last executing test programs: 10.835780195s ago: executing program 1 (id=5780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 10.699899525s ago: executing program 1 (id=5782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.488313694s ago: executing program 1 (id=5784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000000f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 10.421318804s ago: executing program 1 (id=5785): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 10.147970413s ago: executing program 1 (id=5788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0xfffffd}, [@exit]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.036574442s ago: executing program 1 (id=5791): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5.733572479s ago: executing program 3 (id=5882): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 5.531812588s ago: executing program 3 (id=5886): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 4.997940856s ago: executing program 3 (id=5897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f0007"], 0xfe33) 4.909849006s ago: executing program 3 (id=5899): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 4.764502175s ago: executing program 3 (id=5902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.733512425s ago: executing program 2 (id=5904): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7610, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.592520085s ago: executing program 3 (id=5906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0x2cff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r0}, 0x38) 4.592409894s ago: executing program 2 (id=5907): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="7a0a00ff0000000071107b00000000009500000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.524158984s ago: executing program 2 (id=5908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, &(0x7f00000003c0), 0x0}, 0x20) 4.464378164s ago: executing program 4 (id=5910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 4.390338134s ago: executing program 2 (id=5912): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffc0}, 0x18) 4.296500094s ago: executing program 4 (id=5913): unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10090, 0x1, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x834}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 4.250782904s ago: executing program 2 (id=5915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 4.161300963s ago: executing program 4 (id=5916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.069791153s ago: executing program 2 (id=5918): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0x2cff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) 3.868405742s ago: executing program 4 (id=5920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.708737282s ago: executing program 4 (id=5921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x50) 3.524440261s ago: executing program 4 (id=5924): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 904.494043ms ago: executing program 0 (id=5942): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000030000000100000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x10001}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) 749.497422ms ago: executing program 0 (id=5943): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 555.809222ms ago: executing program 0 (id=5944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x15, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) 340.610611ms ago: executing program 0 (id=5945): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) 197.820631ms ago: executing program 0 (id=5946): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5, 0x0, 0x0, @void, @value}, 0x10) 0s ago: executing program 0 (id=5947): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): romiscuous mode [ 107.435137][ T5533] device veth0_vlan entered promiscuous mode [ 107.639373][ T5550] sctp: [Deprecated]: syz.2.491 (pid 5550) Use of int in max_burst socket option deprecated. [ 107.639373][ T5550] Use struct sctp_assoc_value instead [ 107.672953][ T5552] device syzkaller0 entered promiscuous mode [ 108.256319][ T5571] sctp: [Deprecated]: syz.0.488 (pid 5571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.256319][ T5571] Use struct sctp_sack_info instead [ 108.998840][ T5587] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.492'. [ 109.205551][ T5597] sctp: [Deprecated]: syz.4.495 (pid 5597) Use of int in max_burst socket option deprecated. [ 109.205551][ T5597] Use struct sctp_assoc_value instead [ 109.432088][ T5605] batman_adv: batadv0: Adding interface: wlan0 [ 109.457451][ T5605] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.540466][ T5605] batman_adv: batadv0: Interface activated: wlan0 [ 109.787749][ T5623] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.507'. [ 110.072340][ T5636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.512'. [ 110.380815][ T5643] sctp: [Deprecated]: syz.3.514 (pid 5643) Use of int in max_burst socket option deprecated. [ 110.380815][ T5643] Use struct sctp_assoc_value instead [ 110.567989][ T5650] validate_nla: 46 callbacks suppressed [ 110.568009][ T5650] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 110.656313][ T5650] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 110.701619][ T5644] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 110.714613][ T5651] netlink: 'syz.0.515': attribute type 29 has an invalid length. [ 110.840018][ T5653] netlink: 'syz.3.518': attribute type 29 has an invalid length. [ 110.865044][ T5653] netlink: 'syz.3.518': attribute type 29 has an invalid length. [ 110.894777][ T5654] netlink: 'syz.3.518': attribute type 29 has an invalid length. [ 110.918921][ T5657] sctp: [Deprecated]: syz.0.529 (pid 5657) Use of int in max_burst socket option deprecated. [ 110.918921][ T5657] Use struct sctp_assoc_value instead [ 110.942564][ T5653] netlink: 'syz.3.518': attribute type 29 has an invalid length. [ 111.174141][ T5663] netlink: 60 bytes leftover after parsing attributes in process `syz.2.520'. [ 111.199661][ T5667] netlink: 'syz.0.522': attribute type 21 has an invalid length. [ 111.209451][ T5667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.522'. [ 111.240288][ T5662] netlink: 'syz.3.521': attribute type 29 has an invalid length. [ 111.251248][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.522'. [ 111.942226][ T5692] sctp: [Deprecated]: syz.3.533 (pid 5692) Use of int in max_burst socket option deprecated. [ 111.942226][ T5692] Use struct sctp_assoc_value instead [ 112.976434][ T5729] sctp: [Deprecated]: syz.4.548 (pid 5729) Use of int in max_burst socket option deprecated. [ 112.976434][ T5729] Use struct sctp_assoc_value instead [ 114.089093][ T5775] sctp: [Deprecated]: syz.1.568 (pid 5775) Use of int in max_burst socket option deprecated. [ 114.089093][ T5775] Use struct sctp_assoc_value instead [ 114.853780][ T5808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.030853][ T5810] device syzkaller0 entered promiscuous mode [ 115.110468][ T5817] sctp: [Deprecated]: syz.2.584 (pid 5817) Use of int in max_burst socket option deprecated. [ 115.110468][ T5817] Use struct sctp_assoc_value instead [ 115.820579][ T5842] validate_nla: 71 callbacks suppressed [ 115.820598][ T5842] netlink: 'syz.2.593': attribute type 29 has an invalid length. [ 116.034278][ T5842] netlink: 'syz.2.593': attribute type 29 has an invalid length. [ 116.073817][ T5843] netlink: 'syz.2.593': attribute type 29 has an invalid length. [ 116.108253][ T5838] netlink: 'syz.2.593': attribute type 29 has an invalid length. [ 116.589506][ T5847] netlink: 'syz.2.595': attribute type 29 has an invalid length. [ 116.622188][ T5858] netlink: 'syz.4.597': attribute type 29 has an invalid length. [ 116.766034][ T5858] netlink: 'syz.4.597': attribute type 29 has an invalid length. [ 116.799429][ T5847] netlink: 'syz.2.595': attribute type 29 has an invalid length. [ 116.808771][ T5851] netlink: 'syz.4.597': attribute type 29 has an invalid length. [ 116.827889][ T5856] netlink: 'syz.2.595': attribute type 29 has an invalid length. [ 117.025083][ T5868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.039501][ T5899] netlink: 60 bytes leftover after parsing attributes in process `syz.4.613'. [ 118.944752][ T5927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.623'. [ 119.782088][ T5952] device syzkaller0 entered promiscuous mode [ 120.950411][ T5989] validate_nla: 42 callbacks suppressed [ 120.952706][ T5989] netlink: 'syz.3.649': attribute type 10 has an invalid length. [ 120.954397][ T5991] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.650'. [ 121.023401][ T5989] batman_adv: batadv0: Adding interface: wlan0 [ 121.038949][ T5989] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.073670][ T5989] batman_adv: batadv0: Interface activated: wlan0 [ 121.361616][ T5996] netlink: 'syz.4.651': attribute type 29 has an invalid length. [ 121.381361][ T5996] netlink: 'syz.4.651': attribute type 29 has an invalid length. [ 121.449513][ T5996] netlink: 'syz.4.651': attribute type 29 has an invalid length. [ 121.483281][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.664'. [ 121.554035][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.585139][ T6003] netlink: 'syz.0.652': attribute type 4 has an invalid length. [ 121.601290][ T6003] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.652'. [ 122.370174][ T5999] netlink: 'syz.2.664': attribute type 3 has an invalid length. [ 122.380046][ T5999] netlink: 1 bytes leftover after parsing attributes in process `syz.2.664'. [ 122.400747][ T5996] netlink: 'syz.4.651': attribute type 29 has an invalid length. [ 122.566119][ T6012] device syzkaller0 entered promiscuous mode [ 122.676394][ T6022] netlink: 'syz.4.659': attribute type 29 has an invalid length. [ 122.799545][ T6022] netlink: 'syz.4.659': attribute type 29 has an invalid length. [ 122.807957][ T6024] netlink: 'syz.2.661': attribute type 21 has an invalid length. [ 122.820829][ T6024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.661'. [ 122.838529][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 123.006208][ T6037] sctp: [Deprecated]: syz.4.665 (pid 6037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.006208][ T6037] Use struct sctp_sack_info instead [ 123.981734][ T6060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.671'. [ 123.998754][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.018694][ T6060] netlink: 1 bytes leftover after parsing attributes in process `syz.3.671'. [ 124.473319][ T6082] device veth0_vlan left promiscuous mode [ 124.480184][ T6082] device veth0_vlan entered promiscuous mode [ 125.442788][ T6111] device pim6reg1 entered promiscuous mode [ 125.552623][ T6116] device pim6reg1 left promiscuous mode [ 125.958903][ T6137] validate_nla: 15 callbacks suppressed [ 125.958941][ T6137] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 125.982977][ T6137] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 125.992149][ T6139] device syzkaller0 entered promiscuous mode [ 126.001569][ T6137] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 126.011980][ T6137] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 126.615338][ T6158] netlink: 'syz.0.708': attribute type 29 has an invalid length. [ 126.647019][ T6158] netlink: 'syz.0.708': attribute type 29 has an invalid length. [ 126.714115][ T6160] netlink: 'syz.0.708': attribute type 29 has an invalid length. [ 126.756236][ T6158] netlink: 'syz.0.708': attribute type 29 has an invalid length. [ 126.910334][ T6165] netlink: 'syz.2.714': attribute type 29 has an invalid length. [ 127.067921][ T6165] netlink: 'syz.2.714': attribute type 29 has an invalid length. [ 127.135133][ T6166] device pim6reg1 entered promiscuous mode [ 127.740852][ T6190] netlink: 72 bytes leftover after parsing attributes in process `syz.4.721'. [ 128.350509][ T6216] device syzkaller0 entered promiscuous mode [ 128.671529][ T6226] device syzkaller0 entered promiscuous mode [ 128.894216][ T6232] netlink: 72 bytes leftover after parsing attributes in process `syz.2.738'. [ 130.025250][ T6262] tap0: tun_chr_ioctl cmd 1074025677 [ 130.068636][ T6262] tap0: linktype set to 786 [ 130.224868][ T6269] device syzkaller0 entered promiscuous mode [ 130.578571][ T6285] sctp: [Deprecated]: syz.4.757 (pid 6285) Use of int in max_burst socket option deprecated. [ 130.578571][ T6285] Use struct sctp_assoc_value instead [ 130.632058][ T6281] device syzkaller0 entered promiscuous mode [ 130.916322][ T6297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.762'. [ 131.058262][ T6302] validate_nla: 19 callbacks suppressed [ 131.058280][ T6302] netlink: 'syz.3.764': attribute type 20 has an invalid length. [ 131.147417][ T6310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.767'. [ 131.166673][ T6310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.767'. [ 131.222932][ T6312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.767'. [ 131.428213][ T6319] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 131.470500][ T6319] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 131.515165][ T6319] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 131.530656][ T6319] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 131.532275][ T6327] sctp: [Deprecated]: syz.3.773 (pid 6327) Use of int in max_burst socket option deprecated. [ 131.532275][ T6327] Use struct sctp_assoc_value instead [ 132.187118][ T6350] netlink: 60 bytes leftover after parsing attributes in process `syz.0.783'. [ 132.203247][ T6350] netlink: 60 bytes leftover after parsing attributes in process `syz.0.783'. [ 132.238257][ T6351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.783'. [ 132.456659][ T6353] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 132.506147][ T6353] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 132.535881][ T6354] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 132.577152][ T6357] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 132.684819][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.691144][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.862804][ T6364] sctp: [Deprecated]: syz.2.788 (pid 6364) Use of int in max_burst socket option deprecated. [ 132.862804][ T6364] Use struct sctp_assoc_value instead [ 133.021311][ T6367] device syzkaller0 entered promiscuous mode [ 133.187495][ T6374] sctp: [Deprecated]: syz.2.802 (pid 6374) Use of int in max_burst socket option deprecated. [ 133.187495][ T6374] Use struct sctp_assoc_value instead [ 133.450958][ T6382] device syzkaller0 entered promiscuous mode [ 133.646031][ T6390] sctp: [Deprecated]: syz.1.807 (pid 6390) Use of int in max_burst socket option deprecated. [ 133.646031][ T6390] Use struct sctp_assoc_value instead [ 133.704770][ T6394] device syzkaller0 entered promiscuous mode [ 134.171944][ T6410] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 134.531285][ T6427] device syzkaller0 entered promiscuous mode [ 134.756213][ T6435] sctp: [Deprecated]: syz.3.812 (pid 6435) Use of int in max_burst socket option deprecated. [ 134.756213][ T6435] Use struct sctp_assoc_value instead [ 135.180867][ T6449] device syzkaller0 entered promiscuous mode [ 135.322640][ T6456] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.831'. [ 135.370036][ T6456] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 135.500310][ T6466] tap0: tun_chr_ioctl cmd 1074025677 [ 135.505996][ T6466] tap0: linktype set to 786 [ 135.992142][ T6471] device syzkaller0 entered promiscuous mode [ 136.057410][ T6481] device