last executing test programs: 19.157189944s ago: executing program 1 (id=11191): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000003480)={&(0x7f0000000e00)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, 0x0}, 0x20040810) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 18.530959823s ago: executing program 1 (id=11194): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000040000000400000002"], 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x106200, 0x10004, 0x30da, 0x5, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 16.774971746s ago: executing program 1 (id=11198): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)="ca66c8650aa280ec42d7dc0ae78053d5075a14427eb33fbf9bcf50355508b449102a31a7c7309ed47caf04c6a8c52016a27e763a929324cb5a5f29612564b61849cb894b431f41192e6a7b7361a2914e29e96a53bd35e3036b8a9f6b2c8223ad542d2ceb19dbc46b11e082e1394819430eb6c51260e60e70de6e5ea615a3", 0x7e, 0xc0}, 0x20000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000380)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r5, &(0x7f0000000540), 0x0}, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="1293f6b5e9d3"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 16.519263139s ago: executing program 1 (id=11201): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 15.850746457s ago: executing program 1 (id=11204): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x48) 15.329884154s ago: executing program 1 (id=11207): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r0, 0x4) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.638693417s ago: executing program 2 (id=11221): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)="ca66c8650aa280ec42d7dc0ae78053d5075a14427eb33fbf9bcf50355508b449102a31a7c7309ed47caf04c6a8c52016a27e763a929324cb5a5f29612564b61849cb894b431f41192e6a7b7361a2914e29e96a53bd35e3036b8a9f6b2c8223ad542d2ceb19dbc46b11e082e1394819430eb6c51260e60e70de6e5ea615a3", 0x7e, 0xc0}, 0x20000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000380)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r5, &(0x7f0000000540), 0x0}, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="1293f6b5e9d3"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 8.120341663s ago: executing program 2 (id=11223): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000840)={r0, &(0x7f0000000380), 0x0}, 0x20) 7.772326066s ago: executing program 2 (id=11225): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102260, 0x400000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 6.598616828s ago: executing program 2 (id=11227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000680)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.42550167s ago: executing program 2 (id=11232): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x6, 0xb, 0x6, 0x13, 0x0, 0x7fff, 0x10212, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x80000000, 0x7}, 0x28, 0xfffffffffffffe00, 0x6, 0x8, 0x100000000000000, 0xfffffff7, 0xd688, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r1, 0xa1e12d2eb7ddd854) socketpair(0x17, 0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x14, 0x80000, 0xfffffff8, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0xe, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e", 0x0, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x2120) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1d, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'/13, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) 5.046895308s ago: executing program 3 (id=11234): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 4.781087633s ago: executing program 0 (id=11236): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) 4.780915613s ago: executing program 3 (id=11237): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0xf}, 0x104002, 0xfffffffffffffffc, 0x0, 0x0, 0x6f00000001000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x6}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x28, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 4.719220836s ago: executing program 0 (id=11238): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000680)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.710505058s ago: executing program 3 (id=11239): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001"], 0xfffffffffffffead) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.21563909s ago: executing program 3 (id=11240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x9}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r2], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) 3.880743639s ago: executing program 3 (id=11241): perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x98, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080720007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x94) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) 3.87815179s ago: executing program 0 (id=11242): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)="ca66c8650aa280ec42d7dc0ae78053d5075a14427eb33fbf9bcf50355508b449102a31a7c7309ed47caf04c6a8c52016a27e763a929324cb5a5f29612564b61849cb894b431f41192e6a7b7361a2914e29e96a53bd35e3036b8a9f6b2c8223ad542d2ceb19dbc46b11e082e1394819430eb6c51260e60e70de6e5ea615a3", 0x7e, 0xc0}, 0x20000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000380)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r5, &(0x7f0000000540), 0x0}, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="1293f6b5e9d3"}) 3.718779583s ago: executing program 0 (id=11243): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x40242000, &(0x7f0000000200)="a97e60580f5804c2d2afd9a92061f51d36ba8420555d81dd9b89bc8587291c1b88e21a46d612e9350071ccf2df6870378dda3ea3ca6d4d223fc502b9758fc8bba6efcc9a57dee7137a9a9c8fed933315dac9a86530a08c5148a72d476ea2fb79eb04628fc30f2250f9401a4efcdc6efbaae76a5a5e10dc7366765651cc1478e3e7a6522531697718750fa237236da5bb0f97", 0x92, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)="b2601799bd5c89b486c8600fcb31177b6bc0b524838c0c99245658e540ea7f53124c5c2d9a583f2384a782263a5c2887a373076655813ec7e5f64dbac4cb3aba23fbce572cd54b15954c553350d4b85356f29db3859d79216928bb93b02606fcff4cfd10e910626885602440d284c052c1f050cdf4b6a9597c250d8daaffb4477f69c20ac28d5ab14cf200aa22cb83b6be3e999d9552b9dc4bb2336fe1cbf9e2345cfa131d8ee13bfecc217592a60e148456295693864c0be557570d51c7e0a35b949d907a854e7e016f70ba80de7a84e5f4b6c91cbfb1770b0270d0649116") sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17fb", 0x2}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x40000) 3.363731996s ago: executing program 0 (id=11244): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 23.012346ms ago: executing program 32 (id=11207): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r0, 0x4) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.091337ms ago: executing program 2 (id=11246): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0xffffffffffffff8f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7}, 0xff12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 9.918329ms ago: executing program 0 (id=11253): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x14, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf9ad}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r1}, 0xc) 0s ago: executing program 3 (id=11254): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 5120 bytes leftover after parsing attributes in process `syz.1.7209'. [ 1260.229704][T27646] netlink: 'syz.1.7209': attribute type 2 has an invalid length. [ 1260.539291][T27657] netlink: 'syz.3.7210': attribute type 13 has an invalid length. [ 1260.689598][T27657] netlink: 'syz.3.7210': attribute type 58 has an invalid length. [ 1260.723556][T27657] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7210'. [ 1261.400946][T27678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7220'. [ 1261.471237][T27682] netlink: 'syz.1.7221': attribute type 10 has an invalid length. [ 1262.048381][T27699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7227'. [ 1262.650369][T27721] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7235'. [ 1262.659818][T27721] bridge_slave_1: default FDB implementation only supports local addresses [ 1263.131220][T27737] validate_nla: 1 callbacks suppressed [ 1263.131235][T27737] netlink: 'syz.2.7244': attribute type 10 has an invalid length. [ 1263.145784][T27737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7244'. [ 1263.221965][T27741] netlink: 'syz.2.7245': attribute type 10 has an invalid length. [ 1263.406485][T27746] netlink: 'syz.2.7248': attribute type 10 has an invalid length. [ 1263.821413][T27763] netlink: 'syz.2.7256': attribute type 10 has an invalid length. [ 1263.913235][T27767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7258'. [ 1265.463312][T27774] netlink: 'syz.1.7261': attribute type 10 has an invalid length. [ 1265.473445][T27774] hsr_slave_0: left allmulticast mode [ 1265.481659][T27774] hsr_slave_0: left promiscuous mode [ 1265.488241][T27774] Ÿë: port 3(hsr_slave_0) entered disabled state [ 1265.697317][T27781] netlink: 'syz.3.7266': attribute type 10 has an invalid length. [ 1265.767129][T27789] netlink: 71 bytes leftover after parsing attributes in process `syz.3.7268'. [ 1265.891558][T27790] netlink: 'syz.2.7265': attribute type 13 has an invalid length. [ 1265.914193][T27790] netlink: 'syz.2.7265': attribute type 58 has an invalid length. [ 1265.922306][T27790] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7265'. [ 1266.106541][T27803] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7281'. [ 1266.266992][T27811] netlink: 'syz.0.7276': attribute type 10 has an invalid length. [ 1266.691294][T27827] netlink: 71 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1269.216463][T27840] netlink: 'syz.3.7287': attribute type 10 has an invalid length. [ 1269.543647][T27844] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7291'. [ 1269.590911][T27849] netlink: 'syz.0.7293': attribute type 13 has an invalid length. [ 1269.613855][T27849] netlink: 'syz.0.7293': attribute type 58 has an invalid length. [ 1269.639912][T27844] netlink: 'syz.3.7291': attribute type 2 has an invalid length. [ 1269.657862][T27849] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1270.048602][T27866] netlink: 'syz.3.7299': attribute type 10 has an invalid length. [ 1270.059076][T27867] netlink: 'syz.2.7300': attribute type 10 has an invalid length. [ 1270.571876][T27885] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7308'. [ 1270.608274][T27886] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7307'. [ 1270.624286][T27886] netlink: 'syz.3.7307': attribute type 2 has an invalid length. [ 1272.843280][T27891] netlink: 'syz.0.7317': attribute type 10 has an invalid length. [ 1272.851167][T27895] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7309'. [ 1272.863096][T27893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7310'. [ 1273.089971][T27905] netlink: 'syz.3.7316': attribute type 10 has an invalid length. [ 1273.364567][T27916] netlink: 'syz.2.7322': attribute type 10 has an invalid length. [ 1273.394078][T27916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7322'. [ 1273.403823][T27916] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1273.435955][T27920] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7325'. [ 1273.457021][T27922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7324'. [ 1273.507487][T27924] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7326'. [ 1274.667748][T27979] validate_nla: 1 callbacks suppressed [ 1274.667764][T27979] netlink: 'syz.0.7349': attribute type 4 has an invalid length. [ 1274.682524][T27979] __nla_validate_parse: 1 callbacks suppressed [ 1274.682540][T27979] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7349'. [ 1275.571901][T28007] netlink: 'syz.3.7362': attribute type 10 has an invalid length. [ 1275.861185][T28017] netlink: 'syz.0.7367': attribute type 4 has an invalid length. [ 1275.873481][T28017] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7367'. [ 1276.453274][T28034] netlink: 'syz.2.7374': attribute type 10 has an invalid length. [ 1276.688536][T28041] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1276.719606][T28041] netlink: 'syz.0.7377': attribute type 2 has an invalid length. [ 1277.771799][T28066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7385'. [ 1277.803492][T28066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7385'. [ 1277.853464][T28063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7385'. [ 1277.908711][T28068] netlink: 'syz.3.7387': attribute type 4 has an invalid length. [ 1277.943982][T28068] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1278.091617][T28073] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1278.163853][T28073] netlink: 'syz.2.7389': attribute type 2 has an invalid length. [ 1279.940630][T28104] netlink: 'syz.2.7399': attribute type 4 has an invalid length. [ 1279.959053][T28104] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7399'. [ 1280.543954][T28121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7406'. [ 1280.552998][T28121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7406'. [ 1280.582157][T28121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7406'. [ 1280.601935][T28121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7406'. [ 1283.508614][T28190] netlink: 'syz.1.7429': attribute type 29 has an invalid length. [ 1283.543713][T28190] netlink: 'syz.1.7429': attribute type 29 has an invalid length. [ 1283.584933][T28190] netlink: 'syz.1.7429': attribute type 29 has an invalid length. [ 1283.615484][T28190] netlink: 'syz.1.7429': attribute type 29 has an invalid length. [ 1284.101329][T28204] netlink: 'syz.2.7436': attribute type 1 has an invalid length. [ 1284.143557][T28204] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7436'. [ 1284.707374][T28227] netlink: 'syz.1.7445': attribute type 13 has an invalid length. [ 1284.723613][T28227] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7445'. [ 1284.860564][T28234] netlink: 'syz.0.7449': attribute type 1 has an invalid length. [ 1284.877491][T28234] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7449'. [ 1285.170279][T28242] tap2: tun_chr_ioctl cmd 1074025677 [ 1285.178394][T28242] tap2: linktype set to 513 [ 1285.289527][T28253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7455'. [ 1285.304444][T28253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7455'. [ 1285.343936][T28248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7455'. [ 1285.356988][T28250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7455'. [ 1285.511850][T28262] netlink: 'syz.3.7459': attribute type 1 has an invalid length. [ 1285.526771][T28262] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7459'. [ 1286.107919][T28285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7468'. [ 1286.140681][T28285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7468'. [ 1286.199025][T28278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7468'. [ 1286.227976][T28282] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7468'. [ 1286.508458][T28289] netlink: 'syz.1.7471': attribute type 1 has an invalid length. [ 1286.562883][T28289] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7471'. [ 1287.043034][T28297] pim6reg1: entered promiscuous mode [ 1287.171402][T28295] netlink: 'syz.1.7473': attribute type 2 has an invalid length. [ 1287.582455][T28317] netlink: 'syz.2.7483': attribute type 1 has an invalid length. [ 1288.147492][T28327] netlink: 'syz.1.7488': attribute type 2 has an invalid length. [ 1288.718191][T28347] netlink: 'syz.3.7495': attribute type 1 has an invalid length. [ 1288.965597][T28342] netlink: 'syz.0.7493': attribute type 2 has an invalid length. [ 1290.115996][T28361] netlink: 'syz.2.7499': attribute type 2 has an invalid length. [ 1290.610278][T28384] netlink: 'syz.3.7508': attribute type 16 has an invalid length. [ 1290.633029][T28384] netlink: 'syz.3.7508': attribute type 3 has an invalid length. [ 1290.647096][T28384] __nla_validate_parse: 10 callbacks suppressed [ 