last executing test programs: 7.463118067s ago: executing program 1 (id=10479): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.289720496s ago: executing program 0 (id=10482): perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x908c4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0xa}, 0x19183, 0x1, 0x5, 0x0, 0xa, 0x1, 0x4, 0x0, 0x3, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000069ff92f0000000009"], 0x0, 0x0, 0x0, 0x0, 0x60600, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24004814) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 6.163912109s ago: executing program 1 (id=10484): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x7}, 0x282a8, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.071881552s ago: executing program 0 (id=10486): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) 6.009804423s ago: executing program 1 (id=10487): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0xffffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.023020197s ago: executing program 2 (id=10492): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x8000) 2.837543361s ago: executing program 0 (id=10493): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4d8e5ca74b", 0x5}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000090) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0xffffffffffffff55, 0x0}, 0x2142) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062) 2.791331892s ago: executing program 1 (id=10494): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r3, 0x5, 0x0, 0x6, &(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.683508105s ago: executing program 2 (id=10496): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x7}, 0x282a8, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.351869383s ago: executing program 3 (id=10497): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000040000000700000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000004c0)=r0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) 2.351460833s ago: executing program 0 (id=10498): perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b010000000800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf", 0x39}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.313367494s ago: executing program 1 (id=10499): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000400)=@generic={0x0, r3}, 0x18) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000600)={r2, 0x0, 0x0}, 0x10) 2.255234075s ago: executing program 2 (id=10500): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x400000, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x8000) 2.159936568s ago: executing program 3 (id=10501): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1}], 0x10, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8) socket$kcm(0x10, 0x400000002, 0x0) 1.942110613s ago: executing program 3 (id=10502): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) 810.280401ms ago: executing program 0 (id=10503): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000900)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x80000081}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 809.717861ms ago: executing program 1 (id=10504): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x8000) 770.335112ms ago: executing program 2 (id=10505): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x408, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 661.718804ms ago: executing program 3 (id=10506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x1a, 0x4}, 0x20) 311.381253ms ago: executing program 3 (id=10507): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x6e7fdfba497cce4d, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r1}, &(0x7f00000012c0), &(0x7f0000001340)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001b2c8a89de0778ebc5b4d1d40f3f7d71d2c50000000038f4b5ecdb9f182440b0f0397ab3f4af7dfb577bff27da742afbe8edaa94e2400fa2d3b8551733e182317775179b4463345eaeea6446b6c6e5b27b0e3eb775a5bd72749401eccac1a7c74a8814b9ae9a048e6d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 299.942623ms ago: executing program 2 (id=10508): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc0000010000000000000000000000000000000000000009000000000000000100000003"], 0x0, 0xfffffffffffffe66, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuset.memory_pressure\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 287.979964ms ago: executing program 3 (id=10509): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000240)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 256.863064ms ago: executing program 0 (id=10510): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1ff}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=10511): sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) kernel console output (not intermixed with test programs): e_parse: 5 callbacks suppressed [ 496.018733][T15703] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.4558'. [ 496.811319][T15719] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4565'. [ 497.126254][T15736] netlink: 'syz.3.4572': attribute type 10 has an invalid length. [ 497.152038][T15736] veth0_vlan: left promiscuous mode [ 497.181426][T15736] veth0_vlan: entered promiscuous mode [ 497.211421][T15736] team0: Device veth0_vlan failed to register rx_handler [ 497.494921][T15736] syz.3.4572 (15736) used greatest stack depth: 19176 bytes left [ 497.507276][T15739] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.4573'. [ 497.820614][T15743] rxe_eth0 speed is unknown, defaulting to 1000 [ 498.833510][T15768] netlink: 'syz.1.4583': attribute type 10 has an invalid length. [ 498.842773][T15768] veth0_vlan: left promiscuous mode [ 498.897712][T15768] veth0_vlan: entered promiscuous mode [ 498.971441][T15768] team0: Device veth0_vlan failed to register rx_handler [ 499.212439][T15768] syz.1.4583 (15768) used greatest stack depth: 18008 bytes left [ 499.551590][T15783] rxe_eth0 speed is unknown, defaulting to 1000 [ 500.193232][T15803] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.4602'. [ 500.266081][T15808] netlink: 'syz.0.4600': attribute type 10 has an invalid length. [ 500.294242][T15808] veth0_vlan: entered allmulticast mode [ 500.430859][T15808] veth0_vlan: left promiscuous mode [ 500.464427][T15808] veth0_vlan: entered promiscuous mode [ 500.493210][T15808] team0: Device veth0_vlan failed to register rx_handler [ 501.433903][T15843] netlink: 'syz.2.4617': attribute type 10 has an invalid length. [ 501.453393][T15843] veth0_vlan: left promiscuous mode [ 501.471360][T15843] veth0_vlan: entered promiscuous mode [ 501.501150][T15843] team0: Device veth0_vlan failed to register rx_handler [ 501.589043][ T994] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.600107][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.606450][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.739980][T15852] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.4622'. [ 502.357418][T15861] netlink: 'syz.2.4626': attribute type 9 has an invalid length. [ 502.365557][T15861] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4626'. [ 502.571537][T15872] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4629'. [ 503.009270][T15885] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.4635'. [ 503.598740][T15907] netlink: 'syz.1.4647': attribute type 1 has an invalid length. [ 503.617038][T15907] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4647'. [ 503.827586][T15910] netlink: 'syz.3.4651': attribute type 3 has an invalid length. [ 503.841220][T15913] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.4648'. [ 503.850695][T15910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4651'. [ 504.525125][T15945] netlink: 'syz.3.4665': attribute type 9 has an invalid length. [ 504.542885][T15945] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4665'. [ 504.740127][T15950] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4669'. [ 504.776158][T15950] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.4669'. [ 505.601484][T15983] netlink: 'syz.2.4685': attribute type 10 has an invalid length. [ 505.629256][T15983] veth0_vlan: left promiscuous mode [ 505.642105][T15983] veth0_vlan: entered promiscuous mode [ 505.689136][T15983] team0: Device veth0_vlan failed to register rx_handler [ 506.100303][T15998] netlink: 'syz.3.4692': attribute type 1 has an invalid length. [ 506.410228][T16002] netlink: 'syz.2.4694': attribute type 3 has an invalid length. [ 506.994848][T16018] __nla_validate_parse: 2 callbacks suppressed [ 506.994868][T16018] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4701'. [ 507.029336][T16018] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.4701'. [ 507.496508][T16033] Zero length message leads to an empty skb [ 507.839521][T16047] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4714'. [ 507.849209][T16047] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.4714'. [ 508.208425][T16059] netlink: 'syz.2.4719': attribute type 10 has an invalid length. [ 508.221182][T16059] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4719'. [ 508.314532][T16064] netlink: 'syz.1.4721': attribute type 10 has an invalid length. [ 508.329922][T16064] veth0_vlan: left promiscuous mode [ 508.338900][T16065] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4722'. [ 508.384624][T16065] netlink: get zone limit has 4 unknown bytes [ 508.405112][T16064] veth0_vlan: entered promiscuous mode [ 508.432668][T16064] team0: Device veth0_vlan failed to register rx_handler [ 509.032897][T16077] rxe_eth0 speed is unknown, defaulting to 1000 [ 509.792077][T16102] netlink: 'syz.3.4741': attribute type 10 has an invalid length. [ 509.818234][T16102] veth0_vlan: left promiscuous mode [ 509.848151][T16102] veth0_vlan: entered promiscuous mode [ 509.889478][T16102] team0: Device veth0_vlan failed to register rx_handler [ 510.117564][T16107] netlink: 'syz.1.4743': attribute type 21 has an invalid length. [ 510.154925][T16107] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4743'. [ 510.192410][T16110] netlink: 'syz.0.4745': attribute type 10 has an invalid length. [ 510.205365][T16110] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4745'. [ 510.638131][T16129] netlink: 'syz.0.4754': attribute type 21 has an invalid length. [ 510.646078][T16129] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4754'. [ 510.704795][T16131] netlink: 'syz.3.4755': attribute type 10 has an invalid length. [ 510.713314][T16131] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.4755'. [ 511.540677][T16161] netlink: 'syz.3.4766': attribute type 21 has an invalid length. [ 513.698410][T16240] netlink: 'syz.3.4801': attribute type 10 has an invalid length. [ 513.738234][T16240] veth0_vlan: left promiscuous mode [ 513.797826][T16240] veth0_vlan: entered promiscuous mode [ 513.819337][T16240] team0: Device veth0_vlan failed to register rx_handler [ 514.268031][T16259] netlink: 'syz.2.4821': attribute type 10 has an invalid length. [ 514.276768][T16259] veth0_vlan: left promiscuous mode [ 514.301893][T16259] veth0_vlan: entered promiscuous mode [ 514.340811][T16259] team0: Device veth0_vlan failed to register rx_handler [ 515.103650][T16298] netlink: 'syz.1.4831': attribute type 10 has an invalid length. [ 515.127882][T16298] veth0_vlan: left promiscuous mode [ 515.144365][T16298] veth0_vlan: entered promiscuous mode [ 515.222601][T16298] team0: Device veth0_vlan failed to register rx_handler [ 517.848805][T16405] rxe_eth0 speed is unknown, defaulting to 1000 [ 518.701423][T16417] netlink: 'syz.1.4885': attribute type 10 has an invalid length. [ 518.737629][T16417] veth0_vlan: left promiscuous mode [ 518.755668][T16417] veth0_vlan: entered promiscuous mode [ 518.789898][T16417] team0: Device veth0_vlan failed to register rx_handler [ 519.921203][T16449] rxe_eth0 speed is unknown, defaulting to 1000 [ 521.066577][T16516] netlink: 'syz.3.4932': attribute type 33 has an invalid length. [ 521.075128][T16516] __nla_validate_parse: 1 callbacks suppressed [ 521.075141][T16516] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4932'. [ 522.393255][T16548] netlink: 'syz.2.4955': attribute type 2 has an invalid length. [ 522.415805][T16548] netlink: 'syz.2.4955': attribute type 8 has an invalid length. [ 522.439023][T16548] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4955'. [ 522.947511][ T2948] wlan1: Trigger new scan to find an IBSS to join [ 524.043558][T16585] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4969'. [ 525.012577][T16614] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4973'. [ 526.000144][ T3544] wlan1: Trigger new scan to find an IBSS to join [ 527.906491][ T994] wlan1: Creating new IBSS network, BSSID 4a:e0:3b:b4:1b:7a [ 529.955228][T16681] netlink: 'syz.3.4999': attribute type 2 has an invalid length. [ 529.987597][T16681] netlink: 'syz.3.4999': attribute type 8 has an invalid length. [ 529.995562][T16681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4999'. [ 531.558888][T16715] netlink: 'syz.0.5013': attribute type 2 has an invalid length. [ 531.625602][T16715] netlink: 'syz.0.5013': attribute type 8 has an invalid length. [ 531.645506][T16715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5013'. [ 532.527806][T16734] netlink: 'syz.1.5027': attribute type 2 has an invalid length. [ 532.535830][T16734] netlink: 'syz.1.5027': attribute type 8 has an invalid length. [ 532.586132][T16734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5027'. [ 533.207864][T16743] netlink: 703 bytes leftover after parsing attributes in process `syz.2.5024'. [ 534.072847][T16764] netlink: 'syz.0.5036': attribute type 2 has an invalid length. [ 534.106307][T16764] netlink: 'syz.0.5036': attribute type 8 has an invalid length. [ 534.143405][T16764] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5036'. [ 534.990049][T16789] netlink: 'syz.3.5048': attribute type 2 has an invalid length. [ 534.999496][T16789] netlink: 'syz.3.5048': attribute type 8 has an invalid length. [ 535.008028][T16789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5048'. [ 538.872212][T16818] netlink: 'syz.3.5060': attribute type 2 has an invalid length. [ 538.900675][T16818] netlink: 'syz.3.5060': attribute type 1 has an invalid length. [ 538.929218][T16820] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5061'. [ 538.930890][T16818] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5060'. [ 542.210923][T16843] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5073'. [ 542.834635][T16875] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5086'. [ 551.018300][T17030] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.5158'. [ 554.629434][T17047] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5174'. [ 555.428122][T17081] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5181'. [ 556.752816][T17129] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.5203'. [ 557.257002][T17141] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5209'. [ 557.519019][T17152] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.5215'. [ 557.542398][T17154] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.5213'. [ 557.891939][T17173] netlink: 'syz.2.5223': attribute type 29 has an invalid length. [ 557.906968][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 557.919748][T17173] netlink: 'syz.2.5223': attribute type 29 has an invalid length. [ 557.942948][T17173] netlink: 'syz.2.5223': attribute type 29 has an invalid length. [ 557.961313][T17173] netlink: 'syz.2.5223': attribute type 29 has an invalid length. [ 557.984741][T17173] netlink: 'syz.2.5223': attribute type 29 has an invalid length. [ 558.058021][T17180] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5227'. [ 558.192897][T17182] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.5228'. [ 558.276007][T17188] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5231'. [ 560.264590][T17188] team0: Port device team_slave_0 removed [ 560.275940][T17188] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 562.362264][T17239] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5250'. [ 563.032633][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.040780][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.604958][T17256] netlink: 'syz.0.5266': attribute type 29 has an invalid length. [ 565.711123][T17256] netlink: 