last executing test programs: 3.633878499s ago: executing program 1 (id=40010): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.63364439s ago: executing program 2 (id=40011): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r0) 3.63236587s ago: executing program 0 (id=40019): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e) 3.508253647s ago: executing program 2 (id=40012): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x4, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790020000000000095000000"], 0x0, 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="ea", 0x1}], 0x1}, 0x80) 3.066375602s ago: executing program 3 (id=40014): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x5, 0xd, 0x5, 0x0, 0x7fffffff, 0x7a5d4, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x11}, 0x2, 0x1, 0x7, 0x1, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 2.993733677s ago: executing program 2 (id=40024): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001780)="ad4b", 0x2}], 0x1}, 0xc0895) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 2.646263346s ago: executing program 3 (id=40016): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xb2, &(0x7f00000000c0)=""/178, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000240)=[{0x1, 0x5, 0xd, 0x1}, {0x1, 0x3, 0xb, 0x1}, {0x1, 0x5, 0xf, 0x8}], 0x10, 0x9}, 0x94) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%-5lx \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), &(0x7f0000000400)=""/154}, 0x20) 2.645149117s ago: executing program 2 (id=40026): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e) 2.644629527s ago: executing program 0 (id=40017): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x6, 0x0, 0x400, 0xcb8a57d65c6ec8e4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x15040, 0x0, 0x0, 0x6, 0x5, 0x2, 0x101, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x8000) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) 2.577343131s ago: executing program 1 (id=40018): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r0}, 0x18) 2.537701663s ago: executing program 3 (id=40020): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x4005, 0x46000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x6}, 0x80a, 0x0, 0x0, 0x3, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r0) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.368024033s ago: executing program 1 (id=40021): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x10420, 0x2000000, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f00000006c0)=@framed={{0x18, 0x8}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a) 2.339746155s ago: executing program 2 (id=40022): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x18852, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000002, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x40}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000e1ff00850000007d00000095"], 0x0, 0x10000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x13bb711e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 2.338456655s ago: executing program 0 (id=40032): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x19, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.252646589s ago: executing program 3 (id=40023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.183622064s ago: executing program 0 (id=40025): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, 0x0, 0x3000c085) close(r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x14d}], 0x1, &(0x7f00000010c0)}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.953094097s ago: executing program 0 (id=40027): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x5, 0xd, 0x5, 0x0, 0x7fffffff, 0x7a5d4, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x11}, 0x2, 0x1, 0x7, 0x1, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 1.952826707s ago: executing program 1 (id=40028): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, 0x0}, 0x200088d0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10004000, &(0x7f0000000000)="7c773644ac78e147996242c6084035ffaca184d99b01b256db8ff0a9208ef79161c2fa1b579981133d50ffbc80d20db405162a7f775c51698bf3", 0x3a, 0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe3a) 1.952663517s ago: executing program 3 (id=40029): socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63e8ffffffffffffff80002000000000101000007f0600080000000000000009000000000000001184"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1.3908366s ago: executing program 1 (id=40030): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xb2, &(0x7f00000000c0)=""/178, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000240)=[{0x1, 0x5, 0xd, 0x1}, {0x1, 0x3, 0xb, 0x1}, {0x1, 0x5, 0xf, 0x8}], 0x10, 0x9}, 0x94) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%-5lx \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), &(0x7f0000000400)=""/154}, 0x20) 92.325415ms ago: executing program 2 (id=40031): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 81.233305ms ago: executing program 0 (id=40040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x8, 0xa31, 0x8, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0)="349c4e9291a926d6c076801b8e463ca6c0aaf1088c1c1fac4b74f5152957f6d15e2f179e9ba7eb324665d353b80a0f99f7c79c443e359ab8", 0x207, r3}, 0x38) 80.921416ms ago: executing program 1 (id=40033): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e) 0s ago: executing program 3 (id=40034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x240) kernel console output (not intermixed with test programs): [ 1781.936223][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.962078][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.982155][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.994814][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.023947][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1782.051928][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.075419][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.086206][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.097256][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.109540][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.133802][ T5317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.148411][ T5317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.160035][ T5317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.172520][ T5317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.232771][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1782.298033][T21578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.311118][T21578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.355091][ T5413] veth0_vlan: entered promiscuous mode [ 1782.369473][T26107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.383323][ T5413] veth1_vlan: entered promiscuous mode [ 1782.390978][T26107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.441845][ T5413] veth0_macvtap: entered promiscuous mode [ 1782.459837][ T5413] veth1_macvtap: entered promiscuous mode [ 1782.488341][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1782.500599][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.516040][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1782.543854][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.568779][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1782.603872][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.633808][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1782.660048][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.693324][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.705062][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.727391][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.738472][ T5413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1782.749834][ T5413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1782.767916][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.867676][ T5529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30615'. [ 1782.888524][ T5413] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.899949][ T5413] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.910317][ T5413] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.920006][ T5413] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.273642][T25659] Bluetooth: hci3: command tx timeout [ 1783.351093][T21578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.430647][T24275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.451893][T24275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.508058][T21578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.645265][T21578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.669927][T24275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.680538][T24275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.785128][T21578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.331400][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1784.353065][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1784.368714][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1784.390517][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1784.413925][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1784.424563][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1785.445101][T30726] tipc: Subscription rejected, illegal request [ 1785.645275][ T5554] chnl_net:caif_netlink_parms(): no params data found [ 1786.284629][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.334473][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.364728][ T5554] bridge_slave_0: entered allmulticast mode [ 1786.429995][ T5554] bridge_slave_0: entered promiscuous mode [ 1786.449537][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.473561][T25659] Bluetooth: hci1: command tx timeout [ 1786.486281][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.528752][ T5554] bridge_slave_1: entered allmulticast mode [ 1786.567618][ T5554] bridge_slave_1: entered promiscuous mode [ 1786.906626][ T5554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.944632][ T5554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.068645][T21578] hsr_slave_0: left promiscuous mode [ 1787.079314][T21578] hsr_slave_1: left promiscuous mode [ 1787.101102][T21578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1787.121318][T21578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.143565][T21578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1787.151037][T21578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1787.173883][T21578] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1787.195810][T21578] bridge_slave_1: left allmulticast mode [ 1787.212080][T21578] bridge_slave_1: left promiscuous mode [ 1787.220299][T21578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.237823][T21578] bridge_slave_0: left allmulticast mode [ 1787.247868][T21578] bridge_slave_0: left promiscuous mode [ 1787.257128][T21578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.311701][T21578] veth1_macvtap: left promiscuous mode [ 1787.326019][T21578] veth0_macvtap: left promiscuous mode [ 1787.331774][T21578] veth1_vlan: left promiscuous mode [ 1787.337444][T21578] veth0_vlan: left promiscuous mode [ 1788.056182][T21578] team0 (unregistering): Port device team_slave_1 removed [ 1788.116368][T21578] team0 (unregistering): Port device team_slave_0 removed [ 1788.178323][T21578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1788.230069][T21578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1788.558411][T25659] Bluetooth: hci1: command tx timeout [ 1788.615463][T21578] bond0 (unregistering): Released all slaves [ 1788.812597][ T5554] team0: Port device team_slave_0 added [ 1788.854190][ T5554] team0: Port device team_slave_1 added [ 1788.935061][T30726] tipc: Subscription rejected, illegal request [ 1788.968557][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.993775][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1789.463992][ T5554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.524015][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.561876][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1789.617699][ T5554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.843750][ T5554] hsr_slave_0: entered promiscuous mode [ 1789.866024][ T5554] hsr_slave_1: entered promiscuous mode [ 1789.902308][ T5554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1789.922199][ T5554] Cannot create hsr debugfs directory [ 1790.632692][T25659] Bluetooth: hci1: command tx timeout [ 1791.696386][ T5554] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1791.733228][ T5554] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1791.775032][ T5554] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1791.825102][ T5554] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1792.330913][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.337873][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.676622][ T5554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1792.791052][ T5554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1792.802092][T25659] Bluetooth: hci1: command tx timeout [ 1792.894396][T30726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.901785][T30726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1792.988229][T30726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.995487][T30726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.500121][ T5554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1793.671133][ T5554] veth0_vlan: entered promiscuous mode [ 1793.741390][ T5554] veth1_vlan: entered promiscuous mode [ 1793.867379][ T5554] veth0_macvtap: entered promiscuous mode [ 1793.901080][ T5554] veth1_macvtap: entered promiscuous mode [ 1793.937906][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1793.970631][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1793.990905][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1794.010841][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1794.028999][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1794.052180][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1794.071003][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1794.118002][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1794.136767][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1794.154670][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1794.175899][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1794.192267][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1794.210287][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1794.235625][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1794.295129][ T5554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.319977][ T5554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.341617][ T5554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.366149][ T5554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.636590][T21576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.669291][T21576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.732118][T24275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.753863][T24275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.449204][ T5829] bridge0: port 3(bond0) entered blocking state [ 1796.513264][ T5829] bridge0: port 3(bond0) entered disabled state [ 1796.683823][ T5829] bond0: entered allmulticast mode [ 1796.689126][ T5829] bond_slave_0: entered allmulticast mode [ 1796.769968][ T5829] bond_slave_1: entered allmulticast mode [ 1796.900710][ T5829] bond0: entered promiscuous mode [ 1796.943903][ T5829] bond_slave_0: entered promiscuous mode [ 1796.989002][ T5829] bond_slave_1: entered promiscuous mode [ 1797.041348][ T5829] bridge0: port 3(bond0) entered blocking state [ 1797.048908][ T5829] bridge0: port 3(bond0) entered forwarding state [ 1798.592969][ T5868] netlink: 'syz.2.30706': attribute type 3 has an invalid length. [ 1798.624769][ T5868] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.30706'. [ 1800.548483][ T5898] netlink: 'syz.0.30716': attribute type 3 has an invalid length. [ 1800.603579][ T5898] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.30716'. [ 1803.662106][ T5932] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.30739'. [ 1805.532396][ T5962] pim6reg1: entered promiscuous mode [ 1805.538607][ T5962] pim6reg1: entered allmulticast mode [ 1806.189954][ T5967] bridge0: port 3(bond0) entered blocking state [ 1806.197104][ T5967] bridge0: port 3(bond0) entered disabled state [ 1806.214274][ T5967] bond0: entered allmulticast mode [ 1806.231765][ T5967] bond_slave_0: entered allmulticast mode [ 1806.253110][ T5967] bond_slave_1: entered allmulticast mode [ 1806.261267][ T5967] bond0: entered promiscuous mode [ 1806.282295][ T5967] bond_slave_0: entered promiscuous mode [ 1806.288550][ T5967] bond_slave_1: entered promiscuous mode [ 1806.313190][ T5967] bridge0: port 3(bond0) entered blocking state [ 1806.319993][ T5967] bridge0: port 3(bond0) entered forwarding state [ 1806.573087][ T5979] netlink: 830 bytes leftover after parsing attributes in process `syz.0.30754'. [ 1808.278540][ T6008] netlink: 830 bytes leftover after parsing attributes in process `syz.3.30765'. [ 1808.341975][ T6011] bridge0: port 3(bond0) entered blocking state [ 1808.372642][ T6011] bridge0: port 3(bond0) entered disabled state [ 1808.379271][ T6011] bond0: entered allmulticast mode [ 1808.392353][ T6011] bond_slave_0: entered allmulticast mode [ 1808.398393][ T6011] bond_slave_1: entered allmulticast mode [ 1808.427091][ T6011] bond0: entered promiscuous mode [ 1808.454373][ T6011] bond_slave_0: entered promiscuous mode [ 1808.485191][ T6011] bond_slave_1: entered promiscuous mode [ 1808.513147][ T6011] bridge0: port 3(bond0) entered blocking state [ 1808.519680][ T6011] bridge0: port 3(bond0) entered forwarding state [ 1810.831572][ T6030] netlink: 'syz.0.30781': attribute type 39 has an invalid length. [ 1811.110790][ T6040] pim6reg1: entered promiscuous mode [ 1811.116752][ T6040] pim6reg1: entered allmulticast mode [ 1811.697149][ T6061] netlink: 'syz.1.30788': attribute type 1 has an invalid length. [ 1811.733944][ T6061] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.30788'. [ 