syzkaller0 entered promiscuous mode [ 136.796277][ T6511] validate_nla: 12 callbacks suppressed [ 136.796294][ T6511] netlink: 'syz.2.838': attribute type 29 has an invalid length. [ 136.804674][ T6509] netlink: 'syz.0.837': attribute type 10 has an invalid length. [ 136.817437][ T6511] netlink: 'syz.2.838': attribute type 29 has an invalid length. [ 136.819009][ T6505] netlink: 'syz.2.838': attribute type 29 has an invalid length. [ 136.847795][ T6509] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.837'. [ 136.860024][ T6509] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 136.861204][ T6505] netlink: 'syz.2.838': attribute type 29 has an invalid length. [ 137.627772][ T6537] device syzkaller0 entered promiscuous mode [ 137.706654][ T6540] device syzkaller0 entered promiscuous mode [ 137.782480][ T6550] netlink: 'syz.0.851': attribute type 29 has an invalid length. [ 137.813279][ T6550] netlink: 'syz.0.851': attribute type 29 has an invalid length. [ 137.831512][ T6554] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 137.841202][ T6554] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.853'. [ 137.846094][ T6545] netlink: 'syz.0.851': attribute type 29 has an invalid length. [ 137.856558][ T6554] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 137.890451][ T6545] netlink: 'syz.0.851': attribute type 29 has an invalid length. [ 138.497288][ T6575] sctp: [Deprecated]: syz.1.871 (pid 6575) Use of int in max_burst socket option deprecated. [ 138.497288][ T6575] Use struct sctp_assoc_value instead [ 139.246433][ T6610] O3ãc¤±: renamed from bridge_slave_0 [ 139.305624][ T6611] sctp: [Deprecated]: syz.4.876 (pid 6611) Use of int in max_burst socket option deprecated. [ 139.305624][ T6611] Use struct sctp_assoc_value instead [ 139.406989][ T6618] sctp: [Deprecated]: syz.2.887 (pid 6618) Use of int in max_burst socket option deprecated. [ 139.406989][ T6618] Use struct sctp_assoc_value instead [ 139.439460][ T6620] tap0: tun_chr_ioctl cmd 1074025677 [ 139.469463][ T6620] tap0: linktype set to 786 [ 140.246259][ T6647] sctp: [Deprecated]: syz.3.890 (pid 6647) Use of int in max_burst socket option deprecated. [ 140.246259][ T6647] Use struct sctp_assoc_value instead [ 141.822207][ T6683] validate_nla: 52 callbacks suppressed [ 141.822245][ T6683] netlink: 'syz.4.903': attribute type 21 has an invalid length. [ 141.872072][ T6686] sctp: [Deprecated]: syz.0.904 (pid 6686) Use of int in max_burst socket option deprecated. [ 141.872072][ T6686] Use struct sctp_assoc_value instead [ 141.952858][ T6688] O3ãc¤±: renamed from bridge_slave_0 [ 142.110900][ T6695] netlink: 'syz.2.909': attribute type 21 has an invalid length. [ 142.132945][ T6693] netlink: 'syz.4.906': attribute type 29 has an invalid length. [ 142.166956][ T6695] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 142.210087][ T6697] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 142.242415][ T6697] netlink: 55 bytes leftover after parsing attributes in process `syz.0.910'. [ 142.388426][ T6693] netlink: 'syz.4.906': attribute type 29 has an invalid length. [ 142.430181][ T6700] netlink: 'syz.4.906': attribute type 29 has an invalid length. [ 142.460130][ T6704] netlink: 'syz.4.906': attribute type 29 has an invalid length. [ 142.481491][ T6706] netlink: 'syz.2.913': attribute type 29 has an invalid length. [ 142.513810][ T6706] netlink: 'syz.2.913': attribute type 29 has an invalid length. [ 142.784098][ T6716] device wg2 entered promiscuous mode [ 143.061731][ T6724] sctp: [Deprecated]: syz.0.920 (pid 6724) Use of int in max_burst socket option deprecated. [ 143.061731][ T6724] Use struct sctp_assoc_value instead [ 143.318592][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.420442][ T6735] O3ãc¤±: renamed from bridge_slave_0 [ 143.596850][ T6738] device wg2 entered promiscuous mode [ 144.575937][ T6776] netlink: 55 bytes leftover after parsing attributes in process `syz.3.939'. [ 144.909469][ T6783] device syzkaller0 entered promiscuous mode [ 145.732814][ T6804] netlink: 152 bytes leftover after parsing attributes in process `syz.2.948'. [ 145.962152][ T6804] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 146.015093][ T6814] netlink: 55 bytes leftover after parsing attributes in process `syz.4.953'. [ 147.066518][ T6846] validate_nla: 66 callbacks suppressed [ 147.066565][ T6846] netlink: 'syz.2.966': attribute type 21 has an invalid length. [ 147.270956][ T6853] device syzkaller0 entered promiscuous mode [ 147.629971][ T6862] sctp: [Deprecated]: syz.2.971 (pid 6862) Use of int in max_burst socket option deprecated. [ 147.629971][ T6862] Use struct sctp_assoc_value instead [ 147.938506][ T6870] netlink: 'syz.0.973': attribute type 21 has an invalid length. [ 147.955739][ T6870] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 148.284715][ T6878] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 148.505897][ T6878] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 148.544590][ T6881] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 148.561053][ T6887] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 148.747306][ T6897] netlink: 'syz.4.980': attribute type 29 has an invalid length. [ 148.767832][ T6897] netlink: 'syz.4.980': attribute type 29 has an invalid length. [ 148.800592][ T6899] sctp: [Deprecated]: syz.1.982 (pid 6899) Use of int in max_burst socket option deprecated. [ 148.800592][ T6899] Use struct sctp_assoc_value instead [ 148.827841][ T6893] netlink: 'syz.4.980': attribute type 29 has an invalid length. [ 148.950078][ T6902] device wg2 entered promiscuous mode [ 149.228496][ T6907] device syzkaller0 entered promiscuous mode [ 149.742453][ T6922] netlink: 152 bytes leftover after parsing attributes in process `syz.1.990'. [ 149.972158][ T6922] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 150.137436][ T6922] syz.1.990 (6922) used greatest stack depth: 18232 bytes left [ 150.318082][ T6943] device wg2 left promiscuous mode [ 150.408124][ T6948] device wg2 entered promiscuous mode [ 151.065104][ T6977] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1010'. [ 151.308704][ T6977] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 151.351270][ T6984] device wg2 entered promiscuous mode [ 151.572310][ T6997] device wg2 left promiscuous mode [ 151.626371][ T6997] device wg2 entered promiscuous mode [ 152.135418][ T7019] validate_nla: 29 callbacks suppressed [ 152.135435][ T7019] netlink: 'syz.0.1026': attribute type 29 has an invalid length. [ 152.198130][ T7019] netlink: 'syz.0.1026': attribute type 29 has an invalid length. [ 152.235970][ T7017] netlink: 'syz.0.1026': attribute type 29 has an invalid length. [ 152.301938][ T7023] netlink: 'syz.0.1026': attribute type 29 has an invalid length. [ 152.330517][ T7022] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 152.342824][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1028'. [ 152.372899][ T7022] device team0 entered promiscuous mode [ 152.393422][ T7022] device team_slave_0 entered promiscuous mode [ 152.400673][ T7022] device team_slave_1 entered promiscuous mode [ 152.450516][ T7022] bridge0: port 3(team0) entered blocking state [ 152.470013][ T7022] bridge0: port 3(team0) entered disabled state [ 152.539002][ T7022] bridge0: port 3(team0) entered blocking state [ 152.545518][ T7022] bridge0: port 3(team0) entered forwarding state [ 152.615266][ T7029] netlink: 'syz.4.1030': attribute type 10 has an invalid length. [ 152.624842][ T7029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1030'. [ 152.670226][ T7030] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1030'. [ 152.932366][ T7043] netlink: 'syz.0.1036': attribute type 29 has an invalid length. [ 152.973790][ T7043] netlink: 'syz.0.1036': attribute type 29 has an invalid length. [ 153.005878][ T7043] netlink: 'syz.0.1036': attribute type 29 has an invalid length. [ 153.038645][ T7043] netlink: 'syz.0.1036': attribute type 29 has an invalid length. [ 153.692362][ T7068] GPL: port 1(erspan0) entered blocking state [ 153.709651][ T7068] GPL: port 1(erspan0) entered disabled state [ 153.725325][ T7068] device erspan0 entered promiscuous mode [ 156.426773][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1075'. [ 156.446747][ T7144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1071'. [ 156.763870][ T7144] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 156.796522][ T7146] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1075'. [ 157.217207][ T7164] validate_nla: 47 callbacks suppressed [ 157.217227][ T7164] netlink: 'syz.1.1082': attribute type 29 has an invalid length. [ 157.238223][ T7165] netlink: 'syz.0.1083': attribute type 29 has an invalid length. [ 157.326444][ T7164] netlink: 'syz.1.1082': attribute type 29 has an invalid length. [ 157.377167][ T7165] netlink: 'syz.0.1083': attribute type 29 has an invalid length. [ 157.417764][ T7162] netlink: 'syz.0.1083': attribute type 29 has an invalid length. [ 157.490572][ T7169] netlink: 'syz.1.1082': attribute type 29 has an invalid length. [ 157.526995][ T7170] netlink: 'syz.0.1083': attribute type 29 has an invalid length. [ 157.565243][ T7164] netlink: 'syz.1.1082': attribute type 29 has an invalid length. [ 157.608410][ T7168] netlink: 'syz.3.1084': attribute type 29 has an invalid length. [ 157.683814][ T7168] netlink: 'syz.3.1084': attribute type 29 has an invalid length. [ 158.272851][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1091'. [ 158.374049][ T7197] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1091'. [ 158.703460][ T7204] sctp: [Deprecated]: syz.0.1105 (pid 7204) Use of int in max_burst socket option deprecated. [ 158.703460][ T7204] Use struct sctp_assoc_value instead [ 159.035354][ T7222] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1094'. [ 159.637614][ T7222] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 159.971585][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1107'. [ 160.031470][ T7242] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1107'. [ 161.155315][ T7249] sctp: [Deprecated]: syz.2.1111 (pid 7249) Use of int in max_burst socket option deprecated. [ 161.155315][ T7249] Use struct sctp_assoc_value instead [ 161.657976][ T7271] sctp: [Deprecated]: syz.0.1128 (pid 7271) Use of int in max_burst socket option deprecated. [ 161.657976][ T7271] Use struct sctp_assoc_value instead [ 162.165621][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1124'. [ 162.253808][ T7283] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1124'. [ 162.534123][ T7285] validate_nla: 37 callbacks suppressed [ 162.534144][ T7285] netlink: 'syz.3.1123': attribute type 39 has an invalid length. [ 162.703278][ T7285] netlink: 'syz.3.1123': attribute type 4 has an invalid length. [ 162.764297][ T7285] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1123'. [ 162.860250][ T7285] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 163.565513][ T7296] netlink: 'syz.0.1129': attribute type 29 has an invalid length. [ 163.584516][ T7296] netlink: 'syz.0.1129': attribute type 29 has an invalid length. [ 163.691975][ T7300] netlink: 'syz.0.1129': attribute type 29 has an invalid length. [ 163.735323][ T7303] netlink: 'syz.3.1130': attribute type 29 has an invalid length. [ 163.754310][ T7304] netlink: 'syz.0.1129': attribute type 29 has an invalid length. [ 163.769343][ T7303] netlink: 'syz.3.1130': attribute type 29 has an invalid length. [ 163.807082][ T7307] sctp: [Deprecated]: syz.1.1133 (pid 7307) Use of int in max_burst socket option deprecated. [ 163.807082][ T7307] Use struct sctp_assoc_value instead [ 163.848319][ T7301] netlink: 'syz.3.1130': attribute type 29 has an invalid length. [ 163.965340][ T7303] netlink: 'syz.3.1130': attribute type 29 has an invalid length. [ 165.083523][ T7338] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1141'. [ 165.130272][ T7338] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 165.736434][ T7352] sctp: [Deprecated]: syz.1.1146 (pid 7352) Use of int in max_burst socket option deprecated. [ 165.736434][ T7352] Use struct sctp_assoc_value instead [ 165.861457][ T7355] device wg2 entered promiscuous mode [ 166.840233][ T7396] delete_channel: no stack [ 167.177799][ T7402] sctp: [Deprecated]: syz.1.1162 (pid 7402) Use of int in max_burst socket option deprecated. [ 167.177799][ T7402] Use struct sctp_assoc_value instead [ 167.450284][ T7412] device wg2 left promiscuous mode [ 167.550596][ T7416] device wg2 entered promiscuous mode [ 167.635205][ T7420] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1169'. [ 167.679331][ T7418] validate_nla: 25 callbacks suppressed [ 167.679369][ T7418] netlink: 'syz.3.1168': attribute type 39 has an invalid length. [ 167.783542][ T7418] netlink: 'syz.3.1168': attribute type 4 has an invalid length. [ 167.825526][ T7418] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1168'. [ 167.880752][ T7418] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 168.060426][ T7427] netlink: 'syz.1.1172': attribute type 29 has an invalid length. [ 168.435400][ T7427] netlink: 'syz.1.1172': attribute type 29 has an invalid length. [ 168.484375][ T7430] netlink: 'syz.1.1172': attribute type 29 has an invalid length. [ 168.828972][ T7444] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 168.875730][ T7444] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 168.880564][ T7441] sctp: [Deprecated]: syz.4.1175 (pid 7441) Use of int in max_burst socket option deprecated. [ 168.880564][ T7441] Use struct sctp_assoc_value instead [ 168.953431][ T7445] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 168.985032][ T7444] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 169.294046][ T7457] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1181'. [ 169.380710][ T7459] netlink: 'syz.4.1180': attribute type 29 has an invalid length. [ 169.550859][ T7457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1181'. [ 169.678423][ T7465] device wg2 left promiscuous mode [ 169.760366][ T7464] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.817318][ T7464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.825286][ T7464] IPv6: NLM_F_CREATE should be set when creating new route [ 169.833279][ T7464] IPv6: NLM_F_CREATE should be set when creating new route [ 169.840864][ T7464] IPv6: NLM_F_CREATE should be set when creating new route [ 169.910681][ T7462] device wg2 entered promiscuous mode [ 169.962276][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.578806][ T7495] sctp: [Deprecated]: syz.1.1191 (pid 7495) Use of int in max_burst socket option deprecated. [ 171.578806][ T7495] Use struct sctp_assoc_value instead [ 172.421365][ T7520] delete_channel: no stack [ 172.495797][ T7522] team0: Port device wlan1 added [ 172.536811][ T7519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.700870][ T7537] sctp: [Deprecated]: syz.4.1205 (pid 7537) Use of int in max_burst socket option deprecated. [ 173.700870][ T7537] Use struct sctp_assoc_value instead [ 173.727727][ T7543] validate_nla: 20 callbacks suppressed [ 173.727745][ T7543] netlink: 'syz.1.1208': attribute type 10 has an invalid length. [ 173.785154][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1208'. [ 173.896649][ T7550] netlink: 'syz.3.1204': attribute type 29 has an invalid length. [ 173.944344][ T7550] netlink: 'syz.3.1204': attribute type 29 has an invalid length. [ 174.014584][ T7540] netlink: 'syz.3.1204': attribute type 29 has an invalid length. [ 174.187452][ T7553] netlink: 'syz.4.1209': attribute type 29 has an invalid length. [ 174.245836][ T7553] netlink: 'syz.4.1209': attribute type 29 has an invalid length. [ 