'syz.0.5266': attribute type 29 has an invalid length. [ 565.728749][T17259] netlink: 'syz.0.5266': attribute type 29 has an invalid length. [ 565.764974][T17256] netlink: 'syz.0.5266': attribute type 29 has an invalid length. [ 565.797173][T17256] netlink: 'syz.0.5266': attribute type 29 has an invalid length. [ 565.893073][T17266] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.5264'. [ 566.209743][T17282] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5269'. [ 570.011049][T17301] ip6_tunnel: non-ECT from fefd:000e:4000:0200:875a:6596:9ff5:7b00 with DS=0x31 [ 573.421392][T17315] netlink: 'syz.3.5285': attribute type 19 has an invalid length. [ 573.440047][T17315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5285'. [ 573.725428][T17325] sctp: [Deprecated]: syz.0.5290 (pid 17325) Use of int in maxseg socket option. [ 573.725428][T17325] Use struct sctp_assoc_value instead [ 576.977860][T17342] netlink: 'syz.1.5296': attribute type 3 has an invalid length. [ 576.990129][T17342] netlink: 'syz.1.5296': attribute type 1 has an invalid length. [ 577.001554][T17342] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.5296'. [ 577.558111][T17362] ip6_tunnel: non-ECT from fefd:000e:4000:0200:875a:6596:9ff5:7b00 with DS=0x31 [ 578.046849][T17387] ip6_tunnel: non-ECT from fefd:000e:4000:0200:875a:6596:9ff5:7b00 with DS=0x31 [ 579.939276][T17449] netlink: 'syz.1.5349': attribute type 21 has an invalid length. [ 579.953664][T17449] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.121834][T17458] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 580.128847][T17458] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 580.449714][T17474] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5361'. [ 580.511330][T17476] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5362'. [ 580.547428][T17476] openvswitch: netlink: Key type 29 is not supported [ 580.622630][T17481] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.5364'. [ 581.028703][T17491] sctp: [Deprecated]: syz.1.5369 (pid 17491) Use of int in maxseg socket option. [ 581.028703][T17491] Use struct sctp_assoc_value instead [ 583.092807][T17497] netlink: 'syz.3.5371': attribute type 3 has an invalid length. [ 583.101562][T17497] netlink: 'syz.3.5371': attribute type 1 has an invalid length. [ 583.112711][T17497] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.5371'. [ 585.403076][T17515] netlink: 'syz.1.5381': attribute type 19 has an invalid length. [ 585.420069][T17515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5381'. [ 587.068869][T17531] netlink: 'syz.2.5383': attribute type 3 has an invalid length. [ 587.097309][T17531] netlink: 'syz.2.5383': attribute type 1 has an invalid length. [ 587.105256][T17531] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5383'. [ 590.262114][ T2926] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 593.273029][T17627] netlink: 'syz.3.5427': attribute type 21 has an invalid length. [ 593.291176][T17627] IPv6: NLM_F_CREATE should be specified when creating new route [ 593.440541][T17635] netlink: 'syz.0.5441': attribute type 21 has an invalid length. [ 593.459181][T17635] IPv6: NLM_F_CREATE should be specified when creating new route [ 597.090685][T17675] netlink: 'syz.0.5451': attribute type 10 has an invalid length. [ 597.100043][T17675] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.5451'. [ 598.096430][T17714] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.5468'. [ 598.970723][T17741] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.5481'. [ 600.189329][T17782] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.5506'. [ 600.247656][T17784] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.5494'. [ 600.313567][T17788] netlink: 'syz.2.5498': attribute type 10 has an invalid length. [ 600.324285][T17788] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.5498'. [ 600.593146][T17802] netlink: 'syz.0.5508': attribute type 3 has an invalid length. [ 600.618672][T17802] netlink: 'syz.0.5508': attribute type 1 has an invalid length. [ 600.626550][T17802] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5508'. [ 600.890426][T17817] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.5512'. [ 601.171741][T17825] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.5515'. [ 601.280416][T17830] netlink: 'syz.1.5516': attribute type 10 has an invalid length. [ 601.292419][T17830] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.5516'. [ 601.448636][T17839] netlink: 'syz.2.5518': attribute type 3 has an invalid length. [ 601.464656][T17839] netlink: 'syz.2.5518': attribute type 1 has an invalid length. [ 602.277453][T17877] netlink: 'syz.2.5527': attribute type 1 has an invalid length. [ 602.334675][T17881] netlink: 'syz.1.5529': attribute type 3 has an invalid length. [ 602.343022][T17881] netlink: 'syz.1.5529': attribute type 1 has an invalid length. [ 602.371579][T17881] __nla_validate_parse: 1 callbacks suppressed [ 602.371595][T17881] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5529'. [ 605.476726][T17909] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5540'. [ 606.087715][T17931] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5549'. [ 606.547035][T17952] ip6_tunnel: non-ECT from fefd:000e:4000:0200:875a:6596:9ff5:7b00 with DS=0x31 [ 606.762573][T17957] netlink: 'syz.2.5560': attribute type 3 has an invalid length. [ 606.780943][T17957] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5560'. [ 606.960353][ T5782] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 607.194770][T17969] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5566'. [ 607.429555][T17977] ip6_tunnel: non-ECT from fefd:000e:4000:0200:875a:6596:9ff5:7b00 with DS=0x31 [ 607.563578][T17986] macsec0: entered promiscuous mode [ 607.570822][T17986] macsec0: entered allmulticast mode [ 607.586599][T17986] veth1_macvtap: entered allmulticast mode [ 607.740033][T17996] ip6_tunnel: non-ECT from fefd:000e:4000:0200:875a:6596:9ff5:7b00 with DS=0x31 [ 608.092830][T18005] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5578'. [ 608.365682][T18013] netlink: 'syz.1.5582': attribute type 1 has an invalid length. [ 608.377868][T18013] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.5582'. [ 610.303101][T18030] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.5591'. [ 610.317380][T18030] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5591'. [ 610.364550][T18032] netlink: 'syz.2.5591': attribute type 3 has an invalid length. [ 610.383568][T18032] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5591'. [ 611.601217][T18045] netlink: 'syz.0.5597': attribute type 1 has an invalid length. [ 611.926957][T18049] macsec0: entered promiscuous mode [ 611.937224][T18049] macsec0: entered allmulticast mode [ 611.943208][T18049] veth1_macvtap: entered allmulticast mode [ 612.321809][T18059] syzkaller0: entered promiscuous mode [ 612.327431][T18059] syzkaller0: entered allmulticast mode [ 616.659698][T18079] macsec0: entered promiscuous mode [ 616.665018][T18079] macsec0: entered allmulticast mode [ 616.670654][T18079] veth1_macvtap: entered allmulticast mode [ 622.517041][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 624.470891][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.477564][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.760447][T18207] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.5663'. [ 626.898101][T18210] syzkaller0: entered promiscuous mode [ 626.916068][T18210] syzkaller0: entered allmulticast mode [ 632.469836][ T5782] Bluetooth: hci0: Malformed HCI Event [ 637.916589][T18376] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5735'. [ 637.947884][T18376] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.5735'. [ 638.879023][T18404] netlink: 3554 bytes leftover after parsing attributes in process `syz.0.5747'. [ 640.752616][T18435] rxe_eth0 speed is unknown, defaulting to 1000 [ 643.900891][T18481] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.5781'. [ 644.232468][T18488] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5784'. [ 644.242491][T18488] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.5784'. [ 645.054671][T18516] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5796'. [ 645.075219][T18516] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.5796'. [ 645.361097][T18527] netlink: 'syz.0.5802': attribute type 2 has an invalid length. [ 645.382029][T18527] netlink: 'syz.0.5802': attribute type 1 has an invalid length. [ 645.404727][T18527] netlink: 'syz.0.5802': attribute type 8 has an invalid length. [ 645.425306][T18527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5802'. [ 645.479209][T18531] netlink: 3554 bytes leftover after parsing attributes in process `syz.3.5804'. [ 645.947933][T18548] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.5810'. [ 646.497826][T18557] delete_channel: no stack [ 646.823834][T18572] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.5824'. [ 647.227069][T18584] rxe_eth0 speed is unknown, defaulting to 1000 [ 647.742463][T18593] netlink: 'syz.2.5832': attribute type 2 has an invalid length. [ 647.757736][T18593] netlink: 'syz.2.5832': attribute type 1 has an invalid length. [ 647.777483][T18593] netlink: 'syz.2.5832': attribute type 8 has an invalid length. [ 647.785248][T18593] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5832'. [ 648.908753][T18623] netlink: 'syz.3.5845': attribute type 2 has an invalid length. [ 648.927731][T18623] netlink: 'syz.3.5845': attribute type 1 has an invalid length. [ 648.947646][T18623] netlink: 'syz.3.5845': attribute type 8 has an invalid length. [ 648.967571][T18623] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5845'. [ 649.141044][T18629] rxe_eth0 speed is unknown, defaulting to 1000 [ 649.375061][T18638] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5852'. [ 652.625675][T18672] delete_channel: no stack [ 654.465612][ T2948] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 655.051417][T18699] delete_channel: no stack [ 655.871929][T18715] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5886'. [ 656.201568][T18722] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5890'. [ 656.292203][T18723] delete_channel: no stack [ 656.390454][T18725] delete_channel: no stack [ 656.628353][T18735] syz.1.5895[18735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.628496][T18735] syz.1.5895[18735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.766800][T18738] rxe_eth0 speed is unknown, defaulting to 1000 [ 658.056021][T18772] rxe_eth0 speed is unknown, defaulting to 1000 [ 658.909420][T18786] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5918'. [ 659.000508][T18791] syz.2.5920[18791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.000655][T18791] syz.2.5920[18791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.712834][T18817] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5929'. [ 659.825822][T18821] syzkaller0: entered promiscuous mode [ 659.831476][T18821] syzkaller0: entered allmulticast mode [ 659.953301][T18823] syz.3.5932[18823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.953390][T18823] syz.3.5932[18823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.212581][T18868] netlink: 'syz.1.5954': attribute type 2 has an invalid length. [ 661.236080][T18868] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.5954'. [ 661.626303][ T5782] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 662.395921][T18903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5970'. [ 662.417803][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5970'. [ 663.874628][T18963] syzkaller0: entered promiscuous mode [ 663.881465][T18963] syzkaller0: entered allmulticast mode [ 666.079630][T19007] netlink: 'syz.3.6020': attribute type 2 has an invalid length. [ 666.111976][T19007] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.6020'. [ 666.975302][T19031] netlink: 'syz.0.6032': attribute type 2 has an invalid length. [ 667.003893][T19031] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.6032'. [ 668.670915][T19089] netlink: 'syz.2.6057': attribute type 2 has an invalid length. [ 668.705228][T19089] netlink: 'syz.2.6057': attribute type 8 has an invalid length. [ 668.744764][T19089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6057'. [ 671.574562][T19164] syzkaller0: entered promiscuous mode [ 671.581342][T19164] syzkaller0: entered allmulticast mode [ 673.417614][T19189] netlink: 'syz.3.6101': attribute type 2 has an invalid length. [ 673.430412][T19189] netlink: 'syz.3.6101': attribute type 8 has an invalid length. [ 673.443926][T19189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6101'. [ 674.224844][T19222] netlink: 'syz.1.6117': attribute type 2 has an invalid length. [ 674.255184][T19222] netlink: 'syz.1.6117': attribute type 8 has an invalid length. [ 674.277413][T19222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6117'. [ 674.374837][T19221] syzkaller0: entered promiscuous mode [ 674.380655][T19221] syzkaller0: entered allmulticast mode [ 676.272875][T19256] netlink: 'syz.0.6130': attribute type 2 has an invalid length. [ 676.290100][T19256] netlink: 'syz.0.6130': attribute type 8 has an invalid length. [ 676.309795][T19256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6130'. [ 676.510222][T19261] netlink: 'syz.0.6143': attribute type 2 has an invalid length. [ 676.521141][T19261] netlink: 'syz.0.6143': attribute type 8 has an invalid length. [ 676.530446][T19261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6143'. [ 676.578334][T19263] syzkaller0: entered promiscuous mode [ 676.585012][T19263] syzkaller0: entered allmulticast mode [ 678.396924][T19283] netlink: 'syz.3.6147': attribute type 2 has an invalid length. [ 678.427387][T19283] netlink: 'syz.3.6147': attribute type 8 has an invalid length. [ 678.486956][T19283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6147'. [ 679.038970][T19311] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6159'. [ 679.042729][T19313] netlink: 'syz.3.6160': attribute type 2 has an invalid length. [ 679.056399][T19313] netlink: 'syz.3.6160': attribute type 8 has an invalid length. [ 679.060104][T19311] openvswitch: netlink: Flow key attribute not present in set flow. [ 679.065156][T19313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6160'. [ 679.548625][T19333] netlink: 'syz.3.6168': attribute type 3 has an invalid length. [ 679.557075][T19333] netlink: 'syz.3.6168': attribute type 16 has an invalid length. [ 679.588090][T19333] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6168'. [ 679.769764][T19341] netlink: 'syz.1.6173': attribute type 2 has an invalid length. [ 679.788046][T19341] netlink: 'syz.1.6173': attribute type 8 has an invalid length. [ 679.796083][T19341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6173'. [ 679.982462][T19349] syz.0.6178[19349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 679.982721][T19349] syz.0.6178[19349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 681.564440][T19389] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6194'. [ 681.621591][T19389] openvswitch: netlink: Flow key attribute not present in set flow. [ 682.012815][T19395] netlink: 'syz.2.6197': attribute type 3 has an invalid length. [ 682.034495][T19395] netlink: 'syz.2.6197': attribute type 16 has an invalid length. [ 682.057573][T19395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6197'. [ 682.113940][T19397] netlink: 'syz.0.6200': attribute type 22 has an invalid length. [ 682.213834][T19403] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6210'. [ 682.233011][T19403] openvswitch: netlink: Flow key attribute not present in set flow. [ 682.441869][T19408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6206'. [ 682.459835][T19414] syz.1.6208[19414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.460125][T19414] syz.1.6208[19414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.502232][T19423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.643449][T19436] syz.2.6220[19436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.643669][T19436] syz.2.6220[19436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.685275][T19433] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6218'. [ 683.727750][T19433] openvswitch: netlink: Flow key attribute not present in set flow. [ 