1290.647109][T28384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7508'. [ 1290.812124][T28392] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7512'. [ 1290.825865][T28392] netlink: 'syz.2.7512': attribute type 2 has an invalid length. [ 1292.551534][T28426] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7521'. [ 1292.570938][T28426] netlink: 'syz.2.7521': attribute type 2 has an invalid length. [ 1293.436786][T28450] netlink: 'syz.3.7531': attribute type 2 has an invalid length. [ 1294.047294][T28463] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7536'. [ 1294.107256][T28463] netlink: 'syz.3.7536': attribute type 2 has an invalid length. [ 1294.836294][T28488] netlink: 'syz.2.7544': attribute type 29 has an invalid length. [ 1294.853609][T28488] netlink: 'syz.2.7544': attribute type 29 has an invalid length. [ 1294.870713][T28488] netlink: 'syz.2.7544': attribute type 29 has an invalid length. [ 1294.896057][T28488] netlink: 'syz.2.7544': attribute type 29 has an invalid length. [ 1295.773467][T28515] wg2: entered promiscuous mode [ 1295.778374][T28515] wg2: entered allmulticast mode [ 1296.509378][T28537] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7564'. [ 1296.529078][T28537] validate_nla: 1 callbacks suppressed [ 1296.529092][T28537] netlink: 'syz.2.7564': attribute type 2 has an invalid length. [ 1297.011730][T28547] netlink: 'syz.1.7567': attribute type 29 has an invalid length. [ 1297.026689][T28547] netlink: 'syz.1.7567': attribute type 29 has an invalid length. [ 1297.110077][T28547] netlink: 'syz.1.7567': attribute type 29 has an invalid length. [ 1297.188801][T28550] netlink: 'syz.1.7567': attribute type 29 has an invalid length. [ 1297.315204][T28547] netlink: 'syz.1.7567': attribute type 29 has an invalid length. [ 1298.188889][T28579] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1298.248173][T28579] netlink: 'syz.3.7580': attribute type 2 has an invalid length. [ 1299.081272][T28592] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.7585'. [ 1299.544176][T28609] netlink: 'syz.3.7593': attribute type 29 has an invalid length. [ 1299.552393][T28609] netlink: 'syz.3.7593': attribute type 29 has an invalid length. [ 1299.563733][T28609] netlink: 'syz.3.7593': attribute type 29 has an invalid length. [ 1299.729104][T28612] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7594'. [ 1299.928892][T28620] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.7597'. [ 1300.240658][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.250755][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.781267][T28640] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.7607'. [ 1300.798312][T28642] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.7608'. [ 1300.936469][T28650] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7611'. [ 1302.305458][T28672] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7628'. [ 1302.325676][T28674] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.7619'. [ 1302.562708][T28676] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.7623'. [ 1302.586176][T28676] validate_nla: 5 callbacks suppressed [ 1302.586216][T28676] netlink: 'syz.0.7623': attribute type 2 has an invalid length. [ 1302.979096][T28701] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.7634'. [ 1303.277669][T28712] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.7638'. [ 1303.295334][T28712] netlink: 'syz.0.7638': attribute type 2 has an invalid length. [ 1304.799517][T28736] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7648'. [ 1304.812916][T28736] netlink: 'syz.2.7648': attribute type 2 has an invalid length. [ 1305.845216][T28763] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7658'. [ 1306.102049][T28772] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.7662'. [ 1306.117532][T28772] netlink: 'syz.1.7662': attribute type 2 has an invalid length. [ 1306.641412][T28801] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7674'. [ 1306.652233][T28801] netlink: 'syz.3.7674': attribute type 2 has an invalid length. [ 1307.388514][T28838] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7689'. [ 1307.412360][T28838] netlink: 'syz.3.7689': attribute type 2 has an invalid length. [ 1307.718827][T28853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7695'. [ 1308.169051][T28870] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7702'. [ 1308.185213][T28870] netlink: 'syz.2.7702': attribute type 2 has an invalid length. [ 1309.540123][T28907] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7719'. [ 1309.559081][T28907] netlink: 'syz.2.7719': attribute type 2 has an invalid length. [ 1310.417906][T28931] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.7731'. [ 1310.462185][T28931] netlink: 'syz.0.7731': attribute type 2 has an invalid length. [ 1315.623400][T29066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7790'. [ 1315.653918][T29066] netlink: 'syz.1.7790': attribute type 12 has an invalid length. [ 1315.661933][T29066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7790'. [ 1316.481032][T29095] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1316.519155][T29095] netlink: 'syz.2.7803': attribute type 12 has an invalid length. [ 1316.529030][T29095] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1319.995766][T29123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7814'. [ 1321.392254][T29123] netlink: 'syz.3.7814': attribute type 12 has an invalid length. [ 1321.400191][T29123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7814'. [ 1323.021183][T29142] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7823'. [ 1323.330528][T29156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7827'. [ 1323.344075][T29156] netlink: 'syz.0.7827': attribute type 12 has an invalid length. [ 1323.352053][T29156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7827'. [ 1326.519411][T29182] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7836'. [ 1326.691459][T29186] syzkaller0: entered promiscuous mode [ 1326.697075][T29186] syzkaller0: entered allmulticast mode [ 1328.492030][T29219] netlink: 'syz.0.7848': attribute type 29 has an invalid length. [ 1328.520982][T29219] netlink: 'syz.0.7848': attribute type 29 has an invalid length. [ 1328.548700][T29219] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7848'. [ 1328.676131][T29223] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7850'. [ 1328.836230][T29226] netlink: 'syz.0.7851': attribute type 27 has an invalid length. [ 1328.847570][T29226] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7851'. [ 1329.063366][T29233] syzkaller0: entered promiscuous mode [ 1329.068903][T29233] syzkaller0: entered allmulticast mode [ 1330.778152][T29260] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7859'. [ 1331.176481][T29279] syzkaller0: entered promiscuous mode [ 1331.182006][T29279] syzkaller0: entered allmulticast mode [ 1331.315866][T29285] netlink: 'syz.2.7873': attribute type 11 has an invalid length. [ 1331.334035][T29285] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.7873'. [ 1332.837484][T29297] netlink: 'syz.2.7876': attribute type 29 has an invalid length. [ 1332.855849][T29297] netlink: 'syz.2.7876': attribute type 29 has an invalid length. [ 1332.871902][T29297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7876'. [ 1334.666060][T29323] netlink: 'syz.3.7889': attribute type 29 has an invalid length. [ 1334.674826][T29323] netlink: 'syz.3.7889': attribute type 29 has an invalid length. [ 1334.688825][T29323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7889'. [ 1336.760035][T29383] syzkaller0: entered promiscuous mode [ 1336.765758][T29383] syzkaller0: entered allmulticast mode [ 1340.096352][T29427] syzkaller0: entered promiscuous mode [ 1340.101840][T29427] syzkaller0: entered allmulticast mode [ 1343.082329][T29481] syzkaller0: entered promiscuous mode [ 1343.088743][T29481] syzkaller0: entered allmulticast mode [ 1346.968366][T29572] žÿ: renamed from team_slave_1 [ 1347.722964][T29608] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8002'. [ 1347.737313][T29608] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8002'. [ 1350.170623][T29623] netlink: 'syz.3.8009': attribute type 1 has an invalid length. [ 1350.193486][T29623] netlink: 'syz.3.8009': attribute type 4 has an invalid length. [ 1350.201293][T29623] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8009'. [ 1351.395666][T29649] syzkaller0: entered promiscuous mode [ 1351.401188][T29649] syzkaller0: entered allmulticast mode [ 1351.413683][T29651] netlink: 'syz.1.8021': attribute type 33 has an invalid length. [ 1351.421546][T29651] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8021'. [ 1351.456168][T29651] `: renamed from ip6tnl0 (while UP) [ 1351.605064][T29651] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1351.690073][T29654] netlink: 'syz.1.8021': attribute type 21 has an invalid length. [ 1351.699029][T29654] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8021'. [ 1351.710025][T29654] netlink: 'syz.1.8021': attribute type 4 has an invalid length. [ 1351.718720][T29654] netlink: 'syz.1.8021': attribute type 5 has an invalid length. [ 1351.729319][T29654] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8021'. [ 1351.846342][T29662] delete_channel: no stack [ 1353.814879][T29691] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8033'. [ 1353.945811][T29693] syzkaller0: entered promiscuous mode [ 1353.951319][T29693] syzkaller0: entered allmulticast mode [ 1357.878402][T29738] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.8048'. [ 1358.057920][T29744] syzkaller0: entered promiscuous mode [ 1358.064656][T29744] syzkaller0: entered allmulticast mode [ 1359.623913][T29750] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8054'. [ 1360.337479][T29770] syzkaller0: entered promiscuous mode [ 1360.347913][T29770] syzkaller0: entered allmulticast mode [ 1361.670264][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.683326][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.512625][T29783] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.8061'. [ 1366.084614][T29835] delete_channel: no stack [ 1366.831289][T29851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8090'. [ 1367.982490][T29879] syzkaller0: entered promiscuous mode [ 1367.992224][T29879] syzkaller0: entered allmulticast mode [ 1379.464046][T29989] syzkaller0: entered promiscuous mode [ 1379.469535][T29989] syzkaller0: entered allmulticast mode [ 1381.078294][T29991] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1381.698638][T30018] netlink: 'syz.3.8153': attribute type 2 has an invalid length. [ 1381.706875][T30018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8153'. [ 1384.506024][T30064] syzkaller0: entered promiscuous mode [ 1384.511619][T30064] syzkaller0: entered allmulticast mode [ 1394.440983][T30173] syzkaller0: entered promiscuous mode [ 1394.447835][T30173] syzkaller0: entered allmulticast mode [ 1397.448605][T30228] syzkaller0: entered promiscuous mode [ 1397.456893][T30228] syzkaller0: entered allmulticast mode [ 1403.017122][T30281] syzkaller0: entered promiscuous mode [ 1404.866068][T30305] syzkaller0: entered promiscuous mode [ 1404.871953][T30305] syzkaller0: entered allmulticast mode [ 1408.345849][T30351] syzkaller0: entered promiscuous mode [ 1410.291142][T30353] netlink: 'syz.0.8266': attribute type 21 has an invalid length. [ 1410.425580][T30372] netlink: 'syz.0.8272': attribute type 10 has an invalid length. [ 1410.443404][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.451419][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.484562][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.504794][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.525169][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.547315][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.575431][T30375] syzkaller0: entered promiscuous mode [ 1410.581561][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.590377][T30375] syzkaller0: entered allmulticast mode [ 1410.613963][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.633546][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.642299][T30372] netlink: 'syz.0.8272': attribute type 11 has an invalid length. [ 1410.667188][T30372] netlink: 'syz.0.8272': attribute type 4 has an invalid length. [ 1410.693382][T30372] netlink: 'syz.0.8272': attribute type 5 has an invalid length. [ 1410.708917][T30372] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.8272'. [ 1412.578423][T30397] syzkaller0: entered promiscuous mode [ 1412.586204][T30397] syzkaller0: entered allmulticast mode [ 1414.522844][T30436] netlink: 'syz.2.8292': attribute type 10 has an invalid length. [ 1414.812756][T30444] tun0: tun_chr_ioctl cmd 1074812118 [ 1414.829847][T30444] tun0: tun_chr_ioctl cmd 35108 [ 1415.238669][T30458] syzkaller0: entered promiscuous mode [ 1419.803643][T30480] wg2: left promiscuous mode [ 1419.808438][T30480] wg2: left allmulticast mode [ 1419.861733][T30488] wg2: entered promiscuous mode [ 1419.872864][T30488] wg2: entered allmulticast mode [ 1420.376640][T30505] syzkaller0: entered promiscuous mode [ 1420.507250][T30509] sock: sock_timestamping_bind_phc: sock not bind to device [ 1422.621487][T30541] netlink: 'syz.2.8331': attribute type 10 has an invalid length. [ 1422.637627][T30541] nla_validate_range_unsigned: 25 callbacks suppressed [ 1422.637717][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.661111][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.694674][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.722498][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.731592][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.740013][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.748600][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.757045][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.765227][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.783310][T30541] netlink: 'syz.2.8331': attribute type 11 has an invalid length. [ 1422.823267][T30541] netlink: 'syz.2.8331': attribute type 4 has an invalid length. [ 1422.831232][T30541] netlink: 'syz.2.8331': attribute type 5 has an invalid length. [ 1422.871043][T30541] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.8331'. [ 1422.996067][T30555] wg2: left promiscuous mode [ 1423.000991][T30555] wg2: left allmulticast mode [ 1423.036141][T30555] wg2: entered promiscuous mode [ 1423.042763][T30555] wg2: entered allmulticast mode [ 1423.129837][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.139646][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.253025][T30595] wg2: left promiscuous mode [ 1424.260674][T30595] wg2: left allmulticast mode [ 1424.346307][T30595] wg2: entered promiscuous mode [ 1424.352895][T30595] wg2: entered allmulticast mode [ 1424.739105][T30610] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8360'. [ 1425.690238][T30624] wg2: left promiscuous mode [ 1425.695692][T30624] wg2: left allmulticast mode [ 1425.754564][T30629] wg2: entered promiscuous mode [ 1425.760173][T30629] wg2: entered allmulticast mode [ 1426.064051][T30642] netlink: 'syz.1.8371': attribute type 10 has an invalid length. [ 1426.072247][T30642] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8371'. [ 1426.081697][T30642] batadv_slave_1: entered promiscuous mode [ 1426.651495][T30663] wg2: left promiscuous mode [ 1426.661150][T30663] wg2: left allmulticast mode [ 1426.704352][T30663] wg2: entered promiscuous mode [ 1426.710795][T30663] wg2: entered allmulticast mode [ 1426.739611][T30665] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.8382'. [ 1426.906897][T30671] netlink: 'syz.2.8386': attribute type 10 has an invalid length. [ 1426.916550][T30671] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1430.151606][T30742] netlink: 'syz.1.8412': attribute type 10 has an invalid length. [ 1432.382370][T30799] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1436.088276][T30897] netlink: 'syz.1.8470': attribute type 9 has an invalid length. [ 1436.100994][T30897] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8470'. [ 