last executing test programs: 1.527145606s ago: executing program 1 (id=9746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.267017287s ago: executing program 4 (id=9756): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)='^', 0x1}], 0x1}, 0x448c0) 1.251502068s ago: executing program 0 (id=9757): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x800, 0x0, 0x1000, 0x1109, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x3, 0x1}, 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) close(0xffffffffffffffff) r6 = socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 1.22783657s ago: executing program 3 (id=9758): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) 1.148733457s ago: executing program 1 (id=9760): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.090538551s ago: executing program 4 (id=9761): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r1) socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1d, 0x0, 0x2, 0x8000, 0x28, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xd5, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x58, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x401, 0x0, r4, 0x0, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x8000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a00014003000000f6000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) close(r1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8402, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x23) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="13100000160091ef"], 0xfe33) 1.076700893s ago: executing program 1 (id=9762): socketpair(0x22, 0x0, 0x23, &(0x7f0000000600)) 1.072132213s ago: executing program 3 (id=9763): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10, 0x84, 0x2}}], 0x10}, 0x0) 1.057646084s ago: executing program 0 (id=9764): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001880)=[{&(0x7f00000013c0)="27042702ea0e00000000002f1eafbcf706e105000000000000001104ee1606d4b8bf4a82f6184b", 0x27}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b00254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001440)="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", 0x2e1}, {&(0x7f0000000e80)="74287df155cf8d622c0f20ae9370484139e16c39d3c85fe447ac179b47d1e2d475032faf1c54da0434f9ea0a5f89bf0da7068c86efa461bcf2264164d07412a4fc3fa269b14ff48401fdc168", 0x4c}, {&(0x7f0000000640)="85bac0deb55c22bb733c255a8fdb2a9a8047fa93c494663733eb0c39236b95bea556d9ca526fb8ee56783eb01b6af6701d4a3e1930685c73c4faa5047f38739d991e19d0c888326d3a1a20df0de98b696c2108a6284a76b2f4fe", 0x5a}, {&(0x7f0000002400)="1991cc3a7d19ba77105fb7b5263bdc889c225f19ed5a52ffb2dbdfc3bfe920e1ed5d8d892c3288e03d4a06e30e87a55febb318568b04c057e44c55b679e1815ef3aff21e4f8b326e5b6ad5acac3b42295bec6a4349a744a8a0bcfe099b0dfaf48064f0a4de6ccb22cecb3ff33992a788da9128c3a5f951fcb8cf6d7ebc3592e94cf0987c50112caab689f98e00a8431fac36cd88416994c4907ff140dc7ba015318985ac64cd3bf28acf758bf54e8f9cf77853667db70fd7cf34694e8308ae8c6da86fc4ea4b2bf102ec338bec654fb9a655cf61159bf86bab5216e37538d624048a292251acc79bd36731225535a7cefd7ff05067f10381b0f4123084e341e260285cca2408c7c2c26795d285dba71923f83681de126929adbd316558ca0ec1d00d33c8baf95b32ea0d42bcafe1cd29b2bea72f01502168280be0a3f87349c6162199b57b088811c8abdd80a0ab136dfa6e2ef38dc3ec1849501009433ba70a716085dd5a8935f736ad59b738beded95ca7237f82f628bb2c8f203e0c878b8dc46a94f463405682d0accfe521067ce6e8d9b90e6eebcf66bc5bd74a15b3c41bfe397df18cca3ac72ca1539bdd6adb976bafd51a5fabaa91c11731a19a15fc230c3fba8c48eaf0e29f2e18b0fa9ba4f65e4f7de5c719fa4745ddf06885d76faf4365637668a222e70f0c0f080ab69ca799162f2561f31678ebc8ec331f169db62c5704aa1146a75fa36b674e56df731c0cfba8a4c5b8cd5b28f99b81dfbeff13afe19d8d5ba864d9e19b14a9a309e679b7412b7d06d42ac48f5dd13c61b360069d4f58c649d118aa9b9546fbc4d78132517f8dbbbd2231d2877ba0db9565762dffc7a9ac0c473bfc770006364520c4442cd0797337ad89e7d2167119a059a0cc37e93150b20bd6660632722fc5b1e77741dcc020f924973bce256348c6a3656f96daf8089aa1592ad19107838558dd1f07687dc698d173db842baaeea9d75f5cfb5b53b4872bcd785d010b6a34419ed6b43503608699e7a9b20cadd4e58c85f0e7f7cbcef6f4c4b1d13f6cf110c9f61be510eda4e0fc67b367014ceb83aacccd303f4d5cde9de6a0486053e281aeb2942f7fbd8261201d76930dbaeb57046be0c57cbf92f0f0a9cf475c8587e62e78a5697f43b32953140f2cf87f89e17a2dea04e1637c2ace70fd2cc17f277109825e858da0bfb84c53c99eaec5cbdf05bae15aae4ab2c384e4f33a1d4d26b63d7f9925354887be7671e8baa8665f0153e294526098346d93e074f514d221fa6e82528bdf1832a0d373ff71e7d56ba20e77fe98db913c29823560e7aca603f4da1160dec5cd85cc86b9a37be19a4abe2d624e7f8d46d850cdc8aa89dee2e3ac87b0bb041edbd6abb0e7fa087d4017f2bfcf6241492a67a0dd1cb75681f2cfdb62736dcaa0053ab9c65b800ca88982a5d4e5f55562017a6f1bc49354bb9c2a565e41387c065aad08882ea8b77902edf77dd2bfd4ea0c056d5203bca5abbdb486fbfbca2f436187acea38eead38c40b5e55ddbb0accf6ac554b3b241b3c0089407d22c7013306c57040475bc518f49f3d0ec0aeb58a38b1055facf73505fd1caa5221c6dc02530f6b90df0dedd59e2ce5b6512e7bc2c3a430224f5383ce520a68e7cd9ad57ddd9f08985870d1c75034d55b7420a1e3a56104b97d0f94b7e299432441c97e26964f5e5a55bcdb88873c696a0710278772dacd078330a48217e06b82718f1ff9017e85d9b59ac0fbf7833c4c54e8a4356e8de18216ed2c7bac05c8da37103f0269238b3818eaddb9c9b97241d10947c2a9a0db13f12c11132b0fda83f4ed5ed3299a4be2f749beffa94501b5bb3d93d0bae1d8d6018baac2e4362f965486f4d74b929f55fbb5c95380a3410cece2c1fb11587b709c0a2e192ad5d45571c3cbf871d6a8bcfea325682883330d4b52064e90e56257e08fbb18fa754ef0a3f02e720d99d223d64004eff154201632e7439c95430014602769725c855a5d5bbaadbe76ecf845317c4b0258338595d1d17b39f9076d7995843151eec23d57b9faad42a35eae57821cbd5a82c19efd059b78c8d959d4434d8fda28ae3e79e8032d45700f30503fef3ed90ae118344d17c3efb82e6f11654dabae931cf2f2bf9fdfc7bd680f61558187d402e64f1440d8cfebd13f92a6c099009683bcbd9383a1afcf1548752794b66c0dac5eea3c3cd2747ba4ab7968138d8027a1e256cdb270bf5c6ea66691bfd00a08eadad6f6fef996cf1e3eec70bb0c5136bc225b06b479b783c736ca1ed6f0a8b3b79bd0aab94ac726cd72e0f26d50525ec2927ee27545c85860fc986e90ff9809be06f2f320b077da3b777becd5df7cecc1a477501ce0622aa523412e39030e602e7ebadb38186586a36acb3733694db84b8c99b1a75dd30482fe6a48b5d45b9c25f12cd1fe056e85e6f3a9be5a4eb721ba762c13c0c4e29eccd844eab3503a64795593f4ca177ef008143f53a092730d2b15490001e7ed40cc5736076ad61f72ffc7f14d66e040c36c1f6dc8df64153fb79c2973550a56f581209decfb7d74881ebf25289b93c93741ef167dabc55aef248cc96daeccf16d7c2231531eae4d7b1f241fa3229a15f400fc88e8a8adfc85b5efa3b02d0f38993842ca2488a5ea0b0075949cd7bec17a2c6711de0f0202bcdfc676539ea7a99a4f67bec3e9b60f51080893339db3d9991342d56e701baa5bedf5358848a6a54f26cd16d0e88aa9cf6c65e5843dffa15e3cfd9fb2ca4331278a0452104cfbe35ef77a138836d78eb6e0cfbfa6fdf96422956761c128449074979a3f1d75ee33e19280c5cc949b52a6120f974346a7077e3410d8594bdbbaadc0feaff05084c53d66f40d85851cdd76655f9adfd2d362263ad4c5b09dee077160c1054807618e8267cbcdc54afb216fc2783b2779f1831fcedbf4e13a8a579d365d390e2bc8d93a47713f556ce99f65d13dc1168471bba99beb3497a0c95ce1971116df420161d25dda5ddd693082ff6b0503e489fdfa09d8cbe88abd893c6dc8bd09183e878ed6c3a18ea6957c10ae1ac903b22512224d45c8cfd15069deb0345fd646a45c10483f79d4953e7a249435c3eb3481df75c48e123dd2dc3ac065f1c76b9afdf4826894061c76a373f6e9c35aae0c5b1321b1d0d76d80d9893551485eb235ecc552c41e2dd5f2c1c04e4e7a898e5fcdecc96e580d6c9bac1087144a8a60b323a8d2aca2763e125d593be92b7bd9e808b50b69a8312c40eed2d52802fe10413da5d8e425a51c7a84f88b2c628d93044d76e6747611892814021cdce6ee8cfceb5b904ff713c6a83275efd1f2ca520425aab8e24f87c5e0e8e0f6ca7a1b3dc2fe72b28801d2f39e6dc03b5ba9885f7dbf83c5cef2caa33c417e6f399c957859efe0f37c2a76b8e40732115b2deee6a4ac07bfcfc5da1e396cef6c343be437b17f17809f70761bee7f9ee5fdd45302f8e0ba51db44c8627c423bffda84d8741943ba78ae201337c677c745c0da86644359be6faecfa5e52c78a52fd5af39ae4db304ad70198f9b5637e8db3d59dc9250e8c55e6507f39b450d6b1b3b43b012d606723cef3c6fdd542555dff37a300e9db2c4060eaa412809558f81c6ee7e8b26e3ec1402e3bcba62177d88b5f7c2a50e3ba1c76d4c866645bf146c22c7a1aa08f2815778f43cde1ec367a82fec7d32d2a4f3dac460d06c1184ed23afcfa2baa289ebe71ed75c0c4afdc5565c2a14fa0f966098ed5dc682908d74329c1dafd166de4d062c99bf8fed3763ee31b1d7bcf24a72ffc2581f57f26e5fd048b967fc116c8641064105308b230b553d72fcfabb233ac11b8ba50dbcb7dc7f7c0eeb3345f9418dafb6a1a5cbacc43b6bdf88bdfe173dc45079efe2f54fb4350d7ee39fa2cbe79532505e4c7aa989544a9fb3ecd45fd652f338e960ebc015980f9c2f2237acf90e9edfdb88dabf320051fe2fe4", 0xafc}], 0x6}, 0x0) 986.29636ms ago: executing program 3 (id=9766): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1800000068006bcd9e3fe3dc6e0800000a00005865000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 968.900651ms ago: executing program 1 (id=9767): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) 956.334212ms ago: executing program 0 (id=9768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 878.860279ms ago: executing program 3 (id=9769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) 878.412878ms ago: executing program 2 (id=9770): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x14}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="270100000001050003000029d0a7d0884ac82a9200008100393643054e0b43051a0ad13a52e3e4844f896a172d8a169d3a4d", 0x32}], 0x1}, 0x0) 857.09215ms ago: executing program 1 (id=9771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 806.224985ms ago: executing program 4 (id=9772): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 732.63495ms ago: executing program 2 (id=9773): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)='^', 0x1}], 0x1}, 0x448c0) 732.09891ms ago: executing program 4 (id=9774): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'hsr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20000015) 590.797012ms ago: executing program 0 (id=9775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) 499.450909ms ago: executing program 3 (id=9776): socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000ab000000000000000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 473.239972ms ago: executing program 4 (id=9777): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x2, {0xa, 0x0, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) 419.101366ms ago: executing program 4 (id=9778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001ac0)={0x10b, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)=r0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0xea00000000000000, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) close(r4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c00)=@o_path={&(0x7f0000001bc0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c40)={0x1, 0xffffffffffffffff}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x434d9) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_exit\x00', r8}, 0x10) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) write$cgroup_int(r10, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1e, 0x1c, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x33ad0875}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @map_fd={0x18, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x8, 0x53, &(0x7f00000005c0)=""/83, 0x41000, 0xb780da16962b6e7e, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, &(0x7f0000001c80)=[r2, r4, r5, r6, r7, r10], 0x0, 0x10, 0x7fffffff}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x9, 0x83, 0x80, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000002c0), 0x1}, 0xd045, 0x0, 0x2, 0x5, 0x200, 0x3f, 0x5, 0x0, 0x7ff, 0x0, 0x17}, r7, 0xb, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020029000b05d25a806f8c6394f90424fc602f0011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000003000000000000afff000200000018110009c81c25c9aecd7c111f94495d1e708a873d0184f376fff66f5d431e92638cb1e868d7be55f169272f9e9523b3e6e12b8f63bf44f9781a020000002da93d8aa9ab763bc795881a94c7ff98e6be1a4f988eb82f893c9c21a61ca65a2ffb854e1c2d801726b4fa26440abf3cef992fdb4c147269e7b6ae", @ANYRES32, @ANYBLOB="000077000000000000b7080000000000007bf2f8ff00000000bf921800000007020000f8ffffffb703000008000000b7040000b7c147fb8500000082001f001812000087b9a2f4090000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001834000003000000000000000000000085100000fbffffff1837000002000000000000000000000018230000", @ANYRES32, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x2b, &(0x7f0000000280)=""/43, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x0, 0x5, 0x800}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0x1], &(0x7f0000000700)=[{0x3, 0x0, 0x5, 0x6}, {0x1, 0x4, 0x6, 0x4}, {0x0, 0x2, 0x4, 0xb}, {0x0, 0x5, 0xb, 0x8}, {0x1, 0x0, 0x0, 0xb}, {0x0, 0x4, 0xc, 0x5}, {0x1, 0x3, 0x5, 0x7}, {0x3, 0x0, 0x10, 0x5}]}, 0x90) 353.369691ms ago: executing program 1 (id=9779): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0200002000"}) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x0, 0x4) socketpair(0x0, 0x0, 0xfffffff7, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008000c0007000200060001c00364bc24eab556a705251e618294ff0051f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 333.853603ms ago: executing program 0 (id=9780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000085000000070000009500000000000000839c791759c07fc52aa27f546073bb373d719bee763784c8eeb56761f8a1c24b8724eac4deedd40378854a85fdb43b88335a68f0"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 330.993713ms ago: executing program 2 (id=9781): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 306.971315ms ago: executing program 3 (id=9782): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x7, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) 254.930849ms ago: executing program 0 (id=9783): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703360000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 179.326366ms ago: executing program 2 (id=9784): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local={0xac, 0x8}}, 0x18, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x2e, 0x0, 0x0, 0x7800}, 0x60) 105.483101ms ago: executing program 2 (id=9785): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=0xffffffffffffffff, 0x12) 0s ago: executing program 2 (id=9786): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000080)) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered disabled state [ 374.184344][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.227606][T16953] syz.3.5631 (16953) used greatest stack depth: 17280 bytes left [ 374.245084][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.252631][T16971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.260259][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.267409][T16971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.282471][T16971] device bridge0 entered promiscuous mode [ 374.380982][T16987] netlink: 'syz.1.5648': attribute type 21 has an invalid length. [ 374.474793][T16985] device syzkaller0 entered promiscuous mode [ 375.302312][T17028] syz.1.5664[17028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.302419][T17028] syz.1.5664[17028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.418792][T17011] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5657'. [ 375.443160][T17011] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 375.529013][T17011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.546637][T17020] netlink: 'syz.4.5661': attribute type 21 has an invalid length. [ 375.554771][T10127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 375.820568][T17052] syz.0.5675[17052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.820673][T17052] syz.0.5675[17052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.393929][T17076] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 376.693100][T17085] device syzkaller0 entered promiscuous mode [ 376.750681][T17092] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5693'. [ 377.279553][T17126] device pim6reg1 entered promiscuous mode [ 377.401403][T17136] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5709'. [ 377.650049][T17145] device syzkaller0 entered promiscuous mode [ 377.679769][T17152] syz.0.5718[17152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.679874][T17152] syz.0.5718[17152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.040906][T17165] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5722'. [ 378.194537][T17171] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5725'. [ 378.244285][T17168] device pim6reg1 entered promiscuous mode [ 