1812.554145][ T6088] netlink: 'syz.2.30801': attribute type 1 has an invalid length. [ 1812.581192][ T6088] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.30801'. [ 1813.535124][ T6115] netlink: set zone limit has 8 unknown bytes [ 1813.571542][ T6117] pim6reg1: entered promiscuous mode [ 1813.587031][ T6117] pim6reg1: entered allmulticast mode [ 1813.837811][ T6124] netlink: 'syz.0.30813': attribute type 1 has an invalid length. [ 1813.872139][ T6124] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.30813'. [ 1814.937826][ T6134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30818'. [ 1818.170875][ T6160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30830'. [ 1818.467934][ T6168] netlink: zone id is out of range [ 1818.492134][ T6168] netlink: set zone limit has 8 unknown bytes [ 1819.503955][ T6191] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.30845'. [ 1822.372750][ T6219] netlink: 14 bytes leftover after parsing attributes in process `syz.0.30859'. [ 1823.689135][ T6254] netlink: 14 bytes leftover after parsing attributes in process `syz.3.30873'. [ 1825.240893][ T6286] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.30886'. [ 1825.684544][ T6300] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.30895'. [ 1825.765049][ T6302] netlink: 10 bytes leftover after parsing attributes in process `syz.2.30894'. [ 1825.941495][ T6306] netlink: 164 bytes leftover after parsing attributes in process `syz.3.30897'. [ 1826.045568][ T6311] netlink: 'syz.0.30899': attribute type 29 has an invalid length. [ 1826.063499][ T6311] netlink: 'syz.0.30899': attribute type 29 has an invalid length. [ 1827.047106][ T6337] netlink: 164 bytes leftover after parsing attributes in process `syz.1.30909'. [ 1827.721326][ T6348] netlink: 'syz.0.30915': attribute type 13 has an invalid length. [ 1827.739198][ T6347] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.30913'. [ 1827.740027][ T6348] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.30915'. [ 1828.062238][ T6359] netlink: zone id is out of range [ 1828.074839][ T6359] netlink: set zone limit has 8 unknown bytes [ 1828.478102][ T6363] netlink: 164 bytes leftover after parsing attributes in process `syz.2.30921'. [ 1828.700789][ T6367] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.30922'. [ 1828.861077][ T6374] netlink: 'syz.2.30926': attribute type 29 has an invalid length. [ 1828.870121][ T6374] netlink: 'syz.2.30926': attribute type 29 has an invalid length. [ 1829.601371][ T6389] netlink: 'syz.2.30933': attribute type 25 has an invalid length. [ 1829.627762][ T6389] netlink: 'syz.2.30933': attribute type 7 has an invalid length. [ 1829.857900][ T6397] netlink: 'syz.1.30945': attribute type 29 has an invalid length. [ 1829.867826][ T6397] netlink: 'syz.1.30945': attribute type 3 has an invalid length. [ 1829.873588][ T6398] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.30937'. [ 1829.876880][ T6397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30945'. [ 1830.073723][ T6400] netlink: 'syz.3.30939': attribute type 29 has an invalid length. [ 1830.169165][ T6404] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.30947'. [ 1831.820016][ T6446] validate_nla: 1 callbacks suppressed [ 1831.820039][ T6446] netlink: 'syz.1.30959': attribute type 29 has an invalid length. [ 1831.847714][ T6446] netlink: 'syz.1.30959': attribute type 29 has an invalid length. [ 1831.906006][ T6452] sctp: [Deprecated]: syz.0.30962 (pid 6452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1831.906006][ T6452] Use struct sctp_sack_info instead [ 1832.088309][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1832.113496][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1832.134603][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1832.152643][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1832.172541][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1832.185506][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1832.199267][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1832.209813][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1832.222442][ T6464] netlink: 'syz.1.30966': attribute type 25 has an invalid length. [ 1832.261034][ T6464] netlink: 'syz.1.30966': attribute type 7 has an invalid length. [ 1833.072130][ T6460] net_ratelimit: 8374 callbacks suppressed [ 1833.072154][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1833.088460][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1833.099292][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1833.109499][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1833.119801][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1833.130194][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1833.140416][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1833.150802][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1833.161218][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1833.171254][ T6460] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1835.233688][ T6484] netlink: 'syz.2.30977': attribute type 29 has an invalid length. [ 1835.257180][ T6484] netlink: 'syz.2.30977': attribute type 3 has an invalid length. [ 1835.273842][ T6484] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30977'. [ 1835.974146][ T6520] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.30995'. [ 1836.024678][ T6518] netlink: 112 bytes leftover after parsing attributes in process `syz.2.30994'. [ 1836.094624][ T6523] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.30996'. [ 1836.334827][ T6532] netlink: 144 bytes leftover after parsing attributes in process `syz.2.31001'. [ 1836.430782][ T6532] team0: Port device C removed [ 1836.619186][ T6544] netlink: 112 bytes leftover after parsing attributes in process `syz.1.31006'. [ 1836.847867][ T6556] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.31013'. [ 1837.080448][ T6564] netlink: 144 bytes leftover after parsing attributes in process `syz.1.31017'. [ 1837.179667][ T6564] team0: Port device team_slave_0 removed [ 1838.963930][ T6624] netlink: 'syz.1.31047': attribute type 1 has an invalid length. [ 1838.972305][ T6624] netlink: 'syz.1.31047': attribute type 2 has an invalid length. [ 1838.982078][ T6624] netlink: 'syz.1.31047': attribute type 2 has an invalid length. [ 1838.994646][ T6624] netlink: 'syz.1.31047': attribute type 3 has an invalid length. [ 1839.007089][ T6624] netlink: 'syz.1.31047': attribute type 4 has an invalid length. [ 1839.016969][ T6624] netlink: 'syz.1.31047': attribute type 5 has an invalid length. [ 1839.026380][ T6624] netlink: 'syz.1.31047': attribute type 6 has an invalid length. [ 1839.060836][ T6624] netlink: 'syz.1.31047': attribute type 7 has an invalid length. [ 1839.071886][ T6624] netlink: 'syz.1.31047': attribute type 9 has an invalid length. [ 1839.081600][ T6624] netlink: 'syz.1.31047': attribute type 10 has an invalid length. [ 1839.090986][ T6624] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.31047'. [ 1840.909411][ T6662] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.31060'. [ 1842.375330][ T6699] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.31076'. [ 1843.240639][ T6731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.31092'. [ 1843.262271][ T6731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.31092'. [ 1843.289898][ T6731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.31092'. [ 1843.311864][ T6731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.31092'. [ 1843.339326][ T6733] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.31093'. [ 1844.464818][ T6768] netlink: 144 bytes leftover after parsing attributes in process `syz.0.31111'. [ 1844.520480][ T6768] team0: Port device team_slave_0 removed [ 1844.532436][ T6770] net_ratelimit: 24640 callbacks suppressed [ 1844.532459][ T6770] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1844.563536][ T6768] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1844.592513][ T6770] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1844.603283][ T6770] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1844.622249][ T6770] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1844.638276][ T6770] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1844.662698][ T6770] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1844.689396][ T6770] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1844.714911][ T6770] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1844.725255][ T6770] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1849.274927][ T6822] validate_nla: 27 callbacks suppressed [ 1849.274949][ T6822] netlink: 'syz.0.31134': attribute type 3 has an invalid length. [ 1849.289345][ T6822] netlink: 132 bytes leftover after parsing attributes in process `syz.0.31134'. [ 1850.474663][ T6854] netlink: 'syz.3.31148': attribute type 3 has an invalid length. [ 1850.512333][ T6854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.31148'. [ 1850.574684][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1850.598528][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1850.633585][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1850.662403][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1851.166034][ T6868] netlink: 'syz.2.31155': attribute type 21 has an invalid length. [ 1851.188774][ T6868] netlink: 'syz.2.31155': attribute type 6 has an invalid length. [ 1851.206925][ T6868] netlink: 132 bytes leftover after parsing attributes in process `syz.2.31155'. [ 1851.587755][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.719620][ T6872] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.31167'. [ 1851.917098][ T6882] netlink: 48 bytes leftover after parsing attributes in process `syz.3.31161'. [ 1852.019333][ T6886] netlink: 'syz.2.31162': attribute type 25 has an invalid length. [ 1852.039151][ T6886] netlink: 'syz.2.31162': attribute type 28 has an invalid length. [ 1852.379121][ T6898] netlink: 'syz.3.31171': attribute type 21 has an invalid length. [ 1852.399766][ T6898] netlink: 'syz.3.31171': attribute type 6 has an invalid length. [ 1852.416850][ T6898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.31171'. [ 1852.618943][ T6903] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.31173'. [ 1853.235661][ T6917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.31180'. [ 1853.582762][ T6927] netlink: 'syz.1.31183': attribute type 21 has an invalid length. [ 1853.590958][ T6927] netlink: 'syz.1.31183': attribute type 6 has an invalid length. [ 1853.672749][ T6927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31183'. [ 1853.757285][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.764023][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.847396][ T6932] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.31187'. [ 1855.062359][ T6942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.587971][ T6962] netlink: 'syz.0.31201': attribute type 21 has an invalid length. [ 1855.910962][ T6971] netlink: 'syz.1.31204': attribute type 10 has an invalid length. [ 1855.936672][ T6971] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.31204'. [ 1856.735880][ T7001] netlink: 'syz.0.31217': attribute type 10 has an invalid length. [ 1856.752265][ T7001] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.31217'. [ 1857.361568][ T7027] netlink: 'syz.2.31229': attribute type 10 has an invalid length. [ 1857.385052][ T7027] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.31229'. [ 1857.460394][ T7032] netlink: 'syz.0.31231': attribute type 1 has an invalid length. [ 1857.483636][ T7032] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.31231'. [ 1857.666202][ T7041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1857.682222][ T7041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1857.717516][ T7041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1857.735896][ T7041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1857.893435][ T7044] netlink: 'syz.3.31236': attribute type 21 has an invalid length. [ 1858.464489][ T7065] netlink: 'syz.1.31245': attribute type 1 has an invalid length. [ 1858.489057][ T7065] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.31245'. [ 1859.190597][ T7082] netlink: 'syz.2.31251': attribute type 21 has an invalid length. [ 1859.466116][ T7095] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.31256'. [ 1859.495298][ T7095] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.31256'. [ 1859.517925][ T7095] netlink: 2 bytes leftover after parsing attributes in process `syz.1.31256'. [ 1859.527987][ T7095] tc_dump_action: action bad kind [ 1859.658440][ T7103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.31262'. [ 1859.686821][ T7107] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.31263'. [ 1860.101135][ T7125] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1860.168781][ T7128] netlink: 'syz.3.31271': attribute type 4 has an invalid length. [ 1860.997608][ T7143] sock: sock_timestamping_bind_phc: sock not bind to device [ 1861.258242][ T7161] pim6reg1: entered promiscuous mode [ 1861.272151][ T7161] pim6reg1: entered allmulticast mode [ 1861.941678][ T7174] netlink: 'syz.0.31293': attribute type 4 has an invalid length. [ 1861.950434][ T7174] __nla_validate_parse: 1 callbacks suppressed [ 1861.950444][ T7174] netlink: 164 bytes leftover after parsing attributes in process `syz.0.31293'. [ 1862.747295][ T7198] netlink: 'syz.2.31303': attribute type 4 has an invalid length. [ 1862.760210][ T7198] netlink: 164 bytes leftover after parsing attributes in process `syz.2.31303'. [ 1863.167826][ T7213] netlink: 64967 bytes leftover after parsing attributes in process `syz.2.31320'. [ 1863.318812][ T7218] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1863.863906][ T7241] netlink: 64967 bytes leftover after parsing attributes in process `syz.3.31325'. [ 1863.987415][ T7245] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1864.078268][ T7249] netlink: 'syz.2.31329': attribute type 3 has an invalid length. [ 1864.102066][ T7249] netlink: 'syz.2.31329': attribute type 4 has an invalid length. [ 1864.122048][ T7249] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.31329'. [ 1864.597534][ T7264] netlink: 64967 bytes leftover after parsing attributes in process `syz.1.31336'. [ 1864.852319][ T7272] netlink: 'syz.3.31341': attribute type 9 has an invalid length. [ 1864.872392][ T7272] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.31341'. [ 1864.892318][ T7273] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1865.545633][ T7295] netlink: 'syz.1.31350': attribute type 3 has an invalid length. [ 1865.558418][ T7295] netlink: 'syz.1.31350': attribute type 4 has an invalid length. [ 1865.568129][ T7295] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.31350'. [ 1866.048666][ T7322] netlink: 'syz.0.31364': attribute type 3 has an invalid length. [ 1866.058432][ T7322] netlink: 'syz.0.31364': attribute type 4 has an invalid length. [ 1866.067636][ T7322] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.31364'. [ 1866.288848][ T7330] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.31369'. [ 1866.782225][ T7346] net_ratelimit: 33019 callbacks suppressed [ 1866.782250][ T7346] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1866.976007][ T7352] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.31380'. [ 1867.089004][ T7357] netlink: 'syz.0.31382': attribute type 1 has an invalid length. [ 1867.112591][ T7357] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.31382'. [ 1870.243587][ T7409] netlink: 'syz.1.31406': attribute type 9 has an invalid length. [ 1870.251510][ T7409] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.31406'. [ 1870.650031][ T7421] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1871.035935][ T7433] netlink: 'syz.2.31418': attribute type 9 has an invalid length. [ 1871.065015][ T7433] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.31418'. [ 1871.761081][ T7453] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1871.787327][ T7452] netlink: 'syz.3.31427': attribute type 1 has an invalid length. [ 1871.800761][ T7452] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.31427'. [ 1878.360809][ T7557] netlink: 830 bytes leftover after parsing attributes in process `syz.3.31476'. [ 1878.378226][ T7556] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.31474'. [ 1884.583750][ T7640] netlink: 830 bytes leftover after parsing attributes in process `syz.0.31512'. [ 1885.817543][ T7666] netlink: 830 bytes leftover after parsing attributes in process `syz.1.31523'. [ 1886.338539][ T7692] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.31538'. [ 1886.536171][ T7697] netlink: 64 bytes leftover after parsing attributes in process `syz.1.31539'. [ 1886.677995][ T7702] netlink: 'syz.3.31542': attribute type 10 has an invalid length. [ 1886.702391][ T7702] netlink: 'syz.3.31542': attribute type 10 has an invalid length. [ 1886.710668][ T7702] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.31542'. [ 1886.741231][ T7702] openvswitch: netlink: Message has 4 unknown bytes. [ 1886.806460][ T7707] netlink: 'syz.0.31544': attribute type 29 has an invalid length. [ 1886.857964][ T7707] netlink: 'syz.0.31544': attribute type 29 has an invalid length. [ 1886.892878][ T7709] netlink: 'syz.0.31544': attribute type 29 has an invalid length. [ 1886.926145][ T7707] netlink: 'syz.0.31544': attribute type 29 has an invalid length. [ 1886.948927][ T7707] netlink: 'syz.0.31544': attribute type 29 has an invalid length. [ 1887.356533][ T7725] netlink: 64 bytes leftover after parsing attributes in process `syz.3.31551'. [ 1887.672508][ T7734] netlink: 'syz.2.31554': attribute type 10 has an invalid length. [ 1887.680501][ T7734] netlink: 'syz.2.31554': attribute type 10 has an invalid length. [ 1887.695667][ T7734] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.31554'. [ 1887.720250][ T7736] netlink: 6 bytes leftover after parsing attributes in process `syz.3.31557'. [ 1887.730693][ T7734] openvswitch: netlink: Message has 4 unknown bytes. [ 1887.751454][ T7736] openvswitch: netlink: Flow actions attr not present in new flow. [ 1888.795678][ T7760] netlink: 64 bytes leftover after parsing attributes in process `syz.2.31566'. [ 1888.855604][ T7763] netlink: 'syz.1.31568': attribute type 10 has an invalid length. [ 1888.873949][ T7763] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.31568'. [ 1888.893848][ T7763] openvswitch: netlink: Message has 4 unknown bytes. [ 1890.582368][ T7807] __nla_validate_parse: 1 callbacks suppressed [ 1890.582394][ T7807] netlink: 6 bytes leftover after parsing attributes in process `syz.0.31590'. [ 1890.625710][ T7807] openvswitch: netlink: Flow actions attr not present in new flow. [ 1893.687662][ T7895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1894.566281][ T7926] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.31644'. [ 1894.600970][ T7926] netlink: zone id is out of range [ 1894.625405][ T7926] netlink: zone id is out of range [ 1894.630637][ T7926] netlink: zone id is out of range [ 1894.652128][ T7926] netlink: zone id is out of range [ 1894.657643][ T7926] netlink: zone id is out of range [ 1894.667345][ T7926] netlink: zone id is out of range [ 1894.686086][ T7926] netlink: zone id is out of range [ 1894.698512][ T7926] netlink: zone id is out of range [ 1894.707895][ T7926] netlink: zone id is out of range [ 1894.722662][ T7926] netlink: zone id is out of range [ 1896.133422][ T7953] validate_nla: 1 callbacks suppressed [ 1896.133447][ T7953] netlink: 'syz.2.31666': attribute type 9 has an invalid length. [ 1896.147984][ T7953] netlink: 399 bytes leftover after parsing attributes in process `syz.2.31666'. [ 1896.800216][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 1898.095243][ T7963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1898.841428][ T7976] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.31668'. [ 1898.887323][ T7978] netlink: 'syz.0.31669': attribute type 9 has an invalid length. [ 1898.912546][ T7978] netlink: 399 bytes leftover after parsing attributes in process `syz.0.31669'. [ 1899.086787][ T7982] netlink: 168 bytes leftover after parsing attributes in process `syz.1.31671'. [ 1899.269758][ T7992] netlink: 'syz.3.31677': attribute type 3 has an invalid length. [ 1899.457609][ T8003] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.31681'. [ 1899.658344][ T8011] netlink: 'syz.1.31685': attribute type 1 has an invalid length. [ 1900.106225][ T8027] net_ratelimit: 331 callbacks suppressed [ 1900.106247][ T8027] netlink: set zone limit has 8 unknown bytes [ 1900.835293][ T8044] netlink: 'syz.3.31702': attribute type 9 has an invalid length. [ 1900.861670][ T8044] netlink: 399 bytes leftover after parsing attributes in process `syz.3.31702'. [ 1901.071333][ T8048] netlink: set zone limit has 8 unknown bytes [ 1901.913839][T25659] Bluetooth: hci3: command 0x0406 tx timeout [ 1903.902331][ T5781] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1904.000242][ T8140] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.31746'. [ 1904.660087][ T8157] netlink: 'syz.1.31754': attribute type 17 has an invalid length. [ 1904.822909][ T5781] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1905.371345][ T8175] netlink: 132 bytes leftover after parsing attributes in process `syz.3.31762'. [ 1905.654024][ T8182] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.31771'. [ 1906.211677][T25659] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 1906.342295][ T8197] netlink: 'syz.0.31769': attribute type 17 has an invalid length. [ 1906.511303][T30726] tipc: Subscription rejected, illegal request [ 1906.590798][ T8203] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.31773'. [ 1906.699109][ T8207] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.31775'. [ 1907.125780][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 1907.541604][ T5781] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1909.382382][ T8227] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.31783'. [ 1909.402787][ T8226] netlink: 'syz.3.31784': attribute type 17 has an invalid length. [ 1909.511746][ T8235] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.31786'. [ 1909.703277][ T8242] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31791'. [ 1909.942412][ T8252] netlink: 'syz.2.31795': attribute type 17 has an invalid length. [ 1910.057340][ T8256] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.31796'. [ 1912.107349][ T8260] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.31797'. [ 1912.273583][ T8263] netlink: 'syz.0.31798': attribute type 11 has an invalid length. [ 1912.281718][ T8263] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.31798'. [ 1913.083797][ T8294] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.31810'. [ 1914.209880][ T8330] pim6reg1: entered promiscuous mode [ 1914.218387][ T8330] pim6reg1: entered allmulticast mode [ 1914.296282][ T8332] pim6reg1: entered promiscuous mode [ 1914.301630][ T8332] pim6reg1: entered allmulticast mode [ 1914.471274][ T8341] netlink: 'syz.1.31833': attribute type 10 has an invalid length. [ 1914.522978][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.531183][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.563085][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.570487][ T8341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1914.578426][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.585731][ T8341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1914.603477][ T8341] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1914.675943][ T8346] pim6reg1: entered promiscuous mode [ 1914.686939][ T8346] pim6reg1: entered allmulticast mode [ 1915.198632][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.207526][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.625919][ T8368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31843'. [ 1915.666423][ T8369] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.31844'. [ 1915.697721][ T8369] netlink: 'syz.0.31844': attribute type 2 has an invalid length. [ 1916.097513][ T8385] pim6reg1: entered promiscuous mode [ 1916.103279][ T8385] pim6reg1: entered allmulticast mode [ 1917.141003][ T8390] netlink: 14 bytes leftover after parsing attributes in process `syz.3.31856'. [ 1917.339796][ T8399] netlink: 'syz.3.31860': attribute type 11 has an invalid length. [ 1917.367920][ T8399] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.31860'. [ 1917.416066][ T8399] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1917.769301][ T8410] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.31865'. [ 1917.981677][ T8419] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.31868'. [ 1917.994324][ T8419] netlink: 'syz.1.31868': attribute type 2 has an invalid length. [ 1918.174269][ T8424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.31871'. [ 1918.227391][ T8428] netlink: 'syz.1.31874': attribute type 10 has an invalid length. [ 1918.236154][ T8428] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.31874'. [ 1918.866006][ T8447] netlink: 'syz.3.31879': attribute type 9 has an invalid length. [ 1918.882130][ T8447] netlink: 399 bytes leftover after parsing attributes in process `syz.3.31879'. [ 1919.656432][ T8482] netlink: 'syz.3.31905': attribute type 10 has an invalid length. [ 1919.675373][T30725] page_pool_release_retry() stalled pool shutdown 1 inflight 61 sec [ 1919.687196][ T8482] bridge0: port 3(bond0) entered disabled state [ 1919.694243][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.702400][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.744656][ T8482] bridge0: port 3(bond0) entered blocking state [ 1919.751337][ T8482] bridge0: port 3(bond0) entered forwarding state [ 1919.758707][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.766291][ T8482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1919.774118][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.781749][ T8482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1919.830995][ T8482] bridge0: port 3(bond0) entered disabled state [ 1919.837834][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.845496][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.045022][ T8493] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.31901'. [ 1920.392633][ T8506] netlink: 'syz.3.31906': attribute type 10 has an invalid length. [ 1920.764519][ T8522] netlink: 'syz.1.31913': attribute type 9 has an invalid length. [ 1920.780836][ T8522] __nla_validate_parse: 1 callbacks suppressed [ 1920.780856][ T8522] netlink: 399 bytes leftover after parsing attributes in process `syz.1.31913'. [ 1921.107217][ T8536] netlink: 'syz.0.31918': attribute type 33 has an invalid length. [ 1921.120127][ T8536] netlink: 152 bytes leftover after parsing attributes in process `syz.0.31918'. [ 1921.134200][ T8536] `: renamed from team0 (while UP) [ 1921.417034][ T8538] netlink: 'syz.0.31920': attribute type 10 has an invalid length. [ 1921.425992][ T8538] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.31920'. [ 1921.463219][ T8542] tap0: tun_chr_ioctl cmd 2148553947 [ 1921.752404][ T8] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1921.965809][ T8557] netlink: 'syz.2.31928': attribute type 9 has an invalid length. [ 1922.033799][ T8557] netlink: 399 bytes leftover after