174.325420][ T7554] netlink: 'syz.4.1209': attribute type 29 has an invalid length. [ 175.070258][ T7578] netlink: 'syz.1.1216': attribute type 29 has an invalid length. [ 175.098452][ T7572] netlink: 'syz.4.1215': attribute type 39 has an invalid length. [ 175.232602][ T7578] netlink: 'syz.1.1216': attribute type 29 has an invalid length. [ 176.141488][ T7589] sctp: [Deprecated]: syz.3.1219 (pid 7589) Use of int in max_burst socket option deprecated. [ 176.141488][ T7589] Use struct sctp_assoc_value instead [ 176.212959][ T7594] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1223'. [ 176.330150][ T7593] delete_channel: no stack [ 176.453016][ T7603] device ipvlan1 entered promiscuous mode [ 176.460995][ T7603] batman_adv: batadv0: Adding interface: ipvlan1 [ 176.469877][ T7603] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.496490][ T7603] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 178.155143][ T7631] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.192455][ T7631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.200043][ T7631] IPv6: NLM_F_CREATE should be set when creating new route [ 178.208250][ T7631] IPv6: NLM_F_CREATE should be set when creating new route [ 178.215862][ T7631] IPv6: NLM_F_CREATE should be set when creating new route [ 178.275658][ T7638] device ipvlan1 entered promiscuous mode [ 178.306349][ T7638] batman_adv: batadv0: Adding interface: ipvlan1 [ 178.340597][ T7638] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.382865][ T7638] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 178.645091][ T7655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1242'. [ 178.662053][ T7658] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1242'. [ 178.879391][ T7667] validate_nla: 23 callbacks suppressed [ 178.879410][ T7667] netlink: 'syz.1.1254': attribute type 29 has an invalid length. [ 178.896915][ T7667] netlink: 'syz.1.1254': attribute type 29 has an invalid length. [ 178.959710][ T7665] netlink: 'syz.1.1254': attribute type 29 has an invalid length. [ 179.075179][ T7667] netlink: 'syz.1.1254': attribute type 29 has an invalid length. [ 180.175634][ T7688] netlink: 'syz.3.1263': attribute type 29 has an invalid length. [ 180.219718][ T7688] netlink: 'syz.3.1263': attribute type 29 has an invalid length. [ 180.239269][ T7690] netlink: 'syz.0.1255': attribute type 10 has an invalid length. [ 180.257736][ T7690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1255'. [ 180.289754][ T7681] netlink: 'syz.3.1263': attribute type 29 has an invalid length. [ 180.331621][ T7688] netlink: 'syz.3.1263': attribute type 29 has an invalid length. [ 180.399601][ T7690] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1255'. [ 180.566746][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.575979][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.692852][ T7700] netlink: 'syz.4.1256': attribute type 15 has an invalid length. [ 181.115564][ T7707] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.132074][ T7707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.139614][ T7707] IPv6: NLM_F_CREATE should be set when creating new route [ 181.147342][ T7707] IPv6: NLM_F_CREATE should be set when creating new route [ 181.154812][ T7707] IPv6: NLM_F_CREATE should be set when creating new route [ 181.466045][ T7710] device syzkaller0 entered promiscuous mode [ 181.498235][ T7716] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 181.726376][ T7728] device ipvlan1 entered promiscuous mode [ 181.740445][ T7728] batman_adv: batadv0: Adding interface: ipvlan1 [ 181.747124][ T7728] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.779435][ T7728] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 181.889858][ T7735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1269'. [ 182.009315][ T7738] bridge0: port 3(team0) entered disabled state [ 182.016865][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.092016][ T7735] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1269'. [ 182.556042][ T7757] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.575684][ T7757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.583629][ T7757] IPv6: NLM_F_CREATE should be set when creating new route [ 182.592027][ T7757] IPv6: NLM_F_CREATE should be set when creating new route [ 182.599731][ T7757] IPv6: NLM_F_CREATE should be set when creating new route [ 182.746358][ T7766] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1279'. [ 182.874599][ T7765] delete_channel: no stack [ 183.231519][ T7772] device syzkaller0 entered promiscuous mode [ 183.491653][ T7787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1286'. [ 183.527870][ T7787] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1286'. [ 183.817683][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.928540][ T7805] validate_nla: 38 callbacks suppressed [ 183.928559][ T7805] netlink: 'syz.2.1289': attribute type 15 has an invalid length. [ 183.983748][ T7805] netlink: 'syz.2.1289': attribute type 7 has an invalid length. [ 184.083644][ T7806] netlink: 'syz.0.1305': attribute type 29 has an invalid length. [ 184.301033][ T7806] netlink: 'syz.0.1305': attribute type 29 has an invalid length. [ 184.321904][ T7809] netlink: 'syz.0.1305': attribute type 29 has an invalid length. [ 184.364528][ T7814] netlink: 'syz.0.1305': attribute type 29 has an invalid length. [ 185.141056][ T7827] netlink: 'syz.3.1297': attribute type 29 has an invalid length. [ 185.167470][ T7827] netlink: 'syz.3.1297': attribute type 29 has an invalid length. [ 185.177582][ T7822] netlink: 'syz.3.1297': attribute type 29 has an invalid length. [ 185.190217][ T7822] netlink: 'syz.3.1297': attribute type 29 has an invalid length. [ 185.304214][ T7833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1301'. [ 185.331060][ T7833] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1301'. [ 185.953313][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 185.960588][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 185.996789][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 186.025595][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 186.056208][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 186.489250][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.392324][ T7874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1317'. [ 187.470411][ T7874] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1317'. [ 188.326148][ T7904] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1331'. [ 188.376303][ T7903] delete_channel: no stack [ 189.219273][ T7908] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1333'. [ 189.239486][ T7913] validate_nla: 17 callbacks suppressed [ 189.239512][ T7913] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 189.276812][ T7913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1332'. [ 189.290272][ T7915] netlink: 'syz.2.1334': attribute type 29 has an invalid length. [ 189.318983][ T7915] netlink: 'syz.2.1334': attribute type 29 has an invalid length. [ 189.331927][ T7910] netlink: 'syz.2.1334': attribute type 29 has an invalid length. [ 189.353829][ T7910] netlink: 'syz.2.1334': attribute type 29 has an invalid length. [ 189.376735][ T7913] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1332'. [ 189.697654][ T7933] netlink: 'syz.3.1339': attribute type 29 has an invalid length. [ 189.914892][ T7933] netlink: 'syz.3.1339': attribute type 29 has an invalid length. [ 189.956125][ T7927] netlink: 'syz.3.1339': attribute type 29 has an invalid length. [ 189.992746][ T7933] netlink: 'syz.3.1339': attribute type 29 has an invalid length. [ 190.225563][ T7945] netlink: 'syz.4.1342': attribute type 10 has an invalid length. [ 190.252294][ T7945] device ipvlan1 entered promiscuous mode [ 190.274716][ T7945] batman_adv: batadv0: Adding interface: ipvlan1 [ 190.292296][ T7945] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.353997][ T7950] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1344'. [ 190.365155][ T7945] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 190.429275][ T7949] delete_channel: no stack [ 191.247357][ T7995] device ipvlan1 entered promiscuous mode [ 191.261711][ T7995] batman_adv: batadv0: Adding interface: ipvlan1 [ 191.270504][ T7995] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.301666][ T7995] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 191.384293][ T7999] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1360'. [ 191.401322][ T7999] netlink: get zone limit has 4 unknown bytes [ 191.918089][ T8011] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1364'. [ 191.945967][ T8010] delete_channel: no stack [ 192.150695][ T8020] delete_channel: no stack [ 192.171626][ T8020] delete_channel: no stack [ 192.227328][ T8020] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1372'. [ 192.618059][ T8037] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1379'. [ 192.846053][ T8044] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1382'. [ 194.117277][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.123659][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.597830][ T8080] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1407'. [ 194.614237][ T8080] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 194.625097][ T8080] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.869560][ T8089] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1394'. [ 195.763633][ T8117] validate_nla: 32 callbacks suppressed [ 195.763669][ T8117] netlink: 'syz.3.1412': attribute type 3 has an invalid length. [ 195.782755][ T8117] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1412'. [ 195.840062][ T8116] delete_channel: no stack [ 196.070101][ T8134] delete_channel: no stack [ 196.119495][ T8134] delete_channel: no stack [ 196.139899][ T8134] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1419'. [ 197.092200][ T8154] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1426'. [ 197.102748][ T8154] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 197.112291][ T8154] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.351623][ T8167] netlink: 'syz.1.1429': attribute type 3 has an invalid length. [ 197.363003][ T8167] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1429'. [ 197.382313][ T8166] delete_channel: no stack [ 198.465678][ T8199] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1439'. [ 198.501083][ T8200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1440'. [ 199.033351][ T8210] netlink: 'syz.4.1443': attribute type 3 has an invalid length. [ 199.041201][ T8210] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1443'. [ 199.079020][ T8204] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1442'. [ 199.198024][ T8207] delete_channel: no stack [ 199.561296][ T8235] delete_channel: no stack [ 199.569944][ T8235] delete_channel: no stack [ 199.582508][ T8235] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1450'. [ 200.079674][ T8255] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 200.136187][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.143622][ T8255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.160742][ T8255] team0: Port device bridge0 added [ 200.232868][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.251483][ T8260] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 200.302406][ T8260] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1462'. [ 200.433960][ T8259] delete_channel: no stack [ 200.696435][ T8279] delete_channel: no stack [ 200.709165][ T8279] delete_channel: no stack [ 202.731019][ T8306] batman_adv: batadv0: Interface activated: ipvlan1 [ 202.957235][ T8316] __nla_validate_parse: 1 callbacks suppressed [ 202.957273][ T8316] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1481'. [ 203.090799][ T8320] netlink: 'syz.2.1483': attribute type 3 has an invalid length. [ 203.118993][ T8320] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1483'. [ 203.327943][ T8319] delete_channel: no stack [ 204.748008][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.808439][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.892501][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.950145][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.965437][ T8343] batman_adv: batadv0: Removing interface: ipvlan1 [ 205.085997][ T8354] netlink: 'syz.2.1493': attribute type 21 has an invalid length. [ 205.097656][ T8353] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1495'. [ 205.531158][ T8366] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 205.913072][ T8377] batman_adv: batadv0: Interface activated: ipvlan1 [ 206.096618][ T8382] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 206.124042][ T8381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.207317][ T8386] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1507'. [ 206.368700][ T8390] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1519'. [ 206.891287][ T8406] netlink: 'syz.0.1513': attribute type 21 has an invalid length. [ 207.128724][ T8412] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 207.570192][ T8416] batman_adv: batadv0: Interface activated: ipvlan1 [ 207.832395][ T8427] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1522'. [ 209.062001][ T8460] netlink: 'syz.4.1533': attribute type 21 has an invalid length. [ 209.251721][ T8464] device veth0_vlan left promiscuous mode [ 209.273949][ T8464] device veth0_vlan entered promiscuous mode [ 209.287381][ T8467] batman_adv: batadv0: Interface activated: ipvlan1 [ 209.314082][ T8470] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1536'. [ 210.179538][ T8496] device veth1_macvtap left promiscuous mode [ 210.262215][ T8497] device veth1_macvtap entered promiscuous mode [ 210.321534][ T8497] device macsec0 entered promiscuous mode [ 210.409714][ T8496] netlink: 'syz.1.1546': attribute type 2 has an invalid length. [ 210.451085][ T8496] netlink: 'syz.1.1546': attribute type 8 has an invalid length. [ 210.472537][ T8496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1546'. [ 210.617621][ T8503] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1548'. [ 211.077379][ T8511] netlink: 'syz.4.1554': attribute type 49 has an invalid length. [ 211.106487][ T8511] netlink: 'syz.4.1554': attribute type 49 has an invalid length. [ 211.144968][ T8518] netlink: 'syz.3.1553': attribute type 21 has an invalid length. [ 212.762256][ T8555] netlink: 'syz.1.1566': attribute type 4 has an invalid length. [ 212.786063][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.813930][ T8555] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.1566'. [ 212.824005][ T8553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.847618][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.880587][ T8553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.899064][ T8553] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 212.912575][ T8553] batman_adv: batadv0: Removing interface: ipvlan1 [ 213.138469][ T8570] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 213.147918][ T8570] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 213.248981][ T8573] device veth1_macvtap left promiscuous mode [ 213.287598][ T8573] device veth1_macvtap entered promiscuous mode [ 213.294756][ T8573] device macsec0 entered promiscuous mode [ 213.307725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.412526][ T8573] netlink: 'syz.4.1572': attribute type 2 has an invalid length. [ 213.436882][ T8573] netlink: 'syz.4.1572': attribute type 8 has an invalid length. [ 213.452212][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1572'. [ 213.572750][ T8581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.581894][ T8581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.601060][ T8581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.609214][ T8581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.626531][ T8581] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 213.646249][ T8581] batman_adv: batadv0: Removing interface: ipvlan1 [ 213.658792][ T8581] batman_adv: batadv0: Interface deactivated: wlan0 [ 213.665740][ T8581] batman_adv: batadv0: Removing interface: wlan0 [ 213.826109][ T8590] netlink: 'syz.1.1574': attribute type 21 has an invalid length. [ 214.722708][ T8616] device veth1_macvtap left promiscuous mode [ 214.766375][ T8616] device veth1_macvtap entered promiscuous mode [ 214.772906][ T8616] device macsec0 entered promiscuous mode [ 214.798788][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 214.886069][ T8616] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 214.933457][ T8616] netlink: 'syz.3.1587': attribute type 8 has an invalid length. [ 214.964285][ T8616] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1587'. [ 215.369612][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.380986][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.411396][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.419395][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.429875][ T8639] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 215.436920][ T8639] batman_adv: batadv0: Removing interface: ipvlan1 [ 215.447344][ T8639] batman_adv: batadv0: Interface deactivated: wlan0 [ 215.458135][ T8639] batman_adv: batadv0: Removing interface: wlan0 [ 215.470162][ T8646] netlink: 'syz.0.1595': attribute type 49 has an invalid length. [ 215.536236][ T8646] netlink: 'syz.0.1595': attribute type 49 has an invalid length. [ 215.760003][ T8654] netlink: 'syz.0.1601': attribute type 4 has an invalid length. [ 215.789228][ T8654] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.1601'. [ 215.821825][ T8657] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1602'. [ 215.977231][ T8663] device veth1_macvtap left promiscuous mode [ 216.088038][ T8667] device veth1_macvtap entered promiscuous mode [ 216.097126][ T8667] device macsec0 entered promiscuous mode [ 216.193359][ T8663] netlink: 'syz.2.1607': attribute type 2 has an invalid length. [ 216.204701][ T8663] netlink: 'syz.2.1607': attribute type 8 has an invalid length. [ 216.225834][ T8663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1607'. [ 216.367425][ T8676] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.374821][ T8676] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 216.536204][ T8688] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1617'. [ 216.715487][ T8690] netlink: 'syz.4.1618': attribute type 11 has an invalid length. [ 216.747236][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.769577][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.789223][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.798866][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.815337][ T8696] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 216.822518][ T8696] batman_adv: batadv0: Removing interface: ipvlan1 [ 216.836640][ T8696] batman_adv: batadv0: Interface deactivated: wlan0 [ 216.846400][ T8696] batman_adv: batadv0: Removing interface: wlan0 [ 216.904895][ T8691] netlink: 'syz.4.1618': attribute type 10 has an invalid length. [ 216.912953][ T8691] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1618'. [ 217.088333][ T8703] netlink: 'syz.0.1632': attribute type 10 has an invalid length. [ 217.180747][ T8703] team0: Port device wlan1 added [ 217.217418][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.248998][ T8724] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1628'. [ 218.338307][ T8727] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.346007][ T8727] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.420101][ T8731] device veth1_macvtap left promiscuous mode [ 218.444694][ T8731] device veth1_macvtap entered promiscuous mode [ 218.452175][ T8731] device macsec0 entered promiscuous mode [ 218.531360][ T8733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1633'. [ 219.878556][ T8757] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1644'. [ 220.392578][ T8767] validate_nla: 2 callbacks suppressed [ 220.392604][ T8767] netlink: 'syz.3.1648': attribute type 11 has an invalid length. [ 220.407020][ T8776] netlink: 'syz.3.1648': attribute type 10 has an invalid length. [ 220.415493][ T8776] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1648'. [ 220.721886][ T8799] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1658'. [ 223.746718][ T8869] netlink: 'syz.4.1685': attribute type 10 has an invalid length. [ 223.837126][ T8868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.558130][ T8922] netlink: 'syz.3.1700': attribute type 10 has an invalid length. [ 226.603523][ T8922] team0: Port device wlan1 added [ 226.647573][ T8916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.340796][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.583296][ T9093] ªªªªª): renamed from vlan0 [ 233.058077][ T9138] netlink: 'syz.2.1782': attribute type 10 has an invalid length. [ 233.365463][ T9138] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 233.422267][ T9154] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1784'. [ 233.533570][ T9154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.557172][ T9154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.580477][ T9154] bond0 (unregistering): Released all slaves [ 233.651087][ T9159] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1786'. [ 234.921556][ T9182] netlink: 'syz.0.1797': attribute type 10 has an invalid length. [ 234.989903][ T9182] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1797'. [ 235.127949][ T9194] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1802'. [ 235.680313][ T9208] netlink: 'syz.4.1806': attribute type 10 has an invalid length. [ 235.706675][ T9208] device bridge_slave_1 left promiscuous mode [ 235.728114][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.801169][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.242445][ T9233] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1814'. [ 236.518869][ T9239] netlink: 'syz.1.1817': attribute type 8 has an invalid length. [ 236.912416][ T9254] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1825'. [ 236.930050][ T9257] netlink: 'syz.1.1823': attribute type 39 has an invalid length. [ 237.729836][ T9295] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1837'. [ 238.327457][ T9320] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1849'. [ 238.399482][ T9321] netlink: 'syz.0.1848': attribute type 39 has an invalid length. [ 239.108570][ T9348] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1860'. [ 239.196246][ T9352] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1862'. [ 239.903499][ T9374] netlink: 'syz.3.1872': attribute type 8 has an invalid length. [ 239.975822][ T9379] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1873'. [ 240.145736][ T9385] netlink: 'syz.2.1875': attribute type 10 has an invalid length. [ 240.198308][ T9385] device bridge_slave_1 left promiscuous mode [ 240.208255][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.241457][ T9385] device O3ãc¤± left promiscuous mode [ 240.265334][ T9385] bridge0: port 1(O3ãc¤±) entered disabled state [ 240.852282][ T9415] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1887'. [ 241.445995][ T9439] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1898'. [ 242.107794][ T9468] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1911'. [ 242.541774][ T9478] netlink: 'syz.1.1917': attribute type 10 has an invalid length. [ 242.707388][ T9478] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 242.786734][ T9493] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1922'. [ 243.141427][ T9512] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 243.151198][ T9512] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 243.167421][ T9505] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 243.563108][ T9527] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1935'. [ 244.188403][ T9551] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1947'. [ 244.320452][ T9559] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1960'. [ 244.436862][ T9565] netlink: 'syz.2.1951': attribute type 29 has an invalid length. [ 244.471396][ T9560] netlink: 'syz.3.1950': attribute type 10 has an invalid length. [ 244.690573][ T9560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 244.701814][ T9565] netlink: 'syz.2.1951': attribute type 29 has an invalid length. [ 244.763530][ T9562] netlink: 'syz.2.1951': attribute type 29 has an invalid length. [ 244.772916][ T9560] syz.3.1950 (9560) used greatest stack depth: 17976 bytes left [ 245.219929][ T9591] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1964'. [ 245.385050][ T9599] netlink: 'syz.4.1966': attribute type 29 has an invalid length. [ 245.393743][ T9599] netlink: 'syz.4.1966': attribute type 29 has an invalid length. [ 245.405436][ T9600] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1965'. [ 245.441114][ T9599] netlink: 'syz.4.1966': attribute type 29 has an invalid length. [ 246.093726][ T9615] netlink: 'syz.0.1968': attribute type 10 has an invalid length. [ 246.147185][ T9615] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 246.484106][ T9633] netlink: 'syz.4.1978': attribute type 29 has an invalid length. [ 246.492283][ T9633] netlink: 'syz.4.1978': attribute type 29 has an invalid length. [ 246.508924][ T9632] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1980'. [ 249.750526][ T9723] validate_nla: 11 callbacks suppressed [ 249.750542][ T9723] netlink: 'syz.3.2013': attribute type 29 has an invalid length. [ 249.765299][ T9723] netlink: 'syz.3.2013': attribute type 29 has an invalid length. [ 249.777452][ T9713] netlink: 'syz.3.2013': attribute type 29 has an invalid length. [ 250.050783][ T9736] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 250.060003][ T9736] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 250.071084][ T9731] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 251.161516][ T9748] netlink: 'syz.1.2025': attribute type 10 has an invalid length. [ 251.170656][ T9748] bridge0: port 3(team0) entered disabled state [ 251.192123][ T9748] device bridge_slave_1 left promiscuous mode [ 251.199577][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.225907][ T9748] device O3ãc¤± left promiscuous mode [ 251.236058][ T9748] bridge0: port 1(O3ãc¤±) entered disabled state [ 251.631844][ T9772] netlink: 'syz.0.2035': attribute type 29 has an invalid length. [ 251.649479][ T9772] netlink: 'syz.0.2035': attribute type 29 has an invalid length. [ 251.659292][ T9768] netlink: 'syz.0.2035': attribute type 29 has an invalid length. [ 251.808669][ T9774] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2036'. [ 252.810176][ T9810] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2051'. [ 253.080542][ T9836] device bridge_slave_1 left promiscuous mode [ 253.101913][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.141498][ T9836] device O3ãc¤± left promiscuous mode [ 253.152325][ T9836] bridge0: port 1(O3ãc¤±) entered disabled state [ 253.220621][ T9836] team0: Port device bridge0 removed [ 254.456074][ T9900] device bridge_slave_1 left promiscuous mode [ 254.463064][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.493781][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.917867][ T9921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2100'. [ 255.366217][ T9945] validate_nla: 11 callbacks suppressed [ 255.366234][ T9945] netlink: 'syz.4.2107': attribute type 29 has an invalid length. [ 255.410158][ T9945] netlink: 'syz.4.2107': attribute type 29 has an invalid length. [ 255.455064][ T9949] netlink: 'syz.0.2112': attribute type 29 has an invalid length. [ 255.486526][ T9937] netlink: 'syz.4.2107': attribute type 29 has an invalid length. [ 255.555902][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.562347][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.569465][ T9956] netlink: 'syz.1.2113': attribute type 29 has an invalid length. [ 255.603736][ T9956] netlink: 'syz.1.2113': attribute type 29 has an invalid length. [ 255.621153][ T9951] netlink: 'syz.1.2113': attribute type 29 has an invalid length. [ 255.833604][ T9967] netlink: 'syz.0.2121': attribute type 10 has an invalid length. [ 256.235122][ T9990] netlink: 'syz.1.2129': attribute type 29 has an invalid length. [ 256.252637][ T9990] netlink: 'syz.1.2129': attribute type 29 has an invalid length. [ 256.421115][T10002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2137'. [ 257.043484][T10031] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2151'. [ 257.358942][T10054] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2162'. [ 257.367921][T10056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2163'. [ 257.658919][T10061] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2166'. [ 258.289504][T10101] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2185'. [ 258.373560][T10108] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2188'. [ 258.834790][T10135] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2199'. [ 258.901305][T10143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2204'. [ 259.539449][T10182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2222'. [ 259.755338][T10194] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2228'. [ 261.416013][T10293] validate_nla: 6 callbacks suppressed [ 261.416030][T10293] netlink: 'syz.0.2271': attribute type 10 has an invalid length. [ 261.483217][T10295] netlink: 'syz.1.2273': attribute type 12 has an invalid length. [ 262.379626][T10340] __nla_validate_parse: 3 callbacks suppressed [ 262.379664][T10340] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2294'. [ 262.909924][T10376] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2310'. [ 264.096532][T10446] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 264.561316][T10475] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 265.666937][T10541] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2389'. [ 265.956517][T10554] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2394'. [ 266.411998][T10576] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2402'. [ 266.942117][T10606] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2417'. [ 267.391292][T10632] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2430'. [ 267.918014][T10655] netlink: 'syz.0.2440': attribute type 29 has an invalid length. [ 267.926822][T10655] netlink: 'syz.0.2440': attribute type 29 has an invalid length. [ 267.962923][T10655] netlink: 'syz.0.2440': attribute type 29 has an invalid length. [ 269.590848][T10741] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2482'. [ 270.106964][T10768] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2495'. [ 270.593937][T10796] netlink: 'syz.0.2508': attribute type 23 has an invalid length. [ 270.647820][T10800] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2510'. [ 271.221247][T10831] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2525'. [ 271.848708][T10865] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2541'. [ 272.127418][T10881] netlink: 'syz.4.2549': attribute type 4 has an invalid length. [ 272.137990][T10881] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2549'. [ 272.434298][T10897] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2557'. [ 