378.553314][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.559938][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.595760][T17187] netlink: 187308 bytes leftover after parsing attributes in process `syz.2.5732'. [ 378.654162][T17188] netlink: 17275 bytes leftover after parsing attributes in process `syz.3.5731'. [ 378.676346][T17187] netlink: 'syz.2.5732': attribute type 2 has an invalid length. [ 379.071665][T17184] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5728'. [ 379.084332][T17184] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 379.151646][T17184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.585337][T17217] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5743'. [ 379.597362][T17218] netlink: 17275 bytes leftover after parsing attributes in process `syz.3.5744'. [ 379.765276][T17226] netlink: 187308 bytes leftover after parsing attributes in process `syz.0.5748'. [ 379.835136][T17226] netlink: 'syz.0.5748': attribute type 2 has an invalid length. [ 380.429332][T17245] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5757'. [ 383.004461][T17298] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5778'. [ 383.035052][T17298] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 383.054821][T17298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.090247][T17322] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5788'. [ 386.455869][T17425] netlink: 'syz.2.5827': attribute type 28 has an invalid length. [ 386.510113][T17414] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5820'. [ 386.529418][T17414] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 386.647909][T17414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.644954][T17474] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5847'. [ 388.654455][T17474] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 388.687510][T17474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.854280][T17499] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5860'. [ 389.017441][T17507] device pim6reg1 entered promiscuous mode [ 389.212737][T17520] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5870'. [ 390.093730][T17527] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5871'. [ 390.121874][T17527] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 390.179991][T17527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.381888][T17543] device pim6reg1 entered promiscuous mode [ 390.477476][T17550] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5883'. [ 390.646487][T17566] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5887'. [ 390.757963][T17559] netlink: 'syz.3.5887': attribute type 4 has an invalid length. [ 390.785810][T17559] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5887'. [ 390.925980][T17559] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5887'. [ 390.986228][T17559] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 391.835073][T17583] netlink: 'syz.2.5899': attribute type 21 has an invalid length. [ 391.859690][T17583] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5899'. [ 393.439109][T17627] netlink: 'syz.3.5916': attribute type 21 has an invalid length. [ 393.450843][T17627] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5916'. [ 393.474719][T17634] netlink: 'syz.2.5920': attribute type 10 has an invalid length. [ 393.490612][T17634] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5920'. [ 393.504046][T17634] device bond0 entered promiscuous mode [ 393.514057][T17634] device bond_slave_0 entered promiscuous mode [ 393.527021][T17634] device bond_slave_1 entered promiscuous mode [ 393.548753][T17640] netlink: 'syz.0.5924': attribute type 9 has an invalid length. [ 393.582811][T17640] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.5924'. [ 393.615094][T17634] team0: Port device bond0 removed [ 393.701475][T17634] bridge0: port 3(bond0) entered blocking state [ 393.714853][T17634] bridge0: port 3(bond0) entered disabled state [ 393.745057][T17642] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5920'. [ 394.960917][T17681] netlink: 'syz.1.5942': attribute type 9 has an invalid length. [ 394.974676][T17679] netlink: 'syz.3.5941': attribute type 10 has an invalid length. [ 394.992848][T17681] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.5942'. [ 395.003216][T17679] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5941'. [ 395.030887][T17679] device bond0 entered promiscuous mode [ 395.054407][T17679] device bond_slave_0 entered promiscuous mode [ 395.075045][T17679] device bond_slave_1 entered promiscuous mode [ 395.256477][T17679] team0: Port device bond0 removed [ 395.278846][T17679] bridge0: port 3(bond0) entered blocking state [ 395.293648][T17679] bridge0: port 3(bond0) entered disabled state [ 395.336132][T17690] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5941'. [ 395.351504][T17695] netlink: 'syz.0.5946': attribute type 21 has an invalid length. [ 395.375421][T17695] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5946'. [ 396.352360][T17714] netlink: 'syz.4.5955': attribute type 7 has an invalid length. [ 396.406812][ T8164] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.510849][T17724] netlink: 'syz.0.5960': attribute type 10 has an invalid length. [ 396.572544][T17724] team0: Device ipvlan1 failed to register rx_handler [ 396.660737][T17726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.668424][T17726] IPv6: NLM_F_CREATE should be set when creating new route [ 396.675715][T17726] IPv6: NLM_F_CREATE should be set when creating new route [ 396.683063][T17726] IPv6: NLM_F_CREATE should be set when creating new route [ 396.700520][T17732] netlink: 'syz.2.5963': attribute type 21 has an invalid length. [ 396.718011][T17732] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5963'. [ 396.773514][T17737] device bond0 entered promiscuous mode [ 396.779749][T17737] device bond_slave_0 entered promiscuous mode [ 396.786671][T17737] device bond_slave_1 entered promiscuous mode [ 396.793412][T17737] bridge0: port 3(bond0) entered blocking state [ 396.814109][T17737] bridge0: port 3(bond0) entered disabled state [ 396.847267][T17737] bridge0: port 3(bond0) entered blocking state [ 396.853595][T17737] bridge0: port 3(bond0) entered forwarding state [ 396.887256][T17742] __nla_validate_parse: 1 callbacks suppressed [ 396.887275][T17742] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5964'. [ 397.761331][T17746] validate_nla: 1 callbacks suppressed [ 397.761348][T17746] netlink: 'syz.3.5969': attribute type 7 has an invalid length. [ 397.834106][T17748] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5968'. [ 398.302979][T17762] netlink: 'syz.4.5975': attribute type 10 has an invalid length. [ 398.369488][T17762] team0: Device ipvlan1 failed to register rx_handler [ 399.294149][T17782] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5985'. [ 399.607007][T17803] netlink: 'syz.2.5996': attribute type 10 has an invalid length. [ 399.649581][T17803] team0: Device ipvlan1 failed to register rx_handler [ 400.580489][T17824] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.6002'. [ 400.711961][T17834] delete_channel: no stack [ 400.838432][T17838] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6009'. [ 400.990149][T17847] netlink: 'syz.0.6013': attribute type 10 has an invalid length. [ 401.040679][T17847] team0: Device ipvlan1 failed to register rx_handler [ 401.100904][T17848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.109000][T17848] IPv6: NLM_F_CREATE should be set when creating new route [ 401.116321][T17848] IPv6: NLM_F_CREATE should be set when creating new route [ 401.123728][T17848] IPv6: NLM_F_CREATE should be set when creating new route [ 401.136897][T17854] netlink: 'syz.1.6017': attribute type 22 has an invalid length. [ 401.148531][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6017'. [ 401.198833][T17858] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.6018'. [ 401.501991][T17880] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6027'. [ 401.779585][T17903] netlink: 'syz.2.6037': attribute type 28 has an invalid length. [ 401.798663][T17903] netlink: 'syz.2.6037': attribute type 4 has an invalid length. [ 401.808568][T17903] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6037'. [ 401.926310][T17915] netlink: 'syz.1.6043': attribute type 21 has an invalid length. [ 401.936977][T17915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6043'. [ 401.953085][T17918] delete_channel: no stack [ 402.209670][T17933] netlink: 'syz.2.6051': attribute type 28 has an invalid length. [ 402.221631][T17933] netlink: 'syz.2.6051': attribute type 4 has an invalid length. [ 402.231470][T17933] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6051'. [ 402.410841][T17948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6058'. [ 402.493786][T17946] team0: Device ipvlan1 failed to register rx_handler [ 402.623900][T17956] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6060'. [ 402.778944][T17969] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6064'. [ 402.849538][T17974] validate_nla: 2 callbacks suppressed [ 402.849558][T17974] netlink: 'syz.3.6066': attribute type 28 has an invalid length. [ 402.883986][T17974] netlink: 'syz.3.6066': attribute type 4 has an invalid length. [ 402.911269][T17974] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6066'. [ 403.208234][T17989] netlink: 'syz.4.6075': attribute type 22 has an invalid length. [ 403.257310][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6075'. [ 403.466994][T18000] netlink: 'syz.4.6076': attribute type 10 has an invalid length. [ 403.509689][T18000] team0: Device ipvlan1 failed to register rx_handler [ 403.530726][T18002] netlink: 'syz.3.6079': attribute type 28 has an invalid length. [ 403.583976][T18002] netlink: 'syz.3.6079': attribute type 4 has an invalid length. [ 403.625330][T18002] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6079'. [ 404.107875][T18026] sock: sock_set_timeout: `syz.1.6085' (pid 18026) tries to set negative timeout [ 404.891874][T18038] netlink: 'syz.4.6093': attribute type 28 has an invalid length. [ 404.940386][T18038] netlink: 'syz.4.6093': attribute type 4 has an invalid length. [ 404.969289][T18038] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6093'. [ 405.064393][T18050] delete_channel: no stack [ 405.268328][T18066] sock: sock_set_timeout: `syz.3.6103' (pid 18066) tries to set negative timeout [ 406.083138][T18076] device syzkaller0 entered promiscuous mode [ 406.097557][T18087] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6115'. [ 406.544179][T18109] delete_channel: no stack [ 406.752759][T18118] sock: sock_set_timeout: `syz.4.6125' (pid 18118) tries to set negative timeout [ 407.615783][T18139] device syzkaller0 entered promiscuous mode [ 408.035060][T18165] netlink: 'syz.2.6146': attribute type 21 has an invalid length. [ 408.096080][T18165] netlink: 'syz.2.6146': attribute type 1 has an invalid length. [ 408.161457][T18165] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6146'. [ 408.366080][T18176] sock: sock_set_timeout: `syz.3.6147' (pid 18176) tries to set negative timeout [ 409.061748][ T3790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.166096][ T3790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.326792][ T3790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.549789][T18208] sock: sock_set_timeout: `syz.1.6162' (pid 18208) tries to set negative timeout [ 410.189145][ T3790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.457938][ T3247] Bluetooth: hci1: command 0x0409 tx timeout [ 410.540915][T18175] chnl_net:caif_netlink_parms(): no params data found [ 410.680254][T18237] delete_channel: no stack [ 410.764798][T18175] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.772461][T18175] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.782999][T18175] device bridge_slave_0 entered promiscuous mode [ 410.792215][T18175] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.799791][T18175] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.808283][T18175] device bridge_slave_1 entered promiscuous mode [ 410.971309][T18175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.065135][T18175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.162521][T18258] sock: sock_set_timeout: `syz.2.6179' (pid 18258) tries to set negative timeout [ 411.908411][T18175] team0: Port device team_slave_0 added [ 411.979347][T18175] team0: Port device team_slave_1 added [ 412.109111][T18175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.120676][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.215754][T18175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.270710][T18175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.285621][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.339618][T18175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.371572][T18300] netlink: 'syz.4.6199': attribute type 21 has an invalid length. [ 412.384123][T18300] netlink: 'syz.4.6199': attribute type 1 has an invalid length. [ 412.411000][T18300] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.6199'. [ 412.535363][ T3247] Bluetooth: hci1: command 0x041b tx timeout [ 412.619284][T18175] device hsr_slave_0 entered promiscuous mode [ 412.655982][T18175] device hsr_slave_1 entered promiscuous mode [ 412.693615][T18175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.733800][T18175] Cannot create hsr debugfs directory [ 413.062781][ T3790] device hsr_slave_0 left promiscuous mode [ 413.107299][ T3790] device hsr_slave_1 left promiscuous mode [ 413.169420][T18311] sock: sock_set_timeout: `syz.4.6200' (pid 18311) tries to set negative timeout [ 413.196712][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.204496][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.434100][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.453580][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.053522][ T3790] device bridge_slave_1 left promiscuous mode [ 414.063626][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.100169][ T3790] device bridge_slave_0 left promiscuous mode [ 414.111167][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.169741][ T3790] device veth1_macvtap left promiscuous mode [ 414.202651][ T3790] device veth0_macvtap left promiscuous mode [ 414.221564][ T3790] device veth1_vlan left promiscuous mode [ 414.279703][ T3790] device veth0_vlan left promiscuous mode [ 414.615370][ T3512] Bluetooth: hci1: command 0x040f tx timeout [ 415.241599][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 415.295772][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 415.352901][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.384713][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.574817][ T3790] bond0 (unregistering): Released all slaves [ 415.701754][T18329] device sit0 entered promiscuous mode [ 415.866882][T18367] sock: sock_set_timeout: `syz.1.6224' (pid 18367) tries to set negative timeout [ 416.786443][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 416.864046][T18373] netlink: 'syz.1.6227': attribute type 10 has an invalid length. [ 416.895108][T18373] team0: Device ipvlan1 failed to register rx_handler [ 417.636939][T18175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.695845][T18175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.755432][T18175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.792231][T18175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.881727][T18395] netlink: 'syz.4.6235': attribute type 3 has an invalid length. [ 417.912010][T18395] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6235'. [ 418.158900][T18175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.360811][T18175] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.412843][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 418.443678][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 418.500949][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 418.526060][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.759909][ T3247] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.767267][ T3247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.793822][T18411] netlink: 'syz.4.6242': attribute type 