parsing attributes in process `syz.2.31928'. [ 1922.233290][T30725] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1923.107278][ T5843] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1923.299716][ T8577] tap0: tun_chr_ioctl cmd 2148553947 [ 1923.404569][ T8580] netlink: 'syz.3.31942': attribute type 13 has an invalid length. [ 1923.433369][ T8580] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.31942'. [ 1923.742367][ T8585] tap0: tun_chr_ioctl cmd 2148553947 [ 1925.070688][ T8604] netlink: 'syz.2.31951': attribute type 33 has an invalid length. [ 1925.132619][ T8604] netlink: 152 bytes leftover after parsing attributes in process `syz.2.31951'. [ 1925.172702][ T8604] `: renamed from team0 (while UP) [ 1925.351494][ T8612] netlink: 'syz.0.31955': attribute type 1 has an invalid length. [ 1925.407694][ T8612] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.31955'. [ 1926.293030][ T8630] syz.1.31965[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1926.293199][ T8630] syz.1.31965[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1926.945792][ T8641] netlink: 'syz.0.31970': attribute type 9 has an invalid length. [ 1926.996025][ T8641] netlink: 399 bytes leftover after parsing attributes in process `syz.0.31970'. [ 1927.075944][ T8643] netlink: 'syz.1.31971': attribute type 33 has an invalid length. [ 1927.113036][ T8643] netlink: 152 bytes leftover after parsing attributes in process `syz.1.31971'. [ 1927.142390][ T8643] `: renamed from team0 (while UP) [ 1927.654715][ T8655] netlink: 'syz.1.31976': attribute type 21 has an invalid length. [ 1927.880038][ T8659] syz.3.31978[8659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1927.880203][ T8659] syz.3.31978[8659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1928.322430][ T8664] netlink: 'syz.0.31988': attribute type 25 has an invalid length. [ 1928.392457][ T8664] netlink: 'syz.0.31988': attribute type 28 has an invalid length. [ 1928.437109][ T8668] netlink: 'syz.2.31980': attribute type 1 has an invalid length. [ 1928.492258][ T8668] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.31980'. [ 1929.248700][ T8681] netlink: 'syz.2.31984': attribute type 9 has an invalid length. [ 1929.305489][ T8681] netlink: 399 bytes leftover after parsing attributes in process `syz.2.31984'. [ 1929.619551][ T8687] netlink: 'syz.3.31985': attribute type 33 has an invalid length. [ 1929.682403][ T8687] netlink: 152 bytes leftover after parsing attributes in process `syz.3.31985'. [ 1929.703954][ T8687] `: renamed from team0 (while UP) [ 1929.757895][ T8690] syz.0.31991[8690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1929.758063][ T8690] syz.0.31991[8690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1930.014075][ T8696] netlink: 'syz.1.31994': attribute type 1 has an invalid length. [ 1930.075220][ T8696] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.31994'. [ 1930.512973][ T8711] netlink: 'syz.1.32000': attribute type 9 has an invalid length. [ 1930.541716][ T8711] netlink: 399 bytes leftover after parsing attributes in process `syz.1.32000'. [ 1931.631376][ T8733] netlink: 152 bytes leftover after parsing attributes in process `syz.2.32009'. [ 1934.399577][ T8787] validate_nla: 1 callbacks suppressed [ 1934.399597][ T8787] netlink: 'syz.2.32035': attribute type 3 has an invalid length. [ 1936.137310][ T8832] netlink: 'syz.2.32056': attribute type 33 has an invalid length. [ 1936.152592][ T8832] netlink: 152 bytes leftover after parsing attributes in process `syz.2.32056'. [ 1936.339360][ T8843] sctp: [Deprecated]: syz.3.32062 (pid 8843) Use of int in maxseg socket option. [ 1936.339360][ T8843] Use struct sctp_assoc_value instead [ 1936.780967][ T8853] netlink: 'syz.1.32067': attribute type 33 has an invalid length. [ 1937.067114][ T8862] netlink: 'syz.3.32071': attribute type 33 has an invalid length. [ 1937.076376][ T8862] netlink: 152 bytes leftover after parsing attributes in process `syz.3.32071'. [ 1937.279718][ T8870] sctp: [Deprecated]: syz.1.32074 (pid 8870) Use of int in maxseg socket option. [ 1937.279718][ T8870] Use struct sctp_assoc_value instead [ 1937.418534][ T8878] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.32083'. [ 1938.284423][ T8899] pim6reg1: entered promiscuous mode [ 1938.312349][ T8899] pim6reg1: entered allmulticast mode [ 1938.587370][ T8912] netlink: 'syz.3.32093': attribute type 33 has an invalid length. [ 1938.611478][ T8912] netlink: 152 bytes leftover after parsing attributes in process `syz.3.32093'. [ 1939.085924][ T8926] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.32099'. [ 1940.453876][ T8970] netlink: 132 bytes leftover after parsing attributes in process `syz.3.32120'. [ 1940.926642][ T8985] bridge0: port 4(`) entered blocking state [ 1940.943315][ T8985] bridge0: port 4(`) entered disabled state [ 1940.958788][ T8985] `: entered allmulticast mode [ 1940.973730][ T8985] team_slave_1: entered allmulticast mode [ 1940.990021][ T8985] `: entered promiscuous mode [ 1941.007113][ T8985] team_slave_1: entered promiscuous mode [ 1941.030812][ T8985] bridge0: port 4(`) entered blocking state [ 1941.037577][ T8985] bridge0: port 4(`) entered forwarding state [ 1941.802399][ T9007] pim6reg1: entered promiscuous mode [ 1941.830991][ T9007] pim6reg1: entered allmulticast mode [ 1942.175071][ T9013] bridge0: port 3(`) entered blocking state [ 1942.181421][ T9013] bridge0: port 3(`) entered disabled state [ 1942.196005][ T9013] `: entered allmulticast mode [ 1942.205240][ T9013] team_slave_1: entered allmulticast mode [ 1942.215091][ T9013] `: entered promiscuous mode [ 1942.220029][ T9013] team_slave_1: entered promiscuous mode [ 1942.229413][ T9013] bridge0: port 3(`) entered blocking state [ 1942.235894][ T9013] bridge0: port 3(`) entered forwarding state [ 1942.269181][ T9015] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.32138'. [ 1942.713955][ T9024] netlink: 'syz.3.32142': attribute type 10 has an invalid length. [ 1942.760215][ T9024] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.32142'. [ 1943.889379][ T9052] netlink: 'syz.3.32154': attribute type 3 has an invalid length. [ 1943.902439][ T9052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.32154'. [ 1944.277755][ T9066] netlink: 'syz.0.32162': attribute type 25 has an invalid length. [ 1944.295594][ T9066] netlink: 'syz.0.32162': attribute type 7 has an invalid length. [ 1944.904104][ T9082] netlink: 'syz.2.32169': attribute type 3 has an invalid length. [ 1944.927556][ T9082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.32169'. [ 1944.969781][ T9086] netlink: 'syz.0.32170': attribute type 10 has an invalid length. [ 1944.987064][ T9086] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.32170'. [ 1945.014364][ T9088] netlink: 'syz.1.32172': attribute type 25 has an invalid length. [ 1945.023420][ T9088] netlink: 'syz.1.32172': attribute type 7 has an invalid length. [ 1945.128685][ T9090] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.32173'. [ 1945.859933][ T9112] netlink: 'syz.3.32183': attribute type 25 has an invalid length. [ 1945.876314][ T9112] netlink: 'syz.3.32183': attribute type 7 has an invalid length. [ 1946.141692][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.32184'. [ 1947.500895][ T9144] netlink: 10 bytes leftover after parsing attributes in process `syz.2.32198'. [ 1947.983978][ T9158] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.32204'. [ 1947.995202][ T9158] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.32204'. [ 1948.005570][ T9158] netlink: 2 bytes leftover after parsing attributes in process `syz.1.32204'. [ 1949.314594][ T9180] validate_nla: 3 callbacks suppressed [ 1949.314617][ T9180] netlink: 'syz.0.32212': attribute type 3 has an invalid length. [ 1949.355381][ T9180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.32212'. [ 1949.476001][ T9182] netlink: 'syz.1.32216': attribute type 11 has an invalid length. [ 1949.484663][ T9182] netlink: 'syz.1.32216': attribute type 1 has an invalid length. [ 1949.504686][ T9182] netlink: 'syz.1.32216': attribute type 2 has an invalid length. [ 1949.520636][ T9182] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.32216'. [ 1956.270582][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32287'. [ 1956.285127][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32287'. [ 1956.294681][ T9347] netlink: 33 bytes leftover after parsing attributes in process `syz.2.32287'. [ 1956.307834][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32287'. [ 1956.318144][ T9347] netlink: 33 bytes leftover after parsing attributes in process `syz.2.32287'. [ 1956.619565][ T9353] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.32301'. [ 1957.401658][ T9371] netlink: 'syz.3.32296': attribute type 25 has an invalid length. [ 1958.416732][ T9388] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.32309'. [ 1958.812957][ T9398] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.32312'. [ 1962.392949][ T9446] netlink: 'syz.2.32331': attribute type 2 has an invalid length. [ 1962.422220][ T9446] netlink: 'syz.2.32331': attribute type 1 has an invalid