last executing test programs: 1.742929207s ago: executing program 1 (id=9827): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.555855211s ago: executing program 1 (id=9830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.478106413s ago: executing program 1 (id=9831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000200), &(0x7f0000000080)=""/21, 0x2}, 0x20) 1.256089349s ago: executing program 1 (id=9836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.256012369s ago: executing program 3 (id=9837): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb0e5}, [@call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.150799971s ago: executing program 1 (id=9839): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.091999303s ago: executing program 3 (id=9840): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x1a, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180a000000000000000000000000000095000000000000006bef80454bb38dde38e864e1f61a8c4724a0f85a6e8a20c3611a69e61f596a41fa23999b06b8c8a423bdefe28232440d7611557ae3284f0d3bd364f14c49259a8b50ef4dcd7c20f841babb9797b2efc9107ca7ce3dc6d53389702f2a8ea4cae5a3712c06de8ed2687a228104a80cd4ce3f38e6f63af1ef5ca3208a360b9f83c512eaed8937a2acf9b48a519d073665ece5d3ff7e264f0bb9f18acdacf00ba1db3753e9c9127e6484c691130a88bacc2f291182cb94c0ae15142d2dd18b589ec79520"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) 996.218595ms ago: executing program 3 (id=9843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x43f7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 960.246696ms ago: executing program 0 (id=9844): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_subtree(r0, 0x0, 0x32600) 834.489799ms ago: executing program 2 (id=9845): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000008500000032000000b700001f0100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 768.070111ms ago: executing program 3 (id=9846): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="170130000000b2000500000000000000850000004700000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 741.117541ms ago: executing program 0 (id=9847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 739.525781ms ago: executing program 2 (id=9848): recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) 591.965615ms ago: executing program 3 (id=9849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 580.941406ms ago: executing program 0 (id=9850): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 579.293726ms ago: executing program 2 (id=9851): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x4}}]}}, 0x0, 0x32, 0x0, 0x0, 0x2, 0x10000}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)='@', 0x1}], 0x4}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 404.089059ms ago: executing program 2 (id=9852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 403.01379ms ago: executing program 0 (id=9860): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 283.254593ms ago: executing program 0 (id=9853): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)="d80000001c0081054e81f782db44b904021d08048e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb79164525ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5825ccca9e00360db70100000040fad943c8207bdcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e9768df19", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x408c0c0) 233.558754ms ago: executing program 2 (id=9854): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = getpid() r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) 151.976906ms ago: executing program 3 (id=9855): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x26, 0xa, 0x2f, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc_llcp={0xa, 0x0, 0xfd04, 0x0, 0x0, 0x2, "be4606a105888c642c13334c199f91732d13b884b4ad52d055d6d5ae3b981ffc48ca221108c4d3aa623010eab68d9504eb0034ea00000001f000", 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4000190) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 126.206687ms ago: executing program 0 (id=9856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x6, 0x5, 0x1, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 96.270137ms ago: executing program 1 (id=9857): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) 0s ago: executing program 2 (id=9858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): an invalid length. [ 1792.852211][T27650] netlink: 'syz.2.7957': attribute type 3 has an invalid length. [ 1792.860421][T27650] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7957'. [ 1792.899857][T18596] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1793.111808][T27660] netlink: 'syz.1.7962': attribute type 3 has an invalid length. [ 1793.281293][T27671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1793.309712][T27671] tap0: tun_chr_ioctl cmd 1074025676 [ 1793.311199][T27670] netlink: 'syz.1.7967': attribute type 3 has an invalid length. [ 1793.315285][T27671] tap0: owner set to 776 [ 1793.337332][T27672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1793.386565][T27675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1793.440474][T27676] tap0: tun_chr_ioctl cmd 1074025676 [ 1793.446513][T27676] tap0: owner set to 776 [ 1793.500565][T27679] tap0: tun_chr_ioctl cmd 1074025676 [ 1793.506148][T27679] tap0: owner set to 776 [ 1794.157000][T27684] netlink: 'syz.1.7977': attribute type 3 has an invalid length. [ 1794.230864][T18596] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 1794.406626][T27694] netlink: 'syz.1.7973': attribute type 3 has an invalid length. [ 1795.397361][T27712] team0: Port device team_slave_0 removed [ 1795.458373][T27712] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1795.594021][T27713] team0: Port device team_slave_0 removed [ 1795.622251][T27713] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1795.867072][T18596] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 1796.033921][T27723] netlink: 'syz.3.7986': attribute type 3 has an invalid length. [ 1796.992147][T27735] __nla_validate_parse: 15 callbacks suppressed [ 1796.992188][T27735] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7990'. [ 1797.117456][T27740] netlink: 'syz.2.7991': attribute type 3 has an invalid length. [ 1797.126134][T27740] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7991'. [ 1797.429931][T27745] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7994'. [ 1797.519459][T27745] team0: Port device team_slave_0 removed [ 1797.529646][T27745] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1797.597867][T27751] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7993'. [ 1797.622167][T27751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1797.645579][T27751] tap0: tun_chr_ioctl cmd 1074025676 [ 1797.651081][T27751] tap0: owner set to 776 [ 1797.808213][T27759] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7996'. [ 1797.823654][T27759] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1797.843116][T27760] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7997'. [ 1797.857184][T27760] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1798.149377][T27766] netlink: 'syz.1.7999': attribute type 3 has an invalid length. [ 1798.159898][T27766] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7999'. [ 1798.205976][T27767] tap0: tun_chr_ioctl cmd 1074025676 [ 1798.211350][T27767] tap0: owner set to 776 [ 1798.448876][T27777] tap0: tun_chr_ioctl cmd 1074025676 [ 1798.455019][T27777] tap0: owner set to 776 [ 1798.477925][T27778] tap0: tun_chr_ioctl cmd 1074025676 [ 1798.484707][T27778] tap0: owner set to 776 [ 1798.506799][T27779] tap0: tun_chr_ioctl cmd 1074025676 [ 1798.513233][T27779] tap0: owner set to 776 [ 1799.109332][T27783] tap0: tun_chr_ioctl cmd 1074025676 [ 1799.114993][T27783] tap0: owner set to 776 [ 1799.397893][T27787] netlink: 'syz.1.8006': attribute type 3 has an invalid length. [ 1799.406289][T27787] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8006'. [ 1799.465103][T27789] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8007'. [ 1799.476080][T27789] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1799.851429][T27798] tap0: tun_chr_ioctl cmd 1074025676 [ 1799.860738][T27798] tap0: owner set to 776 [ 1800.032892][T27801] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8011'. [ 1800.048497][T27801] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1800.389502][T27811] tap0: tun_chr_ioctl cmd 1074025676 [ 1800.396256][T27811] tap0: owner set to 776 [ 1800.494046][T27813] tap0: tun_chr_ioctl cmd 1074025676 [ 1800.499535][T27813] tap0: owner set to 776 [ 1800.775773][T27817] tap0: tun_chr_ioctl cmd 1074025676 [ 1800.781310][T27817] tap0: owner set to 776 [ 1801.354052][T27819] team0: Port device team_slave_0 removed [ 1801.377623][T27819] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1801.628523][T27824] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1802.061921][T27829] __nla_validate_parse: 2 callbacks suppressed [ 1802.061942][T27829] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8020'. [ 1802.101694][T27829] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1802.148112][T27833] netlink: 'syz.0.8021': attribute type 3 has an invalid length. [ 1802.167124][T27833] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8021'. [ 1802.438349][T27842] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8024'. [ 1802.450770][T27842] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1802.583668][T27846] tap0: tun_chr_ioctl cmd 1074025676 [ 1802.589083][T27846] tap0: owner set to 776 [ 1802.677172][T27848] tap0: tun_chr_ioctl cmd 1074025676 [ 1802.684145][T27848] tap0: owner set to 776 [ 1802.836147][T27852] tap0: tun_chr_ioctl cmd 1074025676 [ 1802.841846][T27852] tap0: owner set to 776 [ 1803.174820][T27854] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8029'. [ 1803.185086][T27854] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1803.451167][T27858] tap0: tun_chr_ioctl cmd 1074025676 [ 1803.456621][T27858] tap0: owner set to 776 [ 1803.725991][T27864] netlink: 'syz.1.8032': attribute type 3 has an invalid length. [ 1803.745233][T27864] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8032'. [ 1803.762176][T27860] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8033'. [ 1803.782055][T27860] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1804.481825][T27877] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8036'. [ 1804.511804][T27877] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1804.538582][T27874] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8037'. [ 1804.562216][T27874] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1804.603568][T27879] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8038'. [ 1804.883867][T27882] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8048'. [ 1805.017224][T27886] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1805.211120][T27893] netlink: 'syz.3.8041': attribute type 3 has an invalid length. [ 1805.295472][T27896] tap0: tun_chr_ioctl cmd 1074025676 [ 1805.301015][T27896] tap0: owner set to 776 [ 1805.411846][T27899] tap0: tun_chr_ioctl cmd 1074025676 [ 1805.417253][T27899] tap0: owner set to 776 [ 1805.433978][T27898] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1805.520909][T27903] tap0: tun_chr_ioctl cmd 1074025676 [ 1805.528068][T27903] tap0: owner set to 776 [ 1805.744398][T27907] tap0: tun_chr_ioctl cmd 1074025676 [ 1805.749885][T27907] tap0: owner set to 776 [ 1805.775758][ T7021] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1806.150498][T27911] netlink: 'syz.1.8046': attribute type 3 has an invalid length. [ 1806.359256][T27913] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1806.720984][T27923] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1806.773967][T27927] netlink: 'syz.2.8054': attribute type 3 has an invalid length. [ 1807.091084][T27931] __nla_validate_parse: 9 callbacks suppressed [ 1807.091130][T27931] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8056'. [ 1807.137808][T27931] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1807.220571][T27940] netlink: 'syz.2.8060': attribute type 3 has an invalid length. [ 1807.231688][T18596] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 1807.231807][T27940] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8060'. [ 1807.299974][T27943] tap0: tun_chr_ioctl cmd 1074025676 [ 1807.305985][T27943] tap0: owner set to 776 [ 1807.530993][T27945] netlink: 'syz.2.8062': attribute type 3 has an invalid length. [ 1807.551614][T27945] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8062'. [ 1807.713425][T27949] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8063'. [ 1807.730757][T27949] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1807.751235][T27952] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8070'. [ 1807.791034][T27952] tap0: tun_chr_ioctl cmd 1074025676 [ 1807.805903][T27952] tap0: owner set to 776 [ 1808.073893][T18596] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1808.195842][T18596] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 1808.228308][T27962] tap0: tun_chr_ioctl cmd 1074025676 [ 1808.246233][T27962] tap0: owner set to 776 [ 1808.372734][T27964] netlink: 'syz.0.8066': attribute type 3 has an invalid length. [ 1808.381102][T27964] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1808.562673][T18596] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 1808.775078][T27970] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8068'. [ 1808.800732][T27970] net_ratelimit: 1 callbacks suppressed [ 1808.800802][T27970] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1808.957706][T27976] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8071'. [ 1808.992030][T27976] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1809.026288][T27978] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8072'. [ 1809.042607][T27978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1809.140027][T27978] tap0: tun_chr_ioctl cmd 1074025676 [ 1809.145834][T27978] tap0: owner set to 776 [ 1809.251305][T18596] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1809.373606][T27987] tap0: tun_chr_ioctl cmd 1074025676 [ 1809.401638][T27987] tap0: owner set to 776 [ 1809.409016][T27989] netlink: 'syz.3.8079': attribute type 3 has an invalid length. [ 1809.421259][T27989] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8079'. [ 1809.507119][T27991] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1809.862980][T27996] netlink: 'syz.0.8083': attribute type 3 has an invalid length. [ 1810.155212][T18596] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1810.208951][T28008] tap0: tun_chr_ioctl cmd 1074025676 [ 1810.241786][T28008] tap0: owner set to 776 [ 1810.395048][T28012] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1810.419910][T28016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1810.473093][T28016] tap0: tun_chr_ioctl cmd 1074025676 [ 1810.478494][T28016] tap0: owner set to 776 [ 1810.508099][T28018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1810.532704][T28018] tap0: tun_chr_ioctl