10 has an invalid length. [ 418.970069][T18411] team0: Device ipvlan1 failed to register rx_handler [ 419.133097][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.196222][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 419.216674][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.232361][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.240712][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.258842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 419.290102][T18418] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.328327][T18422] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.336154][T18422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.399796][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 419.424529][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 419.454910][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 419.479849][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 419.501404][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 419.517971][ T3247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 419.531869][T18423] device pim6reg1 entered promiscuous mode [ 419.615018][T18175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.635363][T18175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.682107][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 419.704675][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 419.721671][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 419.742822][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 419.763602][T18440] device sit0 entered promiscuous mode [ 420.236519][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 420.515287][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 420.537543][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 420.574400][T18175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.720922][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 420.731791][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 420.780590][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 420.816170][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 420.871968][T18175] device veth0_vlan entered promiscuous mode [ 420.904197][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.923115][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.959797][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.004526][T18175] device veth1_vlan entered promiscuous mode [ 421.029009][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 421.063949][T18464] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.071289][T18464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.114872][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 421.202870][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 421.232835][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.254205][T18175] device veth0_macvtap entered promiscuous mode [ 421.311406][T18175] device veth1_macvtap entered promiscuous mode [ 421.348234][T18469] device sit0 entered promiscuous mode [ 421.430078][T18473] netlink: 'syz.2.6264': attribute type 10 has an invalid length. [ 421.480802][T18473] team0: Device ipvlan1 failed to register rx_handler [ 421.587770][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.599142][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.609643][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.623751][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.634085][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.645031][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.655046][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.666355][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.678772][T18175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.691990][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.710481][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.722323][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.743895][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.761417][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.772550][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.782958][T18175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.793597][T18175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.806305][T18175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.820981][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 421.835013][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 421.843761][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 421.852838][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.861996][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.871311][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.894315][T18175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.904377][T18175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.913342][T18175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.922120][T18175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.078279][ T3790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.101648][ T3790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.139028][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.164704][T18499] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.184030][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.196273][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 422.205848][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 422.225428][T18503] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.232705][T18503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.634094][T18530] tap0: tun_chr_ioctl cmd 2147767511 [ 422.680094][T18540] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.739697][T18542] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.746876][T18542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.222070][T18574] tap0: tun_chr_ioctl cmd 2147767511 [ 424.317598][T18599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6319'. [ 424.394492][T18603] tap0: tun_chr_ioctl cmd 2147767511 [ 424.869679][T18635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6336'. [ 424.987250][T18645] tap0: tun_chr_ioctl cmd 2147767511 [ 425.037476][T18651] netlink: 'syz.4.6344': attribute type 10 has an invalid length. [ 425.066988][T18651] team0: Device veth0_macvtap failed to register rx_handler [ 425.556884][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6361'. [ 425.602502][T18688] tap0: tun_chr_ioctl cmd 2147767511 [ 425.628062][T18690] netlink: 'syz.4.6362': attribute type 10 has an invalid length. [ 425.663881][T18690] team0: Device veth0_macvtap failed to register rx_handler [ 426.064851][T18718] netlink: 'syz.1.6375': attribute type 29 has an invalid length. [ 426.142368][T18721] netlink: 'syz.0.6378': attribute type 10 has an invalid length. [ 426.204724][T18721] team0: Device veth0_macvtap failed to register rx_handler [ 426.324211][T18729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6379'. [ 426.593373][T18756] netlink: 'syz.0.6391': attribute type 29 has an invalid length. [ 426.606373][T18754] netlink: 'syz.1.6393': attribute type 4 has an invalid length. [ 426.642881][T18754] netlink: 'syz.1.6393': attribute type 1 has an invalid length. [ 426.675429][T18754] netlink: 88156 bytes leftover after parsing attributes in process `syz.1.6393'. [ 426.710510][T18765] netlink: 'syz.4.6397': attribute type 10 has an invalid length. [ 426.732701][T18765] team0: Device veth0_macvtap failed to register rx_handler [ 426.888052][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6401'. [ 427.169043][T18792] netlink: 'syz.4.6410': attribute type 10 has an invalid length. [ 427.200061][T18790] netlink: 'syz.3.6408': attribute type 4 has an invalid length. [ 427.218869][T18792] team0: Device veth0_macvtap failed to register rx_handler [ 427.240469][T18790] netlink: 88156 bytes leftover after parsing attributes in process `syz.3.6408'. [ 427.551169][T18820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6419'. [ 427.670643][T18824] netlink: 88156 bytes leftover after parsing attributes in process `syz.3.6424'. [ 428.201762][T18857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6439'. [ 429.361773][T18923] __nla_validate_parse: 2 callbacks suppressed [ 429.361794][T18923] netlink: 88156 bytes leftover after parsing attributes in process `syz.4.6470'. [ 429.769661][T18930] IPv6: …: Disabled Multicast RS [ 429.826137][T18946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6480'. [ 429.873391][T18949] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6482'. [ 430.090125][T18966] validate_nla: 13 callbacks suppressed [ 430.090145][T18966] netlink: 'syz.1.6489': attribute type 21 has an invalid length. [ 430.135474][T18966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6489'. [ 430.186133][T18966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6489'. [ 430.485334][T18972] IPv6: …: Disabled Multicast RS [ 430.501116][T18979] netlink: 'syz.0.6495': attribute type 12 has an invalid length. [ 430.542441][T18979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6495'. [ 430.561783][T18982] netlink: 'syz.2.6497': attribute type 14 has an invalid length. [ 430.582077][T18982] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6497'. [ 431.136406][T19009] IPv6: …: Disabled Multicast RS [ 431.271516][T19014] netlink: 'syz.3.6512': attribute type 12 has an invalid length. [ 431.282093][T19014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6512'. [ 431.507973][T19030] netlink: 'syz.0.6517': attribute type 14 has an invalid length. [ 431.532611][T19030] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6517'. [ 431.756103][T19044] netlink: 'syz.0.6526': attribute type 12 has an invalid length. [ 431.765420][T19044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6526'. [ 431.792813][T19039] IPv6: …: Disabled Multicast RS [ 432.033010][T19063] netlink: 'syz.1.6533': attribute type 14 has an invalid length. [ 432.287225][T19073] netlink: 'syz.3.6539': attribute type 12 has an invalid length. [ 432.673450][T19091] netlink: 'syz.1.6548': attribute type 14 has an invalid length. [ 432.899757][T19105] netlink: 'syz.4.6555': attribute type 12 has an invalid length. [ 434.659506][T19234] __nla_validate_parse: 6 callbacks suppressed [ 434.659526][T19234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6617'. [ 434.675906][T19234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6617'. [ 435.091403][T19249] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6625'. [ 435.381283][T19267] validate_nla: 9 callbacks suppressed [ 435.381304][T19267] netlink: 'syz.3.6634': attribute type 21 has an invalid length. [ 435.412766][T19267] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6634'. [ 435.424521][T19267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6634'. [ 435.596583][T19285] netlink: 'syz.1.6641': attribute type 21 has an invalid length. [ 435.661921][T19285] netlink: 'syz.1.6641': attribute type 2 has an invalid length. [ 435.827532][T19285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6641'. [ 436.252995][T19303] netlink: 'syz.1.6650': attribute type 2 has an invalid length. [ 436.303801][T19303] netlink: 'syz.1.6650': attribute type 4 has an invalid length. [ 436.352450][T19303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6650'. [ 436.472752][T19315] netlink: 'syz.1.6657': attribute type 21 has an invalid length. [ 436.502441][T19315] netlink: 'syz.1.6657': attribute type 2 has an invalid length. [ 436.519556][T19315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6657'. [ 436.678913][T19329] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 436.834639][T19336] netlink: 'syz.0.6666': attribute type 17 has an invalid length. [ 436.879286][T19336] netlink: 'syz.0.6666': attribute type 16 has an invalid length. [ 436.935115][T19336] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6666'. [ 437.071293][T19340] netlink: 'syz.4.6668': attribute type 2 has an invalid length. [ 437.116349][T19340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6668'. [ 438.027430][T19386] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 438.718352][T19406] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 439.613037][T19437] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 439.869313][T19451] __nla_validate_parse: 6 callbacks suppressed [ 439.869335][T19451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6717'. [ 440.002602][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.009283][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.976719][T19480] validate_nla: 11 callbacks suppressed [ 440.976738][T19480] netlink: 'syz.0.6729': attribute type 2 has an invalid length. [ 441.013533][T19480] netlink: 'syz.0.6729': attribute type 4 has an invalid length. [ 441.057877][T19480] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6729'. [ 441.732114][T19514] netlink: 'syz.0.6744': attribute type 4 has an invalid length. [ 441.746908][T19514] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6744'. [ 442.579680][T19552] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6762'. [ 442.780143][T19552] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 442.956768][T19568] netlink: 'syz.4.6769': attribute type 1 has an invalid length. [ 443.848309][T19596] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6782'. [ 443.980575][T19596] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 444.061204][T19606] netlink: 'syz.1.6785': attribute type 1 has an invalid length. [ 444.254903][T19622] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.6793'. [ 444.324868][T19628] netlink: 'syz.4.6796': attribute type 11 has an invalid length. [ 444.462582][T19628] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6796'. [ 444.844828][T19665] netlink: 'syz.0.6813': attribute type 11 has an invalid length. [ 444.853778][T19665] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6813'. [ 444.980578][T19678] netlink: 'syz.1.6819': attribute type 3 has an invalid length. [ 444.992071][T19678] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6819'. [ 445.163015][T19692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6826'. [ 445.339088][T19699] netlink: 'syz.2.6829': attribute type 11 has an invalid length. [ 445.362534][T19699] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6829'. [ 445.444007][T19710] netlink: 'syz.2.6834': attribute type 3 has an invalid length. [ 445.462471][T19710] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6834'. [ 445.878767][T19733] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6845'. [ 445.986129][T19738] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.6846'. [ 446.059435][T19745] validate_nla: 2 callbacks suppressed [ 446.059452][T19745] netlink: 'syz.0.6848': attribute type 3 has an invalid length. [ 446.125581][T19745] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6848'. [ 446.363003][T19764] netlink: 'syz.2.6860': attribute type 21 has an invalid length. [ 446.384232][T19764] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6860'. [ 446.500501][T19770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6861'. [ 446.566488][T19774] netlink: 'syz.2.6863': attribute type 1 has an invalid length. [ 447.013252][T19799] netlink: 'syz.0.6874': attribute type 21 has an invalid length. [ 447.027479][T19799] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6874'. [ 447.232504][T19815] netlink: 'syz.4.6879': attribute type 1 has an invalid length. [ 447.487892][T19824] netlink: 'syz.1.6885': attribute type 3 has an invalid length. [ 447.561400][T19831] netlink: 'syz.4.6887': attribute type 21 has an invalid length. [ 447.898992][T19853] netlink: 'syz.4.6898': attribute type 1 has an invalid length. [ 448.513885][T19888] netlink: 'syz.1.6913': attribute type 1 has an invalid length. [ 448.845482][T19906] device veth1_macvtap left promiscuous mode [ 448.884897][T19906] device macsec0 entered promiscuous mode [ 448.975027][T19914] device veth1_macvtap entered promiscuous mode [ 449.246647][T19931] netlink: 'syz.4.6932': attribute type 1 has an invalid length. [ 449.557858][T19949] device veth1_macvtap left promiscuous mode [ 449.582930][T19949] device macsec0 entered promiscuous mode [ 