683.839322][T19441] validate_nla: 2 callbacks suppressed [ 683.839355][T19441] netlink: 'syz.2.6222': attribute type 2 has an invalid length. [ 683.887557][T19441] netlink: 'syz.2.6222': attribute type 8 has an invalid length. [ 683.906073][T19441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6222'. [ 684.522989][T19453] syzkaller0: entered promiscuous mode [ 684.546200][T19453] syzkaller0: entered allmulticast mode [ 685.507929][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 685.931412][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.940210][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.816580][T19495] netlink: 208052 bytes leftover after parsing attributes in process `syz.3.6243'. [ 686.826758][T19495] netlink: 'syz.3.6243': attribute type 1 has an invalid length. [ 686.835061][T19495] netlink: 'syz.3.6243': attribute type 2 has an invalid length. [ 686.843234][T19495] netlink: 'syz.3.6243': attribute type 3 has an invalid length. [ 686.851270][T19495] netlink: 'syz.3.6243': attribute type 4 has an invalid length. [ 687.735036][T19473] netlink: 'syz.0.6234': attribute type 2 has an invalid length. [ 687.742857][T19473] netlink: 'syz.0.6234': attribute type 8 has an invalid length. [ 687.751160][T19473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6234'. [ 687.853400][T19504] netlink: 'syz.1.6253': attribute type 22 has an invalid length. [ 687.932907][T19506] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6247'. [ 687.951145][T19506] openvswitch: netlink: Flow key attribute not present in set flow. [ 688.697587][T19499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.011325][T19544] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6261'. [ 690.053209][T19544] openvswitch: netlink: Flow key attribute not present in set flow. [ 690.671782][T19542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.363066][T19576] netlink: 208052 bytes leftover after parsing attributes in process `syz.1.6273'. [ 691.385498][T19576] netlink: 'syz.1.6273': attribute type 1 has an invalid length. [ 691.397738][T19576] netlink: 'syz.1.6273': attribute type 2 has an invalid length. [ 691.405589][T19576] netlink: 'syz.1.6273': attribute type 3 has an invalid length. [ 691.424533][T19576] netlink: 'syz.1.6273': attribute type 4 has an invalid length. [ 692.912449][T19612] netlink: 208052 bytes leftover after parsing attributes in process `syz.2.6286'. [ 692.938354][T19612] netlink: 'syz.2.6286': attribute type 1 has an invalid length. [ 692.946127][T19612] netlink: 'syz.2.6286': attribute type 2 has an invalid length. [ 692.975855][T19612] netlink: 'syz.2.6286': attribute type 3 has an invalid length. [ 692.984004][T19612] netlink: 'syz.2.6286': attribute type 4 has an invalid length. [ 697.864805][T19711] syzkaller0: entered promiscuous mode [ 697.875437][T19711] syzkaller0: entered allmulticast mode [ 699.361620][T19748] netlink: 'syz.1.6334': attribute type 2 has an invalid length. [ 699.369738][T19748] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.6334'. [ 701.352613][T19782] syzkaller0: entered promiscuous mode [ 701.359612][T19782] syzkaller0: entered allmulticast mode [ 704.393716][T19835] netlink: 'syz.2.6366': attribute type 1 has an invalid length. [ 704.415634][T19835] netlink: 'syz.2.6366': attribute type 3 has an invalid length. [ 704.904150][T19844] netlink: 'syz.2.6371': attribute type 2 has an invalid length. [ 704.947759][T19844] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.6371'. [ 705.724273][T19867] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6382'. [ 705.759053][T19870] netlink: 'syz.0.6383': attribute type 2 has an invalid length. [ 705.777188][T19870] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.6383'. [ 706.355619][T19886] netlink: 'syz.0.6390': attribute type 1 has an invalid length. [ 706.363848][T19886] netlink: 'syz.0.6390': attribute type 3 has an invalid length. [ 707.432058][T19916] netlink: 'syz.1.6400': attribute type 1 has an invalid length. [ 707.434640][T19913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6401'. [ 707.440910][T19916] netlink: 'syz.1.6400': attribute type 3 has an invalid length. [ 707.458072][T19913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6401'. [ 708.584064][T19937] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6414'. [ 709.782236][T19961] netlink: 'syz.2.6422': attribute type 11 has an invalid length. [ 709.802124][T19961] netlink: 'syz.2.6422': attribute type 2 has an invalid length. [ 709.834211][T19961] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.6422'. [ 709.950251][T19963] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6433'. [ 709.989885][T19963] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6433'. [ 710.176872][T19970] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6424'. [ 710.345141][T19972] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6426'. [ 710.374827][T19972] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.6426'. [ 713.566597][T20065] netlink: 'syz.0.6472': attribute type 11 has an invalid length. [ 713.577470][T20065] netlink: 'syz.0.6472': attribute type 2 has an invalid length. [ 713.590067][T20065] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.6472'. [ 716.527745][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 718.435154][T20119] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6495'. [ 718.484693][T20119] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.6495'. [ 718.972883][T20132] netlink: 'syz.3.6510': attribute type 11 has an invalid length. [ 718.999258][T20132] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6510'. [ 719.584502][T20155] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.6515'. [ 719.584716][T20150] netlink: 'syz.1.6511': attribute type 3 has an invalid length. [ 719.608719][T20150] netlink: 'syz.1.6511': attribute type 6 has an invalid length. [ 719.616601][T20150] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.6511'. [ 720.345176][T20180] netlink: 'syz.2.6527': attribute type 19 has an invalid length. [ 720.365986][T20180] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6527'. [ 721.188238][T20213] netlink: 'syz.2.6541': attribute type 9 has an invalid length. [ 721.196022][T20213] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6541'. [ 721.296766][T20218] netlink: 'syz.2.6541': attribute type 9 has an invalid length. [ 721.325101][T20218] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6541'. [ 721.765292][T20243] netlink: 'syz.1.6553': attribute type 1 has an invalid length. [ 721.783897][T20243] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.6553'. [ 725.098277][T20268] netlink: 'syz.1.6564': attribute type 46 has an invalid length. [ 725.175569][ T5782] Bluetooth: hci2: unexpected event 0x30 length: 151 > 3 [ 726.369793][T20294] netlink: 'syz.1.6578': attribute type 19 has an invalid length. [ 726.391868][T20294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6578'. [ 727.172901][T20321] netlink: 'syz.0.6590': attribute type 19 has an invalid length. [ 727.204240][T20321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6590'. [ 728.440618][T20363] netlink: 'syz.3.6610': attribute type 9 has an invalid length. [ 728.454304][T20363] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6610'. [ 728.576230][T20366] netlink: 'syz.3.6610': attribute type 9 has an invalid length. [ 728.680468][T20366] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6610'. [ 729.954845][T20403] netlink: 'syz.0.6624': attribute type 46 has an invalid length. [ 730.330868][ T5782] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 730.398104][T20412] netlink: 'syz.1.6627': attribute type 9 has an invalid length. [ 730.413171][T20412] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6627'. [ 730.507456][T20413] netlink: 'syz.1.6627': attribute type 9 has an invalid length. [ 730.529169][T20413] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6627'. [ 730.944617][T20427] netlink: 'syz.3.6636': attribute type 46 has an invalid length. [ 731.163473][ T5782] Bluetooth: hci0: unexpected event 0x30 length: 151 > 3 [ 731.685843][T20454] netlink: 'syz.0.6645': attribute type 9 has an invalid length. [ 731.722745][T20456] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6649'. [ 731.722823][T20454] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6645'. [ 731.772052][T20458] netlink: 'syz.0.6645': attribute type 9 has an invalid length. [ 731.780815][T20458] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6645'. [ 732.549703][T20482] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6659'. [ 732.665533][T20488] netlink: 'syz.2.6663': attribute type 9 has an invalid length. [ 732.676467][T20488] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6663'. [ 732.765378][T20493] netlink: 'syz.2.6663': attribute type 9 has an invalid length. [ 732.797443][T20493] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6663'. [ 733.601040][T20517] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6673'. [ 733.822280][T20529] netlink: 'syz.3.6680': attribute type 9 has an invalid length. [ 733.844250][T20529] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6680'. [ 734.004763][T20535] netlink: 'syz.3.6680': attribute type 9 has an invalid length. [ 734.014893][T20535] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6680'. [ 734.162562][T20542] netlink: 'syz.2.6686': attribute type 21 has an invalid length. [ 734.187524][T20542] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6686'. [ 734.666236][T20561] syzkaller0: entered promiscuous mode [ 734.672120][T20561] syzkaller0: entered allmulticast mode [ 736.679304][T20601] validate_nla: 4 callbacks suppressed [ 736.679322][T20601] netlink: 'syz.1.6710': attribute type 3 has an invalid length. [ 736.721432][T20601] netlink: 'syz.1.6710': attribute type 1 has an invalid length. [ 736.747477][T20601] __nla_validate_parse: 4 callbacks suppressed [ 736.747493][T20601] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6710'. [ 737.196598][T20618] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6719'. [ 737.481188][T20625] netlink: 'syz.2.6722': attribute type 30 has an invalid length. [ 738.113516][T20642] netlink: 'syz.0.6737': attribute type 21 has an invalid length. [ 738.134204][T20642] netlink: 'syz.0.6737': attribute type 3 has an invalid length. [ 738.162277][T20642] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6737'. [ 738.790152][T20650] netlink: 'syz.3.6734': attribute type 30 has an invalid length. [ 738.988226][T20661] netlink: 'syz.3.6738': attribute type 3 has an invalid length. [ 738.996045][T20661] netlink: 'syz.3.6738': attribute type 1 has an invalid length. [ 739.007523][T20661] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6738'. [ 739.105520][T20666] netlink: 'syz.3.6741': attribute type 21 has an invalid length. [ 739.124122][T20666] netlink: 'syz.3.6741': attribute type 3 has an invalid length. [ 739.132368][T20666] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6741'. [ 739.321345][T20674] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.6753'. [ 740.135563][T20700] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6750'. [ 740.878616][T20720] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6766'. [ 740.937266][T20723] syzkaller0: entered promiscuous mode [ 740.955860][T20723] syzkaller0: entered allmulticast mode [ 743.419005][T20728] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6777'. [ 743.857276][T20762] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.6782'. [ 744.262543][T20774] cgroup: fork rejected by pids controller in /syz2 [ 744.839303][T20786] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.6794'. [ 745.395588][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.522548][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.645924][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.792002][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.016936][T20812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 746.025651][T20812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 746.041383][T20812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 746.052549][T20813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 746.070636][T20813] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 746.078169][T20813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 746.259353][T20809] rxe_eth0 speed is unknown, defaulting to 1000 [ 746.814335][T20831] validate_nla: 2 callbacks suppressed [ 746.814351][T20831] netlink: 'syz.1.6805': attribute type 33 has an invalid length. [ 747.059844][T20809] chnl_net:caif_netlink_parms(): no params data found [ 747.240299][T20809] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.265032][T20809] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.278770][T20809] bridge_slave_0: entered allmulticast mode [ 747.286348][T20809] bridge_slave_0: entered promiscuous mode [ 747.301148][T20809] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.314593][T20809] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.324848][T20809] bridge_slave_1: entered allmulticast mode [ 747.342300][T20809] bridge_slave_1: entered promiscuous mode [ 747.352885][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.360925][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.463562][T20809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.497948][T20809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.580966][T20809] team0: Port device team_slave_0 added [ 747.611717][T20809] team0: Port device team_slave_1 added [ 747.720270][T20809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.766485][T20809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.840865][T20809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.946741][T20809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.982306][T20809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.026027][T20809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.148259][ T5782] Bluetooth: hci3: command tx timeout [ 748.162238][ T2948] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 748.496795][T20809] hsr_slave_0: entered promiscuous mode [ 748.507167][T20809] hsr_slave_1: entered promiscuous mode [ 748.514208][T20809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.522903][T20809] Cannot create hsr debugfs directory [ 749.427014][T20809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 749.503988][T20809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 749.516051][T20809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 749.587259][ T60] hsr_slave_0: left promiscuous mode [ 749.596529][ T60] hsr_slave_1: left promiscuous mode [ 749.607223][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.621592][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.631382][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.639199][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.647069][ T60] bridge_slave_1: left allmulticast mode [ 749.653070][ T60] bridge_slave_1: left promiscuous mode [ 749.660520][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.674309][ T60] bridge_slave_0: left promiscuous mode [ 749.684477][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.728727][ T60] veth1_macvtap: left promiscuous mode [ 749.734681][ T60] veth0_macvtap: left promiscuous mode [ 749.880909][ T60] team0 (unregistering): Port device geneve1 removed [ 750.194176][ T60] team0 (unregistering): Port device team_slave_1 removed [ 750.229542][ T60] team0 (unregistering): Port device C removed [ 750.237562][ T5782] Bluetooth: hci3: command tx timeout [ 750.271945][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.312329][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.566646][ T60] bond0 (unregistering): Released all slaves [ 750.611889][T20809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 750.751027][T20809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.797020][T20809] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.830901][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.838095][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.883051][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.890332][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.212438][T20809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.289383][T20809] veth0_vlan: entered promiscuous mode [ 751.305247][T20809] veth1_vlan: entered promiscuous mode [ 751.356820][T20809] veth0_macvtap: entered promiscuous mode [ 751.375718][T20809] veth1_macvtap: entered promiscuous mode [ 751.403901][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.420194][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.430277][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.446334][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.456386][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.473183][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.484883][T20809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.507016][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.524821][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.537367][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.553250][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.563180][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.574206][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.588772][T20809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.602450][T20809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.615319][T20809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.626676][T20809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.637492][T20809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.743467][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.766891][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.809468][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.818098][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.317857][ T5782] Bluetooth: hci3: command tx timeout [ 752.771898][T20959] cgroup: fork rejected by pids controller in /syz0 [ 752.829397][T20962] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6819'. [ 752.851370][T20962] netlink: get zone limit has 4 unknown bytes [ 754.064629][ T2948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.211475][ T2948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.351987][ T2948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.397930][ T5782] Bluetooth: hci3: command tx timeout [ 754.425189][T20975] netlink: 'syz.1.6826': attribute type 3 has an invalid length. [ 754.437399][T20975] netlink: 'syz.1.6826': attribute type 1 has an invalid length. [ 754.447983][T20975] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6826'. [ 754.481432][ T2948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.051811][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 755.073604][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 755.088830][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 755.142033][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 755.178701][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 755.200304][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.493871][T20994] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6835'. [ 755.529553][T20991] rxe_eth0 speed is unknown, defaulting to 1000 [ 755.545747][T20994] netlink: get zone limit has 4 unknown bytes [ 757.268595][ T5782] Bluetooth: hci1: command tx timeout [ 757.482748][T21036] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6846'. [ 757.491867][T21036] netlink: get zone limit has 4 unknown bytes [ 757.538329][T21038] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6848'. [ 757.574221][T21040] cgroup: fork rejected by pids controller in /syz3 [ 757.816866][T20991] chnl_net:caif_netlink_parms(): no params data found [ 758.048054][T20991] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.055357][T20991] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.068620][T20991] bridge_slave_0: entered allmulticast mode [ 758.076664][T20991] bridge_slave_0: entered promiscuous mode [ 758.094271][T20991] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.124435][T20991] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.132162][T20991] bridge_slave_1: entered allmulticast mode [ 758.157622][T20991] bridge_slave_1: entered promiscuous mode [ 758.323626][T20991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.451873][T20991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.653768][T20991] team0: Port device team_slave_0 added [ 758.662713][T20991] team0: Port device team_slave_1 added [ 758.733632][T20991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.741349][T20991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.768738][T20991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.782178][T20991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.789239][T20991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.816085][T20991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.945761][ T2948] hsr_slave_0: left promiscuous mode [ 758.964012][ T2948] hsr_slave_1: left promiscuous mode [ 758.975586][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.983335][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.992274][ T2948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.999877][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.007755][ T2948] bridge_slave_1: left allmulticast mode [ 759.013535][ T2948] bridge_slave_1: left promiscuous mode [ 759.020082][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.029647][ T2948] bridge_slave_0: left promiscuous mode [ 759.035397][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.060898][ T2948] veth1_macvtap: left allmulticast mode [ 759.066659][ T2948] veth1_macvtap: left promiscuous mode [ 759.073071][ T2948] veth0_macvtap: left promiscuous mode [ 759.357571][ T5782] Bluetooth: hci1: command tx timeout [ 759.599993][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 759.644974][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 759.685594][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.723614][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.977639][ T2948] bond0 (unregistering): Released all slaves [ 760.024248][T20991] hsr_slave_0: entered promiscuous mode [ 760.030968][T20991] hsr_slave_1: entered promiscuous mode [ 760.036961][T20991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.045106][T20991] Cannot create hsr debugfs directory [ 760.747737][T20991] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 760.759392][T20991] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 760.769928][T20991] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 760.782243][T20991] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 760.876074][T20991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.905760][T20991] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.930846][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.938047][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.962453][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.969659][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.262692][T20991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.330782][T20991] veth0_vlan: entered promiscuous mode [ 761.349259][T20991] veth1_vlan: entered promiscuous mode [ 761.395237][T20991] veth0_macvtap: entered promiscuous mode [ 761.412197][T20991] veth1_macvtap: entered promiscuous mode [ 761.428027][ T5782] Bluetooth: hci1: command tx timeout [ 761.442920][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.453493][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.464887][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.476746][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.486874][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.498134][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.510560][T20991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.521561][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.532283][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.542655][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.557968][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.572099][T20991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.584031][T20991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.600954][T20991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.630560][T20991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.644220][T20991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.656143][T20991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.671325][T20991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.791423][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.807855][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.857149][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.870703][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.204462][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.424274][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.507425][ T5782] Bluetooth: hci1: command tx timeout [ 763.695108][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.929915][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.580482][T20813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 764.591171][T20813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 764.611894][T20813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 764.674588][T20813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 764.706197][T20813] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 764.726736][T20813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 764.952777][T21189] cgroup: fork rejected by pids controller in /syz1 [ 765.394514][T21183] rxe_eth0 speed is unknown, defaulting to 1000 [ 766.820312][T20813] Bluetooth: hci2: command tx timeout [ 767.006261][T21183] chnl_net:caif_netlink_parms(): no params data found [ 767.497278][T21183] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.513938][T21183] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.534744][T21183] bridge_slave_0: entered allmulticast mode [ 767.541659][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 767.542736][T21183] bridge_slave_0: entered promiscuous mode [ 767.555038][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 767.565807][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 767.578402][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 767.586360][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 767.597688][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 767.620435][T21183] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.633586][T21183] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.642362][T21183] bridge_slave_1: entered allmulticast mode [ 767.657253][T21183] bridge_slave_1: entered promiscuous mode [ 767.742413][T21183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.781471][T21237] rxe_eth0 speed is unknown, defaulting to 1000 [ 767.799688][T21183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.862617][T21183] team0: Port device team_slave_0 added [ 767.882079][T21183] team0: Port device team_slave_1 added [ 767.945033][T21183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.952646][T21183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.979206][T21183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.993154][T21183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.006310][T21183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.036162][T21183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.182093][T21183] hsr_slave_0: entered promiscuous mode [ 768.188704][T21183] hsr_slave_1: entered promiscuous mode [ 768.194987][T21183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.203208][T21183] Cannot create hsr debugfs directory [ 768.675986][T21237] chnl_net:caif_netlink_parms(): no params data found [ 768.797422][ T42] hsr_slave_0: left promiscuous mode [ 768.803217][ T42] hsr_slave_1: left promiscuous mode [ 768.809719][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.817185][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.825055][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.833708][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.842996][ T42] bridge_slave_0: left promiscuous mode [ 768.849050][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.866002][ T42] veth1_macvtap: left allmulticast mode [ 768.867594][T20813] Bluetooth: hci2: command tx timeout [ 768.877010][ T42] veth1_macvtap: left promiscuous mode [ 768.882636][ T42] veth0_macvtap: left promiscuous mode [ 768.981188][ T42] team0 (unregistering): Port device geneve1 removed [ 769.242276][ T42] team0 (unregistering): Port device team_slave_1 removed [ 769.306424][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.344682][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.383946][ T42] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 769.629376][ T42] bond0 (unregistering): Released all slaves [ 769.671488][T20813] Bluetooth: hci0: command tx timeout [ 769.739559][T21237] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.746785][T21237] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.754055][T21237] bridge_slave_0: entered allmulticast mode [ 769.761798][T21237] bridge_slave_0: entered promiscuous mode [ 769.817680][T21237] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.824840][T21237] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.832308][T21237] bridge_slave_1: entered allmulticast mode [ 769.839538][T21237] bridge_slave_1: entered promiscuous mode [ 769.895252][T21237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.925596][T21237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.976257][T21237] team0: Port device team_slave_0 added [ 770.009705][T21237] team0: Port device team_slave_1 added [ 770.042612][T21237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.057687][T21237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.085674][T21237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.108328][T21237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.115296][T21237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.144532][T21237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.224966][T21183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 770.236720][T21183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 770.270736][T21237] hsr_slave_0: entered promiscuous mode [ 770.286166][T21237] hsr_slave_1: entered promiscuous mode [ 770.292649][T21237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 770.310089][T21237] Cannot create hsr debugfs directory [ 770.318020][T21183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 770.328759][T21183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 770.444785][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.542097][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.606464][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.672000][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.702491][T21183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.752269][T21183] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.786213][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.793413][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.818279][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.825426][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.948041][T20813] Bluetooth: hci2: command tx timeout [ 771.413688][T21183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.515674][T21183] veth0_vlan: entered promiscuous mode [ 771.533912][T21183] veth1_vlan: entered promiscuous mode [ 771.591574][T21183] veth0_macvtap: entered promiscuous mode [ 771.622887][T21183] veth1_macvtap: entered promiscuous mode [ 771.645878][T21183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.656968][T21183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.670261][T21183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.680764][T21183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.690709][T21183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.701215][T21183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.713611][T21183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.741542][T21183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.752405][T20813] Bluetooth: hci0: command tx timeout [ 771.758145][T21183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.758190][T21183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.758205][T21183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.758217][T21183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.758230][T21183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.759566][T21183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.830559][T21183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.842390][T21183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.852184][T21183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.861101][T21183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.961185][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.988940][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.064835][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.073387][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.133952][T21237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 772.176580][T21237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 772.191734][T21237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 772.206236][T21237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 772.209697][T21292] netlink: 'syz.3.6855': attribute type 3 has an invalid length. [ 772.220874][T21292] netlink: 'syz.3.6855': attribute type 1 has an invalid length. [ 772.234462][T21292] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.6855'. [ 772.532790][T21300] netlink: 'syz.2.6877': attribute type 9 has an invalid length. [ 772.544656][T21300] netlink: 'syz.2.6877': attribute type 23 has an invalid length. [ 772.555996][T21300] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.6877'. [ 772.822510][T21237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.905155][T21237] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.996714][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.003906][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.027733][T20813] Bluetooth: hci2: command tx timeout [ 773.058816][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.066006][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.599091][T21315] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6882'. [ 773.687273][ T42] hsr_slave_0: left promiscuous mode [ 773.719682][ T42] hsr_slave_1: left promiscuous mode [ 773.726050][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.740544][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.756400][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.773291][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.788699][ T42] bridge_slave_1: left allmulticast mode [ 773.816998][ T42] bridge_slave_1: left promiscuous mode [ 773.830337][T20813] Bluetooth: hci0: command tx timeout [ 773.836935][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.870835][ T42] bridge_slave_0: left promiscuous mode [ 773.884210][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.963301][ T42] veth1_macvtap: left allmulticast mode [ 773.975484][ T42] veth1_macvtap: left promiscuous mode [ 773.981589][ T42] veth0_macvtap: left promiscuous mode [ 774.214278][ T42] team0 (unregistering): Port device geneve1 removed [ 774.813392][ T42] team0 (unregistering): Port device team_slave_1 removed [ 774.851809][ T42] team0 (unregistering): Port device team_slave_0 removed [ 774.894840][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.937299][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.211903][ T42] bond0 (unregistering): Released all slaves [ 775.264846][T21321] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.6884'. [ 775.322422][T21237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.431857][T21237] veth0_vlan: entered promiscuous mode [ 775.476665][T21237] veth1_vlan: entered promiscuous mode [ 775.554189][T21237] veth0_macvtap: entered promiscuous mode [ 775.574540][T21237] veth1_macvtap: entered promiscuous mode [ 775.597681][T21237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.609720][T21237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.619890][T21237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.635462][T21237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.658812][T21237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.680325][T21237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.714000][T21237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.750944][T21237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.797480][T21237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.837447][T21237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.861072][T21237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.887227][T21237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.905450][T21237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.916062][T20813] Bluetooth: hci0: command tx timeout [ 775.942576][T21237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.959925][T21237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.969148][T21237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.981386][T21237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.993112][T21237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.551556][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.570509][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.656923][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.666346][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.871691][T21373] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6908'. [ 778.682125][T20813] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 780.236349][T20813] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 780.708719][T20813] Bluetooth: hci1: command tx timeout [ 781.188898][T20813] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 782.208615][T21462] netlink: 'syz.1.6947': attribute type 9 has an invalid length. [ 782.216833][T21462] netlink: 'syz.1.6947': attribute type 23 has an invalid length. [ 782.225148][T21462] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.6947'. [ 782.778465][T20813] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 784.787445][T20813] Bluetooth: hci2: command tx timeout [ 785.968088][T21532] netlink: 'syz.3.6978': attribute type 10 has an invalid length. [ 786.009845][T21532] team0: Device vxcan1 is of different type [ 786.022017][ T2926] tipc: Subscription rejected, illegal request [ 786.359760][T21549] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.6984'. [ 786.803694][T21552] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6994'. [ 786.815352][T21552] bridge_slave_1: default FDB implementation only supports local addresses [ 787.027159][ T2926] tipc: Subscription rejected, illegal request [ 787.090013][T21568] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.6993'. [ 787.112301][T21568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6993'. [ 787.149449][ T42] tipc: Subscription rejected, illegal request [ 787.254615][T21576] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.6997'. [ 787.556683][T21583] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7001'. [ 787.573398][T21583] bridge_slave_1: default FDB implementation only supports local addresses [ 787.992489][T21604] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.7010'. [ 788.318932][T21618] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7016'. [ 788.334643][T21618] bridge_slave_1: default FDB implementation only supports local addresses [ 790.527603][T21681] netlink: 'syz.3.7045': attribute type 10 has an invalid length. [ 790.545930][T21681] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7045'. [ 790.592011][T21681] hsr0: entered promiscuous mode [ 790.607883][T21681] bridge0: port 3(hsr0) entered blocking state [ 790.614378][T21681] bridge0: port 3(hsr0) entered disabled state [ 790.621405][T21681] hsr0: entered allmulticast mode [ 790.626542][T21681] hsr_slave_0: entered allmulticast mode [ 790.645000][T21681] hsr_slave_1: entered allmulticast mode [ 790.656668][T21681] bridge0: port 3(hsr0) entered blocking state [ 790.663015][T21681] bridge0: port 3(hsr0) entered forwarding state [ 791.022459][T21703] netlink: 'syz.1.7053': attribute type 3 has an invalid length. [ 791.047490][T21703] netlink: 'syz.1.7053': attribute type 1 has an invalid length. [ 791.077666][T21703] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.7053'. [ 791.322165][T21714] netlink: 'syz.3.7059': attribute type 29 has an invalid length. [ 791.342888][T21714] netlink: 'syz.3.7059': attribute type 29 has an invalid length. [ 791.429597][T21717] netlink: 'syz.1.7061': attribute type 29 has an invalid length. [ 791.441600][T21717] netlink: 'syz.1.7061': attribute type 29 has an invalid length. [ 791.452483][T21717] netlink: 'syz.1.7061': attribute type 29 has an invalid length. [ 791.462060][T21717] netlink: 'syz.1.7061': attribute type 29 has an invalid length. [ 791.471219][T21717] netlink: 'syz.1.7061': attribute type 29 has an invalid length. [ 792.133267][T21745] team0: Device vxcan1 is of different type [ 792.310621][T21754] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7079'. [ 792.842880][T21768] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.7092'. [ 794.122929][T21781] sctp: [Deprecated]: syz.2.7087 (pid 21781) Use of struct sctp_assoc_value in delayed_ack socket option. [ 794.122929][T21781] Use struct sctp_sack_info instead [ 794.446795][T21791] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.7095'. [ 795.038338][T21799] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.7097'. [ 795.053934][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7097'. [ 795.069260][T21798] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.7106'. [ 795.910361][T21828] validate_nla: 14 callbacks suppressed [ 795.910396][T21828] netlink: 'syz.0.7112': attribute type 9 has an invalid length. [ 795.925154][T21828] netlink: 'syz.0.7112': attribute type 23 has an invalid length. [ 795.934782][T21828] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.7112'. [ 796.994158][T21830] netlink: 'syz.2.7110': attribute type 10 has an invalid length. [ 797.002073][T21830] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7110'. [ 797.012761][T21830] hsr0: entered promiscuous mode [ 797.018308][T21830] bridge0: port 3(hsr0) entered blocking state [ 797.024579][T21830] bridge0: port 3(hsr0) entered disabled state [ 797.035043][T21830] hsr0: entered allmulticast mode [ 797.040368][T21830] hsr_slave_0: entered allmulticast mode [ 797.046030][T21830] hsr_slave_1: entered allmulticast mode [ 797.054424][T21830] bridge0: port 3(hsr0) entered blocking state [ 797.060751][T21830] bridge0: port 3(hsr0) entered forwarding state [ 798.682555][T21873] netlink: 'syz.0.7131': attribute type 10 has an invalid length. [ 798.698364][T21873] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7131'. [ 798.717761][T21873] hsr0: entered promiscuous mode [ 798.723033][T21873] bridge0: port 3(hsr0) entered blocking state [ 798.743168][T21873] bridge0: port 3(hsr0) entered disabled state [ 798.763341][T21873] hsr0: entered allmulticast mode [ 798.773316][T21873] hsr_slave_0: entered allmulticast mode [ 798.791927][T21873] hsr_slave_1: entered allmulticast mode [ 798.804056][T21873] bridge0: port 3(hsr0) entered blocking state [ 798.810425][T21873] bridge0: port 3(hsr0) entered forwarding state [ 799.546685][T21895] netlink: 'syz.0.7142': attribute type 3 has an invalid length. [ 799.569667][T21895] netlink: 'syz.0.7142': attribute type 1 has an invalid length. [ 799.588761][T21895] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.7142'. [ 800.070822][T21904] netlink: 'syz.1.7146': attribute type 10 has an invalid length. [ 800.093069][T21904] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7146'. [ 800.105492][T21904] hsr0: entered promiscuous mode [ 800.110924][T21904] bridge0: port 3(hsr0) entered blocking state [ 800.117476][T21904] bridge0: port 3(hsr0) entered disabled state [ 800.123846][T21904] hsr0: entered allmulticast mode [ 800.137410][T21904] hsr_slave_0: entered allmulticast mode [ 800.147849][T21904] hsr_slave_1: entered allmulticast mode [ 800.159288][T21904] bridge0: port 3(hsr0) entered blocking state [ 800.165615][T21904] bridge0: port 3(hsr0) entered forwarding state [ 800.350296][T21918] netlink: 'syz.0.7150': attribute type 29 has an invalid length. [ 800.359380][T21918] netlink: 'syz.0.7150': attribute type 29 has an invalid length. [ 800.594517][T21926] netlink: 'syz.2.7154': attribute type 3 has an invalid length. [ 800.602696][T21926] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.7154'. [ 801.507871][T21933] validate_nla: 1 callbacks suppressed [ 801.507887][T21933] netlink: 'syz.2.7158': attribute type 29 has an invalid length. [ 801.544316][T21935] netlink: 'syz.3.7159': attribute type 10 has an invalid length. [ 801.561668][T21935] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7159'. [ 801.576129][T21933] netlink: 'syz.2.7158': attribute type 29 has an invalid length. [ 801.593334][T21937] netlink: 'syz.2.7158': attribute type 29 has an invalid length. [ 801.654487][T21933] netlink: 'syz.2.7158': attribute type 29 has an invalid length. [ 801.669588][T21933] netlink: 'syz.2.7158': attribute type 29 has an invalid length. [ 801.679244][T21933] netlink: 'syz.2.7158': attribute type 29 has an invalid length. [ 801.709671][T21939] netlink: 'syz.0.7160': attribute type 29 has an invalid length. [ 801.723454][T21939] netlink: 'syz.0.7160': attribute type 29 has an invalid length. [ 802.186305][T21966] netlink: 'syz.0.7171': attribute type 29 has an invalid length. [ 805.305660][T22020] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7206'. [ 805.829373][T22038] sctp: [Deprecated]: syz.0.7214 (pid 22038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 805.829373][T22038] Use struct sctp_sack_info instead [ 806.160467][T22048] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7211'. [ 806.961138][T20813] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 807.376549][T22100] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7234'. [ 807.529489][T22106] validate_nla: 23 callbacks suppressed [ 807.529534][T22106] netlink: 'syz.0.7238': attribute type 29 has an invalid length. [ 807.556728][T22106] netlink: 'syz.0.7238': attribute type 29 has an invalid length. [ 807.566785][T20813] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11 [ 807.727975][T20813] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 807.786928][T22118] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7246'. [ 808.097775][T22132] netlink: 'syz.3.7253': attribute type 29 has an invalid length. [ 808.107286][T22132] netlink: 'syz.3.7253': attribute type 29 has an invalid length. [ 808.283718][T20813] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 808.321946][T22140] netlink: 'syz.0.7264': attribute type 29 has an invalid length. [ 808.352400][T22140] netlink: 'syz.0.7264': attribute type 29 has an invalid length. [ 808.458340][T20813] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 808.501858][T20813] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 808.792061][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.807407][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.068114][T22169] netlink: 'syz.3.7269': attribute type 29 has an invalid length. [ 809.101749][T22169] netlink: 'syz.3.7269': attribute type 29 has an invalid length. [ 809.356366][T20813] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 809.627708][T20813] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 810.061150][T22209] netlink: 'syz.2.7298': attribute type 29 has an invalid length. [ 810.088393][T22209] netlink: 'syz.2.7298': attribute type 29 has an invalid length. [ 810.246632][T20813] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 810.401314][T22229] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7300'. [ 810.580234][T22241] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.7307'. [ 813.606059][T22315] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7341'. [ 813.633600][T22315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.115032][T22396] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.7378'. [ 816.130018][T22396] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.7378'. [ 819.004444][T22448] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7404'. [ 819.036710][T22448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.961821][T22478] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7416'. [ 820.019746][T22478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 