cmd 1074025676 [ 1810.538196][T28018] tap0: owner set to 776 [ 1811.017610][T28026] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1811.037737][T28025] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1811.403264][T18596] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1811.447436][T28031] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1811.763802][T28045] tap0: tun_chr_ioctl cmd 1074025676 [ 1811.769268][T28045] tap0: owner set to 776 [ 1811.859766][T28050] netlink: 'syz.0.8102': attribute type 3 has an invalid length. [ 1812.117103][T28058] __nla_validate_parse: 13 callbacks suppressed [ 1812.117122][T28058] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8104'. [ 1812.154045][T28056] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8106'. [ 1812.167031][T28058] tap0: tun_chr_ioctl cmd 1074025676 [ 1812.175323][T28058] tap0: owner set to 776 [ 1812.230735][T28060] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8105'. [ 1812.254629][T28060] tap0: tun_chr_ioctl cmd 1074025676 [ 1812.259991][T28060] tap0: owner set to 776 [ 1812.412680][T28062] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8108'. [ 1812.527700][T18596] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1812.816686][T28069] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8111'. [ 1813.052873][T28075] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8112'. [ 1813.166017][T28077] netlink: 'syz.1.8113': attribute type 3 has an invalid length. [ 1813.204149][T28077] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8113'. [ 1813.260378][T28081] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8115'. [ 1813.383534][T28084] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8114'. [ 1813.455419][T28084] tap0: tun_chr_ioctl cmd 1074025676 [ 1813.470783][T28084] tap0: owner set to 776 [ 1813.482983][T28088] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8126'. [ 1813.565832][T28091] tap0: tun_chr_ioctl cmd 1074025676 [ 1813.571761][T28091] tap0: owner set to 776 [ 1813.679618][T18596] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1814.419719][T28101] netlink: 'syz.0.8130': attribute type 3 has an invalid length. [ 1814.420302][T28097] net_ratelimit: 11 callbacks suppressed [ 1814.420350][T28097] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1814.674889][T28110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1814.718927][T28110] tap0: tun_chr_ioctl cmd 1074025676 [ 1814.732395][T28110] tap0: owner set to 776 [ 1814.749183][T28113] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1814.794587][T28114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1814.825787][T28114] tap0: tun_chr_ioctl cmd 1074025676 [ 1814.831184][T28114] tap0: owner set to 776 [ 1815.476812][T28129] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1815.562152][T28132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1815.640125][T28134] tap0: tun_chr_ioctl cmd 1074025676 [ 1815.645950][T28134] tap0: owner set to 776 [ 1815.866589][T28138] netlink: 'syz.2.8137': attribute type 3 has an invalid length. [ 1816.081433][T28146] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1816.324979][T28154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1816.362996][T28154] tap0: tun_chr_ioctl cmd 1074025676 [ 1816.371256][T28154] tap0: owner set to 776 [ 1816.405568][T28153] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1816.447103][T28156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1816.489628][T28156] tap0: tun_chr_ioctl cmd 1074025676 [ 1816.498673][T28156] tap0: owner set to 776 [ 1816.607609][T28160] tap0: tun_chr_ioctl cmd 1074025676 [ 1816.613439][T28160] tap0: owner set to 776 [ 1817.365485][T28173] netlink: 'syz.1.8148': attribute type 3 has an invalid length. [ 1817.392239][T28173] __nla_validate_parse: 13 callbacks suppressed [ 1817.392278][T28173] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8148'. [ 1817.704043][T28186] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8151'. [ 1817.740946][T28186] tap0: tun_chr_ioctl cmd 1074025676 [ 1817.746991][T28186] tap0: owner set to 776 [ 1817.777249][T28185] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8153'. [ 1818.068827][T28195] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8164'. [ 1818.182633][T28199] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8156'. [ 1818.223174][T28199] tap0: tun_chr_ioctl cmd 1074025676 [ 1818.233024][T28199] tap0: owner set to 776 [ 1818.288364][T28201] netlink: 'syz.3.8159': attribute type 13 has an invalid length. [ 1818.297034][T28201] netlink: 'syz.3.8159': attribute type 58 has an invalid length. [ 1818.305788][T28201] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1818.503794][T28204] netlink: 'syz.2.8160': attribute type 3 has an invalid length. [ 1818.518334][T28204] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8160'. [ 1818.610748][T28206] netlink: 'syz.0.8169': attribute type 13 has an invalid length. [ 1818.620155][T28206] netlink: 'syz.0.8169': attribute type 58 has an invalid length. [ 1818.630359][T28206] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8169'. [ 1818.789519][T28215] netlink: 'syz.3.8162': attribute type 3 has an invalid length. [ 1818.808243][T28215] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8162'. [ 1818.908219][T28219] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8172'. [ 1818.946956][T28219] tap0: tun_chr_ioctl cmd 1074025676 [ 1818.952593][T28219] tap0: owner set to 776 [ 1819.020941][T28218] netlink: 'syz.0.8163': attribute type 13 has an invalid length. [ 1819.760266][T28224] validate_nla: 1 callbacks suppressed [ 1819.760309][T28224] netlink: 'syz.0.8176': attribute type 13 has an invalid length. [ 1819.789944][T28224] netlink: 'syz.0.8176': attribute type 58 has an invalid length. [ 1819.902669][T28233] net_ratelimit: 6 callbacks suppressed [ 1819.902692][T28233] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1819.998424][T28230] netlink: 'syz.3.8167': attribute type 13 has an invalid length. [ 1820.021912][T28230] netlink: 'syz.3.8167': attribute type 58 has an invalid length. [ 1820.328632][T28241] netlink: 'syz.3.8173': attribute type 13 has an invalid length. [ 1820.351916][T28241] netlink: 'syz.3.8173': attribute type 58 has an invalid length. [ 1820.598470][T28251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1820.645250][T28251] tap0: tun_chr_ioctl cmd 1074025676 [ 1820.654754][T28251] tap0: owner set to 776 [ 1820.780843][T28256] netlink: 'syz.2.8180': attribute type 13 has an invalid length. [ 1820.792298][T28256] netlink: 'syz.2.8180': attribute type 58 has an invalid length. [ 1820.807301][T28257] netlink: 'syz.1.8179': attribute type 13 has an invalid length. [ 1820.816194][T28257] netlink: 'syz.1.8179': attribute type 58 has an invalid length. [ 1820.842083][T28260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1820.874875][T28260] tap0: tun_chr_ioctl cmd 1074025676 [ 1820.880448][T28260] tap0: owner set to 776 [ 1821.282067][T28269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1821.318665][T28268] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1821.353306][T28269] tap0: tun_chr_ioctl cmd 1074025676 [ 1821.361812][T28269] tap0: owner set to 776 [ 1821.957460][T28288] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1822.402657][T28302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1822.433695][T28302] tap0: tun_chr_ioctl cmd 1074025676 [ 1822.439057][T28302] tap0: owner set to 776 [ 1822.531746][T28304] __nla_validate_parse: 18 callbacks suppressed [ 1822.531775][T28304] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8194'. [ 1822.569217][T28304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1822.592870][T28304] tap0: tun_chr_ioctl cmd 1074025676 [ 1822.598373][T28304] tap0: owner set to 776 [ 1822.684667][T28308] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8196'. [ 1822.698119][T28308] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1822.717205][T28307] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8204'. [ 1822.974699][T28313] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8197'. [ 1823.154152][T28317] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8199'. [ 1823.232582][T28319] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8200'. [ 1823.453852][T28324] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8202'. [ 1823.507935][T28331] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8203'. [ 1823.523988][T28331] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1823.620936][T28329] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1823.765351][T28337] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8206'. [ 1824.403072][T28356] tap0: tun_chr_ioctl cmd 1074025676 [ 1824.449411][T28356] tap0: owner set to 776 [ 1825.210258][T28366] net_ratelimit: 1 callbacks suppressed [ 1825.210283][T28366] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1825.304641][T28370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1825.331026][T28370] tap0: tun_chr_ioctl cmd 1074025676 [ 1825.350777][T28370] tap0: owner set to 776 [ 1825.374232][T28371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1825.403857][T28371] tap0: tun_chr_ioctl cmd 1074025676 [ 1825.409548][T28371] tap0: owner set to 776 [ 1825.463867][T28373] validate_nla: 31 callbacks suppressed [ 1825.463915][T28373] netlink: 'syz.0.8216': attribute type 13 has an invalid length. [ 1825.485025][T28373] netlink: 'syz.0.8216': attribute type 58 has an invalid length. [ 1825.567782][T28378] netlink: 'syz.2.8217': attribute type 13 has an invalid length. [ 1825.581077][T28378] netlink: 'syz.2.8217': attribute type 58 has an invalid length. [ 1825.732930][T28381] netlink: 'syz.0.8218': attribute type 13 has an invalid length. [ 1825.763998][T28381] netlink: 'syz.0.8218': attribute type 58 has an invalid length. [ 1825.856001][T28384] netlink: 'syz.2.8219': attribute type 3 has an invalid length. [ 1826.010630][T28386] netlink: 'syz.0.8221': attribute type 13 has an invalid length. [ 1826.019338][T28386] netlink: 'syz.0.8221': attribute type 58 has an invalid length. [ 1826.048296][T28388] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1826.220850][T28391] netlink: 'syz.3.8224': attribute type 3 has an invalid length. [ 1826.392715][T28397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1826.469956][T28397] tap0: tun_chr_ioctl cmd 1074025676 [ 1826.487067][T28397] tap0: owner set to 776 [ 1826.567199][T28407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1826.590000][T28407] tap0: tun_chr_ioctl cmd 1074025676 [ 1826.596015][T28407] tap0: owner set to 776 [ 1827.467592][T28423] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1827.575913][T28421] __nla_validate_parse: 20 callbacks suppressed [ 1827.575955][T28421] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8234'. [ 1827.753593][T28430] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8238'. [ 1828.030883][T28436] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8240'. [ 1828.076714][T28434] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8239'. [ 1828.314070][T28443] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8242'. [ 1828.501338][T28448] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8244'. [ 1828.954003][T28461] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1828.970375][T28461] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1829.101370][T28463] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8249'. [ 1829.454572][T28473] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8254'. [ 1829.485911][T28472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8252'. [ 1831.014285][T28509] validate_nla: 21 callbacks suppressed [ 1831.014336][T28509] netlink: 'syz.2.8265': attribute type 13 has an invalid length. [ 1831.031597][T28509] netlink: 'syz.2.8265': attribute type 58 has an invalid length. [ 1831.083515][T28512] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1831.307998][T28515] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1831.466640][T28520] netlink: 'syz.2.8269': attribute type 13 has an invalid length. [ 1831.567452][T28520] netlink: 'syz.2.8269': attribute type 58 has an invalid length. [ 1831.719385][T28528] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1832.055910][T28532] netlink: 'syz.3.8273': attribute type 13 has an invalid length. [ 1832.142369][T28532] netlink: 'syz.3.8273': attribute type 58 has an invalid length. [ 1832.419279][T28540] netlink: 'syz.0.8276': attribute type 13 has an invalid length. [ 1832.449800][T28540] netlink: 'syz.0.8276': attribute type 58 has an invalid length. [ 1832.488628][T28539] netlink: 'syz.1.8274': attribute type 13 has an invalid length. [ 1832.509872][T28539] netlink: 'syz.1.8274': attribute type 58 has an invalid length. [ 1832.684008][T28549] __nla_validate_parse: 13 callbacks suppressed [ 1832.684031][T28549] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8277'. [ 1832.772192][T28549] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1832.963099][T28556] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8278'. [ 1832.982826][T28556] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1833.170940][T28553] netlink: 12798 bytes leftover after parsing attributes in process `syz.2.8275'. [ 1833.271374][T28559] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8280'. [ 1833.430809][T28564] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8282'. [ 1833.453301][T28562] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8281'. [ 1833.763715][T28569] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8284'. [ 1833.825102][T28569] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1833.980283][T28577] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8286'. [ 1833.999995][T28577] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1834.123064][T28567] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8283'. [ 1834.316367][T28571] netlink: 12798 bytes leftover after parsing attributes in process `syz.1.8285'. [ 1834.728187][T28592] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1834.852176][T28599] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1835.435475][T28606] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1836.228712][T28625] validate_nla: 14 callbacks suppressed [ 1836.228756][T28625] netlink: 'syz.3.8302': attribute type 3 has an invalid length. [ 1836.460083][T28631] netlink: 'syz.1.8304': attribute type 13 has an invalid length. [ 1836.471006][T28631] netlink: 'syz.1.8304': attribute type 58 has an invalid length. [ 1836.549770][T28635] net_ratelimit: 1 callbacks suppressed [ 1836.549789][T28635] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1836.690065][T28639] netlink: 'syz.3.8307': attribute type 13 has an invalid length. [ 1836.715928][ T7021] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1836.751719][T28639] netlink: 'syz.3.8307': attribute type 58 has an invalid length. [ 1836.784675][T28641] netlink: 'syz.2.8306': attribute type 13 has an invalid length. [ 1836.808397][T28641] netlink: 'syz.2.8306': attribute