449.657900][T19949] device veth1_macvtap entered promiscuous mode [ 450.295129][T19994] device veth1_macvtap left promiscuous mode [ 450.381013][T19994] device veth1_macvtap entered promiscuous mode [ 450.437294][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.862770][T20036] device veth1_macvtap left promiscuous mode [ 450.927643][T20036] device veth1_macvtap entered promiscuous mode [ 451.201265][T20063] validate_nla: 2 callbacks suppressed [ 451.201282][T20063] netlink: 'syz.0.6992': attribute type 1 has an invalid length. [ 451.269957][T20068] device veth1_macvtap left promiscuous mode [ 451.305033][T20068] device macsec0 entered promiscuous mode [ 451.387220][T20073] device veth1_macvtap entered promiscuous mode [ 451.738084][T20105] netlink: 'syz.2.7011': attribute type 1 has an invalid length. [ 451.953542][T20120] netlink: 'syz.4.7017': attribute type 1 has an invalid length. [ 451.965389][T20120] __nla_validate_parse: 5 callbacks suppressed [ 451.965406][T20120] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.7017'. [ 452.295454][ T3512] Bluetooth: hci2: command 0x0406 tx timeout [ 452.747633][T20191] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7052'. [ 452.795501][T20197] netlink: 'syz.1.7055': attribute type 4 has an invalid length. [ 452.841391][T20197] netlink: 'syz.1.7055': attribute type 16 has an invalid length. [ 452.888564][T20197] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7055'. [ 452.958404][T20211] netlink: 'syz.3.7062': attribute type 1 has an invalid length. [ 453.005689][T20211] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.7062'. [ 453.202385][T20216] device pim6reg1 entered promiscuous mode [ 453.240032][T20234] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7070'. [ 453.330402][T20237] netlink: 'syz.4.7072': attribute type 4 has an invalid length. [ 453.354538][T20240] netlink: 'syz.0.7073': attribute type 1 has an invalid length. [ 453.376366][T20237] netlink: 'syz.4.7072': attribute type 16 has an invalid length. [ 453.391851][T20237] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7072'. [ 453.667736][T20258] netlink: 'syz.3.7082': attribute type 2 has an invalid length. [ 453.695312][T20258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7082'. [ 453.715402][T20264] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7084'. [ 453.946766][T20280] device pim6reg1 entered promiscuous mode [ 454.438712][T20295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7097'. [ 454.610122][T20300] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7098'. [ 457.340148][T20386] __nla_validate_parse: 1 callbacks suppressed [ 457.340186][T20386] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.7135'. [ 457.444799][T20397] : renamed from bond0 [ 457.633403][T20411] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7146'. [ 458.550692][T20429] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7153'. [ 458.614956][T20436] validate_nla: 2 callbacks suppressed [ 458.614975][T20436] netlink: 'syz.1.7154': attribute type 10 has an invalid length. [ 459.138112][T20436] bridge0: port 3(bond0) entered disabled state [ 459.144796][T20436] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.152283][T20436] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.240419][T20436] bridge0: port 3(bond0) entered blocking state [ 459.247067][T20436] bridge0: port 3(bond0) entered forwarding state [ 459.254764][T20436] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.261922][T20436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.269373][T20436] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.276586][T20436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.312603][T20436] team0: Port device bridge0 added [ 459.319264][T20438] netlink: 'syz.1.7154': attribute type 21 has an invalid length. [ 459.354969][T20444] netlink: 'syz.2.7157': attribute type 6 has an invalid length. [ 460.860039][T20490] netlink: 'syz.0.7175': attribute type 10 has an invalid length. [ 460.892990][T20490] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.900544][T20490] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.955906][T20490] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.963266][T20490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.971667][T20490] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.978790][T20490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.009165][T20490] team0: Port device bridge0 added [ 461.035691][T20498] netlink: 'syz.0.7175': attribute type 21 has an invalid length. [ 461.222593][T20517] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7187'. [ 461.376555][T20524] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.7189'. [ 461.585397][T20536] : renamed from bond0 [ 462.107085][T20546] netlink: 'syz.4.7198': attribute type 6 has an invalid length. [ 462.499937][T20564] : renamed from bond0 [ 462.535498][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 462.542173][ T3543] Bluetooth: hci0: command 0x0406 tx timeout [ 462.559742][T20565] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.7204'. [ 463.181352][T20603] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7224'. [ 463.181554][T20601] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.7223'. [ 463.645478][T20631] netlink: 'syz.1.7239': attribute type 21 has an invalid length. [ 463.798241][T20638] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7241'. [ 464.116931][T20662] netlink: 'syz.1.7252': attribute type 21 has an invalid length. [ 464.366199][T20677] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.7258'. [ 464.678669][T20687] netlink: 'syz.0.7263': attribute type 6 has an invalid length. [ 465.029143][T20711] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7274'. [ 465.085002][T20718] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.7277'. [ 465.170353][T20721] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7280'. [ 465.183471][T20717] netlink: 'syz.1.7278': attribute type 6 has an invalid length. [ 465.235780][T20726] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:ac14:140a with DS=0x31 [ 465.366267][T20738] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7287'. [ 465.419741][T20738] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.7287'. [ 466.223631][T20800] netlink: 'syz.4.7318': attribute type 6 has an invalid length. [ 466.323074][T20802] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:ac14:140a with DS=0x31 [ 466.376877][T20774] chnl_net:caif_netlink_parms(): no params data found [ 466.506094][T20824] netlink: 'syz.1.7327': attribute type 21 has an invalid length. [ 466.629144][T20774] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.653819][T20774] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.703838][T20774] device bridge_slave_0 entered promiscuous mode [ 466.734439][T20841] netlink: 'syz.2.7333': attribute type 6 has an invalid length. [ 466.760168][T20774] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.776669][T20774] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.798200][T20774] device bridge_slave_1 entered promiscuous mode [ 466.845139][T20843] netlink: 'syz.1.7336': attribute type 3 has an invalid length. [ 466.948301][T20774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.984243][T20774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.550216][T20774] team0: Port device team_slave_0 added [ 467.573414][T20774] team0: Port device team_slave_1 added [ 467.723743][T20774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.746184][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.793907][T20774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.814727][T20878] netlink: 'syz.2.7353': attribute type 3 has an invalid length. [ 467.824207][T20878] __nla_validate_parse: 16 callbacks suppressed [ 467.824225][T20878] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7353'. [ 467.854982][T20879] netlink: 'syz.4.7349': attribute type 6 has an invalid length. [ 467.880263][T20774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.905473][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.969570][T20774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.985246][ T1068] Bluetooth: hci1: command 0x0409 tx timeout [ 467.997508][T20889] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7358'. [ 468.025283][T20889] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.7358'. [ 468.154032][T20774] device hsr_slave_0 entered promiscuous mode [ 468.163864][T20774] device hsr_slave_1 entered promiscuous mode [ 468.178173][T20774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.191493][T20774] Cannot create hsr debugfs directory [ 468.208690][T20890] bridge0: port 3(bond0) entered disabled state [ 468.215872][T20890] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.217500][T20894] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.7360'. [ 468.225415][T20890] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.708871][T20774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.778174][T20774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.857230][T20929] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7376'. [ 468.928339][T20774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.025106][T20774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.044000][T20943] validate_nla: 4 callbacks suppressed [ 469.044019][T20943] netlink: 'syz.4.7382': attribute type 16 has an invalid length. [ 469.078579][T20945] netlink: 'syz.2.7384': attribute type 3 has an invalid length. [ 469.095566][T20945] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7384'. [ 469.288046][T20774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 469.515909][T20966] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.7392'. [ 469.568044][T20774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 469.604947][T20774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 469.634775][T20774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 469.690650][T20973] netlink: 'syz.2.7397': attribute type 3 has an invalid length. [ 469.705452][T20974] netlink: 'syz.4.7396': attribute type 16 has an invalid length. [ 469.724655][T20973] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7397'. [ 469.956493][T20774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.025546][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.034881][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.047776][T20774] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.056259][ T1068] Bluetooth: hci1: command 0x041b tx timeout [ 470.105721][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.116212][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.126447][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.133648][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.143065][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.163632][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.173391][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.182648][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.189994][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.198355][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 470.317582][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 470.347788][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 470.368475][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 470.382480][T21002] netlink: 'syz.3.7410': attribute type 3 has an invalid length. [ 470.408214][T21002] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7410'. [ 470.426194][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 470.435871][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 470.446780][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 470.458698][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.468677][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.478258][T21000] netlink: 'syz.2.7409': attribute type 10 has an invalid length. [ 470.490861][T21000] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.499311][T21000] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.513810][T21000] device bridge0 left promiscuous mode [ 470.579912][T21000] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.587812][T21000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.597502][T21000] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.605111][T21000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.652523][T21000] team0: Port device bridge0 added [ 470.682238][T20774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.694552][T20774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.711459][T21006] netlink: 'syz.2.7409': attribute type 21 has an invalid length. [ 470.757337][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.776450][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.903066][T21033] netlink: 'syz.4.7421': attribute type 16 has an invalid length. [ 471.042778][T21036] device syzkaller0 entered promiscuous mode [ 471.128872][T20774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.150834][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.160116][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 471.252911][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.273302][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.355154][T21060] netlink: 'syz.1.7434': attribute type 10 has an invalid length. [ 471.386651][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.412008][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.435382][T21060] netlink: 'syz.1.7434': attribute type 21 has an invalid length. [ 471.446308][T20774] device veth0_vlan entered promiscuous mode [ 471.471983][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.485470][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.499909][T20774] device veth1_vlan entered promiscuous mode [ 471.547814][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.567318][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.576366][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.585574][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.616151][T20774] device veth0_macvtap entered promiscuous mode [ 471.656051][T20774] device veth1_macvtap entered promiscuous mode [ 471.731345][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.756846][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.775301][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.797381][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.815566][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.844754][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.865535][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.885803][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.899857][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.910831][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.923205][T20774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.974490][T21087] device syzkaller0 entered promiscuous mode [ 471.984253][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.994916][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.003402][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.021261][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.043370][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.067431][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.081672][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.093670][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.104904][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.115541][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.127153][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.135607][ T1068] Bluetooth: hci1: command 0x040f tx timeout [ 472.139445][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.156703][T21106] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.7455'. [ 472.166642][T20774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.177800][T20774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.200880][T20774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.294785][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.304149][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.336451][T20774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.348472][T20774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.358996][T20774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.367973][T20774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.516463][ T3790] device hsr_slave_0 left promiscuous mode [ 472.533667][ T3790] device hsr_slave_1 left promiscuous mode [ 472.559356][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.571323][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.580853][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.596579][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.624279][ T3790] device bridge_slave_1 left promiscuous mode [ 472.636397][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.648638][ T3790] device bridge_slave_0 left promiscuous mode [ 472.656837][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.679401][ T3790] device veth1_macvtap left promiscuous mode [ 472.686467][ T3790] device veth1_vlan left promiscuous mode [ 472.693107][ T3790] device veth0_vlan left promiscuous mode [ 473.002936][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 473.023344][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 473.050066][ T3790]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.065786][ T3790]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.136356][ T3790] team0 (unregistering): Port device bridge0 removed [ 473.160314][ T3790]  (unregistering): Released all slaves [ 473.354663][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.409886][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.431164][ T8164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.438692][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 473.465735][ T8164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.506071][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 473.574178][T21151] __nla_validate_parse: 1 callbacks suppressed [ 473.574199][T21151] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.7476'. [ 474.215480][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 474.340223][T21190] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.7491'. [ 474.449511][T21194] validate_nla: 2 callbacks suppressed [ 474.449553][T21194] netlink: 'syz.4.7494': attribute type 6 has an invalid length. [ 474.666254][T21217] netlink: 'syz.2.7505': attribute type 1 has an invalid length. [ 474.674031][T21217] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7505'. [ 474.730006][T21217] netlink: 'syz.2.7505': attribute type 15 has an invalid length. [ 474.765399][T21217] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7505'. [ 474.870013][T21217] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7505'. [ 474.952968][T21234] tap0: tun_chr_ioctl cmd 1074025677 [ 474.966396][T21234] tap0: linktype set to 270 [ 475.268578][T21244] device syzkaller0 entered promiscuous mode [ 475.279255][T21251] netlink: 'syz.2.7521': attribute type 10 has an invalid length. [ 475.323161][T21251] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.331273][T21251] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.521982][T21257] netlink: 'syz.2.7521': attribute type 21 has an invalid length. [ 476.334599][T21294] netlink: 'syz.2.7541': attribute type 10 has an invalid length. [ 476.366604][T21294] netlink: 'syz.2.7541': attribute type 21 has an invalid length. [ 476.551358][T21321] netlink: 'syz.0.7551': attribute type 1 has an invalid length. [ 476.596592][T21321] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7551'. [ 477.054948][T21338] Â: renamed from pim6reg1 [ 477.216639][T21349] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7565'. [ 477.246263][T21349] device bridge_slave_1 left promiscuous mode [ 477.274008][T21349] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.312646][T21349] device bridge_slave_0 left promiscuous mode [ 477.325032][T21349] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.901140][ T1068] Bluetooth: hci5: command 0x0406 tx timeout [ 477.999654][T21379] Â: renamed from pim6reg1 [ 478.437256][T21402] netlink: 'syz.3.7589': attribute type 1 has an invalid length. [ 478.464636][T21402] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7589'. [ 478.553666][T21409] Â: renamed from pim6reg1 [ 478.978028][T21436] netlink: 'syz.0.7603': attribute type 1 has an invalid length. [ 479.013969][T21436] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7603'. [ 479.923018][T21474] netlink: 'syz.1.7621': attribute type 1 has an invalid length. [ 479.939288][T21474] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7621'. [ 481.352284][T21524] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7640'. [ 482.534965][T21570] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7661'. [ 483.706290][T21580] device syzkaller0 entered promiscuous mode [ 484.074621][T21603] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7675'. [ 484.626490][T21643] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7692'. [ 485.503171][T21640] device syzkaller0 entered promiscuous mode [ 491.826339][T21989] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7838'. [ 492.277064][T22019] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7851'. [ 492.406036][T22025] device sit0 left promiscuous mode [ 495.008403][T22169] netlink: 'syz.1.7917': attribute type 10 has an invalid length. [ 495.035563][T22169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7917'. [ 495.494120][T22201] netlink: 'syz.4.7933': attribute type 10 has an invalid length. [ 495.523595][T22201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7933'. [ 495.772398][T22215] IPv6: Can't replace route, no match found [ 495.922850][T22226] netlink: 'syz.0.7946': attribute type 10 has an invalid length. [ 495.940809][T22226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7946'. [ 496.113933][T22232] device sit0 entered promiscuous mode [ 496.696748][T22245] IPv6: NLM_F_REPLACE set, but no existing node found! [ 496.706771][T22257] netlink: 'syz.3.7961': attribute type 10 has an invalid length. [ 496.732772][T22257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7961'. [ 497.094791][T22285] netlink: 'syz.4.7974': attribute type 12 has an invalid length. [ 497.108874][T22285] netlink: 'syz.4.7974': attribute type 1 has an invalid length. [ 497.129065][T22285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.408233][T22301] GPL: port 1(veth0_to_bond) entered blocking state [ 497.434094][T22301] GPL: port 1(veth0_to_bond) entered disabled state [ 497.468017][T22301] device veth0_to_bond entered promiscuous mode [ 497.492881][T22315] IPv6: NLM_F_REPLACE set, but no existing node found! [ 497.539875][T22319] netlink: 'syz.2.7991': attribute type 12 has an invalid length. [ 497.576891][T22319] netlink: 'syz.2.7991': attribute type 1 has an invalid length. [ 497.596799][T22319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.767047][T22334] device sit0 left promiscuous mode [ 497.951377][T22340] device sit0 entered promiscuous mode [ 498.429504][T22345] IPv6: Can't replace route, no match found [ 498.447941][T22351] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.8006'. [ 498.760842][T22385] netlink: 'syz.1.8022': attribute type 1 has an invalid length. [ 498.776035][T22385] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.8022'. [ 498.793255][T22386] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.8021'. [ 498.845851][T22388] netlink: 'syz.2.8023': attribute type 12 has an invalid length. [ 498.853870][T22388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.896432][T22394] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8024'. [ 499.129630][T22414] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.8036'. [ 499.252793][T22425] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8041'. [ 499.352353][T22433] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8044'. [ 499.503910][T22451] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8053'. [ 499.646731][T22459] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8057'. [ 499.756266][T22469] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8062'. [ 500.164564][T22504] device sit0 left promiscuous mode [ 500.227582][T22504] device sit0 entered promiscuous mode [ 500.674869][T22532] validate_nla: 5 callbacks suppressed [ 500.674886][T22532] netlink: 'syz.1.8090': attribute type 1 has an invalid length. [ 500.767979][T22534] netlink: 'syz.1.8092': attribute type 3 has an invalid length. [ 500.968019][T22517] netlink: 'syz.4.8082': attribute type 3 has an invalid length. [ 501.503963][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.510614][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.695758][T22567] netlink: 'syz.0.8105': attribute type 10 has an invalid length. [ 501.751751][T22567] device hsr_slave_0 left promiscuous mode [ 501.807083][T22567] device hsr_slave_1 left promiscuous mode [ 502.079843][T22569] netlink: 'syz.2.8106': attribute type 3 has an invalid length. [ 503.014227][T22610] netlink: 'syz.1.8121': attribute type 3 has an invalid length. [ 503.223959][T22616] device sit0 entered promiscuous mode [ 504.126478][T22639] __nla_validate_parse: 9 callbacks suppressed [ 504.126498][T22639] netlink: 1020 bytes leftover after parsing attributes in process `syz.4.8131'. [ 504.344558][T22653] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.8138'. [ 504.419959][T22653] netlink: 'syz.0.8138': attribute type 10 has an invalid length. [ 505.034544][T22687] netlink: 1020 bytes leftover after parsing attributes in process `syz.2.8151'. [ 505.057293][T22689] netlink: 'syz.0.8152': attribute type 1 has an invalid length. [ 505.071592][T22689] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8152'. [ 505.174217][T22693] netlink: 'syz.0.8154': attribute type 6 has an invalid length. [ 505.328102][T22699] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.8156'. [ 505.378587][T22699] netlink: 'syz.2.8156': attribute type 10 has an invalid length. [ 505.451666][T22699] device hsr_slave_0 left promiscuous mode [ 505.501883][T22699] device hsr_slave_1 left promiscuous mode [ 505.931412][T22722] validate_nla: 1 callbacks suppressed [ 505.931431][T22722] netlink: 'syz.2.8165': attribute type 1 has an invalid length. [ 507.277047][T22724] netlink: 'syz.3.8166': attribute type 6 has an invalid length. [ 507.288999][T22722] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8165'. [ 507.745268][T22749] netlink: 'syz.3.8174': attribute type 32 has an invalid length. [ 507.793581][T22747] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.8176'. [ 507.876419][T22753] netlink: 'syz.3.8178': attribute type 1 has an invalid length. [ 507.909872][T22747] netlink: 'syz.2.8176': attribute type 10 has an invalid length. [ 507.955535][T22753] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8178'. [ 508.863553][T22769] device syzkaller0 entered promiscuous mode [ 509.007406][T22787] netlink: 'syz.1.8190': attribute type 1 has an invalid length. [ 509.075529][T22787] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8190'. [ 509.281007][T22793] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.8192'. [ 509.316933][T22793] netlink: 'syz.0.8192': attribute type 10 has an invalid length. [ 509.363006][T22796] tap0: tun_chr_ioctl cmd 1074025675 [ 509.369692][T22796] tap0: persist enabled [ 509.597927][T22796] tap0: tun_chr_ioctl cmd 1074025675 [ 509.613511][T22796] tap0: persist enabled [ 509.927308][T22813] netlink: 'syz.4.8199': attribute type 32 has an invalid length. [ 510.038159][T22819] netlink: 'syz.4.8202': attribute type 1 has an invalid length. [ 510.053433][T22819] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8202'. [ 511.311512][T22824] device syzkaller0 entered promiscuous mode [ 512.607279][T22828] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.8205'. [ 512.673922][T22828] netlink: 'syz.1.8205': attribute type 10 has an invalid length. [ 512.718635][T22828] device hsr_slave_0 left promiscuous mode [ 512.758839][T22828] device hsr_slave_1 left promiscuous mode [ 513.466555][T22846] netlink: 'syz.4.8212': attribute type 32 has an invalid length. [ 514.410087][T22878] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.8224'. [ 514.448616][T22879] netlink: 'syz.1.8224': attribute type 10 has an invalid length. [ 514.828623][T22886] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.8227'. [ 517.077640][T22917] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8239'. [ 518.099202][T22934] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8246'. [ 518.590020][T22947] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.8251'. [ 518.828745][T22965] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8258'. [ 519.257339][T22982] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8266'. [ 521.932015][T22999] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8273'. [ 522.547982][T23044] tun0: tun_chr_ioctl cmd 1074025680 [ 522.849753][T23071] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8306'. [ 523.077401][T23084] tun0: tun_chr_ioctl cmd 1074025680 [ 523.251520][T23101] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8321'. [ 523.424638][T23108] netlink: 160 bytes leftover after parsing attributes in process `syz.1.8324'. [ 523.510075][T23120] tun0: tun_chr_ioctl cmd 1074025680 [ 523.598982][T23129] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8335'. [ 523.786244][T23144] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8342'. [ 523.897736][T23152] delete_channel: no stack [ 523.941182][T23156] tun0: tun_chr_ioctl cmd 1074025680 [ 523.993427][T23163] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8350'. [ 524.027924][T23166] IPv6: Can't replace route, no match found [ 524.197082][T23181] netlink: 160 bytes leftover after parsing attributes in process `syz.3.8359'. [ 524.235102][T23183] delete_channel: no stack [ 524.373904][T23189] tun0: tun_chr_ioctl cmd 1074025680 [ 524.401278][T23191] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8364'. [ 524.422258][T23193] IPv6: Can't replace route, no match found [ 524.553809][T23205] netlink: 160 bytes leftover after parsing attributes in process `syz.1.8371'. [ 524.601237][T23209] delete_channel: no stack [ 524.720184][T23221] IPv6: Can't replace route, no match found [ 528.269042][T23251] IPv6: Can't replace route, no match found [ 528.750684][T23288] IPv6: Can't replace route, no match found [ 528.787603][T23286] delete_channel: no stack [ 529.188314][T23316] syzkaller0: create flow: hash 3396576190 index 0 [ 529.196582][T23312] device syzkaller0 entered promiscuous mode [ 529.214610][ T1066] syzkaller0: tun_net_xmit 48 [ 529.269610][T23319] IPv6: Can't replace route, no match found [ 529.306043][T23312] syzkaller0 (unregistered): delete flow: hash 3396576190 index 0 [ 529.756421][T23349] device syzkaller0 entered promiscuous mode [ 529.793852][T23355] syzkaller0: create flow: hash 3396576190 index 0 [ 529.794350][ T1066] syzkaller0: tun_net_xmit 48 [ 530.045865][T23349] syzkaller0 (unregistered): delete flow: hash 3396576190 index 0 [ 530.478647][T23395] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8454'. [ 530.535478][T23395] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.8454'. [ 530.599322][T23397] device syzkaller0 entered promiscuous mode [ 530.636180][ T23] syzkaller0: tun_net_xmit 48 [ 530.647418][T23405] syzkaller0: create flow: hash 3396576190 index 0 [ 530.961236][T23397] syzkaller0 (unregistered): delete flow: hash 3396576190 index 0 [ 531.255447][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 531.285028][T23432] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8470'. [ 531.317187][T23432] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.8470'. [ 531.719755][T23451] device syzkaller0 entered promiscuous mode [ 531.723044][T23461] syzkaller0: create flow: hash 3396576190 index 0 [ 531.769343][T23462] netlink: 'syz.0.8481': attribute type 3 has an invalid length. [ 531.795636][ T13] syzkaller0: tun_net_xmit 48 [ 531.825534][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 531.861508][T23462] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.8481'. [ 531.967638][T23470] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8486'. [ 531.998578][T23470] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.8486'. [ 