272.919248][T10924] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2570'. [ 272.970528][T10921] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2569'. [ 273.294367][T10949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2580'. [ 273.303612][T10949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2580'. [ 273.322792][T10946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2580'. [ 273.332228][T10951] netlink: 'syz.0.2582': attribute type 4 has an invalid length. [ 273.342266][T10951] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2582'. [ 273.352264][T10949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2580'. [ 274.228991][T10997] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2605'. [ 274.772919][T11031] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2619'. [ 277.414239][T11180] netlink: 'syz.2.2690': attribute type 3 has an invalid length. [ 277.443888][T11180] __nla_validate_parse: 17 callbacks suppressed [ 277.443907][T11180] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2690'. [ 277.494618][T11184] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2692'. [ 278.110913][T11213] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2704'. [ 278.606684][T11246] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2719'. [ 279.040449][T11272] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2733'. [ 280.376373][T11310] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2751'. [ 282.390969][T11353] erspan0: refused to change device tx_queue_len [ 283.026443][T11390] erspan0: refused to change device tx_queue_len [ 283.535798][T11416] netlink: 'syz.3.2797': attribute type 10 has an invalid length. [ 284.065980][T11431] erspan0: refused to change device tx_queue_len [ 288.494233][T11602] syz.3.2884[11602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.494413][T11602] syz.3.2884[11602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.649425][T11612] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2887'. [ 289.509407][T11657] netlink: 'syz.1.2906': attribute type 10 has an invalid length. [ 289.517768][T11657] netlink: 'syz.1.2906': attribute type 19 has an invalid length. [ 289.526478][T11657] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.2906'. [ 289.785258][T11667] netlink: 'syz.3.2911': attribute type 29 has an invalid length. [ 289.825723][T11667] netlink: 'syz.3.2911': attribute type 29 has an invalid length. [ 289.848198][T11667] netlink: 'syz.3.2911': attribute type 29 has an invalid length. [ 289.858417][T11667] netlink: 'syz.3.2911': attribute type 29 has an invalid length. [ 289.894317][T11667] netlink: 'syz.3.2911': attribute type 29 has an invalid length. [ 290.669906][T11704] IPv6: Can't replace route, no match found [ 290.785337][T11710] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2930'. [ 290.960788][T11717] netlink: 'syz.0.2931': attribute type 11 has an invalid length. [ 291.709316][T11746] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2944'. [ 292.245848][T11773] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 292.384599][T11781] IPv6: Can't replace route, no match found [ 292.733973][T11797] syz.1.2968[11797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.734080][T11797] syz.1.2968[11797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.888260][T11805] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2972'. [ 292.988961][T11803] device syzkaller0 entered promiscuous mode [ 293.097975][T11813] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2986'. [ 293.212621][T11817] IPv6: Can't replace route, no match found [ 293.739678][T11845] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2990'. [ 294.023963][T11860] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 294.337188][T11881] device macvlan0 entered promiscuous mode [ 295.941275][T11942] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 297.306829][T11975] netlink: 'syz.1.3046': attribute type 1 has an invalid length. [ 297.736095][T11988] device syzkaller0 entered promiscuous mode [ 297.744572][T11989] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3052'. [ 298.197559][T12015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3067'. [ 298.226606][T12017] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3068'. [ 298.386951][T12029] netlink: 'syz.4.3073': attribute type 1 has an invalid length. [ 299.241895][T12043] netlink: 'syz.4.3078': attribute type 10 has an invalid length. [ 299.304483][T12043] team0: Device hsr_slave_0 failed to register rx_handler [ 299.429832][T12052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3081'. [ 299.577397][T12060] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3084'. [ 300.494297][T12088] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3099'. [ 301.122949][T12123] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3114'. [ 301.797701][T12154] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3128'. [ 302.285682][T12176] device syzkaller0 entered promiscuous mode [ 302.800565][T12206] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 303.589012][T12240] syz.0.3165[12240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.589124][T12240] syz.0.3165[12240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.628412][T12237] device syzkaller0 entered promiscuous mode [ 304.068556][T12255] device syzkaller0 entered promiscuous mode [ 305.242306][T12309] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3190'. [ 305.738356][T12336] syzkaller0: create flow: hash 4283126113 index 1 [ 306.156204][ T4248] syzkaller0: tun_net_xmit 76 [ 306.162200][ T4248] syzkaller0: tun_net_xmit 48 [ 306.183810][ T4210] syzkaller0: tun_net_xmit 76 [ 306.212663][T12327] syzkaller0: delete flow: hash 4283126113 index 1 [ 306.701875][T12363] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3210'. [ 307.526069][T12388] device syzkaller0 entered promiscuous mode [ 307.829808][T12399] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3225'. [ 308.782151][T12432] device syzkaller0 entered promiscuous mode [ 308.795939][T12434] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3240'. [ 309.747755][T12449] device syzkaller0 entered promiscuous mode [ 310.282845][T12478] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3253'. [ 310.386690][T12480] device syzkaller0 entered promiscuous mode [ 310.435877][T12487] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3267'. [ 310.741462][T12495] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3262'. [ 311.187562][T12517] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3271'. [ 311.594685][T12530] device syzkaller0 entered promiscuous mode [ 311.990436][T12545] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3279'. [ 312.025633][T12552] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3284'. [ 312.535536][T12561] device syzkaller0 entered promiscuous mode [ 313.075769][T12595] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3298'. [ 313.351270][T12602] device syzkaller0 entered promiscuous mode [ 313.750244][T12627] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3310'. [ 314.511854][T12654] device syzkaller0 entered promiscuous mode [ 314.535320][T12661] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3324'. [ 315.091200][T12682] netlink: 'syz.3.3333': attribute type 1 has an invalid length. [ 315.131381][T12682] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3333'. [ 316.341064][T12705] __nla_validate_parse: 1 callbacks suppressed [ 316.341107][T12705] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3340'. [ 316.996760][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.003186][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.549348][T12787] device syzkaller0 entered promiscuous mode [ 320.714027][T12890] device syzkaller0 entered promiscuous mode [ 320.731159][T12894] syzkaller0: create flow: hash 4283126113 index 3 [ 320.742670][ T4241] syzkaller0: tun_net_xmit 48 [ 320.782662][T12890] syzkaller0: delete flow: hash 4283126113 index 3 [ 322.059542][T12934] device syzkaller0 entered promiscuous mode [ 325.082135][T13051] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3473'. [ 326.044146][T13058] device syzkaller0 entered promiscuous mode [ 326.742753][T13092] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3488'. [ 327.699142][T13131] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3503'. [ 328.470906][T13164] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3517'. [ 329.577311][T13201] netlink: 'syz.1.3531': attribute type 10 has an invalid length. [ 329.605916][T13201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3531'. [ 329.664074][T13201] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 330.246204][T13226] netlink: 'syz.3.3542': attribute type 10 has an invalid length. [ 330.281443][T13226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3542'. [ 330.293946][T13226] device team0 entered promiscuous mode [ 330.300342][T13226] device team_slave_0 entered promiscuous mode [ 330.335681][T13226] device team_slave_1 entered promiscuous mode [ 330.363924][T13226] device wlan1 entered promiscuous mode [ 330.389783][T13226] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 330.699969][T13247] netlink: 'syz.3.3548': attribute type 10 has an invalid length. [ 330.763200][T13247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3548'. [ 330.806550][T13247] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 332.390974][T13320] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3576'. [ 332.400539][T13320] netlink: get zone limit has 4 unknown bytes [ 332.686966][T13323] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3579'. [ 332.715968][T13323] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 332.748066][T13323] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 333.895132][T13364] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3596'. [ 334.822830][T13410] netlink: 'syz.4.3612': attribute type 10 has an invalid length. [ 334.877580][T13410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3612'. [ 334.891461][T13410] device team0 entered promiscuous mode [ 334.904132][T13410] device team_slave_0 entered promiscuous mode [ 334.911563][T13410] device team_slave_1 entered promiscuous mode [ 334.921842][T13410] device wlan1 entered promiscuous mode [ 335.014074][T13410] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 335.664449][T13435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3623'. [ 336.609909][T13454] netlink: 'syz.4.3630': attribute type 10 has an invalid length. [ 336.653265][T13454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3630'. [ 336.750186][T13454] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 337.387252][T13481] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3641'. [ 337.550469][T13483] netlink: 'syz.0.3642': attribute type 10 has an invalid length. [ 337.592060][T13483] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3642'. [ 338.124999][T13498] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3647'. [ 338.192437][T13511] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3651'. [ 338.919334][T13542] netlink: 'syz.4.3667': attribute type 1 has an invalid length. [ 339.026066][T13542] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3667'. [ 339.210640][T13542] netlink: 'syz.4.3667': attribute type 27 has an invalid length. [ 339.249046][T13542] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3667'. [ 339.617409][T13576] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 339.626003][T13576] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3692'. [ 339.758290][T13576] netlink: 'syz.0.3692': attribute type 27 has an invalid length. [ 339.893435][T13576] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3692'. [ 341.017906][T13619] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3700'. [ 341.966292][T13657] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3717'. [ 342.924785][T13698] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3733'. [ 343.014326][T13707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3739'. [ 343.438398][T13726] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3747'. [ 345.433163][T13796] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3777'. [ 345.973096][T13820] netlink: 'syz.3.3787': attribute type 10 has an invalid length. [ 346.005970][T13820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3787'. [ 346.042439][T13826] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3798'. [ 346.668208][T13859] netlink: 'syz.3.3801': attribute type 10 has an invalid length. [ 346.711045][T13859] device veth1_macvtap left promiscuous mode [ 346.815713][T13865] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3804'. [ 347.059318][T13877] netlink: 'syz.2.3807': attribute type 10 has an invalid length. [ 347.390828][T13890] netlink: 'syz.0.3816': attribute type 12 has an invalid length. [ 347.463216][T13890] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3816'. [ 347.739850][T13903] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3821'. [ 349.195337][T13953] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3846'. [ 349.617043][T13977] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3855'. [ 350.677700][T14015] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3872'. [ 352.181139][T14088] netlink: 'syz.2.3905': attribute type 29 has an invalid length. [ 352.229802][T14088] netlink: 'syz.2.3905': attribute type 29 has an invalid length. [ 352.266617][T14091] netlink: 'syz.2.3905': attribute type 29 has an invalid length. [ 355.518287][T14251] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3977'. [ 355.537290][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3974'. [ 355.599478][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3974'. [ 355.629314][T14249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3974'. [ 355.672666][T14256] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3974'. [ 356.615299][T14311] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3998'. [ 357.130994][T14337] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4015'. [ 357.243901][T14346] netlink: 'syz.3.4019': attribute type 3 has an invalid length. [ 357.251780][T14346] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.4019'. [ 357.314583][T14348] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4020'. [ 357.899907][T14379] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4035'. [ 360.304359][T14508] netlink: 'syz.1.4092': attribute type 10 has an invalid length. [ 360.644229][T14524] __nla_validate_parse: 1 callbacks suppressed [ 360.644250][T14524] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4098'. [ 361.950374][T14600] syz.0.4135[14600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.950540][T14600] syz.0.4135[14600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.295309][T14617] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.4140'. [ 362.430164][T14627] netlink: 'syz.4.4145': attribute type 10 has an invalid length. [ 362.465834][T14627] netlink: 'syz.4.4145': attribute type 19 has an invalid length. [ 362.486143][T14627] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.4145'. [ 362.827638][T14651] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4156'. [ 362.869829][T14651] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 362.889738][T14651] CPU: 1 PID: 14651 Comm: syz.0.4156 Not tainted 5.15.178-syzkaller #0 [ 362.898032][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 362.908111][T14651] Call Trace: [ 362.911396][T14651] [ 362.914330][T14651] dump_stack_lvl+0x1e3/0x2d0 [ 362.919036][T14651] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 362.924676][T14651] ? panic+0x860/0x860 [ 362.928763][T14651] ? kmem_cache_alloc_trace+0x143/0x290 [ 362.934315][T14651] ? sysfs_warn_dup+0x4d/0xa0 [ 362.939009][T14651] sysfs_warn_dup+0x8a/0xa0 [ 362.943517][T14651] sysfs_do_create_link_sd+0xbe/0x100 [ 362.948896][T14651] device_add+0x7d4/0xfd0 [ 362.953238][T14651] wiphy_register+0x1d30/0x2bb0 [ 362.958112][T14651] ? cfg80211_event_work+0x40/0x40 [ 362.963245][T14651] ? minstrel_ht_alloc+0x7cf/0x940 [ 362.968366][T14651] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 362.974438][T14651] ieee80211_register_hw+0x2986/0x39d0 [ 362.979909][T14651] ? ieee80211_register_hw+0xb81/0x39d0 [ 362.985462][T14651] ? ieee80211_tasklet_handler+0x20/0x20 [ 362.991108][T14651] ? memset+0x1f/0x40 [ 362.995099][T14651] ? __hrtimer_init+0x181/0x260 [ 362.999953][T14651] mac80211_hwsim_new_radio+0x223d/0x4200 [ 363.005691][T14651] hwsim_new_radio_nl+0xbae/0x1090 [ 363.010808][T14651] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 363.017608][T14651] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 363.023945][T14651] genl_rcv_msg+0xfbd/0x14a0 [ 363.028546][T14651] ? genl_bind+0x420/0x420 [ 363.032969][T14651] ? local_bh_enable+0x5/0x20 [ 363.037666][T14651] ? mark_lock+0x98/0x340 [ 363.042000][T14651] ? __lock_acquire+0x1295/0x1ff0 [ 363.047033][T14651] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 363.053550][T14651] netlink_rcv_skb+0x1cf/0x410 [ 363.058319][T14651] ? genl_bind+0x420/0x420 [ 363.062739][T14651] ? netlink_ack+0xb10/0xb10 [ 363.067345][T14651] ? down_read+0x1b3/0x2e0 [ 363.071765][T14651] ? genl_rcv+0x9/0x40 [ 363.075842][T14651] genl_rcv+0x24/0x40 [ 363.079839][T14651] netlink_unicast+0x7b6/0x980 [ 363.084656][T14651] ? netlink_detachskb+0x90/0x90 [ 363.089628][T14651] ? __virt_addr_valid+0xb7/0x460 [ 363.094738][T14651] ? 