type 58 has an invalid length. [ 1836.895056][T28650] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1837.203030][T28656] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1837.409729][T28661] netlink: 'syz.1.8315': attribute type 13 has an invalid length. [ 1837.451850][T28661] netlink: 'syz.1.8315': attribute type 58 has an invalid length. [ 1837.897209][T28674] netlink: 'syz.2.8319': attribute type 13 has an invalid length. [ 1837.907083][T28674] __nla_validate_parse: 21 callbacks suppressed [ 1837.907121][T28674] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8319'. [ 1837.947855][T28670] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8318'. [ 1838.082510][T28663] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8316'. [ 1838.149586][T28679] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8320'. [ 1838.260055][T28685] netlink: 15358 bytes leftover after parsing attributes in process `syz.1.8322'. [ 1838.321401][T28683] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8321'. [ 1838.601069][T28694] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8326'. [ 1838.708916][T28697] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8327'. [ 1838.718849][T28697] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1838.857921][T28699] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8328'. [ 1839.070545][T28708] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1840.198062][T28731] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1841.373393][T28767] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1841.486018][T28769] validate_nla: 32 callbacks suppressed [ 1841.486059][T28769] netlink: 'syz.2.8353': attribute type 13 has an invalid length. [ 1841.528840][T28769] netlink: 'syz.2.8353': attribute type 58 has an invalid length. [ 1841.768420][T28776] netlink: 'syz.1.8363': attribute type 13 has an invalid length. [ 1841.784372][T28776] netlink: 'syz.1.8363': attribute type 58 has an invalid length. [ 1841.854649][T28778] netlink: 'syz.3.8355': attribute type 13 has an invalid length. [ 1841.871841][T28778] netlink: 'syz.3.8355': attribute type 58 has an invalid length. [ 1842.114512][T28788] netlink: 'syz.3.8358': attribute type 13 has an invalid length. [ 1842.124168][T28788] netlink: 'syz.3.8358': attribute type 58 has an invalid length. [ 1842.286354][T28789] netlink: 'syz.1.8367': attribute type 13 has an invalid length. [ 1842.316648][T28789] netlink: 'syz.1.8367': attribute type 58 has an invalid length. [ 1843.249105][T28800] __nla_validate_parse: 23 callbacks suppressed [ 1843.249142][T28800] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8360'. [ 1843.304809][T28811] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8373'. [ 1843.339684][T28801] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8361'. [ 1843.366003][T28812] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8364'. [ 1843.377924][T28812] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1843.599455][T28818] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8366'. [ 1843.614649][T28816] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8365'. [ 1843.836120][T28829] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8371'. [ 1844.146024][T28839] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8376'. [ 1844.400263][T28844] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8377'. [ 1844.846313][T28837] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8375'. [ 1845.396834][T28870] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1845.747366][T28883] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1846.719278][T28903] validate_nla: 21 callbacks suppressed [ 1846.719318][T28903] netlink: 'syz.0.8397': attribute type 13 has an invalid length. [ 1846.743950][T28903] netlink: 'syz.0.8397': attribute type 58 has an invalid length. [ 1846.898106][T28907] netlink: 'syz.2.8399': attribute type 13 has an invalid length. [ 1846.927064][T28907] netlink: 'syz.2.8399': attribute type 58 has an invalid length. [ 1847.140596][T28912] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1847.388923][T28918] netlink: 'syz.2.8403': attribute type 13 has an invalid length. [ 1847.414863][T28918] netlink: 'syz.2.8403': attribute type 58 has an invalid length. [ 1847.672566][T28931] netlink: 'syz.3.8407': attribute type 3 has an invalid length. [ 1848.105340][T28944] netlink: 'syz.1.8410': attribute type 3 has an invalid length. [ 1848.123148][T28945] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1848.338052][T28948] netlink: 'syz.1.8412': attribute type 13 has an invalid length. [ 1848.347393][T28948] netlink: 'syz.1.8412': attribute type 58 has an invalid length. [ 1848.356317][T28948] __nla_validate_parse: 21 callbacks suppressed [ 1848.356354][T28948] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8412'. [ 1848.413594][T28950] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8411'. [ 1848.444854][T28950] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1848.857014][T28959] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8415'. [ 1849.060675][T28968] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8417'. [ 1849.085096][T28965] netlink: 13054 bytes leftover after parsing attributes in process `syz.0.8423'. [ 1849.380036][T28977] lo: entered allmulticast mode [ 1849.510903][T28979] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8422'. [ 1849.523722][T28979] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1849.650718][T28981] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8424'. [ 1849.730781][T28985] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8425'. [ 1850.189197][T28988] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8426'. [ 1850.207308][T28990] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8435'. [ 1850.541295][T29008] lo: entered allmulticast mode [ 1852.083644][T29041] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1852.636295][T29047] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1852.939434][T29056] lo: entered allmulticast mode [ 1853.355385][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.365128][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.554108][T29055] __nla_validate_parse: 10 callbacks suppressed [ 1853.554150][T29055] netlink: 13310 bytes leftover after parsing attributes in process `syz.3.8448'. [ 1854.087110][T29062] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8449'. [ 1854.271769][T29076] validate_nla: 15 callbacks suppressed [ 1854.271807][T29076] netlink: 'syz.3.8456': attribute type 13 has an invalid length. [ 1854.291909][T29076] netlink: 'syz.3.8456': attribute type 58 has an invalid length. [ 1854.323481][T29076] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8456'. [ 1854.609707][T29081] netlink: 'syz.2.8457': attribute type 13 has an invalid length. [ 1854.640298][T29081] netlink: 'syz.2.8457': attribute type 58 has an invalid length. [ 1854.659441][T29081] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8457'. [ 1855.510100][T29106] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8466'. [ 1855.557871][T29106] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1855.692036][T29095] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8462'. [ 1855.790045][T29099] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8464'. [ 1855.833135][T29111] netlink: 'syz.3.8468': attribute type 13 has an invalid length. [ 1855.867306][T29111] netlink: 'syz.3.8468': attribute type 58 has an invalid length. [ 1855.891895][T29111] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8468'. [ 1856.382552][T29121] netlink: 'syz.3.8472': attribute type 13 has an invalid length. [ 1856.396401][T29121] netlink: 'syz.3.8472': attribute type 58 has an invalid length. [ 1856.415864][T29121] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8472'. [ 1856.943825][T29138] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8478'. [ 1857.041189][T29138] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1857.539629][T29146] netlink: 'syz.3.8480': attribute type 13 has an invalid length. [ 1857.551244][T29146] netlink: 'syz.3.8480': attribute type 58 has an invalid length. [ 1857.727402][T18596] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1858.365045][T29170] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1858.592530][T29177] __nla_validate_parse: 5 callbacks suppressed [ 1858.592577][T29177] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8493'. [ 1858.777655][T18596] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1858.786527][T29185] lo: entered allmulticast mode [ 1859.306752][T29193] validate_nla: 4 callbacks suppressed [ 1859.306814][T29193] netlink: 'syz.1.8499': attribute type 13 has an invalid length. [ 1859.351989][T29193] netlink: 'syz.1.8499': attribute type 58 has an invalid length. [ 1859.371671][T29193] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8499'. [ 1859.695048][T29206] netlink: 'syz.2.8505': attribute type 13 has an invalid length. [ 1859.723133][T29206] netlink: 'syz.2.8505': attribute type 58 has an invalid length. [ 1859.749439][T29206] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8505'. [ 1860.082877][T29214] netlink: 'syz.1.8508': attribute type 13 has an invalid length. [ 1860.099418][T29214] netlink: 'syz.1.8508': attribute type 58 has an invalid length. [ 1860.112987][T18596] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1860.120787][T29214] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1860.215200][T29209] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8506'. [ 1861.010657][T29223] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8510'. [ 1861.107156][T29230] netlink: 'syz.3.8512': attribute type 13 has an invalid length. [ 1861.143549][T29230] netlink: 'syz.3.8512': attribute type 58 has an invalid length. [ 1861.171573][T29230] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8512'. [ 1861.349891][T27147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1861.359703][T27147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1861.379206][T27147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1861.388541][T27147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1861.398455][T27147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1861.406256][T27147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1861.695747][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.849821][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.870842][T29234] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8513'. [ 1861.965496][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.025137][T29250] netlink: 'syz.3.8517': attribute type 13 has an invalid length. [ 1862.043930][T29250] netlink: 'syz.3.8517': attribute type 58 has an invalid length. [ 1862.077150][T29250] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8517'. [ 1862.164470][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.387495][T29257] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8521'. [ 1862.488404][T29237] chnl_net:caif_netlink_parms(): no params data found [ 1862.930342][T29237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.938862][T29237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.946790][T29237] bridge_slave_0: entered allmulticast mode [ 1862.954892][T29237] bridge_slave_0: entered promiscuous mode [ 1862.993472][T29237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.004000][T29237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.011260][T29237] bridge_slave_1: entered allmulticast mode [ 1863.047501][T29237] bridge_slave_1: entered promiscuous mode [ 1863.419730][T29237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1863.501824][T18596] Bluetooth: hci3: command tx timeout [ 1863.582806][T29237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1863.829305][T29237] team0: Port device team_slave_0 added [ 1863.895434][T29237] team0: Port device team_slave_1 added [ 1864.056282][T29287] __nla_validate_parse: 3 callbacks suppressed [ 1864.056322][T29287] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8527'. [ 1864.135445][T29237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.147905][T29237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1864.190994][T29237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1864.291939][T29298] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8529'. [ 1864.328996][T29237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1864.344263][T29237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1864.402863][T29237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1864.583641][T29302] validate_nla: 6 callbacks suppressed [ 1864.583681][T29302] netlink: 'syz.2.8531': attribute type 13 has an invalid length. [ 1864.605881][T29302] netlink: 'syz.2.8531': attribute type 58 has an invalid length. [ 1864.623423][T29302] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8531'. [ 1864.807205][T29237] hsr_slave_0: entered promiscuous mode [ 1864.884235][T29237] hsr_slave_1: entered promiscuous mode [ 1864.900864][T29237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1864.919393][T29237] Cannot create hsr debugfs directory [ 1865.042193][T29322] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8540'. [ 1865.051415][T29322] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1865.582803][T18596] Bluetooth: hci3: command tx timeout [ 1865.710290][ T35] hsr_slave_0: left promiscuous mode [ 1865.748983][ T35] hsr_slave_1: left promiscuous mode [ 1865.757017][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1865.768200][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1865.787525][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1865.797531][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1865.809588][ T35] bridge_slave_1: left allmulticast mode [ 1865.816321][ T35] bridge_slave_1: left promiscuous mode [ 1865.839869][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.858664][ T35] bridge_slave_0: left allmulticast mode [ 1865.864717][ T35] bridge_slave_0: left promiscuous mode [ 1865.870675][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.928114][ T35] veth0_macvtap: left promiscuous mode [ 1865.939377][ T35] veth1_vlan: left promiscuous mode [ 1865.949067][ T35] veth0_vlan: left promiscuous mode [ 1866.184536][ T35] team0 (unregistering): Port device geneve1 removed [ 1866.804711][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1866.897149][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.949258][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1867.324000][ T35] bond0 (unregistering): Released all slaves [ 1867.390721][T29323] netlink: 13054 bytes leftover after parsing attributes in process `syz.3.8534'. [ 1867.430528][T29326] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8536'. [ 1867.455936][T29332] netlink: 'syz.2.8537': attribute type 13 has an invalid length. [ 1867.481091][T29332] netlink: 'syz.2.8537': attribute type 58 has an invalid length. [ 1867.491566][T29332] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8537'. [ 1867.663637][T18596] Bluetooth: hci3: command tx timeout [ 1868.474608][T29338] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8546'. [ 1868.830738][T29237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1868.883553][T29237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1868.916955][T29237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1868.997690][T29237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1869.085463][T29353] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8541'. [ 1869.271304][T29237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1869.329238][T29237] 8021q: adding VLAN 0 to HW filter on device team0 [ 1869.348794][T22522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.356009][T22522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1869.417898][T22522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.425160][T22522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1869.505167][T29370] netlink: 'syz.1.8545': attribute type 13 has an invalid length. [ 1869.536596][T29370] netlink: 'syz.1.8545': attribute type 58 has an invalid length. [ 1869.596581][T29370] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8545'. [ 1869.670275][T29373] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8543'. [ 1869.701624][T29373] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1869.736342][T29237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1869.742328][T18596] Bluetooth: hci3: command tx timeout [ 1870.148771][T29377] netlink: 'syz.1.8547': attribute type 13 has an invalid length. [ 1870.165301][T29377] netlink: 'syz.1.8547': attribute type 58 has an invalid length. [ 1870.206337][T29377] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8547'. [ 1870.507558][T29237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1870.700906][T29237] veth0_vlan: entered promiscuous mode [ 1870.777721][T29237] veth1_vlan: entered promiscuous mode [ 1870.896208][T29237] veth0_macvtap: entered promiscuous mode [ 1870.938709][T29237] veth1_macvtap: entered promiscuous mode [ 1871.010444][T29237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.051568][T29237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.071630][T29237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.082825][T29237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.092951][T29237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.103689][T29237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.127985][T29237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.138551][T29392] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8550'. [ 1871.158233][T29237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.169378][T29237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.180019][T29237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.194008][T29237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.204261][T29237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.216288][T29237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.228362][T29237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1871.246119][T29237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.255331][T29237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.272668][T29237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.285203][T29237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.418431][T22522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.447426][T22522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.510123][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.528296][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.765458][T18596] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1871.804285][T29414] netlink: 'syz.1.8559': attribute type 13 has an invalid length. [ 1871.843084][T29414] netlink: 'syz.1.8559': attribute type 58 has an invalid length. [ 1871.863579][T29414] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8559'. [ 1871.916855][T29413] netlink: 'syz.2.8560': attribute type 13 has an invalid length. [ 1871.959844][T29413] netlink: 'syz.2.8560': attribute type 58 has an invalid length. [ 1871.977163][T29413] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8560'. [ 1872.368181][T29436] netlink: 'syz.2.8554': attribute type 13 has an invalid length. [ 1872.393022][T29436] netlink: 'syz.2.8554': attribute type 58 has an invalid length. [ 1872.454503][T29436] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8554'. [ 1873.091121][T29434] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8553'. [ 1873.126237][T29428] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8551'. [ 1873.543333][T29455] netlink: 'syz.3.8557': attribute type 13 has an invalid length. [ 1873.578558][T29455] netlink: 'syz.3.8557': attribute type 58 has an invalid length. [ 1873.958622][T18596] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1874.238916][T18596] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1874.286565][T29477] __nla_validate_parse: 3 callbacks suppressed [ 1874.286605][T29477] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8567'. [ 1874.410065][T29481] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8566'. [ 1874.816444][T29489] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8570'. [ 1875.176170][T29491] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8571'. [ 1875.384519][T29502] validate_nla: 6 callbacks suppressed [ 1875.384610][T29502] netlink: 'syz.1.8574': attribute type 13 has an invalid length. [ 1875.441752][T29502] netlink: 'syz.1.8574': attribute type 58 has an invalid length. [ 1875.450011][T29502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8574'. [ 1875.505555][T29500] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8573'. [ 1875.893956][T29512] netlink: 'syz.3.8578': attribute type 15 has an invalid length. [ 1875.912627][T29512] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8578'. [ 1875.990247][T29520] netlink: 'syz.2.8581': attribute type 13 has an invalid length. [ 1876.005280][T29520] netlink: 'syz.2.8581': attribute type 58 has an invalid length. [ 1876.055050][T29520] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8581'. [ 1876.394223][T29526] netlink: 'syz.0.8583': attribute type 13 has an invalid length. [ 1876.442065][T29526] netlink: 'syz.0.8583': attribute type 58 has an invalid length. [ 1876.470630][T29526] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8583'. [ 1876.500960][T29528] netlink: 'syz.1.8584': attribute type 13 has an invalid length. [ 1876.527050][T29528] netlink: 'syz.1.8584': attribute type 58 has an invalid length. [ 1876.602049][T29528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8584'. [ 1876.810658][T29541] lo: entered allmulticast mode [ 1876.897515][T29543] netlink: 'syz.3.8587': attribute type 13 has an invalid length. [ 1879.603666][T29602] __nla_validate_parse: 12 callbacks suppressed [ 1879.603737][T29602] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8609'. [ 1879.835607][T29610] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8612'. [ 1880.238665][T29615] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8614'. [ 1880.333730][T29609] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8611'. [ 1880.652215][T29624] validate_nla: 21 callbacks suppressed [ 1880.652258][T29624] netlink: 'syz.1.8625': attribute type 13 has an invalid length. [ 1880.672178][T29624] netlink: 'syz.1.8625': attribute type 58 has an invalid length. [ 1880.680380][T29624] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8625'. [ 1880.730481][T29623] netlink: 'syz.2.8617': attribute type 15 has an invalid length. [ 1880.748330][T18596] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1880.761694][T29623] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8617'. [ 1880.792915][T29626] netlink: 'syz.3.8618': attribute type 13 has an invalid length. [ 1880.801146][T29626] netlink: 'syz.3.8618': attribute type 58 has an invalid length. [ 1880.832098][T29626] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8618'. [ 1881.057528][T29635] netlink: 'syz.1.8620': attribute type 15 has an invalid length. [ 1881.076720][T29635] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8620'. [ 1881.090672][T29641] netlink: 'syz.2.8622': attribute type 13 has an invalid length. [ 1881.120132][T29641] netlink: 'syz.2.8622': attribute type 58 has an invalid length. [ 1881.130544][T29641] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8622'. [ 1881.247962][T29645] netlink: 'syz.3.8623': attribute type 13 has an invalid length. [ 1881.281382][T29645] netlink: 'syz.3.8623': attribute type 58 has an invalid length. [ 1881.329935][T29645] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8623'. [ 1882.177749][T18596] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1882.446380][T18596] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1882.716782][T18596] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1884.135080][T18596] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1884.664699][T29722] __nla_validate_parse: 10 callbacks suppressed [ 1884.664720][T29722] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8650'. [ 1884.844504][T29721] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8651'. [ 1885.167899][T29726] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8660'. [ 1885.562379][T29740] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8656'. [ 1885.587321][T29736] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8655'. [ 1885.656332][T29730] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8653'. [ 1885.912475][T29750] validate_nla: 9 callbacks suppressed [ 1885.912517][T29750] netlink: 'syz.1.8661': attribute type 13 has an invalid length. [ 1885.927148][T29750] netlink: 'syz.1.8661': attribute type 58 has an invalid length. [ 1885.936046][T29750] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8661'. [ 1886.454896][T29757] netlink: 'syz.0.8663': attribute type 15 has an invalid length. [ 1886.490950][T29757] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8663'. [ 1886.540313][T29767] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8667'. [ 1886.569629][T29767] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1886.586323][T29761] netlink: 'syz.2.8665': attribute type 15 has an invalid length. [ 1886.611755][T29761] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1887.039670][T29776] netlink: 'syz.1.8671': attribute type 13 has an invalid length. [ 1887.048892][T29776] netlink: 'syz.1.8671': attribute type 58 has an invalid length. [ 1887.365419][T29785] netlink: 'syz.3.8673': attribute type 13 has an invalid length. [ 1887.376795][T29785] netlink: 'syz.3.8673': attribute type 58 has an invalid length. [ 1887.918291][T29797] netlink: 'syz.1.8678': attribute type 15 has an invalid length. [ 1888.034653][T18596] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1889.150727][T18596] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1889.350638][T29846] netlink: 'syz.3.8696': attribute type 13 has an invalid length. [ 1889.955726][T29856] __nla_validate_parse: 12 callbacks suppressed [ 1889.955782][T29856] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8698'. [ 1890.022767][T29864] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8701'. [ 1890.103099][T29854] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8699'. [ 1890.450920][T29874] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8705'. [ 1890.544240][T29870] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8702'. [ 1890.763534][T29884] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8710'. [ 1890.814887][T29890] netlink: 13566 bytes leftover after parsing attributes in process `syz.2.8708'. [ 1891.772257][T29894] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1891.842137][T29896] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8714'. [ 1891.943946][T29895] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8713'. [ 1892.079902][T29908] validate_nla: 7 callbacks suppressed [ 1892.079943][T29908] netlink: 'syz.1.8716': attribute type 13 has an invalid length. [ 1892.113523][T29908] netlink: 'syz.1.8716': attribute type 58 has an invalid length. [ 1892.348631][T29915] netlink: 'syz.0.8726': attribute type 13 has an invalid length. [ 1892.357634][T29915] netlink: 'syz.0.8726': attribute type 58 has an invalid length. [ 1892.812772][T29929] netlink: 'syz.3.8723': attribute type 13 has an invalid length. [ 1892.828098][T29929] netlink: 'syz.3.8723': attribute type 58 has an invalid length. [ 1892.872254][T29927] netlink: 'syz.2.8722': attribute type 13 has an invalid length. [ 1892.880485][T29927] netlink: 'syz.2.8722': attribute type 58 has an invalid length. [ 1893.513571][T29942] netlink: 'syz.1.8729': attribute type 13 has an invalid length. [ 1893.539436][T29942] netlink: 'syz.1.8729': attribute type 58 has an invalid length. [ 1895.113777][T29973] __nla_validate_parse: 15 callbacks suppressed [ 1895.113845][T29973] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8740'. [ 1895.408210][T29980] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8750'. [ 1895.497841][T29975] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8739'. [ 1895.810993][T29989] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8743'. [ 1895.854458][T29986] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8741'. [ 1895.898811][T29993] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1896.021204][T29995] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8744'. [ 1896.144378][T30000] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8745'. [ 1896.323426][T30005] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8746'. [ 1897.007650][T30008] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8749'. [ 1897.555597][T30027] validate_nla: 16 callbacks suppressed [ 1897.555708][T30027] netlink: 'syz.3.8758': attribute type 13 has an invalid length. [ 1897.577300][T30027] netlink: 'syz.3.8758': attribute type 58 has an invalid length. [ 1897.840603][T30034] netlink: 'syz.3.8759': attribute type 13 has an invalid length. [ 1897.855698][T30034] netlink: 'syz.3.8759': attribute type 58 has an invalid length. [ 1898.039834][T30037] netlink: 'syz.0.8761': attribute type 13 has an invalid length. [ 1898.096439][T30037] netlink: 'syz.0.8761': attribute type 58 has an invalid length. [ 1898.237643][T30042] netlink: 'syz.3.8763': attribute type 13 has an invalid length. [ 1898.299803][T30042] netlink: 'syz.3.8763': attribute type 58 has an invalid length. [ 1898.345931][T30044] netlink: 'syz.2.8764': attribute type 13 has an invalid length. [ 1898.393043][T30044] netlink: 'syz.2.8764': attribute type 58 has an invalid length. [ 1900.792875][T30099] __nla_validate_parse: 12 callbacks suppressed [ 1900.792919][T30099] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8780'. [ 1901.017219][T30106] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8783'. [ 1902.079296][T30136] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8796'. [ 1902.599734][T30142] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8800'. [ 