1439.289823][T30913] netlink: 'syz.1.8476': attribute type 10 has an invalid length. [ 1439.298914][T30913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8476'. [ 1439.313548][T30913] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1439.555141][T30925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8482'. [ 1440.311100][T30944] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8489'. [ 1440.355879][T30944] netlink: 'syz.1.8489': attribute type 10 has an invalid length. [ 1440.393272][T30944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8489'. [ 1440.406015][T30944] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1441.937077][T30991] netlink: 'syz.1.8504': attribute type 21 has an invalid length. [ 1441.971167][T30988] netlink: 'syz.0.8503': attribute type 21 has an invalid length. [ 1442.186373][T30998] sctp: [Deprecated]: syz.0.8506 (pid 30998) Use of int in maxseg socket option. [ 1442.186373][T30998] Use struct sctp_assoc_value instead [ 1445.644711][T31025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8516'. [ 1445.696057][T31025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1445.782459][T31026] netlink: 'syz.0.8516': attribute type 9 has an invalid length. [ 1445.791102][T31026] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8516'. [ 1445.801624][T31025] netlink: 'syz.0.8516': attribute type 9 has an invalid length. [ 1445.810747][T31025] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8516'. [ 1455.129104][T31121] sit0: left promiscuous mode [ 1455.926042][T31146] netlink: 'syz.2.8555': attribute type 1 has an invalid length. [ 1455.941970][T31146] netlink: 'syz.2.8555': attribute type 3 has an invalid length. [ 1455.951940][T31146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8555'. [ 1455.991712][T31146] netlink: 'syz.2.8555': attribute type 10 has an invalid length. [ 1456.000248][T31146] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8555'. [ 1456.819438][T31162] Ÿë: port 2(gretap0) entered blocking state [ 1456.833347][T31162] Ÿë: port 2(gretap0) entered disabled state [ 1456.849017][T31162] gretap0: entered allmulticast mode [ 1456.860184][T31162] gretap0: entered promiscuous mode [ 1457.206021][T31176] netlink: 'syz.0.8567': attribute type 1 has an invalid length. [ 1457.223296][T31176] netlink: 'syz.0.8567': attribute type 3 has an invalid length. [ 1457.249740][T31176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8567'. [ 1457.250067][T31178] netlink: 'syz.3.8568': attribute type 41 has an invalid length. [ 1457.287049][T31176] netlink: 'syz.0.8567': attribute type 10 has an invalid length. [ 1457.310958][T31176] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8567'. [ 1457.757031][T31195] delete_channel: no stack [ 1458.147223][T31208] netlink: 'syz.3.8581': attribute type 1 has an invalid length. [ 1458.155638][T31208] netlink: 'syz.3.8581': attribute type 3 has an invalid length. [ 1458.164951][T31208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1458.222498][T31208] netlink: 'syz.3.8581': attribute type 10 has an invalid length. [ 1458.253838][T31208] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1459.576845][T31244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1459.598370][T31244] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1459.612154][T31245] sit0: left promiscuous mode [ 1460.559254][T31277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1460.600720][T31277] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1461.750331][T31294] sit0: left promiscuous mode [ 1462.886519][T31331] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8622'. [ 1462.903280][T31331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1463.667150][T31352] delete_channel: no stack [ 1465.048027][T31381] validate_nla: 6 callbacks suppressed [ 1465.048064][T31381] netlink: 'syz.3.8645': attribute type 2 has an invalid length. [ 1465.101118][T31381] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.8645'. [ 1465.265322][T31387] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8648'. [ 1465.668817][T31395] netlink: 'syz.2.8652': attribute type 9 has an invalid length. [ 1465.688083][T31395] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8652'. [ 1465.892151][T31393] can: request_module (can-proto-0) failed. [ 1466.409431][T31409] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8656'. [ 1467.902220][T31442] -1: renamed from syzkaller0 [ 1468.090715][T31451] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8670'. [ 1468.145610][T31453] netlink: 'syz.1.8668': attribute type 9 has an invalid length. [ 1468.155276][T31453] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8668'. [ 1469.219455][T31478] -1: renamed from syzkaller0 [ 1469.280705][T31476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8680'. [ 1469.840980][T31490] netlink: 'syz.0.8683': attribute type 9 has an invalid length. [ 1469.858002][T31490] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8683'. [ 1469.890451][T31473] delete_channel: no stack [ 1469.999970][T31494] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8686'. [ 1470.038744][T31494] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1470.588505][T31506] -1: renamed from syzkaller0 [ 1470.604539][T31504] can: request_module (can-proto-0) failed. [ 1471.498317][T31525] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8698'. [ 1471.531802][T31525] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1471.552383][T31522] syzkaller0: entered promiscuous mode [ 1471.578910][T31522] syzkaller0: entered allmulticast mode [ 1473.316237][T31559] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8710'. [ 1474.165811][T31583] netlink: 'syz.0.8721': attribute type 2 has an invalid length. [ 1474.193725][T31583] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.8721'. [ 1474.766116][T31600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8725'. [ 1474.924440][T31602] netlink: 'syz.3.8727': attribute type 9 has an invalid length. [ 1474.932634][T31602] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8727'. [ 1477.251510][T31617] delete_channel: no stack [ 1477.418354][T31636] syzkaller0: entered promiscuous mode [ 1477.433925][T31636] syzkaller0: entered allmulticast mode [ 1477.606370][T31638] can: request_module (can-proto-0) failed. [ 1478.669700][T31648] -1: renamed from syzkaller0 [ 1479.424248][T31668] syzkaller0: entered promiscuous mode [ 1479.430216][T31668] syzkaller0: entered allmulticast mode [ 1479.554768][T31673] can: request_module (can-proto-0) failed. [ 1480.460652][T31693] -1: renamed from syzkaller0 [ 1480.567801][T31701] can: request_module (can-proto-0) failed. [ 1480.946804][T31711] netlink: 'syz.3.8767': attribute type 10 has an invalid length. [ 1480.977345][T31711] nr0: port 1(hsr0) entered disabled state [ 1480.993723][T31711] hsr0: left allmulticast mode [ 1480.998554][T31711] hsr_slave_0: left allmulticast mode [ 1481.004280][T31711] nr0: port 1(hsr0) entered disabled state [ 1481.073916][T31713] netlink: 'syz.2.8768': attribute type 10 has an invalid length. [ 1481.081956][T31713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8768'. [ 1481.554571][T31731] -1: renamed from syzkaller0 [ 1481.610593][T31725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8774'. [ 1482.693680][T31755] syzkaller0: entered promiscuous mode [ 1482.699220][T31755] syzkaller0: entered allmulticast mode [ 1483.569066][T31777] netlink: 'syz.0.8789': attribute type 1 has an invalid length. [ 1483.605464][T31775] -1: renamed from syzkaller0 [ 1483.647427][T31777] netlink: 'syz.0.8789': attribute type 3 has an invalid length. [ 1483.682498][T31777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8789'. [ 1483.708044][T31780] netlink: 'syz.0.8789': attribute type 10 has an invalid length. [ 1483.750047][T31780] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8789'. [ 1483.905154][T31785] netlink: 'syz.3.8792': attribute type 10 has an invalid length. [ 1483.923373][T31785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8792'. [ 1484.047723][T31788] delete_channel: no stack [ 1484.566205][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.572549][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.857251][T31812] netlink: 'syz.3.8804': attribute type 10 has an invalid length. [ 1484.950413][T31795] delete_channel: no stack [ 1485.104579][T31815] -1: renamed from syzkaller0 [ 1485.305362][T31818] netlink: 'syz.1.8807': attribute type 10 has an invalid length. [ 1485.324275][T31818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8807'. [ 1485.536007][T31827] netlink: 'syz.3.8811': attribute type 13 has an invalid length. [ 1486.393020][T31848] -1: renamed from syzkaller0 [ 1486.740344][T31856] netlink: 'syz.0.8822': attribute type 10 has an invalid length. [ 1486.761706][T31856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8822'. [ 1486.811620][T31857] delete_channel: no stack [ 1487.788607][T31884] -1: renamed from syzkaller0 [ 1488.169164][T31894] netlink: 'syz.2.8837': attribute type 10 has an invalid length. [ 1488.177641][T31894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8837'. [ 1488.559318][T31902] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.8849'. [ 1488.579098][T31902] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.8849'. [ 1488.873485][T31919] netlink: 'syz.3.8846': attribute type 10 has an invalid length. [ 1489.092755][T31924] delete_channel: no stack [ 1489.095641][T31927] netlink: 'syz.2.8850': attribute type 10 has an invalid length. [ 1489.106141][T31927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8850'. [ 1489.464377][T31937] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1489.474669][T31937] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1489.735993][T31949] netlink: 'syz.0.8858': attribute type 10 has an invalid length. [ 1489.744318][T31949] hsr0: left allmulticast mode [ 1489.749094][T31949] hsr_slave_0: left allmulticast mode [ 1489.855746][T31953] syzkaller0: entered promiscuous mode [ 1489.861493][T31953] syzkaller0: entered allmulticast mode [ 1490.123347][T31961] delete_channel: no stack [ 1490.158922][T31966] netlink: 'syz.3.8862': attribute type 10 has an invalid length. [ 1490.183580][T31966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8862'. [ 1490.522512][T31981] delete_channel: no stack [ 1490.544247][T31985] netlink: 'syz.0.8870': attribute type 10 has an invalid length. [ 1490.628337][T31989] netlink: 'syz.2.8872': attribute type 7 has an invalid length. [ 1490.653807][T31983] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.8868'. [ 1490.664019][T31983] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.8868'. [ 1490.721297][T31989] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1490.747541][T31989] CPU: 1 PID: 31989 Comm: syz.2.8872 Not tainted syzkaller #0 [ 1490.755062][T31989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1490.765158][T31989] Call Trace: [ 1490.768470][T31989] [ 1490.771441][T31989] dump_stack_lvl+0x18c/0x250 [ 1490.776158][T31989] ? show_regs_print_info+0x20/0x20 [ 1490.781357][T31989] ? load_image+0x420/0x420 [ 1490.785915][T31989] sysfs_warn_dup+0x8e/0xa0 [ 1490.790450][T31989] sysfs_do_create_link_sd+0xc0/0x110 [ 1490.795823][T31989] device_add_class_symlinks+0x1cf/0x240 [ 1490.801487][T31989] device_add+0x4f9/0xc40 [ 1490.805853][T31989] wiphy_register+0x1d99/0x2ac0 [ 1490.810737][T31989] ? cfg80211_event_work+0x40/0x40 [ 1490.815847][T31989] ? minstrel_ht_alloc+0x88a/0x990 [ 1490.820969][T31989] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1490.827097][T31989] ieee80211_register_hw+0x2dd8/0x3b30 [ 1490.832633][T31989] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1490.838227][T31989] ? ieee80211_tasklet_handler+0x20/0x20 [ 1490.843875][T31989] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1490.849784][T31989] ? __debug_object_init+0xec/0x450 [ 1490.855003][T31989] ? __asan_memset+0x22/0x40 [ 1490.859609][T31989] ? __hrtimer_init+0x189/0x270 [ 1490.864506][T31989] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1490.870277][T31989] ? mac80211_hwsim_free+0x220/0x220 [ 1490.875571][T31989] ? rcu_is_watching+0x15/0xb0 [ 1490.880343][T31989] ? kstrndup+0xbd/0x140 [ 1490.884616][T31989] hwsim_new_radio_nl+0xdad/0x1a70 [ 1490.889752][T31989] ? __nla_validate+0x50/0x50 [ 1490.894482][T31989] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1490.900842][T31989] ? __nla_parse+0x40/0x50 [ 1490.905276][T31989] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1490.911626][T31989] genl_family_rcv_msg_doit+0x21a/0x310 [ 1490.917195][T31989] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1490.923115][T31989] ? bpf_lsm_capable+0x9/0x10 [ 1490.927800][T31989] ? security_capable+0x89/0xb0 [ 1490.932668][T31989] genl_rcv_msg+0x611/0x7a0 [ 1490.937193][T31989] ? genl_bind+0x360/0x360 [ 1490.941615][T31989] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1490.947955][T31989] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1490.954559][T31989] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1490.961167][T31989] netlink_rcv_skb+0x235/0x4c0 [ 1490.965952][T31989] ? genl_bind+0x360/0x360 [ 1490.970391][T31989] ? netlink_ack+0x1160/0x1160 [ 1490.975182][T31989] ? __lock_acquire+0x7d80/0x7d80 [ 1490.980215][T31989] ? net_generic+0x1e/0x240 [ 1490.984734][T31989] ? down_read+0x1ac/0x2e0 [ 1490.989167][T31989] genl_rcv+0x28/0x40 [ 1490.993162][T31989] netlink_unicast+0x7b1/0x930 [ 1490.997952][T31989] netlink_sendmsg+0x8d0/0xbf0 [ 1491.002740][T31989] ? netlink_getsockopt+0x590/0x590 [ 1491.007953][T31989] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1491.013511][T31989] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1491.018810][T31989] ? security_socket_sendmsg+0x80/0xa0 [ 1491.024272][T31989] ? netlink_getsockopt+0x590/0x590 [ 1491.029484][T31989] ____sys_sendmsg+0x61b/0x980 [ 1491.034267][T31989] ? __asan_memset+0x22/0x40 [ 1491.038866][T31989] ? __sys_sendmsg_sock+0x30/0x30 [ 1491.043903][T31989] ? __import_iovec+0x5f2/0x850 [ 1491.048777][T31989] ? import_iovec+0x73/0xa0 [ 1491.053296][T31989] ___sys_sendmsg+0x2a6/0x360 [ 1491.057999][T31989] ? __sys_sendmsg+0x2b0/0x2b0 [ 1491.062855][T31989] __se_sys_sendmsg+0x1d0/0x2c0 [ 1491.067724][T31989] ? __x64_sys_sendmsg+0x80/0x80 [ 1491.072703][T31989] ? trace_sys_enter+0x1f/0x80 [ 1491.077487][T31989] do_syscall_64+0x55/0xb0 [ 1491.081914][T31989] ? clear_bhb_loop+0x40/0x90 [ 1491.086604][T31989] ? clear_bhb_loop+0x40/0x90 [ 1491.091295][T31989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1491.097197][T31989] RIP: 0033:0x7f89f879e159 [ 1491.101619][T31989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.121231][T31989] RSP: 002b:00007f89f95da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1491.129661][T31989] RAX: ffffffffffffffda RBX: 00007f89f8a25fa0 RCX: 00007f89f879e159 [ 1491.137638][T31989] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1491.145610][T31989] RBP: 00007f89f883506b R08: 0000000000000000 R09: 0000000000000000 [ 1491.153583][T31989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1491.161556][T31989] R13: 00007f89f8a26038 R14: 00007f89f8a25fa0 R15: 00007ffc19c01c78 [ 1491.169557][T31989] [ 1491.617688][T32010] netlink: 'syz.1.8879': attribute type 4 has an invalid length. [ 1491.636713][T32010] netlink: 'syz.1.8879': attribute type 10 has an invalid length. [ 1492.901469][T32030] __nla_validate_parse: 3 callbacks suppressed [ 1492.901490][T32030] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.8886'. [ 1492.933243][T32030] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.8886'. [ 1493.099649][T32048] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8891'. [ 1493.770571][T32059] syzkaller0: entered promiscuous mode [ 1493.785603][T32059] syzkaller0: entered allmulticast mode [ 1494.229702][T32066] netlink: 'syz.3.8905': attribute type 4 has an invalid length. [ 1494.251717][T32066] netlink: 'syz.3.8905': attribute type 10 has an invalid length. [ 1494.265481][T32066] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8905'. [ 