0xffffffff81000000 [ 363.098897][T14651] ? __check_object_size+0x300/0x410 [ 363.104186][T14651] ? bpf_lsm_netlink_send+0x5/0x10 [ 363.109302][T14651] netlink_sendmsg+0xa30/0xd60 [ 363.114079][T14651] ? netlink_getsockopt+0x5b0/0x5b0 [ 363.119276][T14651] ? futex_wait+0x634/0x740 [ 363.123784][T14651] ? aa_sock_msg_perm+0x91/0x150 [ 363.128724][T14651] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 363.134011][T14651] ? security_socket_sendmsg+0x7d/0xa0 [ 363.139470][T14651] ? netlink_getsockopt+0x5b0/0x5b0 [ 363.144673][T14651] ____sys_sendmsg+0x59e/0x8f0 [ 363.149482][T14651] ? iovec_from_user+0x300/0x390 [ 363.154697][T14651] ? __sys_sendmsg_sock+0x30/0x30 [ 363.159829][T14651] ___sys_sendmsg+0x252/0x2e0 [ 363.164511][T14651] ? __sys_sendmsg+0x260/0x260 [ 363.169314][T14651] ? __fdget+0x191/0x220 [ 363.173560][T14651] __se_sys_sendmsg+0x19a/0x260 [ 363.178421][T14651] ? __x64_sys_sendmsg+0x80/0x80 [ 363.183381][T14651] ? syscall_enter_from_user_mode+0x2e/0x240 [ 363.189419][T14651] ? lockdep_hardirqs_on+0x94/0x130 [ 363.194662][T14651] ? syscall_enter_from_user_mode+0x2e/0x240 [ 363.200657][T14651] do_syscall_64+0x3b/0xb0 [ 363.205078][T14651] ? clear_bhb_loop+0x15/0x70 [ 363.209758][T14651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.215695][T14651] RIP: 0033:0x7effe1312de9 [ 363.220157][T14651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.239866][T14651] RSP: 002b:00007effdf17c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.248295][T14651] RAX: ffffffffffffffda RBX: 00007effe152bfa0 RCX: 00007effe1312de9 [ 363.256266][T14651] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 363.264234][T14651] RBP: 00007effe13942a0 R08: 0000000000000000 R09: 0000000000000000 [ 363.272203][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.280166][T14651] R13: 0000000000000000 R14: 00007effe152bfa0 R15: 00007ffdcc4629d8 [ 363.288471][T14651] [ 364.100033][T14693] syz.0.4174[14693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.100137][T14693] syz.0.4174[14693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.619263][T14733] device macvlan0 entered promiscuous mode [ 365.199937][T14768] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 365.360270][T14780] device pim6reg1 entered promiscuous mode [ 365.733897][T14792] device syzkaller0 entered promiscuous mode [ 366.487534][T14830] device syzkaller0 entered promiscuous mode [ 367.345824][T14887] device pim6reg1 entered promiscuous mode [ 367.562833][T14892] device syzkaller0 entered promiscuous mode [ 367.788624][T14910] syz.0.4268[14910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.788725][T14910] syz.0.4268[14910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.071772][T14922] device pim6reg1 entered promiscuous mode [ 368.908203][T14960] syzkaller0: create flow: hash 4283126113 index 1 [ 368.968570][ T4159] syzkaller0: tun_net_xmit 76 [ 368.976659][ T4159] syzkaller0: tun_net_xmit 48 [ 369.015830][ T4241] syzkaller0: tun_net_xmit 76 [ 369.084022][T14962] device syzkaller0 entered promiscuous mode [ 369.110476][T14957] syzkaller0: delete flow: hash 4283126113 index 1 [ 369.400915][T14972] device pim6reg1 entered promiscuous mode [ 371.727199][T15080] netlink: 'syz.1.4334': attribute type 1 has an invalid length. [ 371.763135][T15080] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4334'. [ 371.828903][T15080] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4334'. [ 372.113506][T15092] device syzkaller0 entered promiscuous mode [ 372.314251][T15106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4346'. [ 375.067207][T15229] netlink: 'syz.4.4393': attribute type 10 has an invalid length. [ 375.077038][T15229] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4393'. [ 375.109649][T15229] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 376.221315][T15270] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4408'. [ 376.326542][T15270] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 376.357242][T15270] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 377.252203][T15296] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4417'. [ 377.280828][T15296] netlink: get zone limit has 4 unknown bytes [ 377.609633][T15301] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4420'. [ 377.700265][T15301] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 377.751553][T15301] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 378.435592][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.442255][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.548569][T15339] netlink: 'syz.1.4432': attribute type 10 has an invalid length. [ 378.567591][T15339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4432'. [ 378.658878][T15339] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 378.945686][T15354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4439'. [ 381.696207][T15425] netlink: 'syz.2.4465': attribute type 10 has an invalid length. [ 381.736120][T15425] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4465'. [ 382.271306][T15454] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4473'. [ 382.344612][T15454] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 382.409591][T15454] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 385.087202][T15553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4513'. [ 385.987192][T15567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4526'. [ 387.295545][T15611] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 387.648745][T15625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4537'. [ 392.672611][T15781] netlink: 'syz.1.4594': attribute type 10 has an invalid length. [ 392.731961][T15781] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4594'. [ 393.367821][T15801] netlink: 'syz.0.4603': attribute type 10 has an invalid length. [ 393.756568][T15801] team0: Port device geneve1 added [ 394.032663][T15801] syz.0.4603 (15801) used greatest stack depth: 17000 bytes left [ 394.666607][T15847] netlink: 'syz.2.4622': attribute type 10 has an invalid length. [ 395.007748][T15847] team0: Port device geneve1 added [ 395.350614][T15862] netlink: 'syz.1.4625': attribute type 10 has an invalid length. [ 395.584665][T15862] device geneve1 entered promiscuous mode [ 395.630424][T15862] team0: Port device geneve1 added [ 395.696425][T15873] netlink: 'syz.3.4628': attribute type 10 has an invalid length. [ 396.010470][T15873] device geneve1 entered promiscuous mode [ 396.027839][T15873] team0: Port device geneve1 added [ 396.468906][T15905] netlink: 'syz.1.4637': attribute type 10 has an invalid length. [ 397.040596][T15922] netlink: 'syz.4.4642': attribute type 10 has an invalid length. [ 397.288997][T15922] device geneve1 entered promiscuous mode [ 397.360768][T15922] team0: Port device geneve1 added [ 398.790129][T15988] netlink: 'syz.0.4666': attribute type 10 has an invalid length. [ 400.416833][T16082] netlink: 'syz.0.4713': attribute type 10 has an invalid length. [ 401.331195][T16147] netlink: 'syz.1.4730': attribute type 10 has an invalid length. [ 401.839353][T16178] netlink: 'syz.2.4745': attribute type 10 has an invalid length. [ 418.611898][T17227] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5166'. [ 418.798996][T17227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.881607][T17227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.925336][T17227] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 419.028497][T17227] bond0 (unregistering): Released all slaves [ 419.130784][T17248] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5174'. [ 419.242531][T17248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.359054][T17248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.411155][T17248] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 419.460128][T17248] bond0 (unregistering): Released all slaves [ 420.006201][T17298] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5203'. [ 420.144196][T17298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.183757][T17298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.235851][T17298] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 420.282118][T17298] bond0 (unregistering): Released all slaves [ 420.318617][T17301] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5193'. [ 420.344601][T17312] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5199'. [ 420.363330][T17314] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5198'. [ 420.504105][T17321] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5201'. [ 420.690276][T17321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.743997][T17321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.815205][T17321] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 420.872687][T17321] bond0 (unregistering): Released all slaves [ 421.081306][T17353] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5211'. [ 421.097474][T17350] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5222'. [ 421.250226][T17358] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5213'. [ 423.704843][T17502] __nla_validate_parse: 15 callbacks suppressed [ 423.704879][T17502] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5276'. [ 424.039352][T17523] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5284'. [ 424.098716][T17527] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5286'. [ 424.245645][T17535] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5300'. [ 424.851185][T17566] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5303'. [ 424.905345][T17568] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5305'. [ 424.944186][T17570] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5306'. [ 425.031762][T17577] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5309'. [ 425.395035][T17601] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5318'. [ 425.452783][T17597] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5317'. [ 428.315329][T17779] netlink: 'syz.0.5390': attribute type 10 has an invalid length. [ 428.717018][T17806] __nla_validate_parse: 11 callbacks suppressed [ 428.717059][T17806] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5409'. [ 428.749279][T17809] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5400'. [ 429.220788][T17831] netlink: 'syz.3.5406': attribute type 10 has an invalid length. [ 429.526586][T17846] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5414'. [ 430.287202][T17893] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5435'. [ 430.768513][T17924] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5461'. [ 430.970166][T17938] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5454'. [ 431.012459][T17943] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5468'. [ 431.068169][T17946] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5458'. [ 431.388685][T17964] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5469'. [ 431.653612][T17983] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5476'. [ 433.582181][ T4508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.679758][ T4508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.767998][T18120] __nla_validate_parse: 3 callbacks suppressed [ 433.768015][T18120] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5532'. [ 433.831566][ T4508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.921050][ T4508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.970478][T18103] chnl_net:caif_netlink_parms(): no params data found [ 434.295013][T18103] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.316927][T18103] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.364261][T18103] device bridge_slave_0 entered promiscuous mode [ 434.407378][T18103] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.451315][T18103] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.485353][T18103] device bridge_slave_1 entered promiscuous mode [ 434.752496][T18103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.833910][T18103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.972656][T18103] team0: Port device team_slave_0 added [ 434.990435][T18103] team0: Port device team_slave_1 added [ 435.178454][T18103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.203453][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.313662][T18103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.372280][T18103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.393538][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.473102][ T4212] Bluetooth: hci5: command 0x0409 tx timeout [ 435.479784][T18103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.628559][ T4508] device erspan0 left promiscuous mode [ 435.667646][ T4508] GPL: port 1(erspan0) entered disabled state [ 435.711865][T18103] device hsr_slave_0 entered promiscuous mode [ 435.743652][T18103] device hsr_slave_1 entered promiscuous mode [ 435.759836][T18103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.768386][T18103] Cannot create hsr debugfs directory [ 436.280155][ T4508] team0: Port device wlan1 removed [ 436.666460][ T4508] device hsr_slave_0 left promiscuous mode [ 436.697869][ T4508] device hsr_slave_1 left promiscuous mode [ 436.723242][ T4508] device veth1_macvtap left promiscuous mode [ 436.743226][ T4508] device veth0_macvtap left promiscuous mode [ 436.978503][ T4508] team0 (unregistering): Port device geneve1 removed [ 437.099369][ T4508] team0 (unregistering): Port device team_slave_1 removed [ 437.115307][ T4508] team0 (unregistering): Port device team_slave_0 removed [ 437.493955][T18103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 437.553090][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 437.575648][T18103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 