1903.438088][T30170] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8809'. [ 1904.101293][T30172] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8811'. [ 1904.668346][T30195] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8821'. [ 1905.012087][T30205] validate_nla: 10 callbacks suppressed [ 1905.012128][T30205] netlink: 'syz.0.8825': attribute type 13 has an invalid length. [ 1905.056261][T30205] netlink: 'syz.0.8825': attribute type 58 has an invalid length. [ 1905.082094][T30205] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8825'. [ 1905.092248][T30203] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8832'. [ 1906.005574][T30229] netlink: 'syz.2.8837': attribute type 13 has an invalid length. [ 1906.019340][T30229] netlink: 'syz.2.8837': attribute type 58 has an invalid length. [ 1906.047089][T30229] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8837'. [ 1906.135916][T30234] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.8838'. [ 1906.395680][T30240] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8849'. [ 1906.968600][T30256] netlink: 'syz.1.8848': attribute type 13 has an invalid length. [ 1906.986096][T30256] netlink: 'syz.1.8848': attribute type 58 has an invalid length. [ 1907.012042][T30256] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8848'. [ 1907.337403][T30267] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8853'. [ 1907.874718][T30278] netlink: 'syz.3.8858': attribute type 13 has an invalid length. [ 1907.928241][T30278] netlink: 'syz.3.8858': attribute type 58 has an invalid length. [ 1907.992858][T30278] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8858'. [ 1908.139098][T30286] netlink: 'syz.0.8861': attribute type 13 has an invalid length. [ 1908.162178][T30286] netlink: 'syz.0.8861': attribute type 58 has an invalid length. [ 1908.191020][T30286] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8861'. [ 1908.603300][T30299] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8866'. [ 1908.865777][T30308] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8878'. [ 1909.226868][T30322] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8882'. [ 1910.093009][T30346] validate_nla: 4 callbacks suppressed [ 1910.093050][T30346] netlink: 'syz.0.8885': attribute type 13 has an invalid length. [ 1910.111845][T30346] netlink: 'syz.0.8885': attribute type 58 has an invalid length. [ 1910.407994][T30354] netlink: 'syz.3.8895': attribute type 13 has an invalid length. [ 1910.469158][T30354] netlink: 'syz.3.8895': attribute type 58 has an invalid length. [ 1910.778214][T30362] netlink: 'syz.1.8889': attribute type 13 has an invalid length. [ 1910.810435][T30362] netlink: 'syz.1.8889': attribute type 58 has an invalid length. [ 1911.205084][T30380] __nla_validate_parse: 5 callbacks suppressed [ 1911.205122][T30380] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.8896'. [ 1911.650319][T30391] netlink: 'syz.3.8900': attribute type 13 has an invalid length. [ 1911.689531][T30391] netlink: 'syz.3.8900': attribute type 58 has an invalid length. [ 1911.711729][T30391] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8900'. [ 1912.187824][T18596] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1914.808191][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.821720][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.659003][T30472] netlink: 12798 bytes leftover after parsing attributes in process `syz.2.8936'. [ 1915.978079][T30491] netlink: 'syz.3.8944': attribute type 13 has an invalid length. [ 1916.012725][T30491] netlink: 'syz.3.8944': attribute type 58 has an invalid length. [ 1916.021031][T30491] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8944'. [ 1916.429235][T30502] netlink: 'syz.1.8955': attribute type 13 has an invalid length. [ 1916.448422][T30502] netlink: 'syz.1.8955': attribute type 58 has an invalid length. [ 1916.533574][T30502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1917.999338][T30519] netlink: 12798 bytes leftover after parsing attributes in process `syz.0.8952'. [ 1918.267693][T18596] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1919.134212][T30558] netlink: 'syz.1.8969': attribute type 12 has an invalid length. [ 1919.149882][T30558] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8969'. [ 1919.193123][T18596] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1919.822581][T30577] netlink: 'syz.3.8980': attribute type 13 has an invalid length. [ 1919.852914][T30577] netlink: 'syz.3.8980': attribute type 58 has an invalid length. [ 1919.862123][T30577] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8980'. [ 1920.419228][T30591] netlink: 'syz.0.8985': attribute type 12 has an invalid length. [ 1920.447748][T30591] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8985'. [ 1920.706991][T30602] netlink: 'syz.1.8991': attribute type 13 has an invalid length. [ 1920.724147][T30602] netlink: 'syz.1.8991': attribute type 58 has an invalid length. [ 1920.734339][T30602] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8991'. [ 1921.181903][T30612] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.8995'. [ 1921.413169][T30618] netlink: 'syz.3.8997': attribute type 12 has an invalid length. [ 1921.423809][T30618] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8997'. [ 1921.879862][T30630] netlink: 'syz.3.9001': attribute type 13 has an invalid length. [ 1921.892657][T30630] netlink: 'syz.3.9001': attribute type 58 has an invalid length. [ 1921.918913][T30630] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9001'. [ 1922.260031][T30639] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.9007'. [ 1922.737738][T30659] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9014'. [ 1922.818790][T30657] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9015'. [ 1922.929710][T30662] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9017'. [ 1923.180433][T30670] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9021'. [ 1923.633517][T30678] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9024'. [ 1923.869651][T30684] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9028'. [ 1924.197217][T30694] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9033'. [ 1925.168026][T30721] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9046'. [ 1926.842416][T30762] mac80211_hwsim hwsim29 ..ãc¤±: renamed from wlan1 (while UP) [ 1927.308673][T30771] mac80211_hwsim hwsim31 ..ãc¤±: renamed from wlan1 (while UP) [ 1927.589682][T30778] __nla_validate_parse: 5 callbacks suppressed [ 1927.589736][T30778] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9072'. [ 1928.155350][T30795] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9080'. [ 1928.265674][T30802] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9081'. [ 1928.339437][T30801] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9083'. [ 1928.588565][T30808] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9086'. [ 1928.920889][T30814] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1929.215611][T30818] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9091'. [ 1929.262362][T30824] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9092'. [ 1929.313835][T30822] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9093'. [ 1929.422529][T30826] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9094'. [ 1932.987369][T30883] __nla_validate_parse: 10 callbacks suppressed [ 1932.987384][T30883] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9116'. [ 1933.167947][T30888] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9119'. [ 1933.548057][T30894] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1933.898128][T30902] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9126'. [ 1934.249675][T30910] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9130'. [ 1934.347981][T30917] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9132'. [ 1934.539238][T30919] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9134'. [ 1934.769089][T30927] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9137'. [ 1934.951323][T30933] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1935.704854][T30951] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1936.682200][T30973] mac80211_hwsim hwsim33 ..ãc¤±: renamed from wlan1 (while UP) [ 1937.375511][T30986] netlink: 'syz.3.9166': attribute type 13 has an invalid length. [ 1937.384601][T30986] netlink: 'syz.3.9166': attribute type 58 has an invalid length. [ 1938.234322][T31001] __nla_validate_parse: 12 callbacks suppressed [ 1938.234349][T31001] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9180'. [ 1938.976833][T31011] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9174'. [ 1939.064213][T31015] netlink: 'syz.1.9176': attribute type 13 has an invalid length. [ 1939.072983][T31015] netlink: 'syz.1.9176': attribute type 58 has an invalid length. [ 1939.081265][T31015] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9176'. [ 1939.318519][T31018] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9187'. [ 1939.375072][T31021] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9177'. [ 1939.450450][T31022] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9178'. [ 1939.695537][T31024] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9179'. [ 1939.738061][T31028] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9181'. [ 1940.057498][T31032] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9184'. [ 1940.148427][T31039] netlink: 'syz.1.9186': attribute type 13 has an invalid length. [ 1940.187535][T31039] netlink: 'syz.1.9186': attribute type 58 has an invalid length. [ 1940.196372][T31039] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9186'. [ 1941.314417][T31069] netlink: 'syz.1.9200': attribute type 13 has an invalid length. [ 1941.330591][T31069] netlink: 'syz.1.9200': attribute type 58 has an invalid length. [ 1942.742008][T31103] netlink: 'syz.3.9214': attribute type 13 has an invalid length. [ 1942.758422][T31103] netlink: 'syz.3.9214': attribute type 58 has an invalid length. [ 1943.335629][T31120] __nla_validate_parse: 12 callbacks suppressed [ 1943.335672][T31120] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9222'. [ 1943.527310][T31130] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.9227'. [ 1943.630989][T31133] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9225'. [ 1943.779471][T31138] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.9238'. [ 1944.328572][T31151] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9237'. [ 1944.570475][T18596] Bluetooth: hci3: Malformed Event: 0x13 [ 1944.662829][T31161] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1944.881284][T31170] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9243'. [ 1945.717797][T31179] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9250'. [ 1945.979161][T31186] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.9254'. [ 1946.316928][T31194] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9258'. [ 1948.459234][T31255] netlink: 'syz.2.9286': attribute type 13 has an invalid length. [ 1948.475737][T31255] netlink: 'syz.2.9286': attribute type 58 has an invalid length. [ 1948.491635][T31255] __nla_validate_parse: 10 callbacks suppressed [ 1948.491675][T31255] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9286'. [ 1948.764618][T31265] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9289'. [ 1948.831107][T31267] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9292'. [ 1948.972433][T31274] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9293'. [ 1949.065418][T31276] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.9296'. [ 1949.325532][T31284] netlink: 'syz.2.9300': attribute type 13 has an invalid length. [ 1949.334836][T31284] netlink: 'syz.2.9300': attribute type 58 has an invalid length. [ 1949.351260][T31284] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9300'. [ 1949.380259][T31282] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9299'. [ 1949.532853][T31287] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9301'. [ 1949.940327][T31297] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9305'. [ 1949.959781][T31299] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.9306'. [ 1950.365890][T18596] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1950.372935][T31308] netlink: 'syz.2.9310': attribute type 13 has an invalid length. [ 1950.392119][T31308] netlink: 'syz.2.9310': attribute type 58 has an invalid length. [ 1951.127066][T31331] netlink: 'syz.1.9330': attribute type 10 has an invalid length. [ 1951.152128][T31331] dummy0: entered promiscuous mode [ 1951.157824][T31331] dummy0: entered allmulticast mode [ 1951.169688][T31331] bridge0: port 3(dummy0) entered blocking state [ 1951.179230][T31331] bridge0: port 3(dummy0) entered disabled state [ 1951.241098][T31331] bridge0: port 3(dummy0) entered blocking state [ 1951.248687][T31331] bridge0: port 3(dummy0) entered forwarding state [ 1951.296946][T18596] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1951.739912][T31350] netlink: 'syz.0.9331': attribute type 13 has an invalid length. [ 1951.759754][T31350] netlink: 'syz.0.9331': attribute type 58 has an invalid length. [ 1952.188958][T18596] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1952.551302][T31373] netlink: 'syz.2.9342': attribute type 10 has an invalid length. [ 1952.567667][T31373] dummy0: entered promiscuous mode [ 1952.574068][T31373] dummy0: entered allmulticast mode [ 1952.596632][T31373] bridge0: port 3(dummy0) entered blocking state [ 1952.611036][T31373] bridge0: port 3(dummy0) entered disabled state [ 1952.656834][T31373] bridge0: port 3(dummy0) entered blocking state [ 1952.664730][T31373] bridge0: port 3(dummy0) entered forwarding state [ 1953.210063][T31389] dummy0: entered promiscuous mode [ 1953.221632][T31389] dummy0: entered allmulticast mode [ 1953.254840][T31389] bridge0: port 3(dummy0) entered blocking state [ 1953.263020][T31389] bridge0: port 3(dummy0) entered disabled state [ 1953.300064][T31389] bridge0: port 3(dummy0) entered blocking state [ 1953.307694][T31389] bridge0: port 3(dummy0) entered forwarding state [ 1953.517580][T31398] __nla_validate_parse: 24 callbacks suppressed [ 1953.517620][T31398] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9349'. [ 1953.560854][T31398] validate_nla: 7 callbacks suppressed [ 1953.560894][T31398] netlink: 'syz.2.9349': attribute type 10 has an invalid length. [ 1953.582122][T31398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9349'. [ 1953.610057][T31400] netlink: 'syz.1.9359': attribute type 13 has an invalid length. [ 1953.660216][T31400] netlink: 'syz.1.9359': attribute type 58 has an invalid length. [ 1953.672960][T31400] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9359'. [ 1953.852781][T31406] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9353'. [ 1953.917755][T31410] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9354'. [ 1953.992359][T31409] netlink: 'syz.1.9354': attribute type 10 has an invalid length. [ 