1494.546142][T32077] netlink: 'syz.0.8901': attribute type 4 has an invalid length. [ 1494.565910][T32077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1494.614131][T32071] netlink: 'syz.1.8898': attribute type 153 has an invalid length. [ 1494.622115][T32071] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.8898'. [ 1494.888750][T32071] netlink: 'syz.1.8898': attribute type 1 has an invalid length. [ 1494.898189][T32071] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.8898'. [ 1494.919378][T32083] netlink: 'syz.2.8904': attribute type 10 has an invalid length. [ 1494.943409][T32083] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8904'. [ 1494.968985][T32088] netlink: 'syz.3.8907': attribute type 10 has an invalid length. [ 1495.017257][T32085] syzkaller0: entered promiscuous mode [ 1495.022959][T32085] syzkaller0: entered allmulticast mode [ 1495.404128][T32094] netlink: 'syz.3.8917': attribute type 153 has an invalid length. [ 1495.412238][T32094] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.8917'. [ 1495.550008][T32094] netlink: 'syz.3.8917': attribute type 1 has an invalid length. [ 1495.561106][T32102] netlink: 'syz.0.8910': attribute type 4 has an invalid length. [ 1495.582671][T32102] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8910'. [ 1497.305627][T32139] syzkaller0: entered promiscuous mode [ 1497.311311][T32139] syzkaller0: entered allmulticast mode [ 1498.077480][T32146] __nla_validate_parse: 3 callbacks suppressed [ 1498.077496][T32146] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8925'. [ 1498.370398][T32162] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.8928'. [ 1498.472229][T32160] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.8928'. [ 1498.513254][T32165] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.8937'. [ 1498.522575][T32165] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.8937'. [ 1498.624518][T32167] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8930'. [ 1499.085475][T32176] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.8933'. [ 1499.107660][T32176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8933'. [ 1499.522405][T32188] validate_nla: 9 callbacks suppressed [ 1499.522444][T32188] netlink: 'syz.1.8946': attribute type 10 has an invalid length. [ 1499.991325][T32199] syzkaller0: entered promiscuous mode [ 1499.997024][T32199] syzkaller0: entered allmulticast mode [ 1500.329367][T32207] netlink: 'syz.0.8943': attribute type 10 has an invalid length. [ 1500.353291][T32207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8943'. [ 1501.070190][T32225] netlink: 'syz.0.8950': attribute type 10 has an invalid length. [ 1501.393394][T32237] netlink: 'syz.0.8952': attribute type 13 has an invalid length. [ 1501.401399][T32237] netlink: 'syz.0.8952': attribute type 58 has an invalid length. [ 1501.436361][T32237] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8952'. [ 1501.658650][T32229] netlink: 'syz.3.8957': attribute type 3 has an invalid length. [ 1503.566792][T32278] netlink: 'syz.2.8964': attribute type 3 has an invalid length. [ 1503.678540][T32278] __nla_validate_parse: 3 callbacks suppressed [ 1503.678559][T32278] netlink: 160656 bytes leftover after parsing attributes in process `syz.2.8964'. [ 1505.432062][T32304] netlink: 'syz.2.8976': attribute type 153 has an invalid length. [ 1505.474314][T32304] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.8976'. [ 1505.716502][T32304] netlink: 'syz.2.8976': attribute type 1 has an invalid length. [ 1505.744059][T32304] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.8976'. [ 1506.747747][T32334] netlink: 'syz.0.8984': attribute type 3 has an invalid length. [ 1506.763788][T32334] netlink: 160656 bytes leftover after parsing attributes in process `syz.0.8984'. [ 1507.320803][T32342] netlink: 'syz.3.8993': attribute type 10 has an invalid length. [ 1507.357947][T32342] hsr0: left promiscuous mode [ 1507.363039][T32343] netlink: 'syz.2.8994': attribute type 10 has an invalid length. [ 1507.566384][T32345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8996'. [ 1507.703338][T32349] netlink: 'syz.1.8997': attribute type 10 has an invalid length. [ 1507.728904][T32351] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8998'. [ 1507.774770][T32351] bridge_slave_1: default FDB implementation only supports local addresses [ 1507.795788][T32353] netlink: 'syz.2.8999': attribute type 10 has an invalid length. [ 1508.619786][T32390] netlink: 'syz.3.9017': attribute type 10 has an invalid length. [ 1508.907781][T32394] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.9019'. [ 1508.918057][T32394] openvswitch: netlink: Key type 8208 is out of range max 32 [ 1509.240079][T32411] netlink: 'syz.1.9028': attribute type 10 has an invalid length. [ 1509.260540][T32411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9028'. [ 1509.284783][T32411] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1511.575758][T32512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9069'. [ 1511.585898][T32512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9069'. [ 1511.595299][T32508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9069'. [ 1512.691288][T32563] netlink: 'syz.0.9093': attribute type 29 has an invalid length. [ 1512.713827][T32563] netlink: 'syz.0.9093': attribute type 29 has an invalid length. [ 1512.728294][T32563] netlink: 'syz.0.9093': attribute type 29 has an invalid length. [ 1512.741867][T32563] netlink: 'syz.0.9093': attribute type 29 has an invalid length. [ 1513.038605][T32576] netlink: 'syz.1.9099': attribute type 13 has an invalid length. [ 1513.047555][T32576] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9099'. [ 1513.139609][T32580] tap1: tun_chr_ioctl cmd 1074025677 [ 1513.145532][T32580] tap1: linktype set to 513 [ 1513.602624][T32604] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9113'. [ 1513.640888][T32604] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9113'. [ 1513.651769][T32604] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9113'. [ 1513.661703][T32604] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9113'. [ 1514.464367][T32626] netlink: 'syz.2.9121': attribute type 16 has an invalid length. [ 1514.472230][T32626] netlink: 'syz.2.9121': attribute type 3 has an invalid length. [ 1514.481644][T32626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1514.657378][T32632] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.9125'. [ 1515.284367][T32657] netlink: 'syz.1.9135': attribute type 2 has an invalid length. [ 1516.029288][T32690] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.9148'. [ 1516.045045][T32690] openvswitch: netlink: Key type 8208 is out of range max 32 [ 1519.129396][ T313] netlink: 'syz.2.9185': attribute type 10 has an invalid length. [ 1519.143250][ T313] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9185'. [ 1519.822887][ T330] netlink: 'syz.0.9190': attribute type 3 has an invalid length. [ 1519.830890][ T330] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9190'. [ 1520.303844][ T344] netlink: 'syz.3.9198': attribute type 29 has an invalid length. [ 1520.312413][ T344] netlink: 'syz.3.9198': attribute type 29 has an invalid length. [ 1520.340921][ T344] netlink: 'syz.3.9198': attribute type 29 has an invalid length. [ 1520.350393][ T344] netlink: 'syz.3.9198': attribute type 29 has an invalid length. [ 1520.359764][ T344] netlink: 'syz.3.9198': attribute type 29 has an invalid length. [ 1521.127497][ T371] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.9209'. [ 1529.438188][ T530] netlink: 'syz.2.9276': attribute type 10 has an invalid length. [ 1530.305088][ T535] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9278'. [ 1530.327362][ T535] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1531.865243][ T573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9294'. [ 1531.875487][ T573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9294'. [ 1531.888243][ T573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9294'. [ 1531.899254][ T573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9294'. [ 1533.700824][ T632] netlink: 'syz.0.9327': attribute type 29 has an invalid length. [ 1533.714918][ T632] netlink: 'syz.0.9327': attribute type 29 has an invalid length. [ 1537.546592][ T737] delete_channel: no stack [ 1539.349037][ T752] netlink: 'syz.3.9366': attribute type 1 has an invalid length. [ 1539.356917][ T752] netlink: 'syz.3.9366': attribute type 4 has an invalid length. [ 1539.365014][ T752] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9366'. [ 1540.835023][ T788] syzkaller0: entered promiscuous mode [ 1540.840618][ T788] syzkaller0: entered allmulticast mode [ 1540.929460][ T787] syzkaller0: entered promiscuous mode [ 1540.935113][ T787] syzkaller0: entered allmulticast mode [ 1545.322211][ T814] žÿ: renamed from team_slave_1 [ 1545.759047][ T835] syzkaller0: entered promiscuous mode [ 1545.766060][ T835] syzkaller0: entered allmulticast mode [ 1545.999860][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.006316][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.224194][ T861] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1548.240106][ T862] syzkaller0: entered promiscuous mode [ 1548.246565][ T862] syzkaller0: entered allmulticast mode [ 1548.409156][ T871] netlink: 'syz.2.9412': attribute type 33 has an invalid length. [ 1548.423267][ T871] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9412'. [ 1548.432426][ T871] `: renamed from ip6tnl0 (while UP) [ 1548.456014][ T871] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1548.491009][ T874] netlink: 'syz.2.9412': attribute type 21 has an invalid length. [ 1548.516217][ T874] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9412'. [ 1548.530817][ T874] netlink: 'syz.2.9412': attribute type 4 has an invalid length. [ 1548.572591][ T874] netlink: 'syz.2.9412': attribute type 5 has an invalid length. [ 1548.627819][ T874] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9412'. [ 1550.063008][ T891] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9422'. [ 1550.822657][ T897] syzkaller0: entered promiscuous mode [ 1550.828536][ T897] syzkaller0: entered allmulticast mode [ 1552.304894][ T905] netlink: 'syz.0.9425': attribute type 33 has an invalid length. [ 1552.312743][ T905] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9425'. [ 1552.322201][ T905] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1552.337473][ T909] netlink: 'syz.0.9425': attribute type 21 has an invalid length. [ 1552.345801][ T909] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9425'. [ 1552.355065][ T909] netlink: 'syz.0.9425': attribute type 4 has an invalid length. [ 1552.363215][ T909] netlink: 'syz.0.9425': attribute type 5 has an invalid length. [ 1552.370974][ T909] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9425'. [ 1553.137256][ T933] syzkaller0: entered promiscuous mode [ 1553.142839][ T933] syzkaller0: entered allmulticast mode [ 1553.397029][ T956] delete_channel: no stack [ 1554.809010][ T953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9444'. [ 1554.823253][ T955] netlink: 'syz.3.9437': attribute type 33 has an invalid length. [ 1554.831111][ T955] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1554.840652][ T955] `: renamed from ip6tnl0 (while UP) [ 1554.850071][ T955] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1554.867548][ T958] netlink: 'syz.3.9437': attribute type 21 has an invalid length. [ 1554.876917][ T958] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1554.886968][ T958] netlink: 'syz.3.9437': attribute type 4 has an invalid length. [ 1554.895033][ T958] netlink: 'syz.3.9437': attribute type 5 has an invalid length. [ 1554.902853][ T958] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1558.447689][ T1002] syzkaller0: entered promiscuous mode [ 1558.456885][ T1002] syzkaller0: entered allmulticast mode [ 1558.466660][ T1006] netlink: 'syz.1.9453': attribute type 33 has an invalid length. [ 1558.474803][ T1006] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9453'. [ 1558.484362][ T1006] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1558.502651][ T1011] netlink: 'syz.1.9453': attribute type 21 has an invalid length. [ 1558.510631][ T1011] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9453'. [ 1558.526942][ T1011] netlink: 'syz.1.9453': attribute type 4 has an invalid length. [ 1558.537628][ T1011] netlink: 'syz.1.9453': attribute type 5 has an invalid length. [ 1558.545489][ T1011] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9453'. [ 1560.064257][ T1004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1561.110239][ T1031] delete_channel: no stack [ 1564.800913][ T1048] netlink: 'syz.0.9466': attribute type 33 has an invalid length. [ 1564.809100][ T1048] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9466'. [ 1564.818782][ T1048] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1564.893816][ T1053] netlink: 'syz.0.9466': attribute type 21 has an invalid length. [ 1564.901860][ T1053] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9466'. [ 1564.911662][ T1053] netlink: 'syz.0.9466': attribute type 4 has an invalid length. [ 1564.919866][ T1053] netlink: 'syz.0.9466': attribute type 5 has an invalid length. [ 1564.928248][ T1053] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9466'. [ 1565.534856][ T1063] delete_channel: no stack [ 1565.558791][ T1060] syzkaller0: entered promiscuous mode [ 1565.565122][ T1060] syzkaller0: entered allmulticast mode [ 1567.392398][ T1074] syzkaller0: entered promiscuous mode [ 1567.398722][ T1074] syzkaller0: entered allmulticast mode [ 1569.070240][ T1100] syzkaller0: entered promiscuous mode [ 1569.103200][ T1100] syzkaller0: entered allmulticast mode [ 1569.158239][ T1105] delete_channel: no stack [ 1569.278964][ T1103] syzkaller0: entered promiscuous mode [ 1569.284754][ T1103] syzkaller0: entered allmulticast mode [ 1573.245370][ T1131] syzkaller0: entered promiscuous mode [ 1573.250856][ T1131] syzkaller0: entered allmulticast mode [ 1573.385065][ T1142] delete_channel: no stack [ 1575.326811][ T1169] delete_channel: no stack [ 1575.397740][ T1173] netlink: 'syz.1.9507': attribute type 21 has an invalid length. [ 1575.503051][ T1177] syzkaller0: entered promiscuous mode [ 1575.516029][ T1177] syzkaller0: entered allmulticast mode [ 1575.687274][ T1179] syzkaller0: entered promiscuous mode [ 1575.692961][ T1179] syzkaller0: entered allmulticast mode [ 1575.702395][ T1181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9519'. [ 1575.908752][ T1183] syzkaller0: entered promiscuous mode [ 1575.915006][ T1183] syzkaller0: entered allmulticast mode [ 1579.810403][ T1228] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9524'. [ 1579.950032][ T1230] syzkaller0: entered promiscuous mode [ 1579.956599][ T1230] syzkaller0: entered allmulticast mode [ 1581.526591][ T1241] tun0: tun_chr_ioctl cmd 1074812118 [ 1581.535964][ T1244] tun0: tun_chr_ioctl cmd 35108 [ 1581.727650][ T1248] syzkaller0: entered promiscuous mode [ 1581.733435][ T1248] syzkaller0: entered allmulticast mode [ 1581.821462][ T1254] syzkaller0: entered promiscuous mode [ 1581.827623][ T1254] syzkaller0: entered allmulticast mode [ 1582.190546][ T1263] delete_channel: no stack [ 1583.692499][ T1274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1585.161195][ T1276] netlink: 'syz.0.9541': attribute type 10 has an invalid length. [ 1585.169169][ T1283] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9543'. [ 1585.179565][ T1283] hsr_slave_0: left promiscuous mode [ 1585.224010][ T1290] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9544'. [ 1585.386509][ T1300] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 1586.208177][ T1318] syzkaller0: entered promiscuous mode [ 1586.266579][ T1318] syzkaller0: entered allmulticast mode [ 1586.758239][ T1328] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.9558'. [ 1588.387533][ T1339] netlink: 'syz.3.9562': attribute type 10 has an invalid length. [ 1588.396970][ T1339] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9562'. [ 1588.684312][ T1353] syzkaller0: create flow: hash 1396473225 index 2 [ 1588.747707][ T7173] syzkaller0: tun_net_xmit 76 [ 1588.753157][ T7173] syzkaller0: tun_net_xmit 48 [ 1588.773715][T25247] syzkaller0: tun_net_xmit 76 [ 1588.831616][ T1347] syzkaller0: delete flow: hash 1396473225 index 2 [ 1588.864988][T31253] syzkaller0: tun_net_xmit 76 [ 1594.190599][ T1398] syzkaller0: create flow: hash 1396473225 index 2 [ 1594.224498][ T7173] syzkaller0: tun_net_xmit 76 [ 1594.231596][ T7173] syzkaller0: tun_net_xmit 48 [ 1594.253428][T31306] syzkaller0: tun_net_xmit 76 [ 1594.303550][T31307] syzkaller0: tun_net_xmit 76 [ 1594.355959][ T1398] syzkaller0: delete flow: hash 1396473225 index 2 [ 1595.444000][ T1419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.063256][ T1433] netlink: 'syz.1.9602': attribute type 21 has an invalid length. [ 1597.474343][ T1451] netlink: 'syz.0.9604': attribute type 21 has an invalid length. [ 1597.988690][ T1463] netlink: 'syz.0.9610': attribute type 9 has an invalid length. [ 1597.997001][ T1463] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9610'. [ 1598.283506][ T7173] syzkaller0: tun_net_xmit 76 [ 1598.288525][ T7173] syzkaller0: tun_net_xmit 48 [ 1598.304292][T25247] syzkaller0: tun_net_xmit 76 [ 1598.343657][ T1467] syzkaller0: create flow: hash 1396473225 index 2 [ 1598.441366][T25247] syzkaller0: tun_net_xmit 76 [ 1598.450143][T25247] syzkaller0: tun_net_xmit 76 [ 1598.464103][ T1467] syzkaller0: delete flow: hash 1396473225 index 2 [ 1600.163070][ T1474] netlink: 'syz.1.9621': attribute type 9 has an invalid length. [ 1600.186943][ T1474] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.9621'. [ 1600.795622][ T1497] delete_channel: no stack [ 1600.968337][ T1505] netlink: 'syz.3.9627': attribute type 9 has an invalid length. [ 1600.988141][ T1505] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9627'. [ 1601.700658][ T1531] netlink: 'syz.2.9638': attribute type 9 has an invalid length. [ 1601.728656][ T1531] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.9638'. [ 1602.834340][ T1539] delete_channel: no stack [ 1605.986656][ T1570] netlink: 'syz.3.9652': attribute type 9 has an invalid length. [ 1606.003242][ T1570] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9652'. [ 1606.267580][ T1575] netlink: 'syz.3.9655': attribute type 10 has an invalid length. [ 1606.697753][ T1584] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9656'. [ 1606.731925][ T1584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1607.005541][ T1589] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1607.082371][ T1590] netlink: 196 bytes leftover after parsing attributes in process `syz.3.9657'. [ 1607.365925][ T1596] netlink: 'syz.1.9659': attribute type 41 has an invalid length. [ 1607.433521][ T1572] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9651'. [ 1607.482333][ T1572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1607.585464][ T1598] netlink: 'syz.0.9660': attribute type 21 has an invalid length. [ 1607.597025][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.603886][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.269275][ T1627] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1610.061198][ T1643] netlink: 'syz.2.9672': attribute type 21 has an invalid length. [ 1610.663586][ T1651] netlink: 'syz.0.9673': attribute type 41 has an invalid length. [ 1613.415289][ T1694] netlink: 'syz.3.9686': attribute type 21 has an invalid length. [ 1616.047417][ T1754] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9704'. [ 1616.122221][ T1745] netlink: 'syz.0.9702': attribute type 21 has an invalid length. [ 1616.478637][ T1761] netlink: 'syz.1.9705': attribute type 10 has an invalid length. [ 1617.865822][ T1779] netlink: 'syz.3.9711': attribute type 41 has an invalid length. [ 1618.635383][ T1804] netlink: 'syz.3.9719': attribute type 10 has an invalid length. [ 1618.704727][ T1800] Ÿë: port 1(ip6gretap0) entered blocking state [ 1618.731360][ T1800] Ÿë: port 1(ip6gretap0) entered disabled state [ 1618.753742][ T1800] ip6gretap0: entered allmulticast mode [ 1618.773447][ T1800] ip6gretap0: entered promiscuous mode [ 1618.801665][ T1802] netlink: 'syz.0.9716': attribute type 10 has an invalid length. [ 1618.829144][ T1802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9716'. [ 1619.128912][ T1810] netlink: 'syz.0.9720': attribute type 10 has an invalid length. [ 1619.826392][ T1829] netlink: 'syz.2.9725': attribute type 41 has an invalid length. [ 1620.434281][ T1838] delete_channel: no stack [ 1620.804131][ T1849] netlink: 'syz.2.9734': attribute type 10 has an invalid length. [ 1621.084107][ T1851] veth1_to_bond: entered allmulticast mode [ 1621.460147][ T1863] netlink: 'syz.1.9737': attribute type 10 has an invalid length. [ 1622.540712][ T1887] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9744'. [ 1622.587802][ T1886] netlink: 'syz.3.9744': attribute type 7 has an invalid length. [ 1622.624799][ T1883] netlink: 'syz.2.9743': attribute type 10 has an invalid length. [ 1622.688549][ T1887] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1622.754969][ T1887] CPU: 0 PID: 1887 Comm: syz.3.9744 Not tainted syzkaller #0 [ 1622.762389][ T1887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1622.772471][ T1887] Call Trace: [ 1622.775771][ T1887] [ 1622.778725][ T1887] dump_stack_lvl+0x18c/0x250 [ 1622.783452][ T1887] ? show_regs_print_info+0x20/0x20 [ 1622.788689][ T1887] ? load_image+0x420/0x420 [ 1622.793256][ T1887] sysfs_warn_dup+0x8e/0xa0 [ 1622.797804][ T1887] sysfs_do_create_link_sd+0xc0/0x110 [ 1622.803210][ T1887] device_add_class_symlinks+0x1cf/0x240 [ 1622.808885][ T1887] device_add+0x4f9/0xc40 [ 1622.813251][ T1887] wiphy_register+0x1d99/0x2ac0 [ 1622.818185][ T1887] ? cfg80211_event_work+0x40/0x40 [ 1622.823341][ T1887] ? minstrel_ht_alloc+0x88a/0x990 [ 1622.828520][ T1887] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1622.834631][ T1887] ieee80211_register_hw+0x2dd8/0x3b30 [ 1622.840157][ T1887] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1622.845760][ T1887] ? ieee80211_tasklet_handler+0x20/0x20 [ 1622.851426][ T1887] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1622.857367][ T1887] ? __debug_object_init+0xec/0x450 [ 1622.862623][ T1887] ? __asan_memset+0x22/0x40 [ 1622.867255][ T1887] ? __hrtimer_init+0x189/0x270 [ 1622.872163][ T1887] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1622.877982][ T1887] ? mac80211_hwsim_free+0x220/0x220 [ 1622.883310][ T1887] ? rcu_is_watching+0x15/0xb0 [ 1622.888119][ T1887] ? kstrndup+0xbd/0x140 [ 1622.892434][ T1887] hwsim_new_radio_nl+0xdad/0x1a70 [ 1622.897598][ T1887] ? __nla_validate+0x50/0x50 [ 1622.902354][ T1887] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1622.908749][ T1887] ? __nla_parse+0x40/0x50 [ 1622.913221][ T1887] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1622.919617][ T1887] genl_family_rcv_msg_doit+0x21a/0x310 [ 1622.925221][ T1887] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1622.931178][ T1887] ? bpf_lsm_capable+0x9/0x10 [ 1622.935886][ T1887] ? security_capable+0x89/0xb0 [ 1622.940792][ T1887] genl_rcv_msg+0x611/0x7a0 [ 1622.945359][ T1887] ? genl_bind+0x360/0x360 [ 1622.949842][ T1887] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1622.956231][ T1887] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1622.962862][ T1887] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1622.969504][ T1887] netlink_rcv_skb+0x235/0x4c0 [ 1622.974320][ T1887] ? genl_bind+0x360/0x360 [ 1622.978786][ T1887] ? netlink_ack+0x1160/0x1160 [ 1622.983618][ T1887] ? __lock_acquire+0x7d80/0x7d80 [ 1622.988695][ T1887] ? net_generic+0x1e/0x240 [ 1622.993247][ T1887] ? down_read+0x1ac/0x2e0 [ 1622.997709][ T1887] genl_rcv+0x28/0x40 [ 1623.001726][ T1887] netlink_unicast+0x7b1/0x930 [ 1623.006555][ T1887] netlink_sendmsg+0x8d0/0xbf0 [ 1623.011381][ T1887] ? netlink_getsockopt+0x590/0x590 [ 1623.016632][ T1887] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1623.022224][ T1887] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1623.027555][ T1887] ? security_socket_sendmsg+0x80/0xa0 [ 1623.033048][ T1887] ? netlink_getsockopt+0x590/0x590 [ 1623.038286][ T1887] ____sys_sendmsg+0x61b/0x980 [ 1623.043115][ T1887] ? __asan_memset+0x22/0x40 [ 1623.047751][ T1887] ? __sys_sendmsg_sock+0x30/0x30 [ 1623.052809][ T1887] ? __import_iovec+0x5f2/0x850 [ 1623.057731][ T1887] ? import_iovec+0x73/0xa0 [ 1623.062287][ T1887] ___sys_sendmsg+0x2a6/0x360 [ 1623.067029][ T1887] ? __sys_sendmsg+0x2b0/0x2b0 [ 1623.071961][ T1887] __se_sys_sendmsg+0x1d0/0x2c0 [ 1623.076866][ T1887] ? __x64_sys_sendmsg+0x80/0x80 [ 1623.081881][ T1887] ? lockdep_hardirqs_on+0x98/0x150 [ 1623.087123][ T1887] do_syscall_64+0x55/0xb0 [ 1623.091576][ T1887] ? clear_bhb_loop+0x40/0x90 [ 1623.096297][ T1887] ? clear_bhb_loop+0x40/0x90 [ 1623.101023][ T1887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1623.106964][ T1887] RIP: 0033:0x7f427a39e159 [ 1623.111406][ T1887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.131057][ T1887] RSP: 002b:00007f427b24b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1623.139516][ T1887] RAX: ffffffffffffffda RBX: 00007f427a626090 RCX: 00007f427a39e159 [ 1623.147524][ T1887] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1623.155528][ T1887] RBP: 00007f427a43506b R08: 0000000000000000 R09: 0000000000000000 [ 1623.163532][ T1887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1623.171532][ T1887] R13: 00007f427a626128 R14: 00007f427a626090 R15: 00007fff703e01c8 [ 1623.179575][ T1887] [ 1623.272426][ T1893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9745'. [ 1624.142397][ T1919] netlink: 'syz.3.9752': attribute type 41 has an invalid length. [ 1625.598621][ T1931] netlink: 'syz.2.9755': attribute type 10 has an invalid length. [ 1625.673053][ T1931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9755'. [ 1626.317208][ T1944] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1626.358101][ T1944] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1626.456014][ T1948] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1626.487314][ T1948] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1626.988631][ T1957] netlink: 'syz.3.9764': attribute type 13 has an invalid length. [ 1627.016326][ T1957] netlink: 'syz.3.9764': attribute type 58 has an invalid length. [ 1627.045105][ T1957] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9764'. [ 1627.368641][ T1945] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9758'. [ 1627.393299][ T1945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1627.433511][ T1964] netlink: 'syz.3.9766': attribute type 4 has an invalid length. [ 1627.441377][ T1964] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9766'. [ 1627.496756][ T1967] netlink: 'syz.0.9765': attribute type 41 has an invalid length. [ 1628.982018][ T1971] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9775'. [ 1629.033904][ T1971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1629.309004][ T1990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9772'. [ 1629.717501][ T1999] netlink: 'syz.0.9783': attribute type 3 has an invalid length. [ 1629.754629][ T1999] netlink: 'syz.0.9783': attribute type 1 has an invalid length. [ 1629.793410][ T1999] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9783'. [ 1629.995821][ T2004] netlink: 'syz.3.9786': attribute type 3 has an invalid length. [ 1630.027662][ T2004] netlink: 'syz.3.9786': attribute type 1 has an invalid length. [ 1630.060640][ T2004] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9786'. [ 1630.166478][ T2005] netlink: 'syz.2.9777': attribute type 4 has an invalid length. [ 1630.203305][ T2005] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9777'. [ 1630.268127][ T2009] netlink: 'syz.0.9778': attribute type 3 has an invalid length. [ 1630.313402][ T2009] netlink: 'syz.0.9778': attribute type 1 has an invalid length. [ 1630.343197][ T2009] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9778'. [ 1630.734324][ T2019] netlink: 'syz.3.9784': attribute type 3 has an invalid length. [ 1630.745179][ T2017] netlink: 'syz.2.9782': attribute type 3 has an invalid length. [ 1630.754580][ T2019] netlink: 'syz.3.9784': attribute type 1 has an invalid length. [ 1630.773072][ T2019] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9784'. [ 1630.783094][ T2017] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9782'. [ 1631.218257][ T2025] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9787'. [ 1631.659659][ T2031] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9789'. [ 1634.091079][ T2073] __nla_validate_parse: 10 callbacks suppressed [ 1634.091115][ T2073] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9805'. [ 1634.302423][ T2075] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9806'. [ 1634.320174][ T2077] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9808'. [ 1634.392027][ T2080] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9809'. [ 1634.561911][ T2083] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9818'. [ 1634.735181][ T2086] validate_nla: 30 callbacks suppressed [ 1634.735225][ T2086] netlink: 'syz.3.9811': attribute type 3 has an invalid length. [ 1634.787333][ T2086] netlink: 'syz.3.9811': attribute type 1 has an invalid length. [ 1634.804082][ T2086] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9811'. [ 1634.831287][ T2088] netlink: 'syz.0.9812': attribute type 3 has an invalid length. [ 1634.863296][ T2088] netlink: 'syz.0.9812': attribute type 1 has an invalid length. [ 1634.871218][ T2088] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9812'. [ 1635.120866][ T2097] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9814'. [ 1636.828378][ T2090] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9813'. [ 1636.849889][ T2090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1637.016141][ T2105] netlink: 'syz.3.9827': attribute type 3 has an invalid length. [ 1637.026523][ T2108] veth1_to_bond: entered allmulticast mode [ 1637.042797][ T2106] netlink: 'syz.0.9825': attribute type 3 has an invalid length. [ 1637.043242][ T2105] netlink: 'syz.3.9827': attribute type 1 has an invalid length. [ 1637.063210][ T2105] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9827'. [ 1637.081496][ T2106] netlink: 'syz.0.9825': attribute type 1 has an invalid length. [ 1637.259941][ T2112] netlink: 'syz.1.9819': attribute type 4 has an invalid length. [ 1637.344643][ T2115] netlink: 'syz.3.9820': attribute type 3 has an invalid length. [ 1639.178145][ T2183] __nla_validate_parse: 31 callbacks suppressed [ 1639.178180][ T2183] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9858'. [ 1639.273075][ T2190] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9859'. [ 1639.311515][ T2184] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9855'. [ 1639.384628][ T2192] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9869'. [ 1639.421815][ T2195] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9862'. [ 1639.437657][ T2196] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9861'. [ 1639.549236][ T2198] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9872'. [ 1639.610641][ T2201] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9865'. [ 1639.931589][ T2213] validate_nla: 67 callbacks suppressed [ 1639.931634][ T2213] netlink: 'syz.0.9879': attribute type 3 has an invalid length. [ 1639.984665][ T2216] netlink: 'syz.2.9867': attribute type 3 has an invalid length. [ 1639.992998][ T2213] netlink: 'syz.0.9879': attribute type 1 has an invalid length. [ 1640.020292][ T2213] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9879'. [ 1640.032560][ T2216] netlink: 'syz.2.9867': attribute type 1 has an invalid length. [ 1640.063357][ T2216] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9867'. [ 1640.281197][ T2223] netlink: 'syz.0.9881': attribute type 3 has an invalid length. [ 1640.294798][ T2221] netlink: 'syz.3.9871': attribute type 3 has an invalid length. [ 1640.313287][ T2223] netlink: 'syz.0.9881': attribute