532.065786][T23451] syzkaller0 (unregistered): delete flow: hash 3396576190 index 0 [ 532.322580][T23487] bridge0: port 3(bond0) entered disabled state [ 532.350405][T23487] device bridge_slave_1 left promiscuous mode [ 532.368311][T23487] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.376752][ T3512] Bluetooth: hci5: command 0x0409 tx timeout [ 532.419359][T23487] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.492147][T23496] netlink: 'syz.4.8498': attribute type 3 has an invalid length. [ 532.504245][T23496] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.8498'. [ 532.534203][T23487] team0: Port device bridge0 removed [ 532.573587][T23498] netlink: 'syz.2.8500': attribute type 1 has an invalid length. [ 532.595356][T23498] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8500'. [ 532.971668][T23528] netlink: 'syz.4.8512': attribute type 3 has an invalid length. [ 532.994018][T23528] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.8512'. [ 533.059989][T23532] netlink: 'syz.0.8515': attribute type 1 has an invalid length. [ 533.099950][T23539] netlink: 'syz.2.8517': attribute type 49 has an invalid length. [ 533.113320][T23539] netlink: 'syz.2.8517': attribute type 49 has an invalid length. [ 533.907547][ T1066] Bluetooth: hci1: command 0x0409 tx timeout [ 534.455437][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 536.251086][T23569] netlink: 'syz.4.8527': attribute type 3 has an invalid length. [ 536.269926][T23569] __nla_validate_parse: 3 callbacks suppressed [ 536.269948][T23569] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.8527'. [ 536.402398][T23573] netlink: 'syz.3.8530': attribute type 1 has an invalid length. [ 536.523138][T23573] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.8530'. [ 539.829078][T23610] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.8543'. [ 539.853678][T23610] openvswitch: netlink: Flow actions attr not present in new flow. [ 539.914981][T23618] netlink: 'syz.3.8548': attribute type 1 has an invalid length. [ 539.954388][T23618] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.8548'. [ 540.594456][T23654] netlink: 'syz.3.8561': attribute type 2 has an invalid length. [ 540.594631][T23653] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.8562'. [ 540.609881][T23654] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8561'. [ 540.617604][T23653] openvswitch: netlink: Flow actions attr not present in new flow. [ 540.885341][T23672] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.892857][T23672] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.909326][T23672] device bridge0 left promiscuous mode [ 540.954397][T23680] device  left promiscuous mode [ 540.961325][T23677] netlink: 'syz.4.8574': attribute type 2 has an invalid length. [ 541.001337][T23680] device bond_slave_0 left promiscuous mode [ 541.018748][T23677] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8574'. [ 541.041929][T23680] device bond_slave_1 left promiscuous mode [ 541.060360][T23685] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.8576'. [ 541.062630][T23680] bridge0: port 3() entered disabled state [ 541.094457][T23680] device bridge_slave_1 left promiscuous mode [ 541.104864][T23680] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.113990][T23680] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.129328][T23685] openvswitch: netlink: Flow actions attr not present in new flow. [ 544.452077][T23740] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.8601'. [ 544.515258][T23740] openvswitch: netlink: Flow actions attr not present in new flow. [ 544.641558][T23748] device syzkaller0 entered promiscuous mode [ 544.875967][T23776] netlink: 'syz.2.8617': attribute type 29 has an invalid length. [ 544.895056][T23776] netlink: 'syz.2.8617': attribute type 29 has an invalid length. [ 544.923612][T23782] netlink: 'syz.2.8617': attribute type 29 has an invalid length. [ 544.972778][T23784] netlink: 'syz.0.8620': attribute type 3 has an invalid length. [ 545.041653][T23784] netlink: 'syz.0.8620': attribute type 10 has an invalid length. [ 545.054792][T23784] batman_adv: batadv0: Adding interface: wlan0 [ 545.061651][T23784] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.092939][T23784] batman_adv: batadv0: Interface activated: wlan0 [ 545.246862][T23791] device wg2 entered promiscuous mode [ 545.340737][T23800] device syzkaller0 entered promiscuous mode [ 545.381677][T23806] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8630'. [ 545.434946][T23806] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.8630'. [ 545.562856][T23819] netlink: 'syz.0.8631': attribute type 3 has an invalid length. [ 545.583611][T23819] netlink: 'syz.0.8631': attribute type 1 has an invalid length. [ 545.635464][T23819] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.8631'. [ 545.953136][T23841] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8645'. [ 546.032554][T23841] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.8645'. [ 546.172471][T23847] device syzkaller0 entered promiscuous mode [ 546.673331][T23878] netlink: 'syz.1.8659': attribute type 3 has an invalid length. [ 546.703644][T23878] netlink: 'syz.1.8659': attribute type 1 has an invalid length. [ 546.735609][T23878] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.8659'. [ 546.784086][T23864] netlink: 'syz.2.8654': attribute type 27 has an invalid length. [ 546.816741][T23864] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8654'. [ 546.832321][T23864] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 546.944944][T23886] netlink: 'syz.0.8664': attribute type 10 has an invalid length. [ 547.012102][T23886] device veth1_macvtap left promiscuous mode [ 547.130083][T23889] device wg2 left promiscuous mode [ 547.285234][T23900] netlink: 4611 bytes leftover after parsing attributes in process `syz.4.8667'. [ 547.341823][T23909] netlink: 'syz.3.8668': attribute type 17 has an invalid length. [ 547.385909][T23909] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8668'. [ 547.407556][T23902] device syzkaller0 entered promiscuous mode [ 547.879143][T23927] device wg2 entered promiscuous mode [ 548.334649][T23963] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 548.712403][T23971] device wg2 left promiscuous mode [ 548.784418][T23973] device wg2 entered promiscuous mode [ 549.508947][T24011] __nla_validate_parse: 8 callbacks suppressed [ 549.508966][T24011] netlink: 4611 bytes leftover after parsing attributes in process `syz.0.8711'. [ 549.743576][T24035] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8719'. [ 550.435421][T24072] device wg2 entered promiscuous mode [ 550.837032][T24088] validate_nla: 6 callbacks suppressed [ 550.837054][T24088] netlink: 'syz.0.8742': attribute type 3 has an invalid length. [ 550.920958][T24097] netlink: 'syz.2.8746': attribute type 10 has an invalid length. [ 550.938824][T24088] netlink: 'syz.0.8742': attribute type 1 has an invalid length. [ 550.952709][T24097] device veth1_macvtap left promiscuous mode [ 550.969140][T24088] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.8742'. [ 551.264738][T24111] device wg2 left promiscuous mode [ 551.383828][T24119] device wg2 entered promiscuous mode [ 551.390579][T24115] netlink: 4611 bytes leftover after parsing attributes in process `syz.2.8754'. [ 551.993909][T24148] netlink: 'syz.0.8765': attribute type 10 has an invalid length. [ 552.289098][T24159] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8771'. [ 554.550008][T24265] netlink: 'syz.1.8816': attribute type 3 has an invalid length. [ 554.575579][T24265] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8816'. [ 556.473422][T24346] netlink: 'syz.3.8853': attribute type 28 has an invalid length. [ 556.497718][T24346] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8853'. [ 556.674532][T24353] syz.1.8856[24353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.674696][T24353] syz.1.8856[24353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.238550][T24372] netlink: 'syz.4.8865': attribute type 3 has an invalid length. [ 557.268425][T24372] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8865'. [ 557.367589][T24382] syz.3.8870[24382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.367690][T24382] syz.3.8870[24382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.713630][T24398] netlink: 'syz.4.8878': attribute type 3 has an invalid length. [ 557.749775][T24398] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8878'. [ 557.804785][T24408] syz.3.8883[24408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.804892][T24408] syz.3.8883[24408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.933337][T24418] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.8884'. [ 558.156628][T24431] netlink: 'syz.2.8892': attribute type 3 has an invalid length. [ 558.197861][T24431] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8892'. [ 558.340210][T24441] syz.4.8897[24441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.340317][T24441] syz.4.8897[24441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.513800][T24455] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.8901'. [ 558.946879][T24488] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8917'. [ 559.321205][T24520] netlink: 'syz.2.8935': attribute type 3 has an invalid length. [ 559.334118][T24520] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8935'. [ 559.370502][T24525] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.8934'. [ 559.737345][T24538] device syzkaller0 entered promiscuous mode [ 559.990404][T24553] netlink: 'syz.1.8947': attribute type 6 has an invalid length. [ 560.010940][T24553] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8947'. [ 560.142770][T24566] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.8950'. [ 560.484239][T24584] netlink: 'syz.0.8960': attribute type 1 has an invalid length. [ 560.908828][T24611] netlink: 'syz.0.8973': attribute type 1 has an invalid length. [ 561.597526][T24657] netlink: 'syz.3.8994': attribute type 6 has an invalid length. [ 561.634729][T24657] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8994'. [ 562.857041][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.863634][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.147134][T24724] device veth0_vlan left promiscuous mode [ 563.174978][T24724] device veth0_vlan entered promiscuous mode [ 563.291264][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 563.339599][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 563.400378][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 563.925880][T24761] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9037'. [ 563.957153][T24761] tc_dump_action: action bad kind [ 564.612969][T24802] netlink: 'syz.3.9057': attribute type 2 has an invalid length. [ 565.007577][T24827] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3e [ 566.193240][T24864] device veth0_vlan left promiscuous mode [ 566.293707][T24864] device veth0_vlan entered promiscuous mode [ 566.352994][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 566.384929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 566.455037][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 567.054842][T24906] netlink: 'syz.2.9104': attribute type 3 has an invalid length. [ 567.115441][T24906] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9104'. [ 567.388062][T24925] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3e [ 568.674634][ T8164] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.821789][ T8164] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.997445][ T8164] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.197242][ T8164] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.608363][T24958] chnl_net:caif_netlink_parms(): no params data found [ 570.135775][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 570.277270][T24958] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.305615][T24958] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.347530][T24958] device bridge_slave_0 entered promiscuous mode [ 570.396462][T24958] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.445546][T24958] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.480791][T24958] device bridge_slave_1 entered promiscuous mode [ 570.612558][T25061] netlink: 'syz.3.9168': attribute type 2 has an invalid length. [ 570.624583][T24958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.642441][T24958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.682125][T25061] device 0 entered promiscuous mode [ 570.871247][T24958] team0: Port device team_slave_0 added [ 570.920074][T24958] team0: Port device team_slave_1 added [ 571.336425][T24958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.368498][T24958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.455546][T24958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.537386][T25097] netlink: 'syz.2.9183': attribute type 2 has an invalid length. [ 571.605811][T24958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.624081][T24958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.793892][T24958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.840737][T25097] device 0 entered promiscuous mode [ 572.059950][T24958] device hsr_slave_0 entered promiscuous mode [ 572.105462][T24958] device hsr_slave_1 entered promiscuous mode [ 572.215346][ T3549] Bluetooth: hci0: command 0x041b tx timeout [ 572.916793][ T8164] device veth0_to_bond left promiscuous mode [ 572.923655][ T8164] GPL: port 1(veth0_to_bond) entered disabled state [ 572.986180][ T8164] device hsr_slave_0 left promiscuous mode [ 572.999307][ T8164] device hsr_slave_1 left promiscuous mode [ 573.007119][ T8164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.022697][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.041234][ T8164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.051601][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.066068][ T8164] device bridge_slave_1 left promiscuous mode [ 573.079609][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.136405][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.216785][ T8164] device veth1_macvtap left promiscuous mode [ 573.223038][ T8164] device veth1_vlan left promiscuous mode [ 573.247447][ T8164] device veth0_vlan left promiscuous mode [ 573.462457][ T8164] team0 (unregistering): Port device team_slave_1 removed [ 573.481694][ T8164] team0 (unregistering): Port device team_slave_0 removed [ 573.495352][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 573.501872][ T8164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.520196][ T8164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.584302][ T8164] team0 (unregistering): Port device bond0 removed [ 573.614229][ T8164] bond0 (unregistering): Released all slaves [ 573.659437][T25139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9201'. [ 573.693782][T25094] chnl_net:caif_netlink_parms(): no params data found [ 573.920935][T25159] netlink: 'syz.3.9209': attribute type 5 has an invalid length. [ 573.929505][T25159] netlink: 'syz.3.9209': attribute type 1 has an invalid length. [ 573.939574][T25159] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9209'. [ 574.078576][T25094] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.094134][T25094] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.115256][T25094] device bridge_slave_0 entered promiscuous mode [ 574.150842][T25094] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.215344][T25094] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.237156][T25094] device bridge_slave_1 entered promiscuous mode [ 574.305559][ T3549] Bluetooth: hci0: command 0x040f tx timeout [ 574.366925][T25094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.414916][T25094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.452163][T25175] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9216'. [ 574.513148][T24958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 574.561884][T25094] team0: Port device team_slave_0 added [ 574.578205][T24958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 574.615425][T24958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 574.658594][T25094] team0: Port