1954.000592][T31409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9354'. [ 1954.109363][T31414] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9357'. [ 1954.130955][T31416] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9358'. [ 1954.162462][T31414] netlink: 'syz.0.9357': attribute type 10 has an invalid length. [ 1954.171103][T31414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9357'. [ 1954.180744][T31414] dummy0: entered promiscuous mode [ 1954.186956][T31414] dummy0: entered allmulticast mode [ 1954.195501][T31414] bridge0: port 3(dummy0) entered blocking state [ 1954.207094][T31414] bridge0: port 3(dummy0) entered disabled state [ 1954.276451][T31414] bridge0: port 3(dummy0) entered blocking state [ 1954.284109][T31414] bridge0: port 3(dummy0) entered forwarding state [ 1954.302123][T31418] netlink: 'syz.3.9358': attribute type 10 has an invalid length. [ 1954.310212][T31418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9358'. [ 1954.574110][T31422] netlink: 'syz.1.9361': attribute type 10 has an invalid length. [ 1954.695710][T31426] netlink: 'syz.3.9363': attribute type 10 has an invalid length. [ 1954.713885][T31424] netlink: 'syz.0.9362': attribute type 10 has an invalid length. [ 1954.894102][T31429] netlink: 'syz.1.9364': attribute type 13 has an invalid length. [ 1958.756826][T31507] __nla_validate_parse: 40 callbacks suppressed [ 1958.756872][T31507] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9399'. [ 1958.800329][T31504] validate_nla: 22 callbacks suppressed [ 1958.800371][T31504] netlink: 'syz.2.9400': attribute type 13 has an invalid length. [ 1958.826634][T31504] netlink: 'syz.2.9400': attribute type 58 has an invalid length. [ 1958.839330][T31504] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9400'. [ 1958.860088][T31512] netlink: 'syz.3.9401': attribute type 10 has an invalid length. [ 1958.869255][T31512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9401'. [ 1958.882191][T31513] netlink: 'syz.1.9399': attribute type 10 has an invalid length. [ 1958.900205][T31513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9399'. [ 1958.917126][T31514] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1958.942137][T31516] netlink: 'syz.0.9407': attribute type 10 has an invalid length. [ 1958.987481][T31516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1959.119617][T31518] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9402'. [ 1959.172402][T31519] netlink: 'syz.2.9402': attribute type 10 has an invalid length. [ 1959.180479][T31519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9402'. [ 1959.287095][T31522] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9403'. [ 1959.322747][T31522] netlink: 'syz.3.9403': attribute type 10 has an invalid length. [ 1959.331257][T31522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9403'. [ 1959.396143][T31523] netlink: 'syz.1.9412': attribute type 10 has an invalid length. [ 1959.562505][T31526] netlink: 'syz.0.9404': attribute type 10 has an invalid length. [ 1959.721951][T31531] netlink: 'syz.1.9408': attribute type 10 has an invalid length. [ 1960.412023][T18596] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1961.392995][T18596] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1962.349295][T31591] bridge0: port 3(dummy0) entered disabled state [ 1962.368977][T31591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.383600][T31591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.410611][T31591] bridge0: entered allmulticast mode [ 1962.967274][T18596] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1963.024223][T31595] bridge0: port 3(dummy0) entered disabled state [ 1963.042443][T31595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.050795][T31595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.094642][T31595] bridge0: entered allmulticast mode [ 1963.185265][T31596] bridge0: port 3(dummy0) entered disabled state [ 1963.194654][T31596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.206318][T31596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.227468][T31596] bridge0: entered allmulticast mode [ 1963.615667][T31604] bridge0: port 3(dummy0) entered disabled state [ 1963.689564][T31604] bridge_slave_1: left allmulticast mode [ 1963.697184][T31604] bridge_slave_1: left promiscuous mode [ 1963.708574][T31604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.755417][T31604] bridge_slave_0: left allmulticast mode [ 1963.761397][T31604] bridge_slave_0: left promiscuous mode [ 1963.789531][T31604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1964.039649][T31611] __nla_validate_parse: 50 callbacks suppressed [ 1964.039669][T31611] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9445'. [ 1964.059700][T31612] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9444'. [ 1964.082870][T31613] validate_nla: 23 callbacks suppressed [ 1964.082890][T31613] netlink: 'syz.1.9445': attribute type 10 has an invalid length. [ 1964.103183][T31613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9445'. [ 1964.116720][T31614] netlink: 'syz.2.9444': attribute type 10 has an invalid length. [ 1964.138553][T31614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9444'. [ 1964.775603][T31623] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9448'. [ 1964.799410][T31626] netlink: 'syz.2.9448': attribute type 10 has an invalid length. [ 1964.814943][T31626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9448'. [ 1965.034856][T31637] netlink: 'syz.3.9451': attribute type 13 has an invalid length. [ 1965.051942][T31637] netlink: 'syz.3.9451': attribute type 58 has an invalid length. [ 1965.060395][T31637] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9451'. [ 1965.537851][T31646] bridge0: port 3(dummy0) entered disabled state [ 1965.545058][T31646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.554224][T31646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1965.572458][T31646] bridge0: entered allmulticast mode [ 1966.087426][T31653] bridge0: port 3(dummy0) entered disabled state [ 1966.154433][T31653] bridge_slave_1: left allmulticast mode [ 1966.166175][T31653] bridge_slave_1: left promiscuous mode [ 1966.178573][T31653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.254075][T31653] bridge_slave_0: left allmulticast mode [ 1966.267601][T31653] bridge_slave_0: left promiscuous mode [ 1966.280367][T31653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.524131][T31663] veth1_macvtap: left promiscuous mode [ 1966.590618][T31655] bridge0: port 3(dummy0) entered disabled state [ 1966.659016][T31655] bridge_slave_1: left allmulticast mode [ 1966.665034][T31655] bridge_slave_1: left promiscuous mode [ 1966.674524][T31655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.710945][T31655] bridge_slave_0: left allmulticast mode [ 1966.718304][T31655] bridge_slave_0: left promiscuous mode [ 1966.728197][T31655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.848591][T31665] netlink: 'syz.2.9463': attribute type 13 has an invalid length. [ 1966.875602][T31665] netlink: 'syz.2.9463': attribute type 58 has an invalid length. [ 1966.892341][T31665] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9463'. [ 1966.919756][T31662] bridge0: port 3(dummy0) entered disabled state [ 1966.994025][T31662] bridge_slave_1: left allmulticast mode [ 1966.999946][T31662] bridge_slave_1: left promiscuous mode [ 1967.022706][T31662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.099077][T31662] bridge_slave_0: left allmulticast mode [ 1967.105629][T31662] bridge_slave_0: left promiscuous mode [ 1967.112933][T31662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.153470][T27732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.255325][T31691] netlink: 13054 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1968.317492][T27147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1968.343569][T27732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.345923][T27147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1968.368605][T27147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1968.379292][T27147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1968.398394][T27147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1968.407666][T27147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1968.442625][T31693] netlink: 'syz.3.9474': attribute type 13 has an invalid length. [ 1968.458910][T31693] netlink: 'syz.3.9474': attribute type 58 has an invalid length. [ 1968.491910][T31693] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9474'. [ 1968.591530][T27732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.670086][T27732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.226428][T31695] chnl_net:caif_netlink_parms(): no params data found [ 1969.829164][T31695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.845976][T31695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.865129][T31695] bridge_slave_0: entered allmulticast mode [ 1969.903162][T31695] bridge_slave_0: entered promiscuous mode [ 1970.154248][T31695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.171643][T31695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.179005][T31695] bridge_slave_1: entered allmulticast mode [ 1970.194527][T31695] bridge_slave_1: entered promiscuous mode [ 1970.218295][T31741] netlink: 'syz.1.9483': attribute type 13 has an invalid length. [ 1970.238861][T31741] netlink: 'syz.1.9483': attribute type 58 has an invalid length. [ 1970.250934][T31741] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1970.328446][T31695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1970.447850][T31695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1970.461968][T27147] Bluetooth: hci2: command tx timeout [ 1970.669775][T31695] team0: Port device team_slave_0 added [ 1970.783030][T31695] team0: Port device team_slave_1 added [ 1971.008692][T31695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1971.036100][T31695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.088304][T31695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1971.301891][T31695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1971.329023][T31695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1971.361467][T31695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1972.328833][T27732] hsr_slave_0: left promiscuous mode [ 1972.358076][T27732] hsr_slave_1: left promiscuous mode [ 1972.416263][T27732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1972.456325][T27732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1972.486214][T27732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1972.495639][T27732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1972.541538][T27147] Bluetooth: hci2: command tx timeout [ 1972.580141][T27732] veth0_macvtap: left promiscuous mode [ 1972.612818][T27732] veth1_vlan: left promiscuous mode [ 1972.618366][T27732] veth0_vlan: left promiscuous mode [ 1973.487631][T27732] team0 (unregistering): Port device team_slave_1 removed [ 1973.577052][T27732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1973.637494][T27732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1974.006158][T27732] bond0 (unregistering): Released all slaves [ 1974.059598][T31695] hsr_slave_0: entered promiscuous mode [ 1974.066615][T31695] hsr_slave_1: entered promiscuous mode [ 1974.095002][T31798] netlink: 'syz.1.9492': attribute type 13 has an invalid length. [ 1974.104200][T31798] netlink: 'syz.1.9492': attribute type 58 has an invalid length. [ 1974.117507][T31798] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9492'. [ 1974.622375][T27147] Bluetooth: hci2: command tx timeout [ 1974.930134][T31695] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1974.943668][T31695] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1974.955469][T31695] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1974.970807][T31695] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1975.084810][T31695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1975.110236][T31695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1975.128284][T27732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.135495][T27732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1975.154749][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.161986][ T7021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1975.501139][T31695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1975.589730][T31695] veth0_vlan: entered promiscuous mode [ 1975.615393][T31695] veth1_vlan: entered promiscuous mode [ 1975.662937][T31695] veth0_macvtap: entered promiscuous mode [ 1975.677892][T31695] veth1_macvtap: entered promiscuous mode [ 1975.701014][T31695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1975.713667][T31695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.725798][T31695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1975.738973][T31695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.749328][T31695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1975.760913][T31695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.778466][T31695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1975.798448][T31695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.809170][T31695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.828165][T31695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.838978][T31695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.855228][T31695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.868706][T31695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.887219][T31695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1975.907352][T31695] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.918972][T31695] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.931056][T31695] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.946586][T31695] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.048289][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.064795][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.124119][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.133371][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.227045][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.233703][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.701712][T27147] Bluetooth: hci2: command tx timeout [ 1976.710694][T31855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.721685][T31855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.746894][T31855] bridge0: entered allmulticast mode [ 1976.814590][T31859] bridge_slave_1: left allmulticast mode [ 1976.828041][T31859] bridge_slave_1: left promiscuous mode [ 1976.839928][T31859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.850786][T31859] bridge_slave_0: left allmulticast mode [ 1976.856645][T31859] bridge_slave_0: left promiscuous mode [ 1976.863971][T31859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.170588][T31970] syzkaller0: entered promiscuous mode [ 1982.183695][T31970] syzkaller0: entered allmulticast mode [ 