type 1 has an invalid length. [ 1640.313431][ T2221] netlink: 'syz.3.9871': attribute type 1 has an invalid length. [ 1640.431492][ T2229] netlink: 'syz.0.9873': attribute type 3 has an invalid length. [ 1640.447091][ T2229] netlink: 'syz.0.9873': attribute type 1 has an invalid length. [ 1644.255289][ T2332] __nla_validate_parse: 24 callbacks suppressed [ 1644.255321][ T2332] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9918'. [ 1644.386251][ T2339] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9923'. [ 1644.508807][ T2336] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9922'. [ 1644.668762][ T2343] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9924'. [ 1644.940615][ T2347] validate_nla: 50 callbacks suppressed [ 1644.940659][ T2347] netlink: 'syz.3.9927': attribute type 3 has an invalid length. [ 1644.989241][ T2347] netlink: 'syz.3.9927': attribute type 1 has an invalid length. [ 1645.013176][ T2347] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9927'. [ 1645.341037][ T2358] netlink: 'syz.1.9930': attribute type 3 has an invalid length. [ 1645.356305][ T2358] netlink: 'syz.1.9930': attribute type 1 has an invalid length. [ 1645.384222][ T2358] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9930'. [ 1645.396464][ T2365] netlink: 'syz.2.9933': attribute type 3 has an invalid length. [ 1645.423905][ T2365] netlink: 'syz.2.9933': attribute type 1 has an invalid length. [ 1645.453289][ T2365] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9933'. [ 1645.597025][ T2371] netlink: 'syz.0.9943': attribute type 3 has an invalid length. [ 1645.605329][ T2371] netlink: 'syz.0.9943': attribute type 1 has an invalid length. [ 1645.611311][ T2370] netlink: 'syz.1.9935': attribute type 3 has an invalid length. [ 1645.613817][ T2371] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9943'. [ 1645.664211][ T2370] netlink: 'syz.1.9935': attribute type 1 has an invalid length. [ 1645.674064][ T2370] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9935'. [ 1645.761327][ T2378] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9937'. [ 1646.837311][ T2416] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1646.847819][ T2416] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1646.864801][ T2416] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1646.884585][ T2416] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1646.892864][ T2416] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1646.901817][ T2416] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1647.350848][ T2411] chnl_net:caif_netlink_parms(): no params data found [ 1647.531414][ T2411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.565027][ T2411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.572154][ T2411] bridge_slave_0: entered allmulticast mode [ 1647.588576][ T2411] bridge_slave_0: entered promiscuous mode [ 1647.596967][ T2411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.604792][ T2411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.611954][ T2411] bridge_slave_1: entered allmulticast mode [ 1647.618906][ T2411] bridge_slave_1: entered promiscuous mode [ 1647.757795][ T2411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.788091][ T2411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1648.029238][ T1104] ip6gretap0 (unregistering): left allmulticast mode [ 1648.036557][ T1104] ip6gretap0 (unregistering): left promiscuous mode [ 1648.045406][ T1104] Ÿë: port 1(ip6gretap0) entered disabled state [ 1648.111077][ T2411] team0: Port device team_slave_0 added [ 1648.161152][ T2411] team0: Port device team_slave_1 added [ 1648.385645][ T2411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.415123][ T2411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.461867][ T2411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.540369][ T2411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.548678][ T2411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.574727][ T2411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.672457][ T2411] hsr_slave_0: entered promiscuous mode [ 1648.679911][ T2411] hsr_slave_1: entered promiscuous mode [ 1648.943522][ T7910] Bluetooth: hci4: command tx timeout [ 1649.347507][ T2529] __nla_validate_parse: 9 callbacks suppressed [ 1649.347541][ T2529] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9979'. [ 1649.678103][ T2543] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9990'. [ 1649.941937][ T2411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1650.013087][ T2411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1650.059210][ T2411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1650.071376][ T2411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1650.291911][ T2573] validate_nla: 24 callbacks suppressed [ 1650.291943][ T2573] netlink: 'syz.1.9987': attribute type 3 has an invalid length. [ 1650.347658][ T2573] netlink: 'syz.1.9987': attribute type 1 has an invalid length. [ 1650.390334][ T2573] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9987'. [ 1650.421635][ T2411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.498013][ T2411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.540339][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.547515][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.559196][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.566405][ T5930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.725369][ T2587] netlink: 'syz.3.9991': attribute type 3 has an invalid length. [ 1650.743550][ T2587] netlink: 'syz.3.9991': attribute type 1 has an invalid length. [ 1650.763268][ T2587] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9991'. [ 1650.775805][ T1104] hsr_slave_0: left promiscuous mode [ 1650.913675][ T2593] netlink: 'syz.3.9994': attribute type 3 has an invalid length. [ 1650.921522][ T2593] netlink: 'syz.3.9994': attribute type 1 has an invalid length. [ 1650.942056][ T2593] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9994'. [ 1651.023304][ T7910] Bluetooth: hci4: command tx timeout [ 1651.157521][ T2604] netlink: 'syz.3.9999': attribute type 3 has an invalid length. [ 1651.165643][ T2604] netlink: 'syz.3.9999': attribute type 1 has an invalid length. [ 1651.175119][ T2604] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9999'. [ 1652.080045][ T2620] netlink: 'syz.1.10001': attribute type 3 has an invalid length. [ 1652.099999][ T2620] netlink: 'syz.1.10001': attribute type 1 has an invalid length. [ 1652.116614][ T2620] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.10001'. [ 1652.285256][ T2411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.362874][ T2411] veth0_vlan: entered promiscuous mode [ 1652.382057][ T2411] veth1_vlan: entered promiscuous mode [ 1652.450913][ T2411] veth0_macvtap: entered promiscuous mode [ 1652.510812][ T2411] veth1_macvtap: entered promiscuous mode [ 1652.556727][ T2411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.586026][ T2411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.619832][ T2411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.629915][ T2411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.644678][ T2411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.653587][ T2411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.808562][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.821935][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.876855][ T7173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.912261][ T7173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.971246][ T2657] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.10010'. [ 1653.077690][ T2667] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9946'. [ 1653.103314][ T7910] Bluetooth: hci4: command tx timeout [ 1653.723840][ T2416] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1653.735142][ T2416] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1653.747032][ T2416] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1653.757922][ T2416] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1653.774289][ T2416] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1653.781609][ T2416] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1653.889128][ T2691] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.10025'. [ 1654.264071][ T2687] chnl_net:caif_netlink_parms(): no params data found [ 1654.523774][ T2687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.530887][ T2687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.571975][ T2687] bridge_slave_0: entered allmulticast mode [ 1654.579051][ T2687] bridge_slave_0: entered promiscuous mode [ 1654.588535][ T2687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.605507][ T2687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.622555][ T2687] bridge_slave_1: entered allmulticast mode [ 1654.637390][ T2687] bridge_slave_1: entered promiscuous mode [ 1654.706182][ T2687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.731475][ T5935] tipc: Left network mode [ 1654.735709][ T2687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.842763][ T5935] ip6gretap0 (unregistering): left allmulticast mode [ 1654.849692][ T5935] ip6gretap0 (unregistering): left promiscuous mode [ 1654.860515][ T5935] Ÿë: port 1(ip6gretap0) entered disabled state [ 1654.931697][ T2687] team0: Port device team_slave_0 added [ 1655.026849][ T2687] team0: Port device team_slave_1 added [ 1655.183404][ T7910] Bluetooth: hci4: command tx timeout [ 1655.227486][ T2687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1655.243717][ T2687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1655.318991][ T2687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1655.358429][ T2687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1655.376209][ T2687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1655.469942][ T2687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.697748][ T2687] hsr_slave_0: entered promiscuous mode [ 1655.722449][ T2687] hsr_slave_1: entered promiscuous mode [ 1655.731853][ T2687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1655.754502][ T2687] Cannot create hsr debugfs directory [ 1655.823505][ T7910] Bluetooth: hci2: command tx timeout [ 1655.889616][ T5935] gretap0 (unregistering): left allmulticast mode [ 1655.896885][ T5935] gretap0 (unregistering): left promiscuous mode [ 1655.904772][ T5935] Ÿë: port 2(gretap0) entered disabled state [ 1656.374740][ T2798] validate_nla: 8 callbacks suppressed [ 1656.374773][ T2798] netlink: 'syz.2.10056': attribute type 3 has an invalid length. [ 1656.406612][ T2798] netlink: 'syz.2.10056': attribute type 1 has an invalid length. [ 1656.421786][ T2798] __nla_validate_parse: 1 callbacks suppressed [ 1656.421835][ T2798] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.10056'. [ 1657.149835][ T2687] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1657.238059][ T2687] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1657.259978][ T2687] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1657.289666][ T2687] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1657.386873][ T2847] netlink: 'syz.0.10067': attribute type 3 has an invalid length. [ 1657.399570][ T2847] netlink: 'syz.0.10067': attribute type 1 has an invalid length. [ 1657.408445][ T2847] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.10067'. [ 1657.903608][ T7910] Bluetooth: hci2: command tx timeout [ 1658.536412][ T2687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.564941][ T2687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.581544][T25045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.588696][T25045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.630585][T25045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.637758][T25045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.691469][ T2687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1658.931937][ T2687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.991164][ T2687] veth0_vlan: entered promiscuous mode [ 1659.008667][ T2687] veth1_vlan: entered promiscuous mode [ 1659.054330][ T2687] veth0_macvtap: entered promiscuous mode [ 1659.067843][ T2687] veth1_macvtap: entered promiscuous mode [ 1659.089357][ T2687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1659.100437][ T2687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.112530][ T2687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1659.127473][ T2687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1659.138107][ T2687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1659.149624][ T2687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1659.161510][ T2687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.172757][ T2687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.182894][ T2687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.194371][ T2687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.287808][ T2607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.301564][ T2607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.337681][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.351884][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.983972][ T7910] Bluetooth: hci2: command tx timeout [ 1660.378924][ T2416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1660.397837][ T2416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1660.406829][ T2416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1660.416893][ T2416] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1660.427385][ T2416] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1660.435425][ T2416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1661.162501][ T2909] chnl_net:caif_netlink_parms(): no params data found [ 1661.304027][ T5935] ip6gretap0 (unregistering): left allmulticast mode [ 1661.315774][ T5935] ip6gretap0 (unregistering): left promiscuous mode [ 1661.333723][ T5935] Ÿë: port 1(ip6gretap0) entered disabled state [ 1661.831185][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.845543][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.852822][ T2909] bridge_slave_0: entered allmulticast mode [ 1661.861017][ T2909] bridge_slave_0: entered promiscuous mode [ 1661.898467][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.905899][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.913018][ T2909] bridge_slave_1: entered allmulticast mode [ 1661.921069][ T2909] bridge_slave_1: entered promiscuous mode [ 1662.025960][ T2909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1662.056045][ T2909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1662.065284][ T7910] Bluetooth: hci2: command tx timeout [ 1662.147695][ T2909] team0: Port device team_slave_0 added [ 1662.158243][ T2909] team0: Port device team_slave_1 added [ 1662.201379][ T2909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.209601][ T2909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1662.244111][ T2909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.318793][ T2909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.330588][ T2909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1662.360069][ T2909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.446591][ T2969] syzkaller0: entered promiscuous mode [ 1662.469552][ T2969] syzkaller0: entered allmulticast mode [ 1662.547417][ T7910] Bluetooth: hci0: command tx timeout [ 1664.444289][ T2909] hsr_slave_0: entered promiscuous mode [ 1664.458854][ T2909] hsr_slave_1: entered promiscuous mode [ 1664.475483][ T2909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1664.483060][ T2909] Cannot create hsr debugfs directory [ 1664.625326][ T7910] Bluetooth: hci0: command tx timeout [ 1665.851804][ T5935] hsr_slave_0: left promiscuous mode [ 1666.706602][ T7910] Bluetooth: hci0: command tx timeout [ 1667.222869][ T2909] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1667.257015][ T2909] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1667.302938][ T2909] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1667.354028][ T2909] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1667.551819][ T2909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.586888][ T2909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.608588][ T2607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.615783][ T2607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.650465][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.657659][ T7173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.783601][ T7910] Bluetooth: hci0: command tx timeout [ 1668.871042][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.880737][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.802905][ T2909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1669.942781][ T2909] veth0_vlan: entered promiscuous mode [ 1670.004323][ T2909] veth1_vlan: entered promiscuous mode [ 1670.109235][ T2909] veth0_macvtap: entered promiscuous mode [ 1670.171156][ T2909] veth1_macvtap: entered promiscuous mode [ 1670.238817][ T2909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.263572][ T2909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.283192][ T2909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1670.303272][ T2909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.326797][ T2909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.133832][ T2909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.144675][ T2909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.161933][ T2909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.172460][ T2909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.185869][ T2909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.232875][ T2909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.262633][ T2909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.283487][ T2909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.292203][ T2909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.509704][T25045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.553194][T25045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.621445][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.667820][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.862851][ T3165] sit0: entered allmulticast mode [ 1672.316215][ T2416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1672.326290][ T2416] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1672.334803][ T2416] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1672.343651][ T2416] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1672.351620][ T2416] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1672.360124][ T2416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1672.874507][ T3165] sit0: entered promiscuous mode [ 1673.218590][ T3179] syzkaller0: entered promiscuous mode [ 1673.224437][ T3179] syzkaller0: entered allmulticast mode [ 1674.387796][ T7910] Bluetooth: hci1: command tx timeout [ 1675.066608][ T3169] chnl_net:caif_netlink_parms(): no params data found [ 1675.300339][ T3169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.309332][ T3169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.317021][ T3169] bridge_slave_0: entered allmulticast mode [ 1675.324625][ T3169] bridge_slave_0: entered promiscuous mode [ 1675.370319][ T3169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.378500][ T3169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.390685][ T3169] bridge_slave_1: entered allmulticast mode [ 1675.403484][ T3169] bridge_slave_1: entered promiscuous mode [ 1675.481402][ T3169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.526266][ T3169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.596554][ T3169] team0: Port device team_slave_0 added [ 1675.676442][ T3169] team0: Port device team_slave_1 added [ 1675.799764][ T3169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.829838][ T3169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.886491][ T3169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.920751][ T3169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.943246][ T3169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.025776][ T3169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.287646][ T3169] hsr_slave_0: entered promiscuous mode [ 1676.308822][ T3169] hsr_slave_1: entered promiscuous mode [ 1676.330108][ T3169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1676.350588][ T3169] Cannot create hsr debugfs directory [ 1676.465832][ T7910] Bluetooth: hci1: command tx timeout [ 1676.509779][ T2607] tipc: Left network mode [ 1676.697626][ T2607] ip6gretap0 (unregistering): left allmulticast mode [ 1676.714646][ T2607] ip6gretap0 (unregistering): left promiscuous mode [ 1676.738748][ T2607] Ÿë: port 1(ip6gretap0) entered disabled state [ 1677.193483][ T3256] syzkaller0: entered promiscuous mode [ 1677.200819][ T3256] syzkaller0: entered allmulticast mode [ 1678.546644][ T7910] Bluetooth: hci1: command tx timeout [ 1678.969876][ T2607] gretap0 (unregistering): left allmulticast mode [ 1678.986844][ T2607] gretap0 (unregistering): left promiscuous mode [ 1678.997504][ T2607] Ÿë: port 2(gretap0) entered disabled state [ 1679.847867][ T3169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1679.885601][ T3169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1680.623340][ T7910] Bluetooth: hci1: command tx timeout [ 1682.620111][ T3169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1682.645308][ T3169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1683.032302][ T3169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1683.228221][ T3169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1683.291269][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.299037][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1683.330936][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.338094][ T5930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.570025][ T3169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1684.548144][ T3169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1684.652046][ T3352] syzkaller0: entered promiscuous mode [ 1684.657768][ T3352] syzkaller0: entered allmulticast mode [ 1687.972123][ T3169] veth0_vlan: entered promiscuous mode [ 1687.999821][ T3169] veth1_vlan: entered promiscuous mode [ 1688.061898][ T3169] veth0_macvtap: entered promiscuous mode [ 1688.080498][ T3169] veth1_macvtap: entered promiscuous mode [ 1688.131010][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.144946][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.155164][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.172542][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.182774][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.194722][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.214998][ T3169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.265311][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.276571][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.287030][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.300990][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.317323][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1688.328142][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.339947][ T3169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.407552][ T3169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.417507][ T3169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.426380][ T3169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.435545][ T3169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.509672][ T3421] syzkaller0: entered promiscuous mode [ 1688.515276][ T3421] syzkaller0: entered allmulticast mode [ 1688.534743][ T3114] syzkaller0: tun_net_xmit 48 [ 1690.212343][ T3114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.232286][ T3114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.274926][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.293976][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.855441][ T3452] syzkaller0: entered promiscuous mode [ 1690.861051][ T3452] syzkaller0: entered allmulticast mode [ 1692.847569][ T3472] wg2: entered promiscuous mode [ 1692.852476][ T3472] wg2: entered allmulticast mode [ 1693.618164][ T3507] sit0: entered promiscuous mode [ 1693.639915][ T3507] sit0: entered allmulticast mode [ 1695.111505][ T3534] syzkaller0: entered promiscuous mode [ 1695.121205][ T3534] syzkaller0: entered allmulticast mode [ 1697.549274][ T3586] veth1_macvtap: entered allmulticast mode [ 1699.648574][ T3632] wg2: left promiscuous mode [ 1699.655409][ T3632] wg2: left allmulticast mode [ 1699.714755][ T3634] wg2: entered promiscuous mode [ 1699.720024][ T3634] wg2: entered allmulticast mode [ 1704.142397][ T3821] veth0_vlan: entered allmulticast mode [ 1707.187551][ T3882] syzkaller0: entered promiscuous mode [ 1707.225679][ T3882] syzkaller0: entered allmulticast mode [ 1715.782677][ T3994] syzkaller0: entered promiscuous mode [ 1715.812499][ T3994] syzkaller0: entered allmulticast mode [ 1715.818494][ T4003] syz.0.10457[4003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1715.818728][ T4003] syz.0.10457[4003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1720.295844][ T4083] tap0: tun_chr_ioctl cmd 1074025677 [ 1720.320303][ T4083] tap0: linktype set to 1 [ 1722.936200][ T4133] syzkaller0: entered promiscuous mode [ 1722.941728][ T4133] syzkaller0: entered allmulticast mode [ 1730.594532][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.600871][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.110418][ T4281] syzkaller0: entered promiscuous mode [ 1732.126028][ T4281] syzkaller0: entered allmulticast mode [ 1734.142662][ T4283] syzkaller0: entered promiscuous mode [ 1734.149386][ T4283] syzkaller0: entered allmulticast mode [ 1739.093806][ T4396] syzkaller0: entered promiscuous mode [ 1739.105903][ T4396] syzkaller0: entered allmulticast mode [ 1741.066747][ T4406] syzkaller0: entered promiscuous mode [ 1741.072437][ T4406] syzkaller0: entered allmulticast mode [ 1743.209344][ T4438] syzkaller0: entered promiscuous mode [ 1743.214894][ T4438] syzkaller0: entered allmulticast mode [ 1746.620607][ T4498] syz.3.10653[4498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1746.620737][ T4498] syz.3.10653[4498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1746.963845][ T4510] syzkaller0: create flow: hash 2810108571 index 1 [ 1747.235116][ T4506] syzkaller0: delete flow: hash 2810108571 index 1 [ 1751.272482][ T4541] syzkaller0: entered promiscuous mode [ 1751.294212][ T4541] syzkaller0: entered allmulticast mode [ 1753.602932][ T4563] syzkaller0: entered promiscuous mode [ 1753.617784][ T4563] syzkaller0: entered allmulticast mode [ 1754.066038][ T4580] syz.2.10685[4580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1754.066169][ T4580] syz.2.10685[4580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1763.532551][ T4688] syzkaller0: entered promiscuous mode [ 1763.610291][ T4688] syzkaller0: entered allmulticast mode [ 1766.333039][ T4740] syzkaller0: entered promiscuous mode [ 1766.355323][ T4740] syzkaller0: entered allmulticast mode [ 1768.781366][ T4765] veth1: entered promiscuous mode [ 1768.789528][ T4765] veth1: entered allmulticast mode [ 1769.061756][ T4779] syzkaller0: entered promiscuous mode [ 1769.068782][ T4779] syzkaller0: entered allmulticast mode [ 1771.924736][ T4838] syzkaller0: entered promiscuous mode [ 1771.930263][ T4838] syzkaller0: entered allmulticast mode [ 1773.343262][ T2416] Bluetooth: hci4: command 0x0406 tx timeout [ 1778.588754][ T7910] Bluetooth: hci2: command 0x0406 tx timeout [ 1780.139950][ T4949] syzkaller0: entered promiscuous mode [ 1780.152138][ T4949] syzkaller0: entered allmulticast mode [ 1782.742935][ T4990] 9: renamed from bond_slave_0 (while UP) [ 1783.589074][ T7910] Bluetooth: hci0: command 0x0406 tx timeout [ 1785.557697][ T5027] sit0: entered allmulticast mode [ 1785.570731][ T5034] sit0: entered allmulticast mode [ 1785.580617][ T5032] sit0: entered promiscuous mode [ 1788.671188][ T5119] bridge0: port 3(veth0_to_bond) entered blocking state [ 1788.686940][ T5119] bridge0: port 3(veth0_to_bond) entered disabled state [ 1788.695404][ T5119] veth0_to_bond: entered allmulticast mode [ 1788.734301][ T5119] veth0_to_bond: entered promiscuous mode [ 1788.747639][ T5119] bridge0: port 3(veth0_to_bond) entered blocking state [ 1788.755560][ T5119] bridge0: port 3(veth0_to_bond) entered forwarding state [ 1791.342850][ T5174] syzkaller0: entered promiscuous mode [ 1791.348673][ T5174] syzkaller0: entered allmulticast mode [ 1792.125193][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.147125][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.298931][ T5200] syzkaller0: entered promiscuous mode [ 1795.312502][ T5200] syzkaller0: entered allmulticast mode [ 1796.955298][ T5215] syzkaller0: entered allmulticast mode [ 1796.966598][ T5219] syzkaller0: left allmulticast mode [ 1797.244839][ T5234] syzkaller0: entered promiscuous mode [ 1797.250681][ T5234] syzkaller0: entered allmulticast mode [ 1798.943177][ T7910] Bluetooth: hci1: command 0x0406 tx timeout [ 1800.150475][ T5249] syzkaller0: entered promiscuous mode [ 1800.156074][ T5249] syzkaller0: entered allmulticast mode [ 1803.606288][ T5276] syz.2.10942[5276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1803.606422][ T5276] syz.2.10942[5276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1807.048665][ T5319] netlink: 'syz.1.10957': attribute type 3 has an invalid length. [ 1807.093533][ T5319] netlink: 'syz.1.10957': attribute type 1 has an invalid length. [ 1807.101548][ T5319] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.10957'. [ 1807.719766][ T5331] syzkaller0: entered promiscuous mode [ 1807.725317][ T5331] syzkaller0: entered allmulticast mode [ 1808.054528][ T5342] syzkaller0: entered promiscuous mode [ 1808.060032][ T5342] syzkaller0: entered allmulticast mode [ 1812.106751][ T5366] netlink: 'syz.2.10985': attribute type 3 has an invalid length. [ 1812.150412][ T5366] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1817.389210][ T5437] syzkaller0: entered promiscuous mode [ 1817.419809][ T5437] syzkaller0: entered allmulticast mode [ 1822.507573][ T5487] syzkaller0: entered promiscuous mode [ 1822.526546][ T5487] syzkaller0: entered allmulticast mode [ 1827.540897][ T5529] syzkaller0: entered promiscuous mode [ 1827.552415][ T5529] syzkaller0: entered allmulticast mode [ 1832.515960][ T5561] syzkaller0: entered promiscuous mode [ 1832.521476][ T5561] syzkaller0: entered allmulticast mode [ 1834.372907][ T5581] syzkaller0: entered promiscuous mode [ 1834.378542][ T5581] syzkaller0: entered allmulticast mode [ 1837.700083][ T5608] syzkaller0: entered promiscuous mode [ 1837.743237][ T5608] syzkaller0: entered allmulticast mode [ 1841.016484][ T5622] syzkaller0: entered promiscuous mode [ 1841.022067][ T5622] syzkaller0: entered allmulticast mode [ 1841.255787][ T5623] sit0: left promiscuous mode [ 1845.930875][ T5646] syzkaller0: entered promiscuous mode [ 1845.937754][ T5646] syzkaller0: entered allmulticast mode [ 1847.639598][ T5657] syzkaller0: entered promiscuous mode [ 1847.645194][ T5657] syzkaller0: entered allmulticast mode [ 1853.186591][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.192889][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.591066][ T5701] syzkaller0: entered promiscuous mode [ 1854.596664][ T5701] syzkaller0: entered allmulticast mode [ 1854.649533][ T5703] syzkaller0: entered promiscuous mode [ 1854.655095][ T5703] syzkaller0: entered allmulticast mode [ 1858.480467][ T5717] syzkaller0: entered promiscuous mode [ 1858.486284][ T5717] syzkaller0: entered allmulticast mode [ 1861.525308][ T5758] syzkaller0: entered promiscuous mode [ 1861.530823][ T5758] syzkaller0: entered allmulticast mode [ 1869.205307][ T5896] syzkaller0: entered promiscuous mode [ 1869.210826][ T5896] syzkaller0: entered allmulticast mode [ 1872.819255][ T5915] syzkaller0: entered promiscuous mode [ 1872.826381][ T5915] syzkaller0: entered allmulticast mode [ 1874.481070][ T5922] syzkaller0: entered promiscuous mode [ 