437.625012][T18103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 437.669413][T18103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.008106][T18103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.076432][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 438.118999][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 438.169877][T18103] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.207314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 438.228307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 438.255806][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.262994][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.329273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 438.345862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 438.392473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 438.435097][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.442192][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.480976][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 438.506544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 438.592501][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 438.628997][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 438.682474][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 438.711882][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 438.745208][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 438.773985][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 438.824720][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 438.887225][T18103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.925743][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 438.941021][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 439.208623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 439.220293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.246802][T18103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.268512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 439.287385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.321833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.332764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.342759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.355167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.368807][T18103] device veth0_vlan entered promiscuous mode [ 439.384234][T18103] device veth1_vlan entered promiscuous mode [ 439.415668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 439.425241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 439.434930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 439.446240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.479057][T18103] device veth0_macvtap entered promiscuous mode [ 439.500313][T18103] device veth1_macvtap entered promiscuous mode [ 439.544609][T18103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.571896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 439.584559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 439.603500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 439.614153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 439.633105][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 439.661711][T18103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.690375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 439.721019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 439.767681][T18103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.802331][T18103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.811710][T18103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.822345][T18103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.875451][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.881793][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.026135][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.045293][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.100746][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 440.142646][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.171421][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.193244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 441.655956][T18437] chnl_net:caif_netlink_parms(): no params data found [ 441.714824][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 441.877229][ T4508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.895131][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.911281][T18437] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.952126][T18437] device bridge_slave_0 entered promiscuous mode [ 442.010663][ T4508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.052365][T18437] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.082376][T18437] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.094620][T18437] device bridge_slave_1 entered promiscuous mode [ 442.151012][ T4508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.264800][T18437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.327681][ T4508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.380637][T18437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.471220][T18437] team0: Port device team_slave_0 added [ 442.498441][T18437] team0: Port device team_slave_1 added [ 442.596018][T18437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.639980][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.670095][T18437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.753939][T18437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.760912][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.843503][T18437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.913367][ T4248] Bluetooth: hci4: command 0x0409 tx timeout [ 442.991332][T18437] device hsr_slave_0 entered promiscuous mode [ 443.001872][T18437] device hsr_slave_1 entered promiscuous mode [ 443.032121][T18437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.048854][T18437] Cannot create hsr debugfs directory [ 443.230363][T18552] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5687'. [ 443.471274][T18562] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5689'. [ 443.629395][T18562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.687817][T18562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.756061][T18562] bond0 (unregistering): Released all slaves [ 443.829640][T18569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5692'. [ 444.457084][ T4508] device wlan1 left promiscuous mode [ 444.473907][ T4508] team0: Port device wlan1 removed [ 444.531547][T18437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.544063][T18437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.573636][T18437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.596749][T18437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.744900][ T4508] device hsr_slave_0 left promiscuous mode [ 444.770883][ T4508] device hsr_slave_1 left promiscuous mode [ 444.793545][ T4508] device veth0_macvtap left promiscuous mode [ 444.800241][ T4508] device veth0_vlan left promiscuous mode [ 444.993353][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 445.127782][ T4508] device geneve1 left promiscuous mode [ 445.141100][ T4508] team0 (unregistering): Port device geneve1 removed [ 445.318081][ T4508] device team_slave_1 left promiscuous mode [ 445.325209][ T4508] team0 (unregistering): Port device team_slave_1 removed [ 445.339299][ T4508] device team_slave_0 left promiscuous mode [ 445.346287][ T4508] team0 (unregistering): Port device team_slave_0 removed [ 445.440989][T18654] device pim6reg1 entered promiscuous mode [ 445.538144][T18437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.557631][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.581168][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.615391][T18437] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.646048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.666248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.701720][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.708959][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.801757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.816035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.863705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.893774][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.900882][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.946833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.987675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.024361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.078017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.107056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.136667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.175524][T18683] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5729'. [ 446.226256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.271939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.324856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.350873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.388013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.435642][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.896399][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.906665][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.957285][T18437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.064611][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 447.074846][ T4248] Bluetooth: hci4: command 0x040f tx timeout [ 447.086972][T18757] syz.0.5754[18757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.087077][T18757] syz.0.5754[18757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.115414][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.252311][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.292805][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.328254][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.339427][T18772] syz.1.5760[18772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.339530][T18772] syz.1.5760[18772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.354837][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.405787][T18437] device veth0_vlan entered promiscuous mode [ 447.440175][T18437] device veth1_vlan entered promiscuous mode [ 447.491481][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 447.588636][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 447.606369][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.662046][T18437] device veth0_macvtap entered promiscuous mode [ 447.717176][T18437] device veth1_macvtap entered promiscuous mode [ 447.769162][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.843309][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.864884][T18437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.902644][T18794] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5769'. [ 447.929376][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 447.954219][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 447.983964][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.003358][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.030357][T18437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.058540][T18437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.082679][T18437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.105688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.125668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.167591][T18437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.218195][T18437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.249880][T18437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.288932][T18437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.568056][T18820] device syzkaller0 entered promiscuous mode [ 448.762001][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.776736][T18830] IPv6: Can't replace route, no match found [ 448.778365][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.796933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 448.890663][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.920049][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.968470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 449.003309][T18839] netlink: 'syz.4.5790': attribute type 21 has an invalid length. [ 449.153927][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 449.578586][T18864] syz.3.5800[18864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.578695][T18864] syz.3.5800[18864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.381106][T18900] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5815'. [ 450.407744][T18902] netlink: 'syz.3.5816': attribute type 21 has an invalid length. [ 450.443198][T18902] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5816'. [ 450.452761][T18902] netlink: 'syz.3.5816': attribute type 1 has an invalid length. [ 450.463081][T18896] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5815'. [ 450.497498][T18870] chnl_net:caif_netlink_parms(): no params data found [ 451.012077][T18870] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.041437][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.064244][T18870] device bridge_slave_0 entered promiscuous mode [ 451.094859][T18928] netlink: 'syz.4.5826': attribute type 27 has an invalid length. [ 451.104378][T18870] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.111458][T18870] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.144342][T18870] device bridge_slave_1 entered promiscuous mode [ 451.469660][T18870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.487500][T18947] netlink: 'syz.3.5835': attribute type 21 has an invalid length. [ 451.497049][T18954] syz.0.5837[18954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.497168][T18954] syz.0.5837[18954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.618384][ T4508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.704952][T18870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.820358][T18870] team0: Port device team_slave_0 added [ 451.851610][ T4508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.873071][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 451.923222][T18870] team0: Port device team_slave_1 added [ 451.985699][ T4508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.065498][T18870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.082712][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.137619][T18870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.191894][ T4508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.227879][T18870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.237117][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.319878][T18870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.557059][T18870] device hsr_slave_0 entered promiscuous mode [ 452.592698][T18870] device hsr_slave_1 entered promiscuous mode [ 452.609472][T18870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.627531][T18870] Cannot create hsr debugfs directory [ 452.653172][T19020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5868'. [ 453.953691][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 454.170286][T19100] IPv6: Can't replace route, no match found [ 454.236482][T19102] netlink: 'syz.0.5901': attribute type 10 has an invalid length. [ 454.281782][T19102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5901'. [ 454.390926][T19102] team0: Port device geneve0 added [ 454.420621][T18870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 454.561981][T18870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 