1988.542614][T27147] Bluetooth: hci3: command 0x0406 tx timeout [ 1989.481701][T32112] netlink: 13054 bytes leftover after parsing attributes in process `syz.0.9553'. [ 1990.539091][T32138] syzkaller0: entered promiscuous mode [ 1990.566669][T32138] syzkaller0: entered allmulticast mode [ 1993.343223][T32157] netlink: 13054 bytes leftover after parsing attributes in process `syz.3.9572'. [ 1994.025947][T32175] netlink: 'syz.1.9576': attribute type 13 has an invalid length. [ 1994.072216][T32175] netlink: 'syz.1.9576': attribute type 58 has an invalid length. [ 1994.092838][T32175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9576'. [ 1994.366420][T32186] netlink: 'syz.0.9589': attribute type 13 has an invalid length. [ 1994.392104][T32186] netlink: 'syz.0.9589': attribute type 58 has an invalid length. [ 1994.422868][T32186] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9589'. [ 1994.799873][T32199] netlink: 13054 bytes leftover after parsing attributes in process `syz.0.9584'. [ 1995.410183][T32211] netlink: 'syz.3.9593': attribute type 13 has an invalid length. [ 1995.434880][T32211] netlink: 'syz.3.9593': attribute type 58 has an invalid length. [ 1995.444248][T32211] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9593'. [ 1997.323227][T32243] netlink: 'syz.3.9603': attribute type 13 has an invalid length. [ 1997.351785][T32243] netlink: 'syz.3.9603': attribute type 58 has an invalid length. [ 1997.371909][T32243] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9603'. [ 1998.547509][T32277] netlink: 'syz.2.9616': attribute type 13 has an invalid length. [ 1998.572173][T32277] netlink: 'syz.2.9616': attribute type 58 has an invalid length. [ 1998.580518][T32277] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9616'. [ 1998.920651][T32285] syzkaller0: entered promiscuous mode [ 1998.971567][T32285] syzkaller0: entered allmulticast mode [ 2002.205034][T32328] netlink: 'syz.3.9630': attribute type 13 has an invalid length. [ 2002.253514][T32328] netlink: 'syz.3.9630': attribute type 58 has an invalid length. [ 2002.286447][T32328] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9630'. [ 2002.628420][T32336] netlink: 'syz.0.9643': attribute type 13 has an invalid length. [ 2002.643691][T32336] netlink: 'syz.0.9643': attribute type 58 has an invalid length. [ 2002.658028][T32336] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9643'. [ 2003.041272][T32348] netlink: 'syz.0.9647': attribute type 13 has an invalid length. [ 2003.068664][T32348] netlink: 'syz.0.9647': attribute type 58 has an invalid length. [ 2003.097063][T32348] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9647'. [ 2003.380503][T32356] syzkaller0: entered promiscuous mode [ 2003.431577][T32356] syzkaller0: entered allmulticast mode [ 2006.697744][T32388] netlink: 'syz.3.9651': attribute type 13 has an invalid length. [ 2006.738088][T32388] netlink: 'syz.3.9651': attribute type 58 has an invalid length. [ 2006.783254][T32388] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9651'. [ 2006.853794][T27147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2006.863827][T27147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2006.872731][T27147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2006.899138][T27147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2006.917887][T27147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2006.931880][T27147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2007.006701][T22522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.166339][T22522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.281061][T32402] syzkaller0: entered promiscuous mode [ 2007.288602][T32402] syzkaller0: entered allmulticast mode [ 2007.409382][T22522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.561174][T22522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.022068][T27147] Bluetooth: hci0: command tx timeout [ 2009.788513][T32397] chnl_net:caif_netlink_parms(): no params data found [ 2010.106693][T32430] syzkaller0: entered promiscuous mode [ 2010.114894][T32430] syzkaller0: entered allmulticast mode [ 2010.260447][T32434] netlink: 'syz.2.9663': attribute type 13 has an invalid length. [ 2010.281875][T32434] netlink: 'syz.2.9663': attribute type 58 has an invalid length. [ 2010.304173][T32434] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9663'. [ 2010.520236][T32397] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.536428][T32397] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.549397][T32397] bridge_slave_0: entered allmulticast mode [ 2010.564840][T32397] bridge_slave_0: entered promiscuous mode [ 2011.105572][T27147] Bluetooth: hci0: command tx timeout [ 2012.481145][T32397] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.488554][T32397] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.496467][T32397] bridge_slave_1: entered allmulticast mode [ 2012.504293][T32397] bridge_slave_1: entered promiscuous mode [ 2012.992417][T32397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2013.072405][T32397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2013.199855][T27147] Bluetooth: hci0: command tx timeout [ 2013.510897][T32397] team0: Port device team_slave_0 added [ 2013.556636][T32397] team0: Port device team_slave_1 added [ 2013.787713][T32397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2013.801309][T32397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2013.841257][T32397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2013.975849][T32481] syzkaller0: entered promiscuous mode [ 2013.988342][T32481] syzkaller0: entered allmulticast mode [ 2014.000889][T32397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2014.014510][T32397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2014.050525][T32397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2015.264922][T27147] Bluetooth: hci0: command tx timeout [ 2016.556868][T32491] syzkaller0: entered promiscuous mode [ 2016.563853][T32491] syzkaller0: entered allmulticast mode [ 2018.449788][T32397] hsr_slave_0: entered promiscuous mode [ 2018.464889][T32397] hsr_slave_1: entered promiscuous mode [ 2018.480415][T32397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2018.500656][T32397] Cannot create hsr debugfs directory [ 2018.593263][T22522] hsr_slave_0: left promiscuous mode [ 2018.646936][T22522] hsr_slave_1: left promiscuous mode [ 2018.683363][T22522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2018.690963][T22522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2018.702145][T22522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2018.709628][T22522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2018.747114][T22522] veth0_macvtap: left promiscuous mode [ 2018.762072][T22522] veth1_vlan: left promiscuous mode [ 2018.768086][T22522] veth0_vlan: left promiscuous mode [ 2019.451156][T22522] team0 (unregistering): Port device team_slave_1 removed [ 2019.545251][T22522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2019.596949][T22522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2019.980755][T22522] bond0 (unregistering): Released all slaves [ 2020.070538][T32514] syzkaller0: entered promiscuous mode [ 2020.076597][T32514] syzkaller0: entered allmulticast mode [ 2023.878234][T32397] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2023.923365][T32397] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2023.956236][T32397] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2023.980068][T32397] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2024.328369][T32397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2024.456248][T32397] 8021q: adding VLAN 0 to HW filter on device team0 [ 2024.554489][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.561771][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2024.632695][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 2024.639979][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2024.896787][T32397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2024.907404][T32397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2025.799120][T32397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2026.193795][T32397] veth0_vlan: entered promiscuous mode [ 2026.253253][T32397] veth1_vlan: entered promiscuous mode [ 2026.375153][T32397] veth0_macvtap: entered promiscuous mode [ 2026.404375][T32397] veth1_macvtap: entered promiscuous mode [ 2026.632004][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2026.711967][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.722471][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2026.734315][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.745271][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2026.762648][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.782619][T32397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2026.808612][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2026.826462][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.839912][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2026.850947][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.875931][T32397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2026.918160][T32397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.934335][T32397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2026.947230][T32633] netlink: 'syz.2.9699': attribute type 13 has an invalid length. [ 2026.964007][T32633] netlink: 'syz.2.9699': attribute type 58 has an invalid length. [ 2026.981957][T32633] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9699'. [ 2027.019757][T32397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.067221][T32397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.099126][T32397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.140288][T32397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.157175][T32640] netlink: 13054 bytes leftover after parsing attributes in process `syz.0.9700'. [ 2027.351131][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2027.373753][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2027.441243][ T7021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2027.489559][ T7021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2027.597364][T32653] netlink: 13054 bytes leftover after parsing attributes in process `syz.0.9710'. [ 2029.149216][T32683] syzkaller0: entered promiscuous mode [ 2029.197015][T32683] syzkaller0: entered allmulticast mode [ 2032.039904][T32714] netlink: 13054 bytes leftover after parsing attributes in process `syz.1.9717'. [ 2033.286613][T32740] syzkaller0: entered promiscuous mode [ 2033.294699][T32740] syzkaller0: entered allmulticast mode [ 2033.348371][T32745] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.360713][T32745] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.406602][T32745] bridge0: entered allmulticast mode [ 2033.537737][T32750] bridge_slave_1: left allmulticast mode [ 2033.567749][T32750] bridge_slave_1: left promiscuous mode [ 2033.574307][T32750] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.584628][T32750] bridge_slave_0: left allmulticast mode [ 2033.590503][T32750] bridge_slave_0: left promiscuous mode [ 2033.601171][T32750] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.773247][T32753] syzkaller0: entered promiscuous mode [ 2033.778829][T32753] syzkaller0: entered allmulticast mode [ 2037.668193][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.674987][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.343748][ T317] »»»»»»: renamed from bond0 (while UP) [ 2038.397388][ T313] netlink: 13054 bytes leftover after parsing attributes in process `syz.1.9731'. [ 2038.609973][ T320] syzkaller0: entered promiscuous mode [ 2038.651547][ T320] syzkaller0: entered allmulticast mode [ 2042.377807][ T355] syzkaller0: entered promiscuous mode [ 2042.394051][ T355] syzkaller0: entered allmulticast mode [ 2044.839978][ T372] »»»»»»: renamed from bond0 (while UP) [ 2045.005180][ T382] netlink: 13054 bytes leftover after parsing attributes in process `syz.1.9743'. [ 2045.741799][ T396] syzkaller0: entered promiscuous mode [ 2045.747370][ T396] syzkaller0: entered allmulticast mode [ 2046.622533][T18596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2046.632572][T18596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2046.650085][T18596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2046.673886][T18596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2046.699401][T18596] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2046.714845][T18596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2048.418086][ T1004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.649727][ T414] syzkaller0: entered promiscuous mode [ 2048.691478][ T414] syzkaller0: entered allmulticast mode [ 2048.737057][ T422] »»»»»»: renamed from bond0 (while UP) [ 2048.790662][T18596] Bluetooth: hci1: command tx timeout [ 2048.809177][ T1004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.861566][T18596] Bluetooth: hci1: command tx timeout [ 2050.891907][ T1004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.915387][ T434] netlink: 13054 bytes leftover after parsing attributes in process `syz.1.9757'. [ 2051.027670][ T436] syzkaller0: entered promiscuous mode [ 2051.036312][ T436] syzkaller0: entered allmulticast mode [ 2052.953178][T18596] Bluetooth: hci1: command tx timeout [ 2052.961997][ T1004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.256829][ T411] chnl_net:caif_netlink_parms(): no params data found [ 2053.321605][ T459] netlink: 'syz.2.9762': attribute type 13 has an invalid length. [ 2053.330493][ T459] netlink: 'syz.2.9762': attribute type 58 has an invalid length. [ 2053.338895][ T459] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9762'. [ 2053.609893][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.621751][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.629342][ T411] bridge_slave_0: entered allmulticast mode [ 2053.642789][ T411] bridge_slave_0: entered promiscuous mode [ 2053.737487][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.760253][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.789512][ T411] bridge_slave_1: entered allmulticast mode [ 2053.816774][ T411] bridge_slave_1: entered promiscuous mode [ 2054.078246][ T469] syzkaller0: entered promiscuous mode [ 2054.108155][ T469] syzkaller0: entered allmulticast mode [ 2054.173415][ T411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2054.452507][ T411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2055.023992][T18596] Bluetooth: hci1: command tx timeout [ 2056.803673][ T411] team0: Port device team_slave_0 added [ 2056.834518][ T411] team0: Port device team_slave_1 added [ 2056.925055][ T411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.932273][ T411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.959445][ T411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.998247][ T411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2057.073777][ T411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2057.100393][ T411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2057.329386][ T411] hsr_slave_0: entered promiscuous mode [ 2057.407947][ T411] hsr_slave_1: entered promiscuous mode [ 2057.422495][ T411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2057.430213][ T411] Cannot create hsr debugfs directory [ 2057.555402][ T522] netlink: 'syz.1.9772': attribute type 13 has an invalid length. [ 2057.578262][ T522] netlink: 'syz.1.9772': attribute type 58 has an invalid length. [ 2057.611663][ T522] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9772'. [ 2058.974279][ T1004] hsr_slave_0: left promiscuous mode [ 2058.980811][ T1004] hsr_slave_1: left promiscuous mode [ 2058.995256][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2059.003326][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2059.013769][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2059.021879][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2059.079514][ T1004] veth0_macvtap: left promiscuous mode [ 2059.086369][ T1004] veth1_vlan: left promiscuous mode [ 2059.100244][ T1004] veth0_vlan: left promiscuous mode [ 2059.835064][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 2059.926282][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2059.976759][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2060.354314][ T1004] bond0 (unregistering): Released all slaves [ 2060.428571][ T566] netlink: 'syz.2.9781': attribute type 13 has an invalid length. [ 2060.448822][ T566] netlink: 'syz.2.9781': attribute type 58 has an invalid length. [ 2060.472703][ T566] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9781'. [ 2060.696365][ T576] syzkaller0: entered promiscuous mode [ 2060.707172][ T576] syzkaller0: entered allmulticast mode [ 2063.118659][ T593] syzkaller0: entered promiscuous mode [ 2063.124499][ T593] syzkaller0: entered allmulticast mode [ 2065.230332][ T411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2065.297005][ T411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2065.357909][ T411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2065.490228][ T411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2065.849649][ T411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2066.084644][ T411] 8021q: adding VLAN 0 to HW filter on device team0 [ 2066.167428][T17730] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.174625][T17730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2066.201417][T17730] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.208695][T17730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2066.327122][ T411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2067.068466][ T411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2067.286252][ T411] veth0_vlan: entered promiscuous mode [ 2067.375348][ T667] syzkaller0: entered promiscuous mode [ 2067.388612][ T667] syzkaller0: entered allmulticast mode [ 2067.417164][ T411] veth1_vlan: entered promiscuous mode [ 2067.515138][ T411] veth0_macvtap: entered promiscuous mode [ 2067.545199][ T411] veth1_macvtap: entered promiscuous mode [ 2070.385616][ T411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2070.400694][ T411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2070.410683][ T411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2070.421450][ T411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2070.432410][ T411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2070.442926][ T411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2070.454989][ T411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2070.518738][ T681] syzkaller0: entered promiscuous mode [ 2070.524548][ T681] syzkaller0: entered allmulticast mode [ 2072.724063][ T411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.751390][ T411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.771984][ T411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.801431][ T411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.811337][ T411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.831640][ T411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.854557][ T411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2072.900937][ T411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.919518][ T411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.930135][ T411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.946628][ T411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.178033][T22522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.204382][T22522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.279860][ T376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.291969][ T376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.945591][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.959990][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.987354][ T741] bridge0: entered allmulticast mode [ 2076.087847][ T821] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.9851'. [ 2076.362719][ T827] netlink: 'syz.0.9853': attribute type 12 has an invalid length. [ 2076.370628][ T827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9853'. [ 2076.580818][T31695] [ 2076.583232][T31695] ====================================================== [ 2076.590285][T31695] WARNING: possible circular locking dependency detected [ 2076.597348][T31695] syzkaller #0 Not tainted [ 2076.601794][T31695] ------------------------------------------------------ [ 2076.608849][T31695] syz-executor/31695 is trying to acquire lock: [ 2076.615118][T31695] ffff888057f2e238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 2076.624224][T31695] [ 2076.624224][T31695] but task is already holding lock: [ 2076.631630][T31695] ffff8880b8f37da8 (stock_lock){-.-.}-{2:2}, at: refill_stock+0xea/0x450 [ 2076.640199][T31695] [ 2076.640199][T31695] which lock already depends on the new lock. [ 2076.640199][T31695] [ 2076.650676][T31695] [ 2076.650676][T31695] the existing dependency chain (in reverse order) is: [ 2076.659756][T31695] [ 2076.659756][T31695] -> #1 (stock_lock){-.-.}-{2:2}: [ 2076.667035][T31695] obj_cgroup_charge+0x10a/0x630 [ 2076.672550][T31695] slab_pre_alloc_hook+0x2e2/0x300 [ 2076.678267][T31695] __kmem_cache_alloc_node+0x53/0x250 [ 2076.684253][T31695] __kmalloc_node+0xa6/0x240 [ 2076.689474][T31695] bpf_map_kmalloc_node+0xbc/0x1b0 [ 2076.695165][T31695] trie_update_elem+0x172/0xd60 [ 2076.700585][T31695] bpf_map_update_value+0x64b/0x710 [ 2076.706380][T31695] map_update_elem+0x586/0x710 [ 2076.711722][T31695] __sys_bpf+0x6b5/0x890 [ 2076.716556][T31695] __x64_sys_bpf+0x7c/0x90 [ 2076.721536][T31695] do_syscall_64+0x55/0xb0 [ 2076.726636][T31695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2076.733314][T31695] [ 2076.733314][T31695] -> #0 (&trie->lock){-.-.}-{2:2}: [ 2076.740662][T31695] __lock_acquire+0x3a07/0x7eb0 [ 2076.746119][T31695] lock_acquire+0x19e/0x420 [ 2076.751192][T31695] _raw_spin_lock_irqsave+0xb4/0x100 [ 2076.757145][T31695] trie_delete_elem+0x94/0x630 [ 2076.762469][T31695] bpf_prog_b23e3725e72cf264+0x4a/0x4e [ 2076.768488][T31695] trace_call_bpf+0x333/0x6c0 [ 2076.773741][T31695] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 2076.779842][T31695] perf_trace_lock_acquire+0x342/0x400 [ 2076.785847][T31695] lock_acquire+0x3ef/0x420 [ 2076.790906][T31695] percpu_ref_put+0x35/0x180 [ 2076.796050][T31695] __refill_stock+0x12a/0x3d0 [ 2076.801280][T31695] refill_stock+0x19e/0x450 [ 2076.806334][T31695] try_charge_memcg+0x1281/0x17c0 [ 2076.811916][T31695] obj_cgroup_charge+0x36e/0x630 [ 2076.817400][T31695] slab_pre_alloc_hook+0x2e2/0x300 [ 2076.823076][T31695] kmem_cache_alloc+0x5a/0x2c0 [ 2076.828399][T31695] vm_area_dup+0x27/0x270 [ 2076.833423][T31695] copy_mm+0x11a6/0x1e30 [ 2076.838217][T31695] copy_process+0x16c9/0x3da0 [ 2076.843449][T31695] kernel_clone+0x24b/0x8a0 [ 2076.848505][T31695] __x64_sys_clone+0x1b7/0x230 [ 2076.853819][T31695] do_syscall_64+0x55/0xb0 [ 2076.858796][T31695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2076.865250][T31695] [ 2076.865250][T31695] other info that might help us debug this: [ 2076.865250][T31695] [ 2076.875616][T31695] Possible unsafe locking scenario: [ 2076.875616][T31695] [ 2076.883105][T31695] CPU0 CPU1 [ 2076.888499][T31695] ---- ---- [ 2076.893903][T31695] lock(stock_lock); [ 2076.897916][T31695] lock(&trie->lock); [ 2076.904539][T31695] lock(stock_lock); [ 2076.911106][T31695] lock(&trie->lock); [ 2076.915205][T31695] [ 2076.915205][T31695] *** DEADLOCK *** [ 2076.915205][T31695] [ 2076.923381][T31695] 5 locks held by syz-executor/31695: [ 2076.928771][T31695] #0: ffffffff8d1d4ab0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x298/0x1e30 [ 2076.937628][T31695] #1: ffff88802eb4f3a0 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2b6/0x1e30 [ 2076.946633][T31695] #2: ffff88807ee19e20 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x3ed/0x1e30 [ 2076.955857][T31695] #3: ffff8880b8f37da8 (stock_lock){-.-.}-{2:2}, at: refill_stock+0xea/0x450 [ 2076.964776][T31695] #4: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 2076.974124][T31695] [ 2076.974124][T31695] stack backtrace: [ 2076.980066][T31695] CPU: 1 PID: 31695 Comm: syz-executor Not tainted syzkaller #0 [ 2076.987732][T31695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2076.997831][T31695] Call Trace: [ 2077.001146][T31695] [ 2077.004111][T31695] dump_stack_lvl+0x18c/0x250 [ 2077.008834][T31695] ? load_image+0x420/0x420 [ 2077.013411][T31695] ? show_regs_print_info+0x20/0x20 [ 2077.018651][T31695] ? print_circular_bug+0x12b/0x1a0 [ 2077.023893][T31695] check_noncircular+0x2fc/0x400 [ 2077.028877][T31695] ? print_deadlock_bug+0x5d0/0x5d0 [ 2077.034115][T31695] ? lockdep_lock+0xf5/0x230 [ 2077.038751][T31695] ? mark_lock+0x94/0x320 [ 2077.043116][T31695] ? _find_first_zero_bit+0xd6/0x100 [ 2077.048480][T31695] __lock_acquire+0x3a07/0x7eb0 [ 2077.053379][T31695] ? perf_trace_buf_alloc+0x131/0x290 [ 2077.058789][T31695] ? verify_lock_unused+0x140/0x140 [ 2077.064014][T31695] ? perf_trace_lock_acquire+0x1a7/0x400 [ 2077.069679][T31695] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2077.076304][T31695] lock_acquire+0x19e/0x420 [ 2077.080838][T31695] ? trie_delete_elem+0x94/0x630 [ 2077.085824][T31695] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2077.092440][T31695] ? read_lock_is_recursive+0x20/0x20 [ 2077.097865][T31695] _raw_spin_lock_irqsave+0xb4/0x100 [ 2077.103211][T31695] ? trie_delete_elem+0x94/0x630 [ 2077.108203][T31695] ? _raw_spin_lock+0x40/0x40 [ 2077.112928][T31695] trie_delete_elem+0x94/0x630 [ 2077.117742][T31695] bpf_prog_b23e3725e72cf264+0x4a/0x4e [ 2077.123250][T31695] trace_call_bpf+0x333/0x6c0 [ 2077.127967][T31695] ? trace_call_bpf+0xc3/0x6c0 [ 2077.132774][T31695] ? mark_lock+0x94/0x320 [ 2077.137144][T31695] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 2077.143244][T31695] ? __lock_acquire+0x1431/0x7eb0 [ 2077.148303][T31695] ? trace_call_bpf+0xc3/0x6c0 [ 2077.153102][T31695] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 2077.158686][T31695] perf_trace_lock_acquire+0x342/0x400 [ 2077.164187][T31695] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2077.170804][T31695] ? perf_trace_lock_acquire+0x342/0x400 [ 2077.176472][T31695] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2077.183097][T31695] lock_acquire+0x3ef/0x420 [ 2077.187644][T31695] ? percpu_ref_put+0x19/0x180 [ 2077.192443][T31695] ? verify_lock_unused+0x140/0x140 [ 2077.197766][T31695] ? read_lock_is_recursive+0x20/0x20 [ 2077.203171][T31695] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2077.209793][T31695] ? __lock_acquire+0x135d/0x7eb0 [ 2077.214849][T31695] ? percpu_ref_put+0x19/0x180 [ 2077.219643][T31695] percpu_ref_put+0x35/0x180 [ 2077.224265][T31695] ? percpu_ref_put+0x19/0x180 [ 2077.229069][T31695] __refill_stock+0x12a/0x3d0 [ 2077.233787][T31695] refill_stock+0x19e/0x450 [ 2077.238334][T31695] ? refill_stock+0xea/0x450 [ 2077.242991][T31695] ? mem_cgroup_uncharge_skmem+0x1b0/0x1b0 [ 2077.248837][T31695] ? page_counter_try_charge+0x293/0x2c0 [ 2077.254499][T31695] ? try_charge_memcg+0x3e1/0x17c0 [ 2077.259647][T31695] try_charge_memcg+0x1281/0x17c0 [ 2077.264730][T31695] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2077.271354][T31695] ? try_charge_memcg+0x21a/0x17c0 [ 2077.276520][T31695] ? folio_flags+0x120/0x120 [ 2077.281147][T31695] ? percpu_ref_tryget+0x15/0x180 [ 2077.286205][T31695] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2077.291966][T31695] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2077.297976][T31695] ? percpu_ref_tryget+0x15/0x180 [ 2077.303029][T31695] ? percpu_ref_tryget+0x15/0x180 [ 2077.308092][T31695] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2077.313841][T31695] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2077.319596][T31695] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 2077.325452][T31695] obj_cgroup_charge+0x36e/0x630 [ 2077.330418][T31695] ? get_obj_cgroup_from_current+0xd4/0x280 [ 2077.336350][T31695] ? obj_cgroup_charge+0xed/0x630 [ 2077.341434][T31695] ? mod_objcg_mlstate+0x320/0x320 [ 2077.346596][T31695] ? get_obj_cgroup_from_current+0xd4/0x280 [ 2077.352546][T31695] ? get_obj_cgroup_from_current+0xd4/0x280 [ 2077.358486][T31695] slab_pre_alloc_hook+0x2e2/0x300 [ 2077.363645][T31695] kmem_cache_alloc+0x5a/0x2c0 [ 2077.368452][T31695] ? vm_area_dup+0x27/0x270 [ 2077.372987][T31695] vm_area_dup+0x27/0x270 [ 2077.377373][T31695] copy_mm+0x11a6/0x1e30 [ 2077.381673][T31695] ? copy_signal+0x640/0x640 [ 2077.386308][T31695] ? __init_rwsem+0x122/0x160 [ 2077.391008][T31695] ? copy_signal+0x51f/0x640 [ 2077.395630][T31695] copy_process+0x16c9/0x3da0 [ 2077.400344][T31695] ? copy_process+0x98e/0x3da0 [ 2077.405148][T31695] ? __pidfd_prepare+0x140/0x140 [ 2077.410129][T31695] kernel_clone+0x24b/0x8a0 [ 2077.414686][T31695] ? create_io_thread+0x190/0x190 [ 2077.419752][T31695] ? __might_fault+0xaa/0x120 [ 2077.424489][T31695] __x64_sys_clone+0x1b7/0x230 [ 2077.429291][T31695] ? __ia32_sys_vfork+0x140/0x140 [ 2077.434357][T31695] ? lock_chain_count+0x20/0x20 [ 2077.439250][T31695] ? lockdep_hardirqs_on+0x98/0x150 [ 2077.444483][T31695] do_syscall_64+0x55/0xb0 [ 2077.448933][T31695] ? clear_bhb_loop+0x40/0x90 [ 2077.453653][T31695] ? clear_bhb_loop+0x40/0x90 [ 2077.458385][T31695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2077.464352][T31695] RIP: 0033:0x7f56253c6c12 [ 2077.468809][T31695] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 2077.488444][T31695] RSP: 002b:00007ffef78d3550 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2077.496900][T31695] RAX: ffffffffffffffda RBX: 00007ffef78d3550 RCX: 00007f56253c6c12 [ 2077.504904][T31695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2077.512901][T31695] RBP: 00007ffef78d36dc R08: 0000000000000000 R09: 0000000000000001 [ 2077.520899][T31695] R10: 0000555566e7d7d0 R11: 0000000000000246 R12: 0000000000000001 [ 2077.528897][T31695] R13: 00000000000927c0 R14: 00000000001faef8 R15: 00007ffef78d3730 [ 2077.536910][T31695]