1874.488344][ T5922] syzkaller0: entered allmulticast mode [ 1877.482564][ T5965] veth0_vlan: entered allmulticast mode [ 1879.320572][ T5992] syzkaller0: entered promiscuous mode [ 1879.364067][ T5992] syzkaller0: entered allmulticast mode [ 1883.924671][ T6026] veth1_macvtap: left promiscuous mode [ 1883.935425][ T6026] macsec0: entered promiscuous mode [ 1883.941263][ T6026] macsec0: entered allmulticast mode [ 1883.958539][ T6029] veth1_macvtap: entered promiscuous mode [ 1883.985452][ T6029] veth1_macvtap: entered allmulticast mode [ 1886.303523][ T6051] sit0: left promiscuous mode [ 1888.305590][ T6074] syzkaller0: entered promiscuous mode [ 1888.341710][ T6074] syzkaller0: entered allmulticast mode [ 1892.499543][ T6102] veth1_macvtap: left promiscuous mode [ 1892.508040][ T6102] macsec0: entered promiscuous mode [ 1892.517835][ T6102] macsec0: entered allmulticast mode [ 1892.551062][ T6102] veth1_macvtap: entered promiscuous mode [ 1892.558330][ T6102] veth1_macvtap: entered allmulticast mode [ 1892.661860][ T6107] syzkaller0: entered promiscuous mode [ 1892.680782][ T6107] syzkaller0: entered allmulticast mode [ 1894.878503][ T6138] macsec0: entered promiscuous mode [ 1894.884200][ T6138] macsec0: entered allmulticast mode [ 1894.982733][ T6138] veth1_macvtap: entered allmulticast mode [ 1895.250084][ T6140] syzkaller0: entered promiscuous mode [ 1895.272431][ T6140] syzkaller0: entered allmulticast mode [ 1900.618205][ T6174] macsec0: entered promiscuous mode [ 1900.625315][ T6174] macsec0: entered allmulticast mode [ 1904.018088][ T6213] veth1_macvtap: left allmulticast mode [ 1904.026662][ T6213] veth1_macvtap: left promiscuous mode [ 1904.952622][ T6234] bridge0: port 3(veth0_to_bond) entered disabled state [ 1904.960118][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1904.968126][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.977534][ T6234] bridge0: entered allmulticast mode [ 1905.013433][ T6234] veth0_to_bond: left allmulticast mode [ 1905.019093][ T6234] veth0_to_bond: left promiscuous mode [ 1905.032231][ T6234] bridge0: port 3(veth0_to_bond) entered disabled state [ 1905.042620][ T6234] bridge_slave_1: left allmulticast mode [ 1905.048465][ T6234] bridge_slave_1: left promiscuous mode [ 1905.054579][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.065580][ T6234] bridge_slave_0: left allmulticast mode [ 1905.071289][ T6234] bridge_slave_0: left promiscuous mode [ 1905.079241][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.289226][ T6237] veth1_macvtap: left allmulticast mode [ 1909.561723][ T7910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1909.571246][ T7910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1909.579464][ T7910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1909.587496][ T7910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1909.598171][ T7910] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1909.606467][ T7910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1909.888962][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 1910.040117][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.048521][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.073733][ T6259] bridge_slave_0: entered allmulticast mode [ 1910.088334][ T6259] bridge_slave_0: entered promiscuous mode [ 1910.111805][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.130418][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.145674][ T6259] bridge_slave_1: entered allmulticast mode [ 1910.160851][ T6259] bridge_slave_1: entered promiscuous mode [ 1910.230780][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1910.256605][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1910.334157][ T6259] team0: Port device team_slave_0 added [ 1910.350674][ T6259] team0: Port device team_slave_1 added [ 1910.383937][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1910.390966][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1910.429526][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1910.477095][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1910.507852][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1910.573254][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.671553][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.679782][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.694495][ T6278] bridge0: entered allmulticast mode [ 1910.717251][ T6259] hsr_slave_0: entered promiscuous mode [ 1910.724196][ T6259] hsr_slave_1: entered promiscuous mode [ 1910.730684][ T6259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1910.738827][ T6259] Cannot create hsr debugfs directory [ 1910.750662][ T6281] bridge_slave_1: left allmulticast mode [ 1910.781491][ T6281] bridge_slave_1: left promiscuous mode [ 1910.789643][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.808399][ T6281] bridge_slave_0: left allmulticast mode [ 1910.819118][ T6281] bridge_slave_0: left promiscuous mode [ 1910.833610][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.295402][ T6284] syzkaller0: entered promiscuous mode [ 1911.301010][ T6284] syzkaller0: entered allmulticast mode [ 1911.674791][ T2416] Bluetooth: hci3: command tx timeout [ 1912.967919][ T6259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1912.977244][ T6259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1912.988117][ T6259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1912.997692][ T6259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1913.059408][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1913.078760][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1913.090398][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1913.097558][ T5812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1913.115646][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.122736][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1913.160425][ T6259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1913.170872][ T6259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1913.305455][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1913.492618][ T6259] veth0_vlan: entered promiscuous mode [ 1913.505876][ T6259] veth1_vlan: entered promiscuous mode [ 1913.531840][ T6259] veth0_macvtap: entered promiscuous mode [ 1913.541232][ T6259] veth1_macvtap: entered promiscuous mode [ 1913.557144][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.568048][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.579542][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.590741][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.600717][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.611226][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.621046][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1913.631546][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.642998][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1913.656246][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.667334][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.677234][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.687672][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.697595][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.708118][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.718028][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.728543][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.739343][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1913.746838][ T2416] Bluetooth: hci3: command tx timeout [ 1913.751287][ T6259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.761808][ T6259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.772082][ T6259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.781931][ T6259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.851610][ T5930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.866688][ T5930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.890685][ T5930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.898615][ T5930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.638377][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.645239][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.823262][ T2416] Bluetooth: hci3: command tx timeout [ 1917.903330][ T2416] Bluetooth: hci3: command tx timeout [ 1976.068925][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.075539][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2034.477529][ T6316] Bluetooth: hci3: command 0x0406 tx timeout [ 2037.509910][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.523238][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2050.313373][ T29] INFO: task syz.1.11207:6130 blocked for more than 143 seconds. [ 2050.321132][ T29] Not tainted syzkaller #0 [ 2050.326951][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2050.335704][ T29] task:syz.1.11207 state:D stack:22824 pid:6130 ppid:2687 flags:0x00004006 [ 2050.344978][ T29] Call Trace: [ 2050.348270][ T29] [ 2050.351214][ T29] __schedule+0x15ae/0x4660 [ 2050.355803][ T29] ? asan.module_dtor+0x20/0x20 [ 2050.360673][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2050.366730][ T29] ? lock_chain_count+0x20/0x20 [ 2050.371622][ T29] ? task_work_cancel+0xa5/0x220 [ 2050.380863][ T29] ? task_work_cancel_func+0x210/0x210 [ 2050.386424][ T29] schedule+0xbd/0x170 [ 2050.390510][ T29] ? _free_event+0x10d/0xfb0 [ 2050.395413][ T29] _free_event+0x176/0xfb0 [ 2050.400112][ T29] perf_event_release_kernel+0x7c8/0x850 [ 2050.405832][ T29] ? __might_sleep+0xe0/0xe0 [ 2050.410418][ T29] ? calc_timer_values+0x400/0x400 [ 2050.415573][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2050.421562][ T29] ? perf_mmap+0x15e0/0x15e0 [ 2050.426205][ T29] perf_release+0x3b/0x40 [ 2050.430542][ T29] __fput+0x221/0x940 [ 2050.434619][ T29] task_work_run+0x1d4/0x260 [ 2050.439224][ T29] ? task_work_cancel+0x220/0x220 [ 2050.444327][ T29] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 2050.450232][ T29] get_signal+0x11da/0x1390 [ 2050.454800][ T29] ? create_io_thread+0x190/0x190 [ 2050.459838][ T29] arch_do_signal_or_restart+0xc2/0x7b0 [ 2050.465809][ T29] ? __x64_sys_clone+0x1b7/0x230 [ 2050.470747][ T29] ? get_sigframe_size+0x20/0x20 [ 2050.475826][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 2050.481312][ T29] exit_to_user_mode_loop+0x70/0x110 [ 2050.486672][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 2050.492233][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 2050.497725][ T29] do_syscall_64+0x61/0xb0 [ 2050.502154][ T29] ? clear_bhb_loop+0x40/0x90 [ 2050.506989][ T29] ? clear_bhb_loop+0x40/0x90 [ 2050.511680][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2050.517622][ T29] RIP: 0033:0x7fbd1f59e159 [ 2050.522040][ T29] RSP: 002b:00007fbd2049bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2050.530510][ T29] RAX: fffffffffffffffc RBX: 00007fbd1f825fa0 RCX: 00007fbd1f59e159 [ 2050.538550][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040004000 [ 2050.546571][ T29] RBP: 00007fbd1f63506b R08: 0000000000000000 R09: 0000000000000000 [ 2050.554599][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2050.562572][ T29] R13: 00007fbd1f826038 R14: 00007fbd1f825fa0 R15: 00007ffeedfd3118 [ 2050.570620][ T29] [ 2050.573723][ T29] [ 2050.573723][ T29] Showing all locks held in the system: [ 2050.581444][ T29] 1 lock held by khungtaskd/29: [ 2050.586354][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2050.596275][ T29] 2 locks held by getty/5537: [ 2050.600930][ T29] #0: ffff888031bda0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2050.610723][ T29] #1: ffffc900015d72f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 2050.620979][ T29] [ 2050.630011][ T29] ============================================= [ 2050.630011][ T29] [ 2050.638492][ T29] NMI backtrace for cpu 0 [ 2050.642832][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2050.650007][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2050.660040][ T29] Call Trace: [ 2050.663300][ T29] [ 2050.666211][ T29] dump_stack_lvl+0x18c/0x250 [ 2050.670869][ T29] ? __wake_up_klogd+0xd9/0x100 [ 2050.675704][ T29] ? show_regs_print_info+0x20/0x20 [ 2050.680890][ T29] ? load_image+0x420/0x420 [ 2050.685379][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2050.690307][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2050.696461][ T29] ? load_image+0x420/0x420 [ 2050.700957][ T29] ? wq_watchdog_touch+0xef/0x170 [ 2050.705975][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2050.712036][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2050.718011][ T29] watchdog+0xf59/0xfa0 [ 2050.722164][ T29] ? watchdog+0x1e1/0xfa0 [ 2050.726491][ T29] kthread+0x2fa/0x390 [ 2050.730552][ T29] ? hungtask_pm_notify+0x50/0x50 [ 2050.735570][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2050.740150][ T29] ret_from_fork+0x48/0x80 [ 2050.744560][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2050.749140][ T29] ret_from_fork_asm+0x11/0x20 [ 2050.753905][ T29] [ 2050.757188][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2050.762420][ C1] NMI backtrace for cpu 1 [ 2050.762430][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 2050.762445][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2050.762453][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 2050.762473][ C1] Code: 89 18 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 f6 36 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 2050.762486][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 2050.762500][ C1] RAX: 0505fe81544d7200 RBX: ffffffff81631e24 RCX: 0505fe81544d7200 [ 2050.762511][ C1] RDX: 0000000000000001 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 2050.762522][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b6b R09: 1ffff110171e6d6d [ 2050.762533][ C1] R10: dffffc0000000000 R11: ffffed10171e6d6e R12: 1ffff92000030fc8 [ 2050.762545][ C1] R13: dffffc0000000000 R14: 1ffff110037cf780 R15: 0000000000000000 [ 2050.762556][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2050.762568][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2050.762579][ C1] CR2: 0000562f835f9340 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 2050.762593][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 2050.762603][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2050.762612][ C1] Call Trace: [ 2050.762617][ C1] [ 2050.762622][ C1] default_idle+0x13/0x20 [ 2050.762639][ C1] default_idle_call+0x6c/0xa0 [ 2050.762655][ C1] do_idle+0x334/0x5c0 [ 2050.762675][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 2050.762691][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2050.762707][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 2050.762732][ C1] cpu_startup_entry+0x43/0x60 [ 2050.762750][ C1] start_secondary+0xee/0xf0 [ 2050.762766][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 2050.762792][ C1] [ 2050.772116][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2050.772127][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2050.772145][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2050.772155][ T29] Call Trace: [ 2050.772162][ T29] [ 2050.772169][ T29] dump_stack_lvl+0x18c/0x250 [ 2050.772195][ T29] ? show_regs_print_info+0x20/0x20 [ 2050.772216][ T29] ? load_image+0x420/0x420 [ 2050.772243][ T29] panic+0x2ca/0x720 [ 2050.772266][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2050.772283][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2050.772304][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2050.772327][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2050.772355][ T29] watchdog+0xf98/0xfa0 [ 2050.772377][ T29] ? watchdog+0x1e1/0xfa0 [ 2050.772403][ T29] kthread+0x2fa/0x390 [ 2050.772419][ T29] ? hungtask_pm_notify+0x50/0x50 [ 2050.772440][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2050.772457][ T29] ret_from_fork+0x48/0x80 [ 2050.772476][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2050.772493][ T29] ret_from_fork_asm+0x11/0x20 [ 2050.772523][ T29] [ 2050.774676][ T29] Kernel Offset: disabled [ 2051.061012][ T29] Rebooting in 86400 seconds..