821.695424][T22506] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7430'. [ 821.736029][T22506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.260034][T22532] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.7444'. [ 822.272050][T22532] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.7444'. [ 823.011743][T22558] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.7456'. [ 823.053967][T22558] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.7456'. [ 827.476388][T22660] lo: entered allmulticast mode [ 827.495966][T22660] lo: entered promiscuous mode [ 827.504370][T22660] lo: left allmulticast mode [ 831.082908][T22752] lo: entered allmulticast mode [ 831.103203][T22753] lo: entered promiscuous mode [ 831.130734][T22753] lo: left allmulticast mode [ 832.502815][T22783] lo: entered allmulticast mode [ 832.527825][T22783] lo: entered promiscuous mode [ 832.532640][T22783] lo: left allmulticast mode [ 833.818679][T20813] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 834.576378][T22835] syzkaller0: mtu greater than device maximum [ 835.395369][ T5782] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 835.914674][ T5782] Bluetooth: hci2: command tx timeout [ 838.295938][T22894] syzkaller0: mtu greater than device maximum [ 838.630363][T22908] syzkaller0: mtu greater than device maximum [ 839.274402][ T5782] Bluetooth: hci0: unknown advertising packet type: 0x24 [ 839.274488][ T5782] Bluetooth: hci0: Malformed LE Event: 0x02 [ 839.380172][ T5782] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 841.269524][ T5782] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 843.357480][ T5782] Bluetooth: hci1: command tx timeout [ 843.733897][ T5782] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 844.126831][T23021] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7667'. [ 845.149461][T20813] Bluetooth: hci0: unknown advertising packet type: 0x10 [ 845.149537][T20813] Bluetooth: hci0: Malformed LE Event: 0x02 [ 845.462577][T23036] validate_nla: 3 callbacks suppressed [ 845.462593][T23036] netlink: 'syz.3.7671': attribute type 10 has an invalid length. [ 845.493263][T23036] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.503443][T23036] bridge_slave_1: left allmulticast mode [ 845.512396][T23036] bridge_slave_1: left promiscuous mode [ 845.518482][T23036] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.753390][T20813] Bluetooth: hci3: command tx timeout [ 845.795518][T23047] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7679'. [ 846.401550][T23078] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.7691'. [ 846.829847][T23094] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7701'. [ 846.851001][T23094] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 847.511543][T20813] Bluetooth: hci3: unknown advertising packet type: 0x10 [ 847.511617][T20813] Bluetooth: hci3: Malformed LE Event: 0x02 [ 847.700772][T20813] Bluetooth: hci1: unknown advertising packet type: 0x10 [ 847.700847][T20813] Bluetooth: hci1: Malformed LE Event: 0x02 [ 847.757796][T23127] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7715'. [ 847.772656][T23127] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 847.882446][T23131] netlink: 'syz.0.7717': attribute type 10 has an invalid length. [ 847.900642][T23131] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.927915][T23131] bridge_slave_1: left allmulticast mode [ 847.933909][T23131] bridge_slave_1: left promiscuous mode [ 847.948558][T23131] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.144277][T23141] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.7723'. [ 848.443102][T23151] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 848.475950][T23151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.688541][T23165] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.7735'. [ 848.716361][T23163] netlink: 'syz.2.7733': attribute type 10 has an invalid length. [ 848.733720][T23163] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.755495][T23163] bridge_slave_1: left allmulticast mode [ 848.761522][T23163] bridge_slave_1: left promiscuous mode [ 848.767609][T23163] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.862961][T23172] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.7745'. [ 849.091066][T23182] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7742'. [ 849.101137][T23182] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 849.419412][T23192] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 849.447735][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.461259][T23192] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 849.472899][T23192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.532166][T20813] Bluetooth: hci0: Malformed LE Event: 0x02 [ 849.764618][T23209] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7753'. [ 849.778934][T23209] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 850.288008][T23229] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 850.299452][T23229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.311126][T23229] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 850.324989][T23229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.340053][T23229] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 850.351461][T23229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.368970][T23228] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.7761'. [ 850.532428][T23238] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7768'. [ 850.577935][T23238] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 851.048093][T23260] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 851.073847][T23260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.097473][T23260] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 851.118380][T23260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.146544][T23260] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 851.176353][T23260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.888486][T23287] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.7790'. [ 854.878760][T20813] Bluetooth: hci2: Malformed LE Event: 0x02 [ 854.940486][T23311] netlink: 'syz.0.7800': attribute type 1 has an invalid length. [ 854.989049][T23311] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.7800'. [ 855.044257][T23313] netlink: 'syz.3.7802': attribute type 3 has an invalid length. [ 855.056111][T23313] netlink: 'syz.3.7802': attribute type 5 has an invalid length. [ 855.141631][T23317] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.7803'. [ 855.305004][T23326] netlink: 'syz.2.7808': attribute type 39 has an invalid length. [ 859.090483][T23413] netlink: 'syz.0.7845': attribute type 3 has an invalid length. [ 859.103194][T23413] netlink: 'syz.0.7845': attribute type 5 has an invalid length. [ 859.107029][T23414] syz.3.7844 (23414) used obsolete PPPIOCDETACH ioctl [ 859.540649][T23430] syz.2.7853[23430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 859.540888][T23430] syz.2.7853[23430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 859.875584][T23438] netlink: 'syz.1.7857': attribute type 3 has an invalid length. [ 859.902141][T23438] netlink: 'syz.1.7857': attribute type 5 has an invalid length. [ 860.678430][T23449] netlink: 'syz.3.7861': attribute type 39 has an invalid length. [ 860.986875][T23462] syz.1.7868[23462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 860.987015][T23462] syz.1.7868[23462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.494703][T23475] netlink: 'syz.1.7874': attribute type 39 has an invalid length. [ 861.850744][T23487] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.7881'. [ 861.880371][T23489] syz.0.7878[23489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.880594][T23489] syz.0.7878[23489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 862.442272][T23504] netlink: 'syz.0.7887': attribute type 39 has an invalid length. [ 864.746468][T23556] netlink: 'syz.0.7912': attribute type 39 has an invalid length. [ 867.235235][T23610] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.7937'. [ 870.311182][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.320420][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.068989][T23668] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7973'. [ 871.092330][T23668] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 871.106513][T23668] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 872.317494][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 872.459490][T23706] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7980'. [ 872.471029][T23706] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 872.485742][T23706] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 874.161592][T23730] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7992'. [ 874.177692][T23730] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 874.197735][T23730] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 874.955082][T23769] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.8012'. [ 875.109058][T23776] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.8016'. [ 875.128320][T23776] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.8016'. [ 875.157238][T23776] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8016'. [ 876.196847][T23804] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8029'. [ 877.429819][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 877.571707][T23861] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.8056'. [ 877.725351][T23863] syzkaller0: entered promiscuous mode [ 877.733805][T23863] syzkaller0: entered allmulticast mode [ 878.274864][T23875] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8061'. [ 879.860781][T23898] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.8071'. [ 883.297640][T23963] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.8098'. [ 883.313479][T23963] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.8098'. [ 883.323465][T23963] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8098'. [ 883.425015][T23969] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.8110'. [ 883.441429][T23969] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.8110'. [ 883.457521][T23969] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8110'. [ 884.787573][ T5845] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 885.283546][T23993] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8114'. [ 887.040019][T24072] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.8152'. [ 887.412144][T24087] netlink: 'syz.3.8159': attribute type 22 has an invalid length. [ 887.544293][T24093] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8162'. [ 887.563198][T24093] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 887.673316][T20813] Bluetooth: hci2: command 0x0406 tx timeout [ 888.059244][T24114] netlink: 'syz.1.8171': attribute type 22 has an invalid length. [ 888.212925][T24123] netlink: 'syz.0.8175': attribute type 11 has an invalid length. [ 888.223126][T24123] netlink: 126292 bytes leftover after parsing attributes in process `syz.0.8175'. [ 888.404716][ T5782] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 888.557497][ T27] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 889.093107][T24139] netlink: 'syz.2.8184': attribute type 22 has an invalid length. [ 889.215864][T24143] batadv0: entered promiscuous mode [ 889.228545][T24143] batadv0: entered allmulticast mode [ 889.654586][ T5782] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 890.093325][ T27] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 890.757274][T24183] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.8213'. [ 891.068184][T24195] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8210'. [ 891.079147][T24195] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 892.265558][T24228] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8227'. [ 892.280047][T24228] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 892.392213][T17283] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 892.548448][T20812] Bluetooth: hci2: command 0x0406 tx timeout [ 892.787542][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 893.735071][T24287] netlink: 'syz.1.8257': attribute type 11 has an invalid length. [ 893.748783][T20813] Bluetooth: hci1: command 0x0406 tx timeout [ 893.749165][T24287] netlink: 126292 bytes leftover after parsing attributes in process `syz.1.8257'. [ 894.111889][T24299] batadv0: entered promiscuous mode [ 894.121617][T24299] batadv0: entered allmulticast mode [ 895.554534][T24331] netlink: 'syz.1.8277': attribute type 2 has an invalid length. [ 895.577425][T24331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8277'. [ 895.623529][T24331] netlink: 'syz.1.8277': attribute type 2 has an invalid length. [ 895.642929][T24331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8277'. [ 898.518839][T24427] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8322'. [ 898.534431][T24427] : renamed from caif0 [ 898.564378][T24427] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 898.913846][T24441] syzkaller0: entered promiscuous mode [ 898.920000][T24441] syzkaller0: entered allmulticast mode [ 902.465837][T24498] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 903.904154][T24550] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.8378'. [ 904.620995][T24541] rxe_eth0 speed is unknown, defaulting to 1000 [ 906.366575][ T5781] Bluetooth: hci0: ACL packet too small [ 906.719125][T24620] syzkaller0: entered promiscuous mode [ 906.724657][T24620] syzkaller0: entered allmulticast mode [ 906.810880][T24623] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 908.352473][T24625] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.8412'. [ 908.869866][T24656] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.8426'. [ 909.015243][T24659] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 909.152648][T24661] syzkaller0: entered promiscuous mode [ 909.162571][T24661] syzkaller0: entered allmulticast mode [ 910.912637][T24680] netlink: 'syz.3.8440': attribute type 10 has an invalid length. [ 910.966353][T24680] team0 (unregistering): Port device team_slave_0 removed [ 911.024258][T24680] team0 (unregistering): Port device team_slave_1 removed [ 911.584579][T24713] syzkaller0: entered promiscuous mode [ 911.611648][T24713] syzkaller0: entered allmulticast mode [ 914.867139][T24729] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.8457'. [ 914.967826][T24729] openvswitch: netlink: Duplicate key (type 0). [ 917.055824][T24740] rxe_eth0 speed is unknown, defaulting to 1000 [ 917.062728][T24745] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8466'. [ 917.263396][T24753] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.8470'. [ 918.549581][T24787] netlink: 'syz.0.8483': attribute type 10 has an invalid length. [ 920.432197][T24821] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.8497'. [ 920.476938][T24821] openvswitch: netlink: Duplicate key (type 0). [ 923.373104][T24832] rxe_eth0 speed is unknown, defaulting to 1000 [ 924.266392][T24861] netlink: 'syz.3.8514': attribute type 10 has an invalid length. [ 925.075122][T24863] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.8515'. [ 925.142492][T24865] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.8516'. [ 925.157736][T24865] openvswitch: netlink: Duplicate key (type 0). [ 926.211295][T24895] netlink: 'syz.1.8530': attribute type 10 has an invalid length. [ 928.368082][T24909] rxe_eth0 speed is unknown, defaulting to 1000 [ 928.973241][T24940] rxe_eth0 speed is unknown, defaulting to 1000 [ 930.054818][T24952] netlink: 'syz.2.8551': attribute type 10 has an invalid length. [ 931.621046][T24967] rxe_eth0 speed is unknown, defaulting to 1000 [ 931.677069][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.697542][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.158566][T24993] netlink: 'syz.1.8569': attribute type 10 has an invalid length. [ 933.379777][T24995] netlink: 'syz.3.8570': attribute type 1 has an invalid length. [ 933.426214][T24995] netlink: 'syz.3.8570': attribute type 4 has an invalid length. [ 933.457448][T24995] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8570'. [ 933.494292][T24972] rxe_eth0 speed is unknown, defaulting to 1000 [ 934.509364][T25015] netlink: 'syz.3.8580': attribute type 10 has an invalid length. [ 936.064167][T25060] netlink: 'syz.0.8599': attribute type 1 has an invalid length. [ 936.077125][T25060] netlink: 'syz.0.8599': attribute type 4 has an invalid length. [ 936.089661][T25060] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8599'. [ 936.229338][T25050] rxe_eth0 speed is unknown, defaulting to 1000 [ 936.810152][T25073] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8604'. [ 938.055570][T25058] rxe_eth0 speed is unknown, defaulting to 1000 [ 938.175080][T25090] netlink: 'syz.1.8609': attribute type 1 has an invalid length. [ 938.255334][T25090] netlink: 'syz.1.8609': attribute type 4 has an invalid length. [ 938.297693][T25090] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8609'. [ 942.813758][T25123] syzkaller0: entered promiscuous mode [ 942.821303][T25123] syzkaller0: entered allmulticast mode [ 945.302380][T25161] netlink: 'syz.0.8638': attribute type 1 has an invalid length. [ 945.329555][T25161] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.8638'. [ 945.348022][T25161] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8638'. [ 946.464222][T25169] rxe_eth0 speed is unknown, defaulting to 1000 [ 947.071338][T25194] netlink: 'syz.1.8653': attribute type 1 has an invalid length. [ 947.087525][T25194] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.8653'. [ 947.096969][T25194] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8653'. [ 950.570716][T25215] netlink: 'syz.2.8664': attribute type 1 has an invalid length. [ 950.578675][T25215] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.8664'. [ 950.597448][T25215] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8664'. [ 951.831995][T25223] rxe_eth0 speed is unknown, defaulting to 1000 [ 954.004001][T25290] rxe_eth0 speed is unknown, defaulting to 1000 [ 958.163354][T25407] rxe_eth0 speed is unknown, defaulting to 1000 [ 961.505065][ T5781] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 962.470102][T25574] rxe_eth0 speed is unknown, defaulting to 1000 [ 963.175423][T25602] rxe_eth0 speed is unknown, defaulting to 1000 [ 963.777863][T25624] syzkaller0: entered promiscuous mode [ 963.783382][T25624] syzkaller0: entered allmulticast mode [ 963.820673][T25624] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 964.203202][T25638] netlink: 'syz.0.8848': attribute type 4 has an invalid length. [ 964.211058][T25638] netlink: 'syz.0.8848': attribute type 4 has an invalid length. [ 964.223163][T25638] netlink: 203268 bytes leftover after parsing attributes in process `syz.0.8848'. [ 965.005736][T25659] rxe_eth0 speed is unknown, defaulting to 1000 [ 965.728486][ T5781] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 965.982175][T25693] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.8871'. [ 967.096605][T25699] netlink: 'syz.2.8876': attribute type 4 has an invalid length. [ 967.128280][T25699] netlink: 'syz.2.8876': attribute type 4 has an invalid length. [ 967.144042][T25699] netlink: 203268 bytes leftover after parsing attributes in process `syz.2.8876'. [ 967.420265][T25709] rxe_eth0 speed is unknown, defaulting to 1000 [ 967.927468][T25733] sctp: [Deprecated]: syz.0.8884 (pid 25733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 967.927468][T25733] Use struct sctp_sack_info instead [ 967.936611][T25734] syzkaller0: entered promiscuous mode [ 967.968351][T25734] syzkaller0: entered allmulticast mode [ 968.311076][T25742] netlink: 'syz.3.8888': attribute type 4 has an invalid length. [ 968.337925][T25742] netlink: 'syz.3.8888': attribute type 4 has an invalid length. [ 968.345715][T25742] netlink: 203268 bytes leftover after parsing attributes in process `syz.3.8888'. [ 968.619632][T25760] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.8904'. [ 970.537189][T25786] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.8909'. [ 970.890006][T25797] sctp: [Deprecated]: syz.2.8915 (pid 25797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 970.890006][T25797] Use struct sctp_sack_info instead [ 971.645461][T25832] sctp: [Deprecated]: syz.1.8927 (pid 25832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 971.645461][T25832] Use struct sctp_sack_info instead [ 971.875765][T25840] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.8934'. [ 973.855893][T25901] netlink: 'syz.0.8960': attribute type 3 has an invalid length. [ 973.881177][T25901] netlink: 'syz.0.8960': attribute type 1 has an invalid length. [ 973.897950][T25901] netlink: 'syz.0.8960': attribute type 1 has an invalid length. [ 973.914049][T25901] netlink: 'syz.0.8960': attribute type 2 has an invalid length. [ 973.933649][T25901] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.8960'. [ 976.977000][T25949] rxe_eth0 speed is unknown, defaulting to 1000 [ 977.270969][T25961] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.8985'. [ 978.082653][T25986] netlink: 'syz.3.8995': attribute type 3 has an invalid length. [ 978.105433][T25986] netlink: 'syz.3.8995': attribute type 1 has an invalid length. [ 978.120292][T25986] netlink: 'syz.3.8995': attribute type 1 has an invalid length. [ 978.134861][T25986] netlink: 'syz.3.8995': attribute type 2 has an invalid length. [ 978.143195][T25986] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.8995'. [ 979.720331][T26009] netlink: 'syz.0.9006': attribute type 2 has an invalid length. [ 979.747194][T26009] netlink: 'syz.0.9006': attribute type 9 has an invalid length. [ 979.756681][T26009] netlink: 'syz.0.9006': attribute type 10 has an invalid length. [ 979.773039][T26009] netlink: 'syz.0.9006': attribute type 11 has an invalid length. [ 979.782645][T26009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9006'. [ 980.657069][T26043] rxe_eth0 speed is unknown, defaulting to 1000 [ 982.173203][T26092] rxe_eth0 speed is unknown, defaulting to 1000 [ 983.024449][ T5781] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 983.645390][T26132] syzkaller0: entered promiscuous mode [ 983.663767][T26132] syzkaller0: entered allmulticast mode [ 986.095082][T26182] netlink: 'syz.1.9079': attribute type 2 has an invalid length. [ 986.103364][T26182] netlink: 'syz.1.9079': attribute type 9 has an invalid length. [ 986.117791][T26182] netlink: 'syz.1.9079': attribute type 10 has an invalid length. [ 986.125832][T26182] netlink: 'syz.1.9079': attribute type 11 has an invalid length. [ 986.142259][T26182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9079'. [ 986.647286][T26192] netlink: 'syz.1.9083': attribute type 3 has an invalid length. [ 986.731982][T26197] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.9084'. [ 986.819592][ T5781] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 988.493294][ T5781] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 990.123219][T26228] syzkaller0: entered promiscuous mode [ 990.136754][T26228] syzkaller0: entered allmulticast mode [ 990.488115][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 990.497947][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 990.507565][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 990.517312][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 990.527045][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 990.536756][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 990.546057][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 990.555657][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 990.565080][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 990.574639][T26240] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 991.079569][ T5781] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 991.162277][ T5781] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 991.616427][T26270] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9118'. [ 991.744065][ T5781] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 993.112333][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.126344][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.782266][T26316] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.9139'. [ 994.733704][T26341] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.9151'. [ 996.379502][T26353] net_ratelimit: 6648 callbacks suppressed [ 996.379517][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 996.394590][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 996.403732][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 996.412867][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 996.421988][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 996.431115][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 996.440223][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 996.449350][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 996.458483][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 996.467604][T26353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 997.004927][ T5781] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 1000.761768][T26411] syzkaller0: entered promiscuous mode [ 1000.777724][T26411] syzkaller0: entered allmulticast mode [ 1006.566349][T26482] netlink: 'syz.2.9212': attribute type 14 has an invalid length. [ 1006.577484][T26482] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.9212'. [ 1006.716002][T26486] : renamed from bond0 (while UP) [ 1007.309262][T26513] : renamed from bond0 (while UP) [ 1007.382648][T26516] netlink: 'syz.0.9227': attribute type 14 has an invalid length. [ 1007.390690][T26516] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.9227'. [ 1009.960201][T26564] syzkaller0: entered promiscuous mode [ 1009.977907][T26564] syzkaller0: entered allmulticast mode [ 1012.155034][T26572] netlink: 'syz.3.9253': attribute type 21 has an invalid length. [ 1012.215036][T26581] syzkaller0: entered promiscuous mode [ 1012.222148][T26581] syzkaller0: entered allmulticast mode [ 1014.606066][T26611] netlink: 'syz.0.9271': attribute type 3 has an invalid length. [ 1014.670283][T26611] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9271'. [ 1014.921467][T26616] netlink: 539 bytes leftover after parsing attributes in process `syz.0.9267'. [ 1017.860097][T26644] netlink: 'syz.1.9277': attribute type 3 has an invalid length. [ 1017.868083][T26644] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9277'. [ 1018.148901][T26655] syzkaller0: entered promiscuous mode [ 1018.164510][T26655] syzkaller0: entered allmulticast mode [ 1021.493500][T26673] netlink: 'syz.2.9290': attribute type 3 has an invalid length. [ 1021.501670][T26673] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9290'. [ 1022.454830][T26698] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9298'. [ 1022.835941][T26709] syzkaller0: entered promiscuous mode [ 1022.842590][T26709] syzkaller0: entered allmulticast mode [ 1026.615212][T26761] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9319'. [ 1029.925588][T26787] syzkaller0: entered promiscuous mode [ 1029.936374][T26787] syzkaller0: entered allmulticast mode [ 1033.503107][T26824] sctp: [Deprecated]: syz.1.9341 (pid 26824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1033.503107][T26824] Use struct sctp_sack_info instead [ 1037.250402][T26879] syzkaller0: entered promiscuous mode [ 1037.256055][T26879] syzkaller0: entered allmulticast mode [ 1037.375340][T26885] netlink: 'syz.0.9367': attribute type 21 has an invalid length. [ 1037.434622][T26884] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9368'. [ 1037.615328][T26894] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.9372'. [ 1037.639966][T26894] net_ratelimit: 3319 callbacks suppressed [ 1037.639982][T26894] netlink: zone id is out of range [ 1037.682985][T26894] netlink: zone id is out of range [ 1037.704314][T26894] netlink: zone id is out of range [ 1037.717967][T26894] netlink: zone id is out of range [ 1037.756352][T26894] netlink: zone id is out of range [ 1037.761800][T26894] netlink: zone id is out of range [ 1037.767181][T26894] netlink: zone id is out of range [ 1037.772551][T26894] netlink: zone id is out of range [ 1037.795842][T26894] netlink: zone id is out of range [ 1037.820326][T26894] netlink: zone id is out of range [ 1039.892092][T26909] sctp: [Deprecated]: syz.0.9382 (pid 26909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1039.892092][T26909] Use struct sctp_sack_info instead [ 1040.081832][T26913] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.9376'. [ 1040.249492][T26917] netlink: 'syz.2.9379': attribute type 21 has an invalid length. [ 1041.134159][T26934] netlink: 207684 bytes leftover after parsing attributes in process `syz.3.9389'. [ 1041.175739][T26934] netlink: 'syz.3.9389': attribute type 1 has an invalid length. [ 1041.188719][T26930] syzkaller0: entered promiscuous mode [ 1041.198470][T26934] netlink: 'syz.3.9389': attribute type 2 has an invalid length. [ 1041.213654][T26930] syzkaller0: entered allmulticast mode [ 1041.477315][ T5781] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1041.477648][ T5781] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1045.092601][T26942] netlink: 'syz.1.9392': attribute type 21 has an invalid length. [ 1046.546910][ T5781] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1046.546969][ T5781] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1047.771250][T27014] netlink: 207684 bytes leftover after parsing attributes in process `syz.0.9423'. [ 1047.817747][T27014] netlink: 'syz.0.9423': attribute type 1 has an invalid length. [ 1047.825530][T27014] netlink: 'syz.0.9423': attribute type 2 has an invalid length. [ 1047.956709][ T5781] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1047.956743][ T5781] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1048.464245][T27039] syz.2.9433[27039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1048.464585][T27039] syz.2.9433[27039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1054.571626][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.589489][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.021096][T27218] netlink: 'syz.0.9509': attribute type 3 has an invalid length. [ 1058.041075][T27218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1061.619971][ T5781] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 1063.440179][T27314] netlink: 'syz.1.9562': attribute type 3 has an invalid length. [ 1063.463691][T27314] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9562'. [ 1063.604929][T27318] rxe_eth0 speed is unknown, defaulting to 1000 [ 1063.668377][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.661507][T27451] rxe_eth0 speed is unknown, defaulting to 1000 [ 1075.784206][T27500] rxe_eth0 speed is unknown, defaulting to 1000 [ 1077.674302][T27537] syzkaller0: entered promiscuous mode [ 1077.717181][T27537] syzkaller0: entered allmulticast mode [ 1077.754383][T27537] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 1078.042509][T27542] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.9643'. [ 1078.065160][T27542] net_ratelimit: 80 callbacks suppressed [ 1078.065175][T27542] netlink: zone id is out of range [ 1078.077492][T27542] netlink: zone id is out of range [ 1078.082629][T27542] netlink: zone id is out of range [ 1078.087912][T27542] netlink: zone id is out of range [ 1078.094409][T27542] netlink: zone id is out of range [ 1078.101022][T27542] netlink: zone id is out of range [ 1078.106185][T27542] netlink: zone id is out of range [ 1078.113082][T27542] netlink: zone id is out of range [ 1078.118506][T27542] netlink: zone id is out of range [ 1078.123640][T27542] netlink: zone id is out of range [ 1078.363022][T27546] rxe_eth0 speed is unknown, defaulting to 1000 [ 1078.561578][T27558] syzkaller0: entered promiscuous mode [ 1078.571467][T27558] syzkaller0: entered allmulticast mode [ 1083.652584][T27606] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.9674'. [ 1083.690532][T27606] net_ratelimit: 11 callbacks suppressed [ 1083.690548][T27606] netlink: zone id is out of range [ 1083.780774][T27606] netlink: zone id is out of range [ 1083.785944][T27606] netlink: zone id is out of range [ 1083.862147][T27606] netlink: zone id is out of range [ 1083.907732][T27606] netlink: zone id is out of range [ 1083.913170][T27606] netlink: zone id is out of range [ 1083.927631][T27606] netlink: zone id is out of range [ 1083.934749][T27606] netlink: zone id is out of range [ 1083.940828][T27606] netlink: zone id is out