device team_slave_1 added [ 574.666913][T24958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 574.785914][T25094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.802064][T25094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.972025][T25094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.043364][T25094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.110237][T25094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.142172][T25094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.352419][T25094] device hsr_slave_0 entered promiscuous mode [ 575.382751][T25094] device hsr_slave_1 entered promiscuous mode [ 575.451812][T25094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.469443][T25094] Cannot create hsr debugfs directory [ 575.503140][T24958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.511882][T25200] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9227'. [ 575.555263][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 575.564608][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.584886][T24958] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.594954][ T3545] Bluetooth: hci2: command 0x041b tx timeout [ 575.649808][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.666164][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.695312][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.702605][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.772265][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 575.797861][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 575.810135][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 575.848009][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.855192][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.910247][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 575.949726][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 575.992330][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 576.019845][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 576.049824][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 576.083107][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 576.151665][T24958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 576.173731][T24958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.202765][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 576.220513][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 576.259833][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.286726][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.319090][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.357711][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 576.375769][ T3545] Bluetooth: hci0: command 0x0419 tx timeout [ 576.409152][T25094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.505410][T25229] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9240'. [ 576.597296][T25094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.722915][T25094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.809018][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 576.820474][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 576.852389][T24958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.908369][T25094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.202971][T25094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 577.273837][T25094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 577.315989][T25094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 577.345974][T25094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 577.522363][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 577.541996][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 577.592632][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 577.604079][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 577.630675][T24958] device veth0_vlan entered promiscuous mode [ 577.655283][ T3546] Bluetooth: hci2: command 0x040f tx timeout [ 577.663953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 577.679889][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 577.700722][T24958] device veth1_vlan entered promiscuous mode [ 577.724739][T25094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.770458][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 577.780485][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 577.790330][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.817947][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.838980][T25296] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.9265'. [ 577.855645][T25094] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.878334][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 577.890374][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 577.910189][T24958] device veth0_macvtap entered promiscuous mode [ 577.931803][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 577.952569][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.998488][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.020336][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.028375][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.068836][T24958] device veth1_macvtap entered promiscuous mode [ 578.156292][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 578.182030][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.218305][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 578.242044][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.265885][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.273429][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.349254][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 578.399853][T25305] ip6_tunnel: non-ECT from 0000:0000:0000:0000:875a:6596:9ff5:7b00 with DS=0x9f [ 578.684713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 578.716902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 578.762006][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 578.804696][T25094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 578.874167][T25094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.937643][T24958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.001274][T24958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.035337][T24958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.063291][T24958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.084412][T24958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.122598][T24958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.147574][T24958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.164951][T24958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.208614][T24958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.265361][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 579.296778][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 579.357096][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 579.414586][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 579.463744][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 579.500677][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 579.531102][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 579.544591][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 579.556455][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 579.576491][T24958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.602096][T25330] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.9278'. [ 579.625010][T24958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.661669][T24958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.681522][T24958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.695615][T24958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.708888][T24958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.720527][T24958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.736582][ T3549] Bluetooth: hci2: command 0x0419 tx timeout [ 579.743713][T24958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.760979][T24958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.772691][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.790041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 579.812203][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 579.864766][T25336] netlink: 'syz.2.9279': attribute type 10 has an invalid length. [ 579.929769][T25336] team0: Port device vlan0 added [ 579.977532][T24958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.004489][T24958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.047221][T24958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.069027][T24958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.145605][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 580.159057][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 580.279692][T25094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.361445][T24958] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 580.388440][T24958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.505513][T25270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.507404][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 580.513866][T25270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.551726][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 580.570343][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 580.681294][T25094] device veth0_vlan entered promiscuous mode [ 580.706030][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 580.717585][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 580.734825][T25094] device veth1_vlan entered promiscuous mode [ 580.766061][T25270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.779757][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 580.795569][T25270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.816132][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 580.837164][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 580.857750][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 580.964515][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 580.979911][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 581.113687][T25094] device veth0_macvtap entered promiscuous mode [ 581.235383][T25370] netlink: 'syz.0.9291': attribute type 10 has an invalid length. [ 581.294313][T25370] team0: Port device vlan0 added [ 581.334143][T25094] device veth1_macvtap entered promiscuous mode [ 581.436665][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 581.458995][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 581.513660][T25376] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.9294'. [ 581.901138][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.922873][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.957258][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.982512][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.000799][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.014700][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.027983][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.048580][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.067153][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.085457][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.101253][T25094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.147813][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 582.159847][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 582.183665][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.201298][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.214729][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.228046][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.239313][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.250552][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.264179][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.275998][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.288320][T25094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.300584][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.337950][T25094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.390374][T25393] IPv6: NLM_F_CREATE should be specified when creating new route [ 582.405475][T25393] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9301'. [ 582.437269][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 582.454488][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 582.470175][T25094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.502081][T25094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.521694][T25094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.533466][T25094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.565088][T25399] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9304'. [ 582.801606][T25094] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 582.852016][T25094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.928580][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.954644][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.122959][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 583.177242][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.203993][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.232850][ T8164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.247858][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.256452][ T8164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.264205][ T8164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.280000][ T8164] device veth1_macvtap left promiscuous mode [ 583.296761][ T8164] device veth0_macvtap left promiscuous mode [ 583.312244][ T8164] device veth1_vlan left promiscuous mode [ 583.319497][ T8164] device veth0_vlan left promiscuous mode [ 583.654183][ T8164] team0 (unregistering): Port device team_slave_1 removed [ 583.676273][ T8164] team0 (unregistering): Port device team_slave_0 removed [ 583.693196][ T8164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.703796][ T8164] device bond_slave_1 left promiscuous mode [ 583.719700][ T8164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.729620][ T8164] device bond_slave_0 left promiscuous mode [ 583.818327][ T8164] bond0 (unregistering): Released all slaves [ 583.846853][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 583.859098][T25429] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9318'. [ 583.876631][T25437] netlink: 'syz.4.9322': attribute type 33 has an invalid length. [ 583.905565][T25437] netlink: 'syz.4.9322': attribute type 13 has an invalid length. [ 583.935383][T25437] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9322'. [ 584.450429][T25472] netlink: 'syz.1.9336': attribute type 33 has an invalid length. [ 584.490714][T25472] netlink: 'syz.1.9336': attribute type 13 has an invalid length. [ 584.510116][T25472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9336'. [ 584.560863][T25474] IPv6: Can't replace route, no match found [ 584.654109][T25482] netlink: 'syz.0.9343': attribute type 3 has an invalid length. [ 584.695279][T25482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9343'. [ 584.969346][T25503] IPv6: NLM_F_CREATE should be specified when creating new route [ 585.027595][T25503] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9353'. [ 585.092171][T25507] IPv6: Can't replace route, no match found [ 585.184992][T25514] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.9358'. [ 585.398866][T25525] netlink: 'syz.3.9364': attribute type 21 has an invalid length. [ 585.469672][T25525] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.9364'. [ 585.784752][T25539] IPv6: NLM_F_CREATE should be specified when creating new route [ 585.797124][T25539] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9370'. [ 585.940184][T25549] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.9375'. [ 586.025359][T25553] netlink: 'syz.2.9377': attribute type 33 has an invalid length. [ 586.033668][T25553] netlink: 'syz.2.9377': attribute type 13 has an invalid length. [ 586.101305][T25559] netlink: 'syz.4.9379': attribute type 3 has an invalid length. [ 586.115760][T25553] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9377'. [ 586.127511][T25559] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9379'. [ 