454.590906][T18870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 454.654822][T18870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 455.055613][T19153] syz.2.5918[19153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.055716][T19153] syz.2.5918[19153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.186536][T18870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.342048][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.357709][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.402325][T18870] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.595077][ T4508] device hsr_slave_0 left promiscuous mode [ 455.646321][ T4508] device hsr_slave_1 left promiscuous mode [ 455.786110][ T4508] device veth1_macvtap left promiscuous mode [ 455.807369][ T4508] device veth0_macvtap left promiscuous mode [ 455.821884][ T4508] device veth0_vlan left promiscuous mode [ 456.039455][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 456.246641][ T4508] device geneve1 left promiscuous mode [ 456.305287][ T4508] team0 (unregistering): Port device geneve1 removed [ 456.689163][ T4508] device team_slave_1 left promiscuous mode [ 456.735200][ T4508] team0 (unregistering): Port device team_slave_1 removed [ 456.784927][ T4508] device team_slave_0 left promiscuous mode [ 456.817412][ T4508] team0 (unregistering): Port device team_slave_0 removed [ 457.126404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.137056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.147198][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.154344][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.175059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.184719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.193957][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.201131][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.234252][T19204] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5936'. [ 457.263747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.291770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.317413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.330189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.342658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.366657][T19203] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5936'. [ 457.386993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 457.409497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 457.424361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.437926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 457.482271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.632710][T18870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.676572][T18870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.717154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 457.733850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.113166][T19034] Bluetooth: hci0: command 0x0419 tx timeout [ 458.180968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.199262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.226734][T18870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.372862][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 458.388195][T18541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 458.511983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 458.530755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 458.562328][T18870] device veth0_vlan entered promiscuous mode [ 458.579945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 458.613492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 458.647987][T18870] device veth1_vlan entered promiscuous mode [ 458.746397][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 458.770707][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 458.813597][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 458.864317][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.897707][T18870] device veth0_macvtap entered promiscuous mode [ 458.949019][T18870] device veth1_macvtap entered promiscuous mode [ 459.026593][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.072966][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.084488][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.120979][T19125] ODEBUG: Out of memory. ODEBUG disabled [ 459.121030][T19125] [ 459.121036][T19125] ====================================================== [ 459.121042][T19125] WARNING: possible circular locking dependency detected [ 459.121049][T19125] 5.15.178-syzkaller #0 Not tainted [ 459.121070][T19125] ------------------------------------------------------ [ 459.121075][T19125] syz.3.5906/19125 is trying to acquire lock: [ 459.121087][T19125] ffffffff8c9fc538 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x1c/0xa0 [ 459.121145][T19125] [ 459.121145][T19125] but task is already holding lock: [ 459.121150][T19125] ffff88806168f9b8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xcf/0xca0 [ 459.121195][T19125] [ 459.121195][T19125] which lock already depends on the new lock. [ 459.121195][T19125] [ 459.121201][T19125] [ 459.121201][T19125] the existing dependency chain (in reverse order) is: [ 459.121207][T19125] [ 459.121207][T19125] -> #3 (&trie->lock){..-.}-{2:2}: [ 459.121231][T19125] lock_acquire+0x1db/0x4f0 [ 459.121250][T19125] _raw_spin_lock_irqsave+0xd1/0x120 [ 459.121272][T19125] trie_delete_elem+0x90/0x690 [ 459.121293][T19125] 0xffffffffa002a63c [ 459.121306][T19125] bpf_trace_run3+0x1d1/0x380 [ 459.121324][T19125] __schedule+0x1e8d/0x45b0 [ 459.121342][T19125] schedule+0x11b/0x1f0 [ 459.121359][T19125] futex_wait_queue_me+0x25b/0x480 [ 459.121382][T19125] futex_wait+0x2f8/0x740 [ 459.121401][T19125] do_futex+0x1414/0x1810 [ 459.121421][T19125] __se_sys_futex+0x407/0x490 [ 459.121442][T19125] do_syscall_64+0x3b/0xb0 [ 459.121465][T19125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 459.121488][T19125] [ 459.121488][T19125] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 459.121512][T19125] lock_acquire+0x1db/0x4f0 [ 459.121529][T19125] _raw_spin_lock_nested+0x2d/0x40 [ 459.121550][T19125] raw_spin_rq_lock_nested+0x26/0x140 [ 459.121572][T19125] task_fork_fair+0x5d/0x350 [ 459.121589][T19125] sched_cgroup_fork+0x2d3/0x330 [ 459.121610][T19125] copy_process+0x224a/0x3ef0 [ 459.121629][T19125] kernel_clone+0x210/0x960 [ 459.121646][T19125] kernel_thread+0x168/0x1e0 [ 459.121664][T19125] rest_init+0x21/0x330 [ 459.121683][T19125] start_kernel+0x48c/0x540 [ 459.121704][T19125] secondary_startup_64_no_verify+0xb1/0xbb [ 459.121726][T19125] [ 459.121726][T19125] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 459.121750][T19125] lock_acquire+0x1db/0x4f0 [ 459.121766][T19125] _raw_spin_lock_irqsave+0xd1/0x120 [ 459.121786][T19125] try_to_wake_up+0xae/0x1300 [ 459.121806][T19125] up+0x6e/0x90 [ 459.121824][T19125] __up_console_sem+0x11a/0x1e0 [ 459.121843][T19125] console_unlock+0x1145/0x12b0 [ 459.121861][T19125] vprintk_emit+0xbf/0x150 [ 459.121878][T19125] dev_vprintk_emit+0x2aa/0x330 [ 459.121895][T19125] dev_printk_emit+0xd9/0x120 [ 459.121912][T19125] _dev_warn+0x11e/0x170 [ 459.121928][T19125] firmware_fallback_sysfs+0x681/0xc90 [ 459.121950][T19125] _request_firmware+0xc72/0x12c0 [ 459.121971][T19125] request_firmware_work_func+0x126/0x270 [ 459.121992][T19125] process_one_work+0x8a1/0x10c0 [ 459.122013][T19125] worker_thread+0xaca/0x1280 [ 459.122032][T19125] kthread+0x3f6/0x4f0 [ 459.122048][T19125] ret_from_fork+0x1f/0x30 [ 459.122067][T19125] [ 459.122067][T19125] -> #0 ((console_sem).lock){-...}-{2:2}: [ 459.122091][T19125] validate_chain+0x1649/0x5930 [ 459.122109][T19125] __lock_acquire+0x1295/0x1ff0 [ 459.122126][T19125] lock_acquire+0x1db/0x4f0 [ 459.122142][T19125] _raw_spin_lock_irqsave+0xd1/0x120 [ 459.122163][T19125] down_trylock+0x1c/0xa0 [ 459.122182][T19125] __down_trylock_console_sem+0x105/0x250 [ 459.122202][T19125] console_trylock_spinning+0x8a/0x3f0 [ 459.122221][T19125] vprintk_emit+0xa6/0x150 [ 459.122238][T19125] _printk+0xd1/0x120 [ 459.122257][T19125] debug_objects_oom+0xb4/0x370 [ 459.122277][T19125] debug_object_activate+0x42d/0x4e0 [ 459.122297][T19125] kvfree_call_rcu+0xb6/0x8a0 [ 459.122315][T19125] trie_update_elem+0x8ad/0xca0 [ 459.122335][T19125] bpf_map_update_value+0x5d7/0x6c0 [ 459.122356][T19125] generic_map_update_batch+0x54d/0x8b0 [ 459.122376][T19125] bpf_map_do_batch+0x4d0/0x620 [ 459.122393][T19125] __sys_bpf+0x55c/0x670 [ 459.122413][T19125] __x64_sys_bpf+0x78/0x90 [ 459.122432][T19125] do_syscall_64+0x3b/0xb0 [ 459.122455][T19125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 459.122478][T19125] [ 459.122478][T19125] other info that might help us debug this: [ 459.122478][T19125] [ 459.122484][T19125] Chain exists of: [ 459.122484][T19125] (console_sem).lock --> &rq->__lock --> &trie->lock [ 459.122484][T19125] [ 459.122513][T19125] Possible unsafe locking scenario: [ 459.122513][T19125] [ 459.122517][T19125] CPU0 CPU1 [ 459.122522][T19125] ---- ---- [ 459.122526][T19125] lock(&trie->lock); [ 459.122537][T19125] lock(&rq->__lock); [ 459.122550][T19125] lock(&trie->lock); [ 459.122562][T19125] lock((console_sem).lock); [ 459.122573][T19125] [ 459.122573][T19125] *** DEADLOCK *** [ 459.122573][T19125] [ 459.122577][T19125] 2 locks held by syz.3.5906/19125: [ 459.122588][T19125] #0: ffffffff8cb1fce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 459.122637][T19125] #1: ffff88806168f9b8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xcf/0xca0 [ 459.122685][T19125] [ 459.122685][T19125] stack backtrace: [ 459.122690][T19125] CPU: 1 PID: 19125 Comm: syz.3.5906 Not tainted 5.15.178-syzkaller #0 [ 459.122710][T19125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 459.122722][T19125] Call Trace: [ 459.122727][T19125] [ 459.122734][T19125] dump_stack_lvl+0x1e3/0x2d0 [ 459.122756][T19125] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 459.122781][T19125] ? print_circular_bug+0x12b/0x1a0 [ 459.122803][T19125] check_noncircular+0x2f8/0x3b0 [ 459.122823][T19125] ? reacquire_held_locks+0x660/0x660 [ 459.122846][T19125] ? add_chain_block+0x850/0x850 [ 459.122866][T19125] ? lockdep_lock+0x11f/0x2a0 [ 459.122888][T19125] ? mark_lock+0x98/0x340 [ 459.122911][T19125] validate_chain+0x1649/0x5930 [ 459.122942][T19125] ? reacquire_held_locks+0x660/0x660 [ 459.122960][T19125] ? data_push_tail+0x693/0x700 [ 459.122984][T19125] ? desc_read+0x3d0/0x3d0 [ 459.123004][T19125] ? unwind_next_frame+0x1437/0x1fa0 [ 459.123025][T19125] ? reacquire_held_locks+0x660/0x660 [ 459.123050][T19125] ? mark_lock+0x98/0x340 [ 459.123070][T19125] __lock_acquire+0x1295/0x1ff0 [ 459.123097][T19125] lock_acquire+0x1db/0x4f0 [ 459.123114][T19125] ? down_trylock+0x1c/0xa0 [ 459.123136][T19125] ? vsnprintf+0x1c70/0x1c70 [ 459.123160][T19125] ? read_lock_is_recursive+0x10/0x10 [ 459.123180][T19125] ? memcpy+0x3c/0x60 [ 459.123200][T19125] ? vsnprintf+0x1b93/0x1c70 [ 459.123222][T19125] ? _prb_commit+0x30a/0x3e0 [ 459.123244][T19125] ? prb_reserve+0x1240/0x1240 [ 459.123265][T19125] _raw_spin_lock_irqsave+0xd1/0x120 [ 459.123288][T19125] ? down_trylock+0x1c/0xa0 [ 459.123308][T19125] ? _raw_spin_lock+0x40/0x40 [ 459.123332][T19125] ? vprintk_store+0xf1b/0x1300 [ 459.123353][T19125] down_trylock+0x1c/0xa0 [ 459.123376][T19125] __down_trylock_console_sem+0x105/0x250 [ 459.123398][T19125] ? printk_parse_prefix+0x2c0/0x2c0 [ 459.123417][T19125] ? vprintk_emit+0xa6/0x150 [ 459.123435][T19125] ? console_trylock+0x70/0x70 [ 459.123465][T19125] ? is_bpf_text_address+0x24f/0x260 [ 459.123488][T19125] ? vprintk_emit+0xa6/0x150 [ 459.123507][T19125] console_trylock_spinning+0x8a/0x3f0 [ 459.123528][T19125] ? vprintk_emit+0x150/0x150 [ 459.123548][T19125] ? __lock_acquire+0x1295/0x1ff0 [ 459.123573][T19125] vprintk_emit+0xa6/0x150 [ 459.123594][T19125] _printk+0xd1/0x120 [ 459.123618][T19125] ? panic+0x860/0x860 [ 459.123639][T19125] ? do_raw_spin_lock+0x14a/0x370 [ 459.123659][T19125] ? __lock_acquire+0x1ff0/0x1ff0 [ 459.123682][T19125] debug_objects_oom+0xb4/0x370 [ 459.123707][T19125] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 459.123730][T19125] ? debug_object_activate+0x4e0/0x4e0 [ 459.123758][T19125] debug_object_activate+0x42d/0x4e0 [ 459.123784][T19125] kvfree_call_rcu+0xb6/0x8a0 [ 459.123808][T19125] ? call_rcu+0xa70/0xa70 [ 459.123826][T19125] ? __kmalloc_node+0x199/0x390 [ 459.123846][T19125] ? bpf_map_kmalloc_node+0xdb/0x160 [ 459.123867][T19125] ? _raw_spin_lock+0x40/0x40 [ 459.123889][T19125] ? longest_prefix_match+0x2db/0x640 [ 459.123916][T19125] trie_update_elem+0x8ad/0xca0 [ 459.123948][T19125] bpf_map_update_value+0x5d7/0x6c0 [ 459.123975][T19125] generic_map_update_batch+0x54d/0x8b0 [ 459.124006][T19125] ? rcu_read_unlock+0x90/0x90 [ 459.124029][T19125] ? __fdget+0x191/0x220 [ 459.124049][T19125] ? rcu_read_unlock+0x90/0x90 [ 459.124071][T19125] bpf_map_do_batch+0x4d0/0x620 [ 459.124092][T19125] __sys_bpf+0x55c/0x670 [ 459.124115][T19125] ? bpf_link_show_fdinfo+0x300/0x300 [ 459.124147][T19125] ? syscall_enter_from_user_mode+0x2e/0x240 [ 459.124189][T19125] ? lockdep_hardirqs_on+0x94/0x130 [ 459.124212][T19125] __x64_sys_bpf+0x78/0x90 [ 459.124236][T19125] do_syscall_64+0x3b/0xb0 [ 459.124254][T19125] ? clear_bhb_loop+0x15/0x70 [ 459.124274][T19125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 459.124298][T19125] RIP: 0033:0x7f4143161de9 [ 459.124315][T19125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.124331][T19125] RSP: 002b:00007f4140fcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.124350][T19125] RAX: ffffffffffffffda RBX: 00007f414337afa0 RCX: 00007f4143161de9 [ 459.124364][T19125] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001a [ 459.124377][T19125] RBP: 00007f41431e32a0 R08: 0000000000000000 R09: 0000000000000000 [ 459.124389][T19125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.124399][T19125] R13: 0000000000000000 R14: 00007f414337afa0 R15: 00007ffd3ef7e328 [ 459.124420][T19125] [ 460.128243][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.162792][T18870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.199813][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.222503][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.246015][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.268674][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.297360][T18870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.319521][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 460.333708][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 460.363620][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 460.393560][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.423563][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.433618][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.467237][T18870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.495433][T18870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.514287][T18870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.539695][T18870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.904137][T18870] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 460.996902][ T3077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.002627][T18870] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 461.014866][ T3077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.047550][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 461.077115][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.093400][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.102345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready