][ T3147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.948892][ T3147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.036936][ T3147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.069217][ T3188] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.30119'. [ 1519.273200][ T3147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.306242][ T3147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.423757][ T3147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.699767][ T3147] device hsr_slave_0 entered promiscuous mode [ 1519.716473][ T5456] Bluetooth: hci4: command 0x0409 tx timeout [ 1519.757140][ T3147] device hsr_slave_1 entered promiscuous mode [ 1519.772849][ T3147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1519.799195][ T3147] Cannot create hsr debugfs directory [ 1521.127749][ T3147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.250781][ T3147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.404670][ T3147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.517203][ T3147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.748501][ T3147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1521.789980][ T3147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1521.796526][ T3699] Bluetooth: hci4: command 0x041b tx timeout [ 1521.824373][ T3147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1521.858969][ T3147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1522.003520][ T3147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.021646][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1522.033149][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1522.044716][ T3147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.056889][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1522.066683][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1522.075324][T13863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.082518][T13863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.101899][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1522.110906][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1522.119994][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1522.129270][T13863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.136413][T13863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.149659][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1522.167874][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1522.179692][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1522.197219][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1522.242198][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1522.252213][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1522.261377][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1522.270369][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1522.280514][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1522.303371][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1522.316625][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1522.329579][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1522.464814][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1522.472965][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1522.525211][ T3147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.765265][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1522.774795][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1522.800011][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1522.811725][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1522.822193][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1522.830423][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1522.855423][ T3147] device veth0_vlan entered promiscuous mode [ 1522.870137][ T3147] device veth1_vlan entered promiscuous mode [ 1522.894173][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1522.903574][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1522.915730][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1522.926266][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1522.940182][ T3147] device veth0_macvtap entered promiscuous mode [ 1522.966518][ T3147] device veth1_macvtap entered promiscuous mode [ 1522.987670][ T3147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.995104][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1523.007232][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1523.015491][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1523.024445][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1523.053773][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.065151][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.075328][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.086234][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.096371][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.106961][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.116882][ T3147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.127419][ T3147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.139104][ T3147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.148626][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1523.162707][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1523.189930][ T3147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.199723][ T3147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.209116][ T3147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.218060][ T3147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.304183][T17428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.315283][T17428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.332316][T17437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1523.370375][T17437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.379444][T17437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.388875][T17428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1523.460198][ T3245] netlink: 'syz.4.30099': attribute type 10 has an invalid length. [ 1523.470953][ T3245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.479710][ T3245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.515323][ T3245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.523058][ T3245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.534007][ T3245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.541310][ T3245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.582277][ T3245] team0: Port device bridge0 added [ 1523.904770][T11518] Bluetooth: hci4: command 0x040f tx timeout [ 1524.027798][ T3265] sock: sock_timestamping_bind_phc: sock not bind to device [ 1524.448670][ T4269] device team0 left promiscuous mode [ 1524.466015][ T4269] device team_slave_0 left promiscuous mode [ 1524.490114][ T4269] device team_slave_1 left promiscuous mode [ 1524.504339][ T4269] ¥: port 1(team0) entered disabled state [ 1524.558516][ T4269] device hsr_slave_1 left promiscuous mode [ 1524.577277][ T4269] device bridge_slave_0 left promiscuous mode [ 1524.599185][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.643168][ T4269] device veth1_vlan left promiscuous mode [ 1524.662105][ T4269] device veth0_vlan left promiscuous mode [ 1525.383131][ T4269] team0 (unregistering): Port device team_slave_1 removed [ 1525.408538][ T4269] team0 (unregistering): Port device team_slave_0 removed [ 1525.956490][T11518] Bluetooth: hci4: command 0x0419 tx timeout [ 1527.058006][ T3326] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.30170'. [ 1527.567520][ T3342] netlink: 'syz.2.30178': attribute type 1 has an invalid length. [ 1529.864950][ T3386] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.30194'. [ 1531.786129][ T3434] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.30217'. [ 1534.041433][ T3497] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.30234'. [ 1534.402060][ T3500] device syzkaller0 entered promiscuous mode [ 1534.723391][ T3511] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.30256'. [ 1535.844706][T24844] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1536.230492][ T3568] netlink: 'syz.2.30277': attribute type 11 has an invalid length. [ 1536.253335][ T3566] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.30262'. [ 1536.309977][ T3568] netlink: 'syz.2.30277': attribute type 2 has an invalid length. [ 1536.328741][ T3568] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.30277'. [ 1536.686995][ T3582] netlink: 'syz.4.30269': attribute type 3 has an invalid length. [ 1536.715408][ T3582] netlink: 152 bytes leftover after parsing attributes in process `syz.4.30269'. [ 1536.799063][ T3590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.836311][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.858092][ T3590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.912268][ T3590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.979379][T24844] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1536.993678][ T3590] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1537.026696][ T3590] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1538.563464][ T3621] netlink: 'syz.3.30287': attribute type 25 has an invalid length. [ 1538.615359][T21420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1538.655723][ T3621] netlink: 'syz.3.30287': attribute type 29 has an invalid length. [ 1538.825483][ T3625] netlink: 'syz.2.30289': attribute type 3 has an invalid length. [ 1538.876603][ T3625] netlink: 152 bytes leftover after parsing attributes in process `syz.2.30289'. [ 1539.483258][ T3642] netlink: 168 bytes leftover after parsing attributes in process `syz.1.30294'. [ 1539.708029][ T3645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.725874][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.764499][ T3645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.810049][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.107329][ T3650] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.30301'. [ 1541.280179][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.302944][ T3685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.327222][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.358882][ T3685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.417044][ T3685] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1541.424327][ T3685] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1545.719584][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.725965][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.499505][ T3797] netlink: 'syz.4.30358': attribute type 9 has an invalid length. [ 1546.522590][ T3797] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.30358'. [ 1547.643234][ T3822] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.30378'. [ 1549.511702][ T3844] netlink: 'syz.2.30370': attribute type 1 has an invalid length. [ 1549.530767][ T3844] netlink: 'syz.2.30370': attribute type 3 has an invalid length. [ 1549.556863][ T3844] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30370'. [ 1550.171576][ T3868] netlink: 'syz.1.30383': attribute type 10 has an invalid length. [ 1550.330843][ T3868] team0: Device hsr0 is up. Set it down before adding it as a team port [ 1551.363114][ T3890] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.30394'. [ 1552.022482][ T3912] netlink: 'syz.2.30401': attribute type 10 has an invalid length. [ 1552.083677][ T3912] team0: Device hsr0 is up. Set it down before adding it as a team port [ 1553.204435][ T3957] netlink: 'syz.0.30418': attribute type 10 has an invalid length. [ 1553.286465][ T3957] team0: Device hsr0 is up. Set it down before adding it as a team port [ 1556.834459][ T4002] netlink: 'syz.4.30438': attribute type 10 has an invalid length. [ 1556.922293][ T4002] team0: Device hsr0 is up. Set it down before adding it as a team port [ 1559.635059][ T4047] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.30465'. [ 1568.171315][ T4190] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1568.259555][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.408764][T21420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1569.464476][T21420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1569.640700][T17428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1570.534340][ T4231] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1570.563515][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.679248][ T4250] device veth1_macvtap left promiscuous mode [ 1571.747222][ T4251] device veth1_macvtap entered promiscuous mode [ 1571.753640][ T4251] device macsec0 entered promiscuous mode [ 1573.093561][ T4298] device veth1_macvtap left promiscuous mode [ 1573.240570][ T4302] device veth1_macvtap entered promiscuous mode [ 1573.279651][ T4303] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.30560'. [ 1573.296606][ T4302] device macsec0 entered promiscuous mode [ 1573.318003][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1573.556952][ T4315] ¥: port 1(team0) entered blocking state [ 1573.578827][ T4315] ¥: port 1(team0) entered disabled state [ 1573.602561][ T4315] device team0 entered promiscuous mode [ 1573.644920][ T4315] device team_slave_0 entered promiscuous mode [ 1573.679179][ T4315] device team_slave_1 entered promiscuous mode [ 1573.854145][ T4328] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1573.879082][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.174824][ T4337] netlink: 'syz.2.30573': attribute type 2 has an invalid length. [ 1574.217595][ T4337] netlink: 'syz.2.30573': attribute type 8 has an invalid length. [ 1574.260155][ T4337] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30573'. [ 1574.852215][ T4356] netlink: 144 bytes leftover after parsing attributes in process `syz.3.30578'. [ 1575.073696][ T4367] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 1575.085843][ T4367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1575.235732][ T4370] ¥: port 1(team0) entered blocking state [ 1575.246589][ T4370] ¥: port 1(team0) entered disabled state [ 1575.264392][ T4370] device team0 entered promiscuous mode [ 1575.281892][ T4370] device team_slave_0 entered promiscuous mode [ 1575.289698][ T4370] device team_slave_1 entered promiscuous mode [ 1575.299466][ T4370] device bridge0 entered promiscuous mode [ 1578.288913][ T4381] netlink: 'syz.4.30592': attribute type 2 has an invalid length. [ 1578.332972][ T4381] netlink: 'syz.4.30592': attribute type 8 has an invalid length. [ 1578.367262][ T4381] netlink: 132 bytes leftover after parsing attributes in process `syz.4.30592'. [ 1581.780903][ T4393] netlink: 144 bytes leftover after parsing attributes in process `syz.2.30597'. [ 1582.267504][ T4412] ¥: port 1(team0) entered blocking state [ 1582.336853][ T4412] ¥: port 1(team0) entered disabled state [ 1582.407018][ T4412] device team0 entered promiscuous mode [ 1582.456138][ T4412] device team_slave_0 entered promiscuous mode [ 1582.500585][ T4412] device team_slave_1 entered promiscuous mode [ 1583.636485][T27758] Bluetooth: hci1: command 0x0406 tx timeout [ 1585.747847][ T4420] netlink: 'syz.3.30613': attribute type 3 has an invalid length. [ 1585.871380][ T4437] netlink: 'syz.1.30629': attribute type 2 has an invalid length. [ 1585.929262][ T4437] netlink: 'syz.1.30629': attribute type 8 has an invalid length. [ 1585.949379][ T4437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30629'. [ 1586.202193][ T4451] netlink: 'syz.0.30635': attribute type 2 has an invalid length. [ 1586.312327][ T4451] netlink: 'syz.0.30635': attribute type 8 has an invalid length. [ 1586.368755][ T4451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.30635'. [ 1592.380722][ T4472] netlink: 'syz.3.30632': attribute type 19 has an invalid length. [ 1592.396815][ T4472] netlink: 156 bytes leftover after parsing attributes in process `syz.3.30632'. [ 1593.074835][ T4501] netlink: 'syz.1.30644': attribute type 2 has an invalid length. [ 1593.111437][ T4501] netlink: 'syz.1.30644': attribute type 8 has an invalid length. [ 1593.140360][ T4501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30644'. [ 1593.410895][ T4509] netlink: 'syz.2.30647': attribute type 10 has an invalid length. [ 1593.426471][ T4509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.30647'. [ 1594.186490][ T4509] device ipvlan1 entered promiscuous mode [ 1594.208561][ T4509] bridge0: port 3(ipvlan1) entered blocking state [ 1594.215923][ T4509] bridge0: port 3(ipvlan1) entered disabled state [ 1594.245531][ T4509] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1594.293042][ T4513] netlink: 'syz.0.30649': attribute type 19 has an invalid length. [ 1594.323796][ T4513] netlink: 156 bytes leftover after parsing attributes in process `syz.0.30649'. [ 1594.567786][ T4523] netlink: 'syz.1.30658': attribute type 4 has an invalid length. [ 1594.655879][ T4523] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.30658'. [ 1598.070427][ T4582] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.30682'. [ 1598.102237][ T4582] netlink: 'syz.3.30682': attribute type 1 has an invalid length. [ 1598.172423][ T4588] netlink: 'syz.4.30684': attribute type 2 has an invalid length. [ 1598.181118][ T4588] netlink: 'syz.4.30684': attribute type 8 has an invalid length. [ 1598.190861][ T4588] netlink: 132 bytes leftover after parsing attributes in process `syz.4.30684'. [ 1599.062943][ T4589] delete_channel: no stack [ 1599.558464][ T4625] netlink: 208644 bytes leftover after parsing attributes in process `syz.1.30700'. [ 1599.572001][ T4625] netlink: 'syz.1.30700': attribute type 1 has an invalid length. [ 1599.895854][ T4631] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.30704'. [ 1600.763159][T17435] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1601.011989][ T4656] netlink: 144 bytes leftover after parsing attributes in process `syz.3.30715'. [ 1601.132835][ T4660] netlink: 208644 bytes leftover after parsing attributes in process `syz.2.30714'. [ 1601.143772][ T4660] netlink: 'syz.2.30714': attribute type 1 has an invalid length. [ 1601.688734][T17437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1601.828676][ T4210] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1602.401764][ T4681] netlink: 'syz.1.30724': attribute type 3 has an invalid length. [ 1602.496467][ T4681] netlink: 'syz.1.30724': attribute type 1 has an invalid length. [ 1602.586869][ T4681] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.30724'. [ 1602.892877][ T4687] netlink: 'syz.3.30726': attribute type 4 has an invalid length. [ 1602.917966][T31634] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1602.938687][ T4687] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.30726'. [ 1607.168337][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.174856][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.631306][ T4750] netlink: 'syz.4.30754': attribute type 3 has an invalid length. [ 1608.654800][ T4750] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.30754'. [ 1608.886715][ T4761] device syzkaller0 entered promiscuous mode [ 1608.992856][ T4772] sock: sock_timestamping_bind_phc: sock not bind to device [ 1609.112061][ T4778] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.30768'. [ 1609.121953][ T4777] IPv6: …: Disabled Multicast RS [ 1609.190691][ T4778] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.30768'. [ 1609.325015][ T4781] device syzkaller0 entered promiscuous mode [ 1609.705337][ T4806] device syzkaller0 entered promiscuous mode [ 1609.715980][ T4811] IPv6: …: Disabled Multicast RS [ 1610.029080][ T4824] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.30790'. [ 1610.099372][ T4824] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.30790'. [ 1610.153842][ T4831] IPv6: …: Disabled Multicast RS [ 1610.480414][ T4842] netlink: 'syz.1.30797': attribute type 9 has an invalid length. [ 1610.494761][ T4842] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.30797'. [ 1610.661812][ T4847] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.30799'. [ 1610.787274][ T4850] device syzkaller0 entered promiscuous mode [ 1611.130042][ T4861] syzkaller0: refused to change device tx_queue_len [ 1611.894182][ T4890] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.30815'. [ 1611.944372][ T4892] device syzkaller0 entered promiscuous mode [ 1611.978612][ T4892] dccp_invalid_packet: invalid packet type [ 1612.192697][ T4894] netlink: 'syz.1.30817': attribute type 3 has an invalid length. [ 1612.220729][ T4894] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.30817'. [ 1612.784718][ T4904] netlink: 'syz.3.30819': attribute type 9 has an invalid length. [ 1612.818953][ T4904] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.30819'. [ 1613.558917][ T4194] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1613.903833][ T4934] device syzkaller0 entered promiscuous mode [ 1614.924231][ T4194] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1615.054771][ T4968] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.30851'. [ 1615.102498][ T4959] device syzkaller0 entered promiscuous mode [ 1615.292286][ T4976] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.30867'. [ 1615.301951][ T4976] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 1615.322923][ T4976] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 1615.611062][ T4983] device syzkaller0 entered promiscuous mode [ 1615.698246][ T4988] device syzkaller0 entered promiscuous mode [ 1616.103485][ T4194] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1616.575442][ T5016] device syzkaller0 entered promiscuous mode [ 1617.033386][ T5033] netlink: 'syz.2.30879': attribute type 1 has an invalid length. [ 1617.069724][ T5033] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.30879'. [ 1617.099776][ T5030] device syzkaller0 entered promiscuous mode [ 1620.463829][ T5057] device syzkaller0 entered promiscuous mode [ 1620.785655][ T5078] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.30900'. [ 1621.014014][ T5086] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.30914'. [ 1621.602156][ T5101] device syzkaller0 entered promiscuous mode [ 1621.629021][ T5110] netlink: 'syz.1.30915': attribute type 1 has an invalid length. [ 1621.674529][ T5110] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.30915'. [ 1624.072382][ T5212] netlink: 64 bytes leftover after parsing attributes in process `syz.3.30963'. [ 1625.485412][ T5240] netlink: 'syz.4.30976': attribute type 9 has an invalid length. [ 1625.588499][ T5240] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.30976'. [ 1629.150895][ T5278] netlink: 'syz.0.30993': attribute type 3 has an invalid length. [ 1629.172479][ T5278] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.30993'. [ 1629.458443][ T5287] device syzkaller0 entered promiscuous mode [ 1630.995313][ T5322] netlink: 'syz.1.31007': attribute type 1 has an invalid length. [ 1631.014812][ T5320] netlink: 'syz.3.31008': attribute type 2 has an invalid length. [ 1631.032347][ T5322] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.31007'. [ 1631.054992][ T5320] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.31008'. [ 1631.540463][ T5336] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.31015'. [ 1631.585002][ T5336] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 1631.968576][ T5350] netlink: 'syz.4.31021': attribute type 1 has an invalid length. [ 1631.996162][ T5350] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.31021'. [ 1632.025871][ T5353] netlink: 'syz.2.31019': attribute type 9 has an invalid length. [ 1632.043282][ T5353] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.31019'. [ 1634.275170][ T5405] netlink: 'syz.0.31042': attribute type 9 has an invalid length. [ 1634.314366][ T5405] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.31042'. [ 1634.563192][ T5413] netlink: 'syz.4.31057': attribute type 8 has an invalid length. [ 1634.580974][ T5413] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.31057'. [ 1635.480082][T17435] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1636.209735][ T5464] netlink: 'syz.2.31066': attribute type 9 has an invalid length. [ 1636.281240][ T5464] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.31066'. [ 1636.504615][T13863] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1636.774578][ T5487] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.31077'. [ 1638.244859][ T4210] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1639.290596][T31634] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1639.325817][ T5521] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.31087'. [ 1639.351254][ T5521] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 1639.960110][T27758] Bluetooth: hci4: command 0x0406 tx timeout [ 1645.552663][ T5633] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.31137'. [ 1645.574831][ T5633] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 1645.613319][ T5638] device syzkaller0 entered promiscuous mode [ 1645.655787][ T5638] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 1646.295160][ T5664] netlink: 'syz.4.31149': attribute type 2 has an invalid length. [ 1646.320936][ T5664] netlink: 'syz.4.31149': attribute type 1 has an invalid length. [ 1646.348971][ T5664] netlink: 'syz.4.31149': attribute type 8 has an invalid length. [ 1646.376579][ T5664] netlink: 88 bytes leftover after parsing attributes in process `syz.4.31149'. [ 1647.615501][ T5694] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.31171'. [ 1647.643324][ T5694] netlink: 'syz.3.31171': attribute type 1 has an invalid length. [ 1647.665306][ T5694] netlink: 'syz.3.31171': attribute type 2 has an invalid length. [ 1647.714361][ T5694] netlink: 96 bytes leftover after parsing attributes in process `syz.3.31171'. [ 1647.865353][ T5702] netlink: 'syz.1.31164': attribute type 2 has an invalid length. [ 1647.914985][ T5702] netlink: 'syz.1.31164': attribute type 1 has an invalid length. [ 1647.936992][ T5702] netlink: 'syz.1.31164': attribute type 8 has an invalid length. [ 1647.966450][ T5702] netlink: 88 bytes leftover after parsing attributes in process `syz.1.31164'. [ 1648.753586][ T5727] netlink: 'syz.3.31172': attribute type 3 has an invalid length. [ 1648.794428][ T5727] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.31172'. [ 1649.105841][ T5721] chnl_net:caif_netlink_parms(): no params data found [ 1649.213680][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.224994][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.233832][ T5721] device bridge_slave_0 entered promiscuous mode [ 1649.247325][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.254508][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.267326][ T5721] device bridge_slave_1 entered promiscuous mode [ 1649.305405][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.321787][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.358108][ T5721] team0: Port device team_slave_0 added [ 1649.371786][ T5721] team0: Port device team_slave_1 added [ 1649.409699][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.421088][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.451540][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.464962][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.477186][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.512650][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1649.565151][ T5721] device hsr_slave_0 entered promiscuous mode [ 1649.572455][ T5721] device hsr_slave_1 entered promiscuous mode [ 1649.719595][ T5721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.809736][ T5721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.908847][ T5721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.997917][ T5721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.081610][ T5721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1650.093813][ T5721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1650.105063][ T5721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1650.114961][ T5721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1650.185632][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.201935][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1650.211167][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1650.223012][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.235136][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1650.247015][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1650.255531][T31634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.262696][T31634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.273472][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1650.289033][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1650.298123][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1650.312393][T31634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.319584][T31634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.334907][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1650.347736][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1650.367722][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1650.379588][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1650.389702][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1650.402788][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1650.412759][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1650.428423][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1650.440986][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1650.454311][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1650.463567][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1650.475003][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1650.583316][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1650.591157][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1650.608734][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.629816][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1650.639844][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1650.664400][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1650.674620][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1650.684510][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1650.693125][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1650.704632][ T5721] device veth0_vlan entered promiscuous mode [ 1650.718673][ T5721] device veth1_vlan entered promiscuous mode [ 1650.744226][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1650.752999][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1650.761781][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1650.767844][ T4896] Bluetooth: hci1: command 0x0409 tx timeout [ 1650.774519][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1650.790176][ T5721] device veth0_macvtap entered promiscuous mode [ 1650.801585][ T5721] device veth1_macvtap entered promiscuous mode [ 1650.822301][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1650.832653][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1650.843967][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1650.852538][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1650.861586][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1650.874232][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.887388][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.899791][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1650.910779][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1650.923111][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1650.931302][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1650.941067][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1650.955001][ T5721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.964387][ T5721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.973562][ T5721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.982792][ T5721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.061367][T13863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1651.075679][T13863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.083747][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1651.105387][T31634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1651.114891][T31634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.122936][T21420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1651.377819][ T5748] device syzkaller0 entered promiscuous mode [ 1651.508121][ T5762] netlink: 'syz.0.31178': attribute type 2 has an invalid length. [ 1651.519819][ T5762] netlink: 'syz.0.31178': attribute type 1 has an invalid length. [ 1651.528276][ T5762] netlink: 'syz.0.31178': attribute type 8 has an invalid length. [ 1651.537372][ T5762] netlink: 88 bytes leftover after parsing attributes in process `syz.0.31178'. [ 1651.817977][ T5771] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.31181'. [ 1651.845244][ T5771] netlink: 'syz.1.31181': attribute type 1 has an invalid length. [ 1651.858608][ T5771] netlink: 'syz.1.31181': attribute type 2 has an invalid length. [ 1651.884959][ T5771] netlink: 96 bytes leftover after parsing attributes in process `syz.1.31181'. [ 1652.103091][ T5777] netlink: 'syz.2.31189': attribute type 21 has an invalid length. [ 1652.161334][ T5777] netlink: 'syz.2.31189': attribute type 13 has an invalid length. [ 1652.203527][ T5777] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.31189'. [ 1652.740060][ T5798] netlink: 'syz.1.31197': attribute type 2 has an invalid length. [ 1652.751901][ T5798] netlink: 'syz.1.31197': attribute type 4 has an invalid length. [ 1652.762646][ T5798] netlink: 'syz.1.31197': attribute type 8 has an invalid length. [ 1652.773528][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31197'. [ 1652.818745][ T5802] device syzkaller0 entered promiscuous mode [ 1652.836297][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 1653.035067][ T5805] device syzkaller0 entered promiscuous mode [ 1653.152811][ T5815] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.31201'. [ 1653.178306][ T5818] netlink: 6188 bytes leftover after parsing attributes in process `syz.1.31203'. [ 1653.206217][ T5815] netlink: 96 bytes leftover after parsing attributes in process `syz.2.31201'. [ 1654.916321][ T4896] Bluetooth: hci1: command 0x040f tx timeout [ 1655.878658][ T5839] device wlan1 entered promiscuous mode [ 1655.895715][ T5839] team0: Port device wlan1 added [ 1656.096674][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 1656.180059][ T4896] Bluetooth: hci0: command 0x0409 tx timeout [ 1656.502348][ T5855] device syzkaller0 entered promiscuous mode [ 1656.635759][ T5861] device syzkaller0 entered promiscuous mode [ 1656.721005][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.744732][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.780611][ T5828] device bridge_slave_0 entered promiscuous mode [ 1656.826135][ T5871] validate_nla: 7 callbacks suppressed [ 1656.826158][ T5871] netlink: 'syz.3.31219': attribute type 21 has an invalid length. [ 1656.854639][ T5874] netlink: 15794 bytes leftover after parsing attributes in process `syz.1.31222'. [ 1656.856515][ T5871] netlink: 'syz.3.31219': attribute type 13 has an invalid length. [ 1656.943642][ T5871] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.31219'. [ 1656.955788][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.971455][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.996158][T11518] Bluetooth: hci1: command 0x0419 tx timeout [ 1656.996900][ T5828] device bridge_slave_1 entered promiscuous mode [ 1657.127059][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.139886][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.243863][ T5828] team0: Port device team_slave_0 added [ 1657.368268][ T5890] netlink: 'syz.2.31231': attribute type 3 has an invalid length. [ 1657.413313][ T5828] team0: Port device team_slave_1 added [ 1657.423945][ T5890] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.31231'. [ 1657.552341][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.593872][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.686160][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.746945][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.764269][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.894149][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.253749][ T5828] device hsr_slave_0 entered promiscuous mode [ 1658.282071][ T1750] Bluetooth: hci0: command 0x041b tx timeout [ 1658.290148][ T5828] device hsr_slave_1 entered promiscuous mode [ 1658.310141][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1658.342506][ T5828] Cannot create hsr debugfs directory [ 1658.349495][ T5913] netlink: 15794 bytes leftover after parsing attributes in process `syz.2.31242'. [ 1658.607394][T13863] wlan1: Trigger new scan to find an IBSS to join [ 1658.704160][ T5828] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.959895][ T5828] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.190954][ T5828] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.294918][ T5939] netlink: 72 bytes leftover after parsing attributes in process `syz.4.31253'. [ 1659.466918][ T5949] netlink: 'syz.4.31257': attribute type 4 has an invalid length. [ 1659.475015][ T5949] netlink: 'syz.4.31257': attribute type 5 has an invalid length. [ 1659.490172][ T5949] netlink: 'syz.4.31257': attribute type 6 has an invalid length. [ 1659.500308][ T5949] netlink: 198172 bytes leftover after parsing attributes in process `syz.4.31257'. [ 1659.514873][ T5949] netlink: 'syz.4.31257': attribute type 1 has an invalid length. [ 1659.526395][ T5949] netlink: 'syz.4.31257': attribute type 2 has an invalid length. [ 1659.754675][ T5828] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.436618][ T1750] Bluetooth: hci0: command 0x040f tx timeout [ 1661.535351][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1661.629877][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1661.876742][ T5978] netlink: 72 bytes leftover after parsing attributes in process `syz.1.31270'. [ 1661.899980][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1661.939796][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1662.116574][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.172330][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1662.181506][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1662.201255][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1662.221020][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1662.230540][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1662.239768][T13863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.246953][T13863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1662.257187][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1662.269103][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1662.287933][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1662.306769][T13863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.313937][T13863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1662.328432][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1662.366344][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1662.391099][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1662.402483][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1662.422405][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1662.432212][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1662.441894][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1662.451560][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1662.461128][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1662.479065][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1662.492422][ T5828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1662.502673][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1662.512414][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1662.518088][ T5456] Bluetooth: hci0: command 0x0419 tx timeout [ 1662.725918][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1662.734510][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1662.755002][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1662.784460][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1662.808010][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1662.844881][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1662.860094][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1662.874429][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1662.885601][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1662.898659][ T5828] device veth0_vlan entered promiscuous mode [ 1662.913152][ T5828] device veth1_vlan entered promiscuous mode [ 1662.941375][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1662.953251][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1662.961949][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1662.971253][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1662.983426][ T5828] device veth0_macvtap entered promiscuous mode [ 1662.995331][ T5828] device veth1_macvtap entered promiscuous mode [ 1663.014972][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1663.028222][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.039690][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1663.050780][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1663.060925][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1663.069474][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1663.079731][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1663.090648][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1663.101321][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.111369][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1663.121895][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.134027][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1663.144675][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.167982][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1663.175955][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1663.184902][T31634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1663.199728][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.209042][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.218442][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.227462][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.305935][T31634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.323024][T31634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.334800][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1663.357275][ T4688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.365243][ T4688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1663.373558][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1663.640138][T13863] wlan1: Trigger new scan to find an IBSS to join [ 1667.247288][T21420] wlan1: Creating new IBSS network, BSSID aa:5e:b0:dc:85:21 [ 1667.255377][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1667.495760][ T6009] netlink: 'syz.4.31283': attribute type 3 has an invalid length. [ 1667.511432][ T6009] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.31283'. [ 1667.622511][T21420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1667.700809][ T6021] netlink: 72 bytes leftover after parsing attributes in process `syz.3.31285'. [ 1667.850154][ T6024] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.31296'. [ 1668.260858][ T6040] netlink: 'syz.1.31292': attribute type 4 has an invalid length. [ 1668.456490][ T6040] netlink: 'syz.1.31292': attribute type 5 has an invalid length. [ 1668.484310][ T6040] netlink: 'syz.1.31292': attribute type 6 has an invalid length. [ 1668.513012][ T6042] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.31303'. [ 1668.526038][ T6040] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.31292'. [ 1668.557848][ T6040] netlink: 'syz.1.31292': attribute type 1 has an invalid length. [ 1668.584371][ T6040] netlink: 'syz.1.31292': attribute type 2 has an invalid length. [ 1668.676927][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.683381][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.898634][ T4210] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1669.404556][ T6059] netlink: 'syz.0.31299': attribute type 3 has an invalid length. [ 1669.415196][ T6059] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.31299'. [ 1670.174022][ T6085] netlink: 'syz.1.31311': attribute type 2 has an invalid length. [ 1670.217381][ T6085] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.31311'. [ 1670.253748][ T6083] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.31310'. [ 1674.697705][ T6144] netlink: 'syz.1.31335': attribute type 3 has an invalid length. [ 1674.725325][ T6144] netlink: 'syz.1.31335': attribute type 1 has an invalid length. [ 1674.767662][ T6144] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.31335'. [ 1677.779720][ T6210] netlink: 156 bytes leftover after parsing attributes in process `syz.1.31359'. [ 1678.498349][ T6227] netlink: 'syz.2.31369': attribute type 3 has an invalid length. [ 1678.544898][ T6227] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.31369'. [ 1683.359878][ T6277] netlink: 156 bytes leftover after parsing attributes in process `syz.0.31387'. [ 1683.819613][ T6295] netlink: 'syz.0.31394': attribute type 3 has an invalid length. [ 1683.873423][ T6299] netlink: 'syz.0.31394': attribute type 3 has an invalid length. [ 1683.888245][ T6295] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.31394'. [ 1683.937457][ T6299] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.31394'. [ 1684.429101][ T6306] device syzkaller0 entered promiscuous mode [ 1684.479620][ T6312] netlink: 156 bytes leftover after parsing attributes in process `syz.3.31402'. [ 1687.254524][ T6331] netlink: 'syz.3.31409': attribute type 3 has an invalid length. [ 1687.289178][ T6331] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.31409'. [ 1687.483989][ T6335] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.31411'. [ 1687.497165][ T6335] netlink: zone id is out of range [ 1687.526943][ T6335] netlink: zone id is out of range [ 1687.533785][ T6335] netlink: zone id is out of range [ 1687.566517][ T6335] netlink: zone id is out of range [ 1687.576623][ T6335] netlink: zone id is out of range [ 1687.589864][ T6335] netlink: zone id is out of range [ 1687.603823][ T6335] netlink: zone id is out of range [ 1687.610086][ T6335] netlink: zone id is out of range [ 1687.615655][ T6335] netlink: zone id is out of range [ 1687.643369][ T6335] netlink: zone id is out of range [ 1687.683086][ T6345] netlink: 156 bytes leftover after parsing attributes in process `syz.4.31413'. [ 1691.223750][ T6379] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.31428'. [ 1691.441044][ T6391] netlink: 44 bytes leftover after parsing attributes in process `syz.3.31433'. [ 1691.630057][ T6398] netlink: 'syz.4.31436': attribute type 10 has an invalid length. [ 1691.653341][ T6398] netlink: 143 bytes leftover after parsing attributes in process `syz.4.31436'. [ 1691.802434][ T6402] device syzkaller0 entered promiscuous mode [ 1691.852646][ T6411] netlink: 44 bytes leftover after parsing attributes in process `syz.0.31450'. [ 1692.157489][ T6423] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.31442'. [ 1692.497403][ T6440] netlink: 'syz.3.31451': attribute type 10 has an invalid length. [ 1692.522979][ T6440] netlink: 143 bytes leftover after parsing attributes in process `syz.3.31451'. [ 1692.538775][ T6442] netlink: 'syz.4.31453': attribute type 10 has an invalid length. [ 1692.585192][ T6442] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1692.742236][ T6447] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.31456'. [ 1692.764013][ T6447] net_ratelimit: 506 callbacks suppressed [ 1692.764048][ T6447] netlink: zone id is out of range [ 1692.795195][ T6447] netlink: zone id is out of range [ 1692.847211][ T6447] netlink: zone id is out of range [ 1692.857879][ T6447] netlink: zone id is out of range [ 1692.863572][ T6447] netlink: zone id is out of range [ 1692.880778][ T6447] netlink: zone id is out of range [ 1692.888408][ T6447] netlink: zone id is out of range [ 1692.932144][ T6447] netlink: zone id is out of range [ 1692.951043][ T6447] netlink: zone id is out of range [ 1692.961248][ T6447] netlink: zone id is out of range [ 1693.213821][ T6471] netlink: 'syz.0.31468': attribute type 10 has an invalid length. [ 1693.255719][ T6471] netlink: 143 bytes leftover after parsing attributes in process `syz.0.31468'. [ 1693.831233][ T6488] netlink: 'syz.1.31472': attribute type 10 has an invalid length. [ 1693.899927][ T6488] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1694.862936][ T6532] netlink: 'syz.3.31491': attribute type 10 has an invalid length. [ 1694.956202][ T6532] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1695.885785][ T6570] netlink: 48 bytes leftover after parsing attributes in process `syz.2.31510'. [ 1695.919625][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31510'. [ 1696.073281][ T6573] netlink: 'syz.3.31512': attribute type 3 has an invalid length. [ 1696.520996][ T6589] netlink: 'syz.3.31517': attribute type 21 has an invalid length. [ 1696.542759][ T6589] IPv6: NLM_F_CREATE should be specified when creating new route [ 1696.675165][ T6596] __nla_validate_parse: 1 callbacks suppressed [ 1696.675184][ T6596] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.31521'. [ 1696.843618][ T6603] netlink: 'syz.4.31524': attribute type 2 has an invalid length. [ 1696.859363][ T6603] netlink: 'syz.4.31524': attribute type 9 has an invalid length. [ 1696.882139][ T6603] netlink: 'syz.4.31524': attribute type 10 has an invalid length. [ 1696.896153][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.31524'. [ 1697.168144][ T6616] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.31530'. [ 1697.335112][ T4210] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1698.361371][T17435] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1698.385132][ T6652] device syzkaller0 entered promiscuous mode [ 1698.511190][ T6640] device syzkaller0 entered promiscuous mode [ 1699.993617][T13863] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1700.916406][ T4269] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1701.615908][ T6690] netlink: 'syz.0.31557': attribute type 2 has an invalid length. [ 1701.661189][ T6690] netlink: 'syz.0.31557': attribute type 9 has an invalid length. [ 1701.673484][ T6690] netlink: 'syz.0.31557': attribute type 10 has an invalid length. [ 1701.683743][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31557'. [ 1701.873561][ T6705] netlink: 48 bytes leftover after parsing attributes in process `syz.3.31561'. [ 1701.890698][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31561'. [ 1705.273782][ T6731] netlink: 'syz.1.31572': attribute type 3 has an invalid length. [ 1705.314642][ T6731] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.31572'. [ 1705.424428][ T6738] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.31576'. [ 1708.505117][ T6745] netlink: 48 bytes leftover after parsing attributes in process `syz.0.31578'. [ 1708.534864][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31578'. [ 1709.077106][ T6774] device syzkaller0 entered promiscuous mode [ 1709.089027][ T6776] netlink: 'syz.4.31592': attribute type 3 has an invalid length. [ 1709.124416][ T6776] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.31592'. [ 1709.663232][ T6807] device syzkaller0 entered promiscuous mode [ 1710.174252][ T6822] netlink: 'syz.2.31610': attribute type 3 has an invalid length. [ 1710.224462][ T6822] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.31610'. [ 1710.982549][ T6847] device syzkaller0 entered promiscuous mode [ 1711.605793][ T6870] netlink: 'syz.0.31626': attribute type 3 has an invalid length. [ 1711.625859][ T6870] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.31626'. [ 1712.138761][ T6889] device syzkaller0 entered promiscuous mode [ 1712.221758][ T6899] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.31642'. [ 1712.866580][ T6921] device syzkaller0 entered promiscuous mode [ 1713.124133][ T6928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.31655'. [ 1713.147743][ T6932] netlink: 56843 bytes leftover after parsing attributes in process `syz.4.31657'. [ 1713.275165][ T6938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31669'. [ 1716.730649][ T6974] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.31671'. [ 1719.393781][ T7041] netlink: 'syz.0.31700': attribute type 2 has an invalid length. [ 1719.438690][ T7041] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.31700'. [ 1721.884780][ T7085] netlink: 'syz.1.31717': attribute type 2 has an invalid length. [ 1721.913134][ T7085] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.31717'. [ 1728.530090][ T7209] netlink: 'syz.0.31763': attribute type 49 has an invalid length. [ 1728.634224][ T7209] netlink: 'syz.0.31763': attribute type 49 has an invalid length. [ 1729.547994][ T7226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.31773'. [ 1730.048351][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.054760][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.109139][ T7242] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.31780'. [ 1730.178000][ T7242] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.31780'. [ 1732.046188][ T7271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.31789'. [ 1733.455903][ T7285] device syzkaller0 entered promiscuous mode [ 1734.720214][T17435] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1735.050490][ T7306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.31807'. [ 1737.665040][ T7334] device syzkaller0 entered promiscuous mode [ 1737.987775][ T7352] netlink: 44 bytes leftover after parsing attributes in process `syz.4.31822'. [ 1738.989720][ T7373] netlink: 'syz.3.31832': attribute type 1 has an invalid length. [ 1739.029711][ T7373] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.31832'. [ 1739.713434][ T7391] device syzkaller0 entered promiscuous mode [ 1740.939782][ T7408] netlink: 'syz.0.31847': attribute type 1 has an invalid length. [ 1740.984932][ T7408] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.31847'. [ 1742.083120][T21420] device team0 left promiscuous mode [ 1742.106268][T21420] device team_slave_0 left promiscuous mode [ 1742.112475][T21420] device team_slave_1 left promiscuous mode [ 1742.136636][T21420] ¥: port 1(team0) entered disabled state [ 1742.192222][T21420] device hsr_slave_1 left promiscuous mode [ 1742.213208][T21420] device team0 left promiscuous mode [ 1742.219150][T21420] device team_slave_0 left promiscuous mode [ 1742.225248][T21420] device team_slave_1 left promiscuous mode [ 1742.257727][T21420] ¥: port 1(team0) entered disabled state [ 1742.284044][T21420] device hsr_slave_0 left promiscuous mode [ 1742.307024][T21420] device hsr_slave_1 left promiscuous mode [ 1742.314324][T21420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1742.336272][T21420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.371013][T21420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.385347][T21420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.410702][T21420] device bridge_slave_1 left promiscuous mode [ 1742.426357][T21420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.451536][T21420] device bridge_slave_0 left promiscuous mode [ 1742.466377][T21420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.523244][T21420] device veth1_macvtap left promiscuous mode [ 1742.537817][T21420] device veth1_vlan left promiscuous mode [ 1742.543744][T21420] device veth0_vlan left promiscuous mode [ 1742.576037][T21420] device veth1_macvtap left promiscuous mode [ 1742.582415][T21420] device veth0_macvtap left promiscuous mode [ 1742.615522][T21420] device veth1_vlan left promiscuous mode [ 1742.641709][T21420] device veth0_vlan left promiscuous mode [ 1743.114549][T21420] team0 (unregistering): Port device team_slave_1 removed [ 1743.133300][T21420] team0 (unregistering): Port device team_slave_0 removed [ 1743.152470][T21420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.173504][T21420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.255621][T21420] bond0 (unregistering): Released all slaves [ 1743.393001][T21420] team0 (unregistering): Port device team_slave_1 removed [ 1743.411608][T21420] team0 (unregistering): Port device team_slave_0 removed [ 1743.424887][T21420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.442966][T21420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.520520][T21420] bond0 (unregistering): Released all slaves [ 1743.855155][ T7423] netlink: 'syz.0.31863': attribute type 12 has an invalid length. [ 1743.891574][ T7423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.31863'. [ 1744.165582][ T7440] netlink: 'syz.3.31864': attribute type 11 has an invalid length. [ 1744.226217][ T7440] netlink: 'syz.3.31864': attribute type 1 has an invalid length. [ 1744.245647][ T7440] netlink: 'syz.3.31864': attribute type 1 has an invalid length. [ 1744.253883][ T7440] netlink: 'syz.3.31864': attribute type 2 has an invalid length. [ 1744.264850][ T7440] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.31864'. [ 1744.834797][ T7476] netlink: 'syz.4.31875': attribute type 12 has an invalid length. [ 1744.887718][ T7476] netlink: 132 bytes leftover after parsing attributes in process `syz.4.31875'. [ 1750.349169][ T7588] netlink: 'syz.4.31920': attribute type 10 has an invalid length. [ 1750.377512][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.394444][ T7588] device bridge_slave_1 left promiscuous mode [ 1750.401044][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.413228][ T7588] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1750.734335][ T7601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1750.823527][ T7608] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.31929'. [ 1751.139695][ T7631] netlink: 'syz.1.31937': attribute type 10 has an invalid length. [ 1751.192313][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.331973][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.351787][ T7631] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1751.687255][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1751.763375][ T7660] netlink: 'syz.3.31949': attribute type 11 has an invalid length. [ 1751.787887][ T7660] netlink: 168 bytes leftover after parsing attributes in process `syz.3.31949'. [ 1752.191366][ T7684] netlink: 'syz.2.31959': attribute type 10 has an invalid length. [ 1752.310433][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.403290][ T7684] device bridge_slave_1 left promiscuous mode [ 1752.436607][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.468701][ T7684] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1752.526948][ C0] Illegal XDP return value 16128, expect packet loss! [ 1752.539891][ T7695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1752.596180][ C1] ------------[ cut here ]------------ [ 1752.602392][ C1] WARNING: CPU: 1 PID: 7702 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 1752.611940][ C1] Modules linked in: [ 1752.615892][ C1] CPU: 1 PID: 7702 Comm: syz.3.31971 Not tainted syzkaller #0 [ 1752.623594][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1752.633791][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1752.640045][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1752.659814][ C1] RSP: 0018:ffffc90000dcfec8 EFLAGS: 00010246 [ 1752.665972][ C1] RAX: ffffffff81a0b710 RBX: 0000000000000000 RCX: ffff888023689dc0 [ 1752.673990][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.682067][ C1] RBP: 0000000000000000 R08: ffffc90000dd02f7 R09: ffffc90000dd02c4 [ 1752.690572][ C1] R10: dffffc0000000000 R11: fffff520001ba05f R12: ffff88802368b548 [ 1752.698657][ C1] R13: ffffc90000cc0030 R14: ffffc90000dcff28 R15: 0000000000000000 [ 1752.706711][ C1] FS: 00007f7f07d036c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1752.715690][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1752.722398][ C1] CR2: 000000110c356446 CR3: 000000004ca0b000 CR4: 00000000003506e0 [ 1752.730481][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 1752.738565][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1752.746638][ C1] Call Trace: [ 1752.749968][ C1] [ 1752.752891][ C1] bpf_probe_read_user+0x26/0x70 [ 1752.758103][ C1] bpf_prog_f2594087b0f175cc+0x32/0x3c [ 1752.763630][ C1] bpf_flow_dissect+0x12b/0x3f0 [ 1752.768697][ C1] __skb_flow_dissect+0x7c5/0x6260 [ 1752.773876][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1752.778995][ C1] ? mark_lock+0x94/0x320 [ 1752.783389][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1752.788686][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 1752.793824][ C1] ? verify_lock_unused+0x140/0x140 [ 1752.799157][ C1] ? mark_lock+0x94/0x320 [ 1752.803548][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1752.808816][ C1] ? verify_lock_unused+0x140/0x140 [ 1752.814129][ C1] ? is_bpf_text_address+0x254/0x270 [ 1752.819573][ C1] ? __kernel_text_address+0x9a/0x100 [ 1752.825076][ C1] ? verify_lock_unused+0x140/0x140 [ 1752.830458][ C1] ___skb_get_hash+0x55/0x680 [ 1752.835203][ C1] __skb_get_hash+0xd2/0x270 [ 1752.839894][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 1752.845709][ C1] ? rcu_lock_release+0x9/0x20 [ 1752.850827][ C1] netdev_pick_tx+0x335/0xad0 [ 1752.855726][ C1] netdev_core_pick_tx+0x12e/0x2e0 [ 1752.860957][ C1] __dev_queue_xmit+0x756/0x2f80 [ 1752.866002][ C1] ? dev_queue_xmit+0x20/0x20 [ 1752.870732][ C1] ? memcpy+0x3c/0x60 [ 1752.874764][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 1752.879986][ C1] ? __skb_clone+0x480/0x790 [ 1752.884666][ C1] ? hsr_addr_subst_dest+0x1d5/0x500 [ 1752.890136][ C1] ? skb_clone+0x1f1/0x350 [ 1752.894880][ C1] hsr_forward_skb+0xfd2/0x1700 [ 1752.899950][ C1] ? prp_fill_frame_info+0x660/0x660 [ 1752.905287][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 1752.910436][ C1] ? memset+0x1e/0x40 [ 1752.914472][ C1] ? __skb_pad+0x407/0x620 [ 1752.919019][ C1] send_hsr_supervision_frame+0x5f7/0xb80 [ 1752.924820][ C1] hsr_announce+0x168/0x310 [ 1752.929410][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1752.934501][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1752.939615][ C1] call_timer_fn+0x17b/0x540 [ 1752.944310][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1752.949438][ C1] ? __run_timers+0x800/0x800 [ 1752.954212][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1752.959510][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1752.964768][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1752.969908][ C1] __run_timers+0x53e/0x800 [ 1752.974480][ C1] ? detach_timer+0x2b0/0x2b0 [ 1752.979271][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1752.985314][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1752.990388][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1752.995737][ C1] run_timer_softirq+0x63/0xf0 [ 1753.000609][ C1] handle_softirqs+0x339/0x830 [ 1753.005509][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1753.010481][ C1] ? do_softirq+0x210/0x210 [ 1753.015045][ C1] __irq_exit_rcu+0x13b/0x230 [ 1753.019840][ C1] ? irq_exit_rcu+0x20/0x20 [ 1753.024402][ C1] irq_exit_rcu+0x5/0x20 [ 1753.028745][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1753.034434][ C1] [ 1753.037459][ C1] [ 1753.040430][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1753.046533][ C1] RIP: 0010:stack_trace_save+0x1/0xf0 [ 1753.051965][ C1] Code: 89 44 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 45 31 ed eb e7 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 <48> 89 e5 41 56 53 48 83 e4 e0 48 81 ec 80 00 00 00 65 48 8b 04 25 [ 1753.071711][ C1] RSP: 0018:ffffc900031ef290 EFLAGS: 00000246 [ 1753.077866][ C1] RAX: 0000000000000000 RBX: ffff88802368a340 RCX: ffff888023689dc0 [ 1753.085878][ C1] RDX: 0000000000000002 RSI: 0000000000000010 RDI: ffffc900031ef2e0 [ 1753.093960][ C1] RBP: ffffc900031ef3d8 R08: ffffc900031ef35f R09: ffffc900031ef2e0 [ 1753.102020][ C1] R10: dffffc0000000000 R11: fffff5200063de6c R12: dffffc0000000000 [ 1753.110064][ C1] R13: 1ffff110046d1468 R14: ffffc900031ef2e0 R15: 1ffff9200063de58 [ 1753.118121][ C1] save_stack+0x121/0x230 [ 1753.122587][ C1] ? __reset_page_owner+0x180/0x180 [ 1753.127911][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1753.132906][ C1] ? free_vmap_area_noflush+0xa0e/0xab0 [ 1753.138589][ C1] __reset_page_owner+0x51/0x180 [ 1753.143596][ C1] free_unref_page_prepare+0x637/0x6c0 [ 1753.149178][ C1] free_unref_page+0x8f/0x2a0 [ 1753.153990][ C1] ? free_vmap_area_noflush+0xa6b/0xab0 [ 1753.159625][ C1] ? mark_free_pages+0x5c0/0x5c0 [ 1753.164623][ C1] ? __free_pages+0x95/0x1a0 [ 1753.169389][ C1] __vunmap+0x8b9/0xa50 [ 1753.173605][ C1] bpf_check+0x9664/0xf270 [ 1753.178177][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 1753.183362][ C1] ? mark_lock+0x94/0x320 [ 1753.187823][ C1] ? verify_lock_unused+0x140/0x140 [ 1753.193087][ C1] ? rcu_lock_release+0x5/0x20 [ 1753.198148][ C1] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1753.204445][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1753.209742][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1753.215078][ C1] ? pcpu_alloc+0x1121/0x1770 [ 1753.219966][ C1] ? __might_fault+0xb3/0x110 [ 1753.224830][ C1] ? memset+0x1e/0x40 [ 1753.228889][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1753.234080][ C1] bpf_prog_load+0xfec/0x1510 [ 1753.238861][ C1] ? map_freeze+0x350/0x350 [ 1753.243427][ C1] ? __might_fault+0xb7/0x110 [ 1753.248219][ C1] ? __might_fault+0xb3/0x110 [ 1753.252952][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 1753.257364][ C1] ? security_bpf+0x7a/0xa0 [ 1753.261990][ C1] __sys_bpf+0x532/0x6f0 [ 1753.266317][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1753.271790][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 1753.276815][ C1] __x64_sys_bpf+0x78/0x90 [ 1753.281286][ C1] do_syscall_64+0x4c/0xa0 [ 1753.285835][ C1] ? clear_bhb_loop+0x30/0x80 [ 1753.290591][ C1] ? clear_bhb_loop+0x30/0x80 [ 1753.295448][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1753.301613][ C1] RIP: 0033:0x7f7f09aa9e59 [ 1753.306103][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1753.326165][ C1] RSP: 002b:00007f7f07d03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1753.334645][ C1] RAX: ffffffffffffffda RBX: 00007f7f09d22fa0 RCX: 00007f7f09aa9e59 [ 1753.342727][ C1] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1753.350880][ C1] RBP: 00007f7f09b3fd6f R08: 0000000000000000 R09: 0000000000000000 [ 1753.358956][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1753.367000][ C1] R13: 00007f7f09d23038 R14: 00007f7f09d22fa0 R15: 00007ffd9dd6d648 [ 1753.375357][ C1] [ 1753.378531][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1753.385844][ C1] CPU: 1 PID: 7702 Comm: syz.3.31971 Not tainted syzkaller #0 [ 1753.393344][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1753.403457][ C1] Call Trace: [ 1753.406778][ C1] [ 1753.409663][ C1] dump_stack_lvl+0x188/0x250 [ 1753.414389][ C1] ? show_regs_print_info+0x20/0x20 [ 1753.419620][ C1] ? load_image+0x400/0x400 [ 1753.424167][ C1] panic+0x2e5/0x810 [ 1753.428173][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1753.432722][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1753.438299][ C1] __warn+0x248/0x2b0 [ 1753.442311][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1753.447896][ C1] report_bug+0x1b7/0x2e0 [ 1753.452334][ C1] handle_bug+0x3a/0x70 [ 1753.456511][ C1] exc_invalid_op+0x16/0x40 [ 1753.461041][ C1] asm_exc_invalid_op+0x16/0x20 [ 1753.465918][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1753.472105][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1753.491740][ C1] RSP: 0018:ffffc90000dcfec8 EFLAGS: 00010246 [ 1753.497834][ C1] RAX: ffffffff81a0b710 RBX: 0000000000000000 RCX: ffff888023689dc0 [ 1753.505926][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1753.514002][ C1] RBP: 0000000000000000 R08: ffffc90000dd02f7 R09: ffffc90000dd02c4 [ 1753.522025][ C1] R10: dffffc0000000000 R11: fffff520001ba05f R12: ffff88802368b548 [ 1753.530102][ C1] R13: ffffc90000cc0030 R14: ffffc90000dcff28 R15: 0000000000000000 [ 1753.538112][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1753.543811][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1753.549385][ C1] bpf_probe_read_user+0x26/0x70 [ 1753.554352][ C1] bpf_prog_f2594087b0f175cc+0x32/0x3c [ 1753.559838][ C1] bpf_flow_dissect+0x12b/0x3f0 [ 1753.564733][ C1] __skb_flow_dissect+0x7c5/0x6260 [ 1753.569888][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1753.574943][ C1] ? mark_lock+0x94/0x320 [ 1753.579404][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1753.584471][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 1753.589542][ C1] ? verify_lock_unused+0x140/0x140 [ 1753.594784][ C1] ? mark_lock+0x94/0x320 [ 1753.599141][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 1753.604322][ C1] ? verify_lock_unused+0x140/0x140 [ 1753.609659][ C1] ? is_bpf_text_address+0x254/0x270 [ 1753.615063][ C1] ? __kernel_text_address+0x9a/0x100 [ 1753.620461][ C1] ? verify_lock_unused+0x140/0x140 [ 1753.625722][ C1] ___skb_get_hash+0x55/0x680 [ 1753.630432][ C1] __skb_get_hash+0xd2/0x270 [ 1753.635054][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 1753.640805][ C1] ? rcu_lock_release+0x9/0x20 [ 1753.645643][ C1] netdev_pick_tx+0x335/0xad0 [ 1753.650350][ C1] netdev_core_pick_tx+0x12e/0x2e0 [ 1753.655488][ C1] __dev_queue_xmit+0x756/0x2f80 [ 1753.660620][ C1] ? dev_queue_xmit+0x20/0x20 [ 1753.665338][ C1] ? memcpy+0x3c/0x60 [ 1753.669361][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 1753.674518][ C1] ? __skb_clone+0x480/0x790 [ 1753.679143][ C1] ? hsr_addr_subst_dest+0x1d5/0x500 [ 1753.684463][ C1] ? skb_clone+0x1f1/0x350 [ 1753.688914][ C1] hsr_forward_skb+0xfd2/0x1700 [ 1753.693807][ C1] ? prp_fill_frame_info+0x660/0x660 [ 1753.699114][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 1753.704170][ C1] ? memset+0x1e/0x40 [ 1753.708175][ C1] ? __skb_pad+0x407/0x620 [ 1753.712636][ C1] send_hsr_supervision_frame+0x5f7/0xb80 [ 1753.718392][ C1] hsr_announce+0x168/0x310 [ 1753.723015][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1753.728274][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1753.733334][ C1] call_timer_fn+0x17b/0x540 [ 1753.737951][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1753.743012][ C1] ? __run_timers+0x800/0x800 [ 1753.747731][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1753.752964][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1753.758334][ C1] ? hsr_dev_finalize+0x870/0x870 [ 1753.763422][ C1] __run_timers+0x53e/0x800 [ 1753.768006][ C1] ? detach_timer+0x2b0/0x2b0 [ 1753.772716][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1753.778725][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1753.783684][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1753.789005][ C1] run_timer_softirq+0x63/0xf0 [ 1753.793812][ C1] handle_softirqs+0x339/0x830 [ 1753.798603][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1753.803485][ C1] ? do_softirq+0x210/0x210 [ 1753.808037][ C1] __irq_exit_rcu+0x13b/0x230 [ 1753.812737][ C1] ? irq_exit_rcu+0x20/0x20 [ 1753.817362][ C1] irq_exit_rcu+0x5/0x20 [ 1753.821769][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1753.827498][ C1] [ 1753.830481][ C1] [ 1753.833456][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1753.839959][ C1] RIP: 0010:stack_trace_save+0x1/0xf0 [ 1753.845382][ C1] Code: 89 44 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 45 31 ed eb e7 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 <48> 89 e5 41 56 53 48 83 e4 e0 48 81 ec 80 00 00 00 65 48 8b 04 25 [ 1753.865436][ C1] RSP: 0018:ffffc900031ef290 EFLAGS: 00000246 [ 1753.871728][ C1] RAX: 0000000000000000 RBX: ffff88802368a340 RCX: ffff888023689dc0 [ 1753.879726][ C1] RDX: 0000000000000002 RSI: 0000000000000010 RDI: ffffc900031ef2e0 [ 1753.887812][ C1] RBP: ffffc900031ef3d8 R08: ffffc900031ef35f R09: ffffc900031ef2e0 [ 1753.895926][ C1] R10: dffffc0000000000 R11: fffff5200063de6c R12: dffffc0000000000 [ 1753.904969][ C1] R13: 1ffff110046d1468 R14: ffffc900031ef2e0 R15: 1ffff9200063de58 [ 1753.913090][ C1] save_stack+0x121/0x230 [ 1753.917466][ C1] ? __reset_page_owner+0x180/0x180 [ 1753.922714][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1753.927614][ C1] ? free_vmap_area_noflush+0xa0e/0xab0 [ 1753.933198][ C1] __reset_page_owner+0x51/0x180 [ 1753.938173][ C1] free_unref_page_prepare+0x637/0x6c0 [ 1753.943700][ C1] free_unref_page+0x8f/0x2a0 [ 1753.948400][ C1] ? free_vmap_area_noflush+0xa6b/0xab0 [ 1753.954344][ C1] ? mark_free_pages+0x5c0/0x5c0 [ 1753.959332][ C1] ? __free_pages+0x95/0x1a0 [ 1753.963955][ C1] __vunmap+0x8b9/0xa50 [ 1753.968151][ C1] bpf_check+0x9664/0xf270 [ 1753.972637][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 1753.977776][ C1] ? mark_lock+0x94/0x320 [ 1753.982155][ C1] ? verify_lock_unused+0x140/0x140 [ 1753.987393][ C1] ? rcu_lock_release+0x5/0x20 [ 1753.992335][ C1] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1753.998610][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1754.003840][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1754.009455][ C1] ? pcpu_alloc+0x1121/0x1770 [ 1754.014205][ C1] ? __might_fault+0xb3/0x110 [ 1754.018937][ C1] ? memset+0x1e/0x40 [ 1754.022952][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1754.028015][ C1] bpf_prog_load+0xfec/0x1510 [ 1754.032741][ C1] ? map_freeze+0x350/0x350 [ 1754.037280][ C1] ? __might_fault+0xb7/0x110 [ 1754.042015][ C1] ? __might_fault+0xb3/0x110 [ 1754.046736][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 1754.051102][ C1] ? security_bpf+0x7a/0xa0 [ 1754.055643][ C1] __sys_bpf+0x532/0x6f0 [ 1754.059924][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1754.065340][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 1754.070324][ C1] __x64_sys_bpf+0x78/0x90 [ 1754.074784][ C1] do_syscall_64+0x4c/0xa0 [ 1754.079247][ C1] ? clear_bhb_loop+0x30/0x80 [ 1754.083963][ C1] ? clear_bhb_loop+0x30/0x80 [ 1754.088707][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1754.094632][ C1] RIP: 0033:0x7f7f09aa9e59 [ 1754.099090][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.118948][ C1] RSP: 002b:00007f7f07d03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1754.127400][ C1] RAX: ffffffffffffffda RBX: 00007f7f09d22fa0 RCX: 00007f7f09aa9e59 [ 1754.135407][ C1] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1754.143410][ C1] RBP: 00007f7f09b3fd6f R08: 0000000000000000 R09: 0000000000000000 [ 1754.151465][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1754.159564][ C1] R13: 00007f7f09d23038 R14: 00007f7f09d22fa0 R15: 00007ffd9dd6d648 [ 1754.167677][ C1] [ 1754.171029][ C1] Kernel Offset: disabled [ 1754.175895][ C1] Rebooting in 86400 seconds..