586.171874][T25564] netlink: 'syz.1.9383': attribute type 21 has an invalid length. [ 586.182745][T25564] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9383'. [ 586.222250][T25564] netlink: 'syz.1.9383': attribute type 4 has an invalid length. [ 586.252925][T25564] netlink: 'syz.1.9383': attribute type 3 has an invalid length. [ 586.273504][T25566] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.9384'. [ 586.294436][T25567] netlink: 'syz.3.9382': attribute type 21 has an invalid length. [ 586.539091][T25579] IPv6: Can't replace route, no match found [ 586.787946][T25593] netlink: 'syz.0.9396': attribute type 33 has an invalid length. [ 586.800688][T25594] netlink: 'syz.1.9395': attribute type 3 has an invalid length. [ 590.545306][ T3549] Bluetooth: hci1: command 0x0406 tx timeout [ 591.855823][T25744] validate_nla: 3 callbacks suppressed [ 591.855844][T25744] netlink: 'syz.3.9461': attribute type 10 has an invalid length. [ 591.931017][T25744] __nla_validate_parse: 8 callbacks suppressed [ 591.931050][T25744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9461'. [ 592.178680][T25744] device veth0_vlan left promiscuous mode [ 592.216375][T25744] device veth0_vlan entered promiscuous mode [ 592.269943][T25744] team0: Device veth0_vlan failed to register rx_handler [ 592.435072][T25744] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 594.411935][T25789] netlink: 'syz.0.9475': attribute type 10 has an invalid length. [ 594.426802][T25789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9475'. [ 594.445726][T25789] device ipvlan1 entered promiscuous mode [ 594.498156][T25789] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 595.104348][T25830] rose0: tun_chr_ioctl cmd 1074812117 [ 595.470015][T25840] netlink: 'syz.4.9494': attribute type 10 has an invalid length. [ 595.517292][T25840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9494'. [ 595.607487][T25840] device ipvlan1 entered promiscuous mode [ 595.719955][T25840] bridge0: port 3(ipvlan1) entered blocking state [ 595.733691][T25840] bridge0: port 3(ipvlan1) entered disabled state [ 595.927334][T25840] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 596.159344][T25874] netlink: 'syz.2.9508': attribute type 33 has an invalid length. [ 596.218465][T25874] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9508'. [ 596.240197][T25874] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 596.821835][T25904] netlink: 'syz.0.9522': attribute type 10 has an invalid length. [ 596.840730][T25904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9522'. [ 596.855797][ T1189] wlan1: Trigger new scan to find an IBSS to join [ 596.888598][T25904] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 597.559634][T25951] netlink: 'syz.0.9539': attribute type 10 has an invalid length. [ 597.590038][T25951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9539'. [ 597.640858][T25951] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 598.391289][T25995] netlink: 'syz.3.9559': attribute type 10 has an invalid length. [ 598.413766][T25995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9559'. [ 598.444191][T25995] device ipvlan1 entered promiscuous mode [ 598.472865][T25995] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 598.517140][T26001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9562'. [ 599.323883][T26029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9575'. [ 599.361229][T26033] netlink: 'syz.0.9577': attribute type 6 has an invalid length. [ 599.717071][T26054] netlink: 'syz.3.9584': attribute type 10 has an invalid length. [ 599.740286][T26054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9584'. [ 599.759055][T26054] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 599.800449][T26058] netlink: 'syz.1.9588': attribute type 6 has an invalid length. [ 599.815667][ T1189] wlan1: Trigger new scan to find an IBSS to join [ 600.009336][T26063] netlink: 'syz.1.9591': attribute type 13 has an invalid length. [ 600.258589][T26074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9594'. [ 600.420568][T26082] netlink: 'syz.0.9599': attribute type 6 has an invalid length. [ 600.557672][T26094] netlink: 'syz.1.9604': attribute type 13 has an invalid length. [ 600.615476][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 600.765695][ T154] wlan1: Creating new IBSS network, BSSID 6a:ea:9f:05:49:ca [ 600.897303][T26108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9608'. [ 600.961182][T26111] netlink: 'syz.1.9610': attribute type 10 has an invalid length. [ 600.985675][T26111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9610'. [ 600.998675][T26111] device ipvlan1 entered promiscuous mode [ 601.020161][T26111] bridge0: port 3(ipvlan1) entered blocking state [ 601.029490][T26111] bridge0: port 3(ipvlan1) entered disabled state [ 601.050321][T26111] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 601.088405][T26119] netlink: 'syz.0.9614': attribute type 6 has an invalid length. [ 601.415292][ T3555] Bluetooth: hci5: command 0x0409 tx timeout [ 601.564489][T26149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9626'. [ 601.664168][T26156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9629'. [ 601.693831][T26156] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 602.295229][ T3512] Bluetooth: hci1: command 0x0409 tx timeout [ 602.428622][T26205] device ipvlan1 entered promiscuous mode [ 602.468617][T26205] bridge0: port 4(ipvlan1) entered blocking state [ 602.478666][T26205] bridge0: port 4(ipvlan1) entered disabled state [ 602.533264][T26205] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 602.780335][T26231] validate_nla: 11 callbacks suppressed [ 602.780356][T26231] netlink: 'syz.2.9660': attribute type 13 has an invalid length. [ 602.953754][T26244] netlink: 'syz.0.9663': attribute type 46 has an invalid length. [ 602.988324][T26244] netlink: 'syz.0.9663': attribute type 46 has an invalid length. [ 603.287433][T26262] netlink: 'syz.2.9669': attribute type 10 has an invalid length. [ 603.302092][T26262] __nla_validate_parse: 1 callbacks suppressed [ 603.302129][T26262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9669'. [ 603.377751][T26262] bridge0: port 4(ipvlan1) entered blocking state [ 603.391030][T26262] bridge0: port 4(ipvlan1) entered disabled state [ 603.401083][T26278] netlink: 'syz.0.9679': attribute type 46 has an invalid length. [ 603.438433][T26262] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 603.468120][T26278] netlink: 'syz.0.9679': attribute type 46 has an invalid length. [ 603.495426][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 603.502249][T26284] netlink: 'syz.1.9680': attribute type 13 has an invalid length. [ 603.655976][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 604.072545][T26332] netlink: 'syz.3.9695': attribute type 10 has an invalid length. [ 604.099194][T26332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9695'. [ 604.137957][T26332] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 606.361657][T26496] rose0: tun_chr_ioctl cmd 1074812117 [ 606.440813][T26501] netlink: 'syz.3.9776': attribute type 3 has an invalid length. [ 606.459607][T26501] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9776'. [ 606.624008][T26504] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.9778'. [ 606.624636][T26513] netlink: 'syz.0.9783': attribute type 10 has an invalid length. [ 606.682695][T26513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9783'. [ 606.883626][T26513] device veth0_vlan left promiscuous mode [ 606.910223][T26513] device veth0_vlan entered promiscuous mode [ 606.924000][T26513] [ 606.926537][T26513] ============================================ [ 606.933050][T26513] WARNING: possible recursive locking detected [ 606.939696][T26513] 5.15.162-syzkaller #0 Not tainted [ 606.945831][T26513] -------------------------------------------- [ 606.954504][T26513] syz.0.9783/26513 is trying to acquire lock: [ 606.962293][T26513] ffff88807b10cd00 (team->team_lock_key#21){+.+.}-{3:3}, at: team_port_change_check+0x51/0x1e0 [ 606.975857][T26513] [ 606.975857][T26513] but task is already holding lock: [ 606.983961][T26513] ffff88807b10cd00 (team->team_lock_key#21){+.+.}-{3:3}, at: team_add_slave+0xab/0x27a0 [ 606.995377][T26513] [ 606.995377][T26513] other info that might help us debug this: [ 607.004657][T26513] Possible unsafe locking scenario: [ 607.004657][T26513] [ 607.012794][T26513] CPU0 [ 607.016321][T26513] ---- [ 607.020066][T26513] lock(team->team_lock_key#21); [ 607.025808][T26513] lock(team->team_lock_key#21); [ 607.030846][T26513] [ 607.030846][T26513] *** DEADLOCK *** [ 607.030846][T26513] [ 607.038991][T26513] May be due to missing lock nesting notation [ 607.038991][T26513] [ 607.047316][T26513] 2 locks held by syz.0.9783/26513: [ 607.052516][T26513] #0: ffffffff8d9e8088 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 607.062037][T26513] #1: ffff88807b10cd00 (team->team_lock_key#21){+.+.}-{3:3}, at: team_add_slave+0xab/0x27a0 [ 607.072448][T26513] [ 607.072448][T26513] stack backtrace: [ 607.078536][T26513] CPU: 1 PID: 26513 Comm: syz.0.9783 Not tainted 5.15.162-syzkaller #0 [ 607.086777][T26513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 607.096866][T26513] Call Trace: [ 607.100169][T26513] [ 607.103094][T26513] dump_stack_lvl+0x1e3/0x2d0 [ 607.107776][T26513] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 607.113406][T26513] ? panic+0x860/0x860 [ 607.117490][T26513] validate_chain+0x46d2/0x5930 [ 607.122367][T26513] ? reacquire_held_locks+0x660/0x660 [ 607.128066][T26513] ? perf_trace_lock+0x138/0x440 [ 607.134002][T26513] ? perf_trace_lock+0x138/0x440 [ 607.138984][T26513] ? reacquire_held_locks+0x660/0x660 [ 607.144382][T26513] ? trace_event_raw_event_lock+0x250/0x250 [ 607.150294][T26513] ? mark_lock+0x98/0x340 [ 607.154812][T26513] ? mark_lock+0x98/0x340 [ 607.159604][T26513] __lock_acquire+0x1295/0x1ff0 [ 607.164585][T26513] lock_acquire+0x1db/0x4f0 [ 607.169342][T26513] ? team_port_change_check+0x51/0x1e0 [ 607.174823][T26513] ? read_lock_is_recursive+0x10/0x10 [ 607.180299][T26513] ? __might_sleep+0xc0/0xc0 [ 607.184907][T26513] ? cfg80211_netdev_notifier_call+0x1ff/0x1210 [ 607.192511][T26513] ? print_irqtrace_events+0x210/0x210 [ 607.198006][T26513] __mutex_lock_common+0x1da/0x25a0 [ 607.203211][T26513] ? team_port_change_check+0x51/0x1e0 [ 607.208669][T26513] ? __local_bh_enable_ip+0x164/0x1f0 [ 607.214064][T26513] ? lockdep_hardirqs_on+0x94/0x130 [ 607.219262][T26513] ? __local_bh_enable_ip+0x164/0x1f0 [ 607.224715][T26513] ? igmpv3_del_delrec+0x710/0x710 [ 607.229825][T26513] ? ip_mc_up+0x1d1/0x2f0 [ 607.234153][T26513] ? team_port_change_check+0x51/0x1e0 [ 607.239700][T26513] ? _local_bh_enable+0xa0/0xa0 [ 607.244548][T26513] ? bond_netdev_event+0xd8/0xe80 [ 607.249569][T26513] ? mutex_lock_io_nested+0x60/0x60 [ 607.255103][T26513] ? dev_get_flags+0x141/0x1c0 [ 607.260207][T26513] ? bond_ipsec_offload_ok+0x3e0/0x3e0 [ 607.265682][T26513] ? memset+0x1f/0x40 [ 607.269877][T26513] mutex_lock_nested+0x17/0x20 [ 607.274649][T26513] team_port_change_check+0x51/0x1e0 [ 607.280199][T26513] team_device_event+0x4a7/0x580 [ 607.285300][T26513] raw_notifier_call_chain+0xd0/0x170 [ 607.290786][T26513] __dev_notify_flags+0x304/0x610 [ 607.296010][T26513] ? __dev_change_flags+0x6e0/0x6e0 [ 607.301398][T26513] ? __dev_change_flags+0x505/0x6e0 [ 607.306622][T26513] ? dev_get_flags+0x1c0/0x1c0 [ 607.311491][T26513] dev_change_flags+0xe7/0x190 [ 607.316815][T26513] vlan_device_event+0x442/0x1dd0 [ 607.321846][T26513] ? rcu_lock_release+0x20/0x20 [ 607.326717][T26513] ? br_device_event+0x143/0x970 [ 607.332018][T26513] ? phonet_exit_net+0x80/0x80 [ 607.336806][T26513] ? register_vlan_dev+0x800/0x800 [ 607.342578][T26513] ? br_switchdev_event+0x480/0x480 [ 607.347798][T26513] ? isotp_notifier+0xa0/0x690 [ 607.352654][T26513] ? cgw_notifier+0xcc/0x3a0 [ 607.357468][T26513] ? j1939_netdev_notify+0xfd/0x2e0 [ 607.362775][T26513] raw_notifier_call_chain+0xd0/0x170 [ 607.368280][T26513] dev_open+0x1c1/0x260 [ 607.373437][T26513] ? netdev_notify_peers+0x20/0x20 [ 607.378946][T26513] ? __kmalloc+0x168/0x300 [ 607.383388][T26513] ? team_add_slave+0x890/0x27a0 [ 607.388707][T26513] team_add_slave+0x981/0x27a0 [ 607.393740][T26513] ? __dev_change_flags+0x6e0/0x6e0 [ 607.399579][T26513] ? team_netpoll_cleanup+0xf0/0xf0 [ 607.406011][T26513] ? mutex_unlock+0x10/0x10 [ 607.410836][T26513] ? dev_get_flags+0x1c0/0x1c0 [ 607.415691][T26513] ? preempt_schedule_common+0xa6/0xd0 [ 607.421199][T26513] ? mutex_is_locked+0xe/0x40 [ 607.425893][T26513] do_setlink+0xe71/0x3b00 [ 607.430580][T26513] ? preempt_count_add+0x8f/0x180 [ 607.435707][T26513] ? _printk+0xd1/0x120 [ 607.439865][T26513] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 607.446032][T26513] ? panic+0x860/0x860 [ 607.450117][T26513] ? rcu_is_watching+0x11/0xa0 [ 607.455069][T26513] ? do_trace_netlink_extack+0x85/0x1b0 [ 607.461194][T26513] ? __nla_validate_parse+0x1f71/0x27f0 [ 607.466957][T26513] ? __nla_validate+0x50/0x50 [ 607.472055][T26513] ? mark_lock+0x98/0x340 [ 607.476721][T26513] ? __lock_acquire+0x1295/0x1ff0 [ 607.481953][T26513] ? __nla_parse+0x3c/0x50 [ 607.486637][T26513] rtnl_setlink+0x3eb/0x540 [ 607.491201][T26513] ? rtnl_dump_ifinfo+0x1350/0x1350 [ 607.496454][T26513] ? rtnl_dump_ifinfo+0x1350/0x1350 [ 607.501943][T26513] rtnetlink_rcv_msg+0x993/0xee0 [ 607.507263][T26513] ? rtnetlink_bind+0x80/0x80 [ 607.511945][T26513] ? __local_bh_enable_ip+0x164/0x1f0 [ 607.517553][T26513] ? lockdep_hardirqs_on+0x94/0x130 [ 607.522769][T26513] ? __local_bh_enable_ip+0x164/0x1f0 [ 607.528238][T26513] ? local_bh_enable+0x5/0x20 [ 607.533082][T26513] ? _local_bh_enable+0xa0/0xa0 [ 607.537937][T26513] ? __dev_queue_xmit+0x1c56/0x3230 [ 607.543140][T26513] ? __copy_skb_header+0x47b/0x600 [ 607.549262][T26513] ? dev_queue_xmit+0x20/0x20 [ 607.554147][T26513] ? memcpy+0x3c/0x60 [ 607.558269][T26513] ? __copy_skb_header+0x47b/0x600 [ 607.563642][T26513] netlink_rcv_skb+0x1cf/0x410 [ 607.568528][T26513] ? rtnetlink_bind+0x80/0x80 [ 607.573223][T26513] ? netlink_ack+0xb10/0xb10 [ 607.578212][T26513] netlink_unicast+0x7b6/0x980 [ 607.584659][T26513] ? netlink_detachskb+0x90/0x90 [ 607.590493][T26513] ? __virt_addr_valid+0x39e/0x450 [ 607.596081][T26513] ? 0xffffffff81000000 [ 607.600796][T26513] ? __check_object_size+0x300/0x410 [ 607.606175][T26513] ? bpf_lsm_netlink_send+0x5/0x10 [ 607.611894][T26513] netlink_sendmsg+0xa30/0xd60 [ 607.617241][T26513] ? netlink_getsockopt+0x5b0/0x5b0 [ 607.622562][T26513] ? plist_check_list+0x20d/0x220 [ 607.628718][T26513] ? aa_sock_msg_perm+0x91/0x150 [ 607.634646][T26513] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 607.639957][T26513] ? security_socket_sendmsg+0x7d/0xa0 [ 607.645981][T26513] ? netlink_getsockopt+0x5b0/0x5b0 [ 607.651530][T26513] ____sys_sendmsg+0x59e/0x8f0 [ 607.656611][T26513] ? iovec_from_user+0x300/0x390 [ 607.663479][T26513] ? __sys_sendmsg_sock+0x30/0x30 [ 607.669970][T26513] ___sys_sendmsg+0x252/0x2e0 [ 607.675696][T26513] ? __sys_sendmsg+0x260/0x260 [ 607.680653][T26513] ? __fdget+0x191/0x220 [ 607.685414][T26513] __se_sys_sendmsg+0x19a/0x260 [ 607.693223][T26513] ? __x64_sys_sendmsg+0x80/0x80 [ 607.699508][T26513] ? syscall_enter_from_user_mode+0x2e/0x240 [ 607.705584][T26513] ? lockdep_hardirqs_on+0x94/0x130 [ 607.710806][T26513] ? syscall_enter_from_user_mode+0x2e/0x240 [ 607.717576][T26513] do_syscall_64+0x3b/0xb0 [ 607.722104][T26513] ? clear_bhb_loop+0x15/0x70 [ 607.726781][T26513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.732683][T26513] RIP: 0033:0x7f964f510bd9 [ 607.737108][T26513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.757340][T26513] RSP: 002b:00007f964df91048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.765773][T26513] RAX: ffffffffffffffda RBX: 00007f964f69ef60 RCX: 00007f964f510bd9 [ 607.774303][T26513] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 607.782371][T26513] RBP: 00007f964f57fe60 R08: 0000000000000000 R09: 0000000000000000 [ 607.790602][T26513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.798586][T26513] R13: 000000000000000b R14: 00007f964f69ef60 R15: 00007fff618a39b8 [ 607.806807][T26513]