length. [ 1962.430433][ T9446] netlink: 152 bytes leftover after parsing attributes in process `syz.2.32331'. [ 1962.990114][ T9457] netlink: 192440 bytes leftover after parsing attributes in process `syz.3.32336'. [ 1963.020316][ T9457] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1965.468792][ T9508] netlink: 'syz.3.32361': attribute type 2 has an invalid length. [ 1965.479034][ T9508] netlink: 'syz.3.32361': attribute type 1 has an invalid length. [ 1965.490394][ T9508] netlink: 152 bytes leftover after parsing attributes in process `syz.3.32361'. [ 1966.709501][ T9526] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.32366'. [ 1966.736359][ T9526] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1967.402490][ T9545] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.32375'. [ 1968.759685][ T9576] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.32389'. [ 1969.554409][ T9605] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.32402'. [ 1970.177003][ T9632] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.32414'. [ 1973.391703][ T9729] žÿ: renamed from team_slave_1 (while UP) [ 1973.705500][ T9744] netlink: 'syz.0.32466': attribute type 13 has an invalid length. [ 1974.339521][ T9760] netlink: 'syz.2.32474': attribute type 22 has an invalid length. [ 1974.348447][ T9760] netlink: 148 bytes leftover after parsing attributes in process `syz.2.32474'. [ 1975.893058][ T9813] netlink: 'syz.2.32497': attribute type 13 has an invalid length. [ 1976.261123][ T9823] netlink: 'syz.1.32502': attribute type 22 has an invalid length. [ 1976.279748][ T9823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.32502'. [ 1976.649772][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.659946][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.707035][ T9890] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.32534'. [ 1980.458512][ T9951] netlink: 'syz.3.32564': attribute type 1 has an invalid length. [ 1980.502992][ T9951] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.32564'. [ 1980.727374][ T9963] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.32571'. [ 1984.765424][T10070] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.32619'. [ 1984.805134][T10070] netlink: zone id is out of range [ 1984.810957][T10070] netlink: zone id is out of range [ 1984.826073][T10070] netlink: zone id is out of range [ 1984.838422][T10072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.32620'. [ 1984.842085][T10070] netlink: zone id is out of range [ 1984.864487][T10070] netlink: zone id is out of range [ 1984.879019][T10070] netlink: zone id is out of range [ 1984.886690][T10070] netlink: zone id is out of range [ 1984.906677][T10070] netlink: zone id is out of range [ 1984.925128][T10070] netlink: zone id is out of range [ 1984.938204][T10070] netlink: zone id is out of range [ 1985.728234][T10107] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.32634'. [ 1987.218279][T10147] netlink: 112 bytes leftover after parsing attributes in process `syz.1.32655'. [ 1988.183610][T10178] netlink: 112 bytes leftover after parsing attributes in process `syz.2.32666'. [ 1989.225827][T10219] netlink: 132 bytes leftover after parsing attributes in process `syz.0.32696'. [ 1991.344902][T10299] netlink: 'syz.1.32726': attribute type 2 has an invalid length. [ 1991.368070][T10299] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.32726'. [ 1993.627531][T10342] netlink: 'syz.1.32754': attribute type 19 has an invalid length. [ 1993.636797][T10342] netlink: 156 bytes leftover after parsing attributes in process `syz.1.32754'. [ 1993.934014][T10353] netlink: 'syz.3.32750': attribute type 10 has an invalid length. [ 1993.967760][T10353] netlink: 2 bytes leftover after parsing attributes in process `syz.3.32750'. [ 1994.688783][T10385] netlink: 'syz.2.32766': attribute type 19 has an invalid length. [ 1994.697536][T10385] netlink: 156 bytes leftover after parsing attributes in process `syz.2.32766'. [ 1994.712513][T10383] netlink: 'syz.0.32765': attribute type 10 has an invalid length. [ 1994.721027][T10383] netlink: 2 bytes leftover after parsing attributes in process `syz.0.32765'. [ 1995.520303][T10412] netlink: 'syz.1.32780': attribute type 10 has an invalid length. [ 1995.549454][T10412] netlink: 2 bytes leftover after parsing attributes in process `syz.1.32780'. [ 1995.558973][T10412] bond0: entered promiscuous mode [ 1995.564828][T10412] bond_slave_0: entered promiscuous mode [ 1995.575379][T10412] bond_slave_1: entered promiscuous mode [ 1995.591167][T10412] bridge0: entered promiscuous mode [ 1995.609518][T10412] bridge0: port 4(bond0) entered blocking state [ 1995.620997][T10412] bridge0: port 4(bond0) entered disabled state [ 1995.633795][T10412] bond0: entered allmulticast mode [ 1995.639107][T10412] bond_slave_0: entered allmulticast mode [ 1995.649603][T10412] bond_slave_1: entered allmulticast mode [ 1995.672095][T10412] bridge0: entered allmulticast mode [ 1995.694085][T10412] bond0: left allmulticast mode [ 1995.699318][T10412] bond_slave_0: left allmulticast mode [ 1995.707617][T10412] bond_slave_1: left allmulticast mode [ 1995.714853][T10412] bridge0: left allmulticast mode [ 1995.720187][T10413] netlink: 'syz.0.32779': attribute type 19 has an invalid length. [ 1995.742869][T10413] netlink: 156 bytes leftover after parsing attributes in process `syz.0.32779'. [ 1996.419616][T10440] netlink: 'syz.2.32794': attribute type 10 has an invalid length. [ 1996.442089][T10440] netlink: 2 bytes leftover after parsing attributes in process `syz.2.32794'. [ 1998.716357][T10505] mac80211_hwsim hwsim85 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1999.413165][T10531] netlink: 'syz.0.32832': attribute type 13 has an invalid length. [ 1999.421668][T10531] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.32832'. [ 2001.090306][ T7834] tipc: Subscription rejected, illegal request [ 2001.513490][ T7834] wlan1: Trigger new scan to find an IBSS to join [ 2002.031845][T30726] tipc: Subscription rejected, illegal request [ 2002.899402][T30726] tipc: Subscription rejected, illegal request [ 2003.209122][T25659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2003.222183][T25659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2003.232245][T25659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2003.243594][T25659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2003.260691][T25659] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2003.272156][T25659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2003.706465][T10628] chnl_net:caif_netlink_parms(): no params data found [ 2003.945098][ T7834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2003.987780][T10628] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.999545][T10628] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.007301][T10628] bridge_slave_0: entered allmulticast mode [ 2004.019695][T10628] bridge_slave_0: entered promiscuous mode [ 2004.060301][ T7834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.077020][T10628] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.086357][T10628] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.096706][T10628] bridge_slave_1: entered allmulticast mode [ 2004.106146][T10628] bridge_slave_1: entered promiscuous mode [ 2004.233705][ T7834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.356578][T10628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2004.418460][ T7834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.454427][T10628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2004.482057][T30733] wlan1: Trigger new scan to find an IBSS to join [ 2004.569847][T10628] team0: Port device team_slave_0 added [ 2004.615541][T10628] team0: Port device team_slave_1 added [ 2004.707732][T10628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2004.729574][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2004.763134][T25659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2004.764492][T10628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2004.789633][T25659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2004.799806][T25659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2004.803127][T10628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2004.820795][T10628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2004.832724][T25659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2004.858679][T10628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2004.859269][T25659] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2004.877956][T25659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2005.050052][T10628] hsr_slave_0: entered promiscuous mode [ 2005.076420][T10628] hsr_slave_1: entered promiscuous mode [ 2005.083125][T10628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2005.090832][T10628] Cannot create hsr debugfs directory [ 2005.352137][T25659] Bluetooth: hci0: command tx timeout [ 2005.659950][T10628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.714519][T10666] chnl_net:caif_netlink_parms(): no params data found [ 2005.791013][T10628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.923911][T10628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.051135][T10628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.156444][T10666] bridge0: port 1(bridge_slave_0) entered blocking state [ 2006.178915][T10666] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.187082][T10666] bridge_slave_0: entered allmulticast mode [ 2006.198136][T10666] bridge_slave_0: entered promiscuous mode [ 2006.237742][T10666] bridge0: port 2(bridge_slave_1) entered blocking state [ 2006.245916][T10666] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.254658][T10666] bridge_slave_1: entered allmulticast mode [ 2006.270157][T10666] bridge_slave_1: entered promiscuous mode [ 2006.368518][T10666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2006.384620][T10666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2006.447111][T10628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2006.509949][T10628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2006.539996][T10666] team0: Port device team_slave_0 added [ 2006.562448][T10628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2006.578101][T10666] team0: Port device team_slave_1 added [ 2006.646311][T10628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2006.689790][T10666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2006.697380][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2006.730680][T10666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2006.744092][T10666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2006.752034][T10666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2006.785412][T10666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2006.855270][ T7834] hsr_slave_0: left promiscuous mode [ 2006.861618][ T7834] hsr_slave_1: left promiscuous mode [ 2006.869956][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2006.878388][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2006.888622][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2006.896558][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2006.905053][ T7834] bond0: left allmulticast mode [ 2006.909975][ T7834] bond_slave_0: left allmulticast mode [ 2006.915994][ T7834] bond_slave_1: left allmulticast mode [ 2006.921828][ T7834] bridge0: port 3(bond0) entered disabled state [ 2006.931198][ T7834] bridge_slave_1: left allmulticast mode [ 2006.937267][ T7834] bridge_slave_1: left promiscuous mode [ 2006.943681][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.952720][T25659] Bluetooth: hci2: command tx timeout [ 2006.963161][ T7834] bridge_slave_0: left promiscuous mode [ 2006.969064][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 2007.022873][ T7834] veth1_macvtap: left promiscuous mode [ 2007.028694][ T7834] veth0_macvtap: left promiscuous mode [ 2007.036047][ T7834] veth1_vlan: left promiscuous mode [ 2007.041804][ T7834] veth0_vlan: left promiscuous mode [ 2007.440404][T25659] Bluetooth: hci0: command tx timeout [ 2007.442066][T21578] wlan1: Trigger new scan to find an IBSS to join [ 2008.366441][T21578] wlan1: Creating new IBSS network, BSSID d6:60:3a:1c:a2:5c [ 2009.033982][T25659] Bluetooth: hci2: command tx timeout [ 2009.518822][T25659] Bluetooth: hci0: command tx timeout [ 2010.145831][ T7834] ` (unregistering): Port device 72žÿ removed [ 2010.246163][ T7834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2010.255199][ T7834] bond_slave_1 (unregistering): left promiscuous mode [ 2010.316385][ T7834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2010.326378][ T7834] bond_slave_0 (unregistering): left promiscuous mode [ 2010.750700][ T7834] bond0 (unregistering): Released all slaves [ 2010.994698][T10666] hsr_slave_0: entered promiscuous mode [ 2011.001474][T10666] hsr_slave_1: entered promiscuous mode [ 2011.008493][T10666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2011.016170][T10666] Cannot create hsr debugfs directory [ 2011.119325][T25659] Bluetooth: hci2: command tx timeout [ 2011.334378][T10628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2011.393458][T10628] 8021q: adding VLAN 0 to HW filter on device team0 [ 2011.415871][T30726] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.423315][T30726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2011.537377][T21578] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.544964][T21578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2011.593195][T25659] Bluetooth: hci0: command tx timeout [ 2011.729622][T10628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2011.893207][T10666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2011.917294][T10666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2011.938179][T10666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2011.958656][T10666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2012.193081][T10628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2012.237582][T10666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2012.300442][T10666] 8021q: adding VLAN 0 to HW filter on device team0 [ 2012.320484][T10628] veth0_vlan: entered promiscuous mode [ 2012.344305][T24275] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.351524][T24275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2012.371648][T24275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.379029][T24275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2012.418584][T10628] veth1_vlan: entered promiscuous mode [ 2012.529825][T10628] veth0_macvtap: entered promiscuous mode [ 2012.549859][T10628] veth1_macvtap: entered promiscuous mode [ 2012.573791][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2012.600242][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.625662][T10628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2012.660746][T10628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2012.678659][T10628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.695387][T10628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2012.710691][T10628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.727500][T10628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.736775][T10628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.749783][T10628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2012.942895][ T7834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.950923][ T7834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.028416][T21578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.054778][T21578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.071497][T10666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2013.199254][T25659] Bluetooth: hci2: command tx timeout [ 2013.214902][T10666] veth0_vlan: entered promiscuous mode [ 2013.265885][T10666] veth1_vlan: entered promiscuous mode [ 2013.414312][T10666] veth0_macvtap: entered promiscuous mode [ 2013.442319][T10666] veth1_macvtap: entered promiscuous mode [ 2013.504955][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.538175][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.557292][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.568248][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.584104][T10666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2013.635439][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.666048][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.681977][T10666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.702449][T10666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.733050][T10666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2013.759736][T10666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.795415][T10666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.828271][T10666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.845125][T10666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.143306][ T7834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.179207][ T7834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.278787][T24275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.304110][T24275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2016.140115][T10839] netlink: 'syz.1.32918': attribute type 2 has an invalid length. [ 2016.504979][T10849] netlink: 'syz.0.32922': attribute type 7 has an invalid length. [ 2016.808459][T10862] netlink: 'syz.1.32927': attribute type 4 has an invalid length. [ 2016.842376][T10862] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.32927'. [ 2017.823032][T10891] netlink: 'syz.2.32937': attribute type 7 has an invalid length. [ 2018.319211][T10912] netlink: 'syz.3.32945': attribute type 4 has an invalid length. [ 2018.342401][T10912] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.32945'. [ 2018.622913][T10923] netlink: 'syz.1.32950': attribute type 7 has an invalid length. [ 2019.497319][T10947] IPv6: NLM_F_CREATE should be specified when creating new route [ 2019.529420][T10945] netlink: 'syz.2.32958': attribute type 4 has an invalid length. [ 2019.572151][T10945] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.32958'. [ 2019.694122][T10951] netlink: 'syz.0.32962': attribute type 16 has an invalid length. [