of range [ 1083.951069][T27606] netlink: zone id is out of range [ 1086.336676][T27635] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.9688'. [ 1089.108838][T27687] syzkaller0: entered promiscuous mode [ 1089.120399][T27687] syzkaller0: entered allmulticast mode [ 1089.126964][T27688] syzkaller0: entered promiscuous mode [ 1089.135686][T27688] syzkaller0: entered allmulticast mode [ 1093.905499][T27763] syzkaller0: entered promiscuous mode [ 1093.920886][T27763] syzkaller0: entered allmulticast mode [ 1094.013889][T27767] netlink: 'syz.3.9745': attribute type 1 has an invalid length. [ 1094.024591][T27767] netlink: 'syz.3.9745': attribute type 4 has an invalid length. [ 1094.032939][T27767] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9745'. [ 1095.207716][T27796] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9759'. [ 1095.231826][T27796] netlink: 'syz.2.9759': attribute type 16 has an invalid length. [ 1095.243132][T27796] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9759'. [ 1095.774590][T27810] syzkaller0: entered promiscuous mode [ 1095.791257][T27810] syzkaller0: entered allmulticast mode [ 1098.199534][T27836] netlink: 'syz.1.9778': attribute type 1 has an invalid length. [ 1098.228983][T27836] netlink: 'syz.1.9778': attribute type 4 has an invalid length. [ 1098.246318][T27836] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9778'. [ 1098.400243][T27841] netlink: 'syz.0.9788': attribute type 1 has an invalid length. [ 1098.429068][T27841] netlink: 'syz.0.9788': attribute type 4 has an invalid length. [ 1098.458834][T27841] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9788'. [ 1099.237292][T27859] syzkaller0: entered promiscuous mode [ 1099.259724][T27859] syzkaller0: entered allmulticast mode [ 1099.289261][T27859] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1099.483419][T27869] sock: sock_timestamping_bind_phc: sock not bind to device [ 1100.299734][T27896] netlink: 'syz.2.9806': attribute type 3 has an invalid length. [ 1100.312968][T27896] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9806'. [ 1100.573033][T27905] netlink: 'syz.1.9810': attribute type 1 has an invalid length. [ 1100.582050][T27905] netlink: 'syz.1.9810': attribute type 2 has an invalid length. [ 1100.591176][T27905] netlink: 'syz.1.9810': attribute type 2 has an invalid length. [ 1100.599379][T27905] netlink: 'syz.1.9810': attribute type 3 has an invalid length. [ 1100.607137][T27905] netlink: 'syz.1.9810': attribute type 4 has an invalid length. [ 1100.615535][T27905] netlink: 'syz.1.9810': attribute type 5 has an invalid length. [ 1100.630796][T27905] netlink: 'syz.1.9810': attribute type 6 has an invalid length. [ 1100.639043][T27905] netlink: 'syz.1.9810': attribute type 7 has an invalid length. [ 1100.646864][T27905] netlink: 'syz.1.9810': attribute type 9 has an invalid length. [ 1100.655022][T27905] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.9810'. [ 1101.925189][T27955] syzkaller0: entered promiscuous mode [ 1101.938314][T27955] syzkaller0: entered allmulticast mode [ 1103.357303][T27985] syzkaller0: entered promiscuous mode [ 1103.367081][T27985] syzkaller0: entered allmulticast mode [ 1104.627221][T28028] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9867'. [ 1104.945998][T28040] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9880'. [ 1105.913848][T28064] validate_nla: 5 callbacks suppressed [ 1105.913889][T28064] netlink: 'syz.3.9884': attribute type 3 has an invalid length. [ 1105.933286][T28064] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9884'. [ 1106.190037][T28075] netlink: 'syz.2.9896': attribute type 3 has an invalid length. [ 1106.207521][T28075] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9896'. [ 1107.970023][T28113] syzkaller0: entered promiscuous mode [ 1107.987449][T28113] syzkaller0: entered allmulticast mode [ 1110.900846][T28169] syzkaller0: entered promiscuous mode [ 1110.923475][T28169] syzkaller0: entered allmulticast mode [ 1114.375801][T28226] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9957'. [ 1115.221037][T28258] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9973'. [ 1115.393666][T28260] syzkaller0: entered promiscuous mode [ 1115.427496][T28260] syzkaller0: entered allmulticast mode [ 1115.579959][T28267] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.9977'. [ 1116.009106][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.026591][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.836594][T28297] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.9989'. [ 1119.185514][T28313] syzkaller0: entered promiscuous mode [ 1119.214467][T28313] syzkaller0: entered allmulticast mode [ 1123.956229][T28326] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.10003'. [ 1124.326923][ T5781] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 1125.360460][ T5781] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1125.562123][T28379] syz.0.10028: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1125.582884][T28379] CPU: 0 PID: 28379 Comm: syz.0.10028 Not tainted syzkaller #0 [ 1125.590470][T28379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1125.600551][T28379] Call Trace: [ 1125.603851][T28379] [ 1125.606799][T28379] dump_stack_lvl+0x18c/0x250 [ 1125.611509][T28379] ? show_regs_print_info+0x20/0x20 [ 1125.616731][T28379] ? load_image+0x420/0x420 [ 1125.621269][T28379] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1125.627717][T28379] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1125.634252][T28379] warn_alloc+0x246/0x340 [ 1125.638640][T28379] ? stack_trace_save+0xaa/0x100 [ 1125.643607][T28379] ? zone_watermark_ok_safe+0x230/0x230 [ 1125.649187][T28379] ? kasan_set_track+0x5f/0x70 [ 1125.653987][T28379] ? kasan_set_track+0x4e/0x70 [ 1125.658772][T28379] ? __kasan_kmalloc+0x8f/0xa0 [ 1125.663567][T28379] ? xsk_init_queue+0xad/0x100 [ 1125.668434][T28379] ? xsk_setsockopt+0x4c9/0x750 [ 1125.673310][T28379] ? do_sock_setsockopt+0x175/0x1a0 [ 1125.678535][T28379] ? __x64_sys_setsockopt+0x182/0x200 [ 1125.683938][T28379] __vmalloc_node_range+0x129/0x1320 [ 1125.689283][T28379] ? free_vm_area+0x50/0x50 [ 1125.693829][T28379] vmalloc_user+0x74/0x80 [ 1125.698188][T28379] ? xskq_create+0xbf/0x170 [ 1125.702733][T28379] xskq_create+0xbf/0x170 [ 1125.707094][T28379] xsk_init_queue+0xad/0x100 [ 1125.711710][T28379] xsk_setsockopt+0x4c9/0x750 [ 1125.716425][T28379] ? xsk_poll+0x670/0x670 [ 1125.720798][T28379] ? __fget_files+0x28/0x460 [ 1125.725451][T28379] ? aa_sock_opt_perm+0x74/0x100 [ 1125.730422][T28379] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1125.736000][T28379] ? security_socket_setsockopt+0x7e/0xa0 [ 1125.741750][T28379] ? xsk_poll+0x670/0x670 [ 1125.746112][T28379] do_sock_setsockopt+0x175/0x1a0 [ 1125.751166][T28379] ? __fdget+0x180/0x210 [ 1125.755443][T28379] __x64_sys_setsockopt+0x182/0x200 [ 1125.760680][T28379] do_syscall_64+0x55/0xb0 [ 1125.765123][T28379] ? clear_bhb_loop+0x40/0x90 [ 1125.769823][T28379] ? clear_bhb_loop+0x40/0x90 [ 1125.774534][T28379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1125.780462][T28379] RIP: 0033:0x7ff32939e559 [ 1125.784900][T28379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.804533][T28379] RSP: 002b:00007ff32a321028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1125.812981][T28379] RAX: ffffffffffffffda RBX: 00007ff329625fa0 RCX: 00007ff32939e559 [ 1125.820980][T28379] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1125.828976][T28379] RBP: 00007ff329435ab8 R08: 0000000000000004 R09: 0000000000000000 [ 1125.836970][T28379] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1125.844968][T28379] R13: 00007ff329626038 R14: 00007ff329625fa0 R15: 00007ffe74448f18 [ 1125.852979][T28379] [ 1125.906825][T28379] Mem-Info: [ 1125.915499][T28379] active_anon:15307 inactive_anon:0 isolated_anon:0 [ 1125.915499][T28379] active_file:18594 inactive_file:40367 isolated_file:0 [ 1125.915499][T28379] unevictable:768 dirty:209 writeback:0 [ 1125.915499][T28379] slab_reclaimable:10548 slab_unreclaimable:99391 [ 1125.915499][T28379] mapped:23940 shmem:1364 pagetables:557 [ 1125.915499][T28379] sec_pagetables:0 bounce:0 [ 1125.915499][T28379] kernel_misc_reclaimable:0 [ 1125.915499][T28379] free:1328370 free_pcp:6189 free_cma:0 [ 1125.995409][T28379] Node 0 active_anon:61272kB inactive_anon:0kB active_file:74376kB inactive_file:161268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95788kB dirty:840kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10064kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no [ 1126.050642][T28379] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1126.097464][T28379] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1126.126876][T28379] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 1126.134514][T28379] Node 0 DMA32 free:1395108kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:61132kB inactive_anon:0kB active_file:74376kB inactive_file:160180kB unevictable:1536kB writepending:840kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:17940kB local_pcp:3840kB free_cma:0kB [ 1126.171844][T28379] lowmem_reserve[]: 0 0 1 1 1 [ 1126.176652][T28379] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:1088kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1126.231586][T28379] lowmem_reserve[]: 0 0 0 0 0 [ 1126.247572][T28379] Node 1 Normal free:3902508kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7872kB local_pcp:5824kB free_cma:0kB [ 1126.332730][T28379] lowmem_reserve[]: 0 0 0 0 0 [ 1126.351559][T28379] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1126.387507][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1126.485524][T28379] Node 0 DMA32: 1495*4kB (UME) 919*8kB (UME) 519*16kB (UME) 365*32kB (UME) 216*64kB (UME) 521*128kB (UME) 315*256kB (UME) 155*512kB (UM) 43*1024kB (UME) 8*2048kB (UME) 259*4096kB (UM) = 1395108kB [ 1126.587874][T28379] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1126.646913][T28379] Node 1 Normal: 199*4kB (UME) 52*8kB (UME) 33*16kB (UME) 203*32kB (UME) 58*64kB (UME) 15*128kB (UME) 2*256kB (UM) 0*512kB 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3902508kB [ 1126.668518][T28379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1126.678802][T28379] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1126.694949][T28379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1126.717470][T28379] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1126.736163][T28379] 60325 total pagecache pages [ 1126.747475][T28379] 0 pages in swap cache [ 1126.755271][T28379] Free swap = 124996kB [ 1126.759966][T28379] Total swap = 124996kB [ 1126.764214][T28379] 2097051 pages RAM [ 1126.768689][T28379] 0 pages HighMem/MovableOnly [ 1126.773554][T28379] 421118 pages reserved [ 1126.778523][T28379] 0 pages cma reserved [ 1127.998008][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 1129.934018][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 1130.073288][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 1131.987987][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 1146.182916][T28616] netlink: 'syz.1.10129': attribute type 10 has an invalid length. [ 1146.331587][T28616] : (slave wlan1): Enslaving as an active interface with an up link [ 1148.722883][T28638] netlink: 'syz.0.10149': attribute type 21 has an invalid length. [ 1149.075572][T28687] netlink: 'syz.1.10169': attribute type 21 has an invalid length. [ 1149.087579][T28687] netlink: 'syz.1.10169': attribute type 19 has an invalid length. [ 1149.106058][T28687] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.10169'. [ 1149.430639][T28703] netlink: 'syz.3.10168': attribute type 21 has an invalid length. [ 1150.258320][T28736] netlink: 'syz.2.10184': attribute type 21 has an invalid length. [ 1150.496383][T28744] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1150.537618][T28744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.598281][T28744] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1150.609848][T28744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.620298][T28744] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1150.636082][T28744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.897600][T28753] syzkaller0: entered promiscuous mode [ 1150.904517][T28753] syzkaller0: entered allmulticast mode [ 1153.001269][T28791] syzkaller0: entered promiscuous mode [ 1153.017035][T28791] syzkaller0: entered allmulticast mode [ 1154.169291][T28828] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.10219'. [ 1158.721074][T28873] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1158.747803][T28873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.767657][T28873] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1158.817411][T28873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.917494][T28873] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1158.938040][T28873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.258833][T28911] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.10252'. [ 1161.328437][ T5781] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 1163.349404][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 1163.584696][T28955] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10270'. [ 1165.122823][T28973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1168.101057][T29002] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.10291'. [ 1173.105745][T29036] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.10303'. [ 1174.398571][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 1176.350723][T29081] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.10328'. [ 1176.467631][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 1177.434913][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.443614][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.543495][T29085] syzkaller0: entered promiscuous mode [ 1178.565446][T29085] syzkaller0: entered allmulticast mode [ 1183.779032][T29212] netlink: 'syz.1.10375': attribute type 3 has an invalid length. [ 1183.787095][T29212] netlink: 'syz.1.10375': attribute type 5 has an invalid length. [ 1183.825716][T29212] netlink: 'syz.1.10375': attribute type 6 has an invalid length. [ 1183.847776][T29212] netlink: 197520 bytes leftover after parsing attributes in process `syz.1.10375'. [ 1184.163944][T29220] netlink: 'syz.0.10387': attribute type 3 has an invalid length. [ 1184.190279][T29220] netlink: 'syz.0.10387': attribute type 5 has an invalid length. [ 1184.215862][T29220] netlink: 'syz.0.10387': attribute type 6 has an invalid length. [ 1184.236736][T29220] netlink: 197520 bytes leftover after parsing attributes in process `syz.0.10387'. [ 1185.957187][T29248] netlink: 'syz.3.10392': attribute type 3 has an invalid length. [ 1185.997464][T29248] netlink: 'syz.3.10392': attribute type 5 has an invalid length. [ 1186.005626][T29248] netlink: 'syz.3.10392': attribute type 6 has an invalid length. [ 1186.025733][T29248] netlink: 197520 bytes leftover after parsing attributes in process `syz.3.10392'. [ 1193.167676][T29344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1194.522535][T29357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium Stopping sshd: [ 1197.371196][T29387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium stopped /usr/sbin/sshd (pid 5524) OK Stopping crond: stopped /usr/sbin/crond (pid 5509) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5434) Stopping network: OK Stopping iptables: OK Stopping system message bus: [ 1201.205696][T29456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5122) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only [ 1212.650705][T29573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.83 closed by remote host. [ 1214.194461][T24485] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 1214.317549][T24485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.435521][T24485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.530049][T24485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.240070][T29577] smc: removing ib device rxe0 [ 1215.253612][T29577] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1215.263149][T29577] ACPI: PM: Preparing to enter system sleep state S5 [ 1215.272289][T29577] kvm: exiting hardware virtualization [ 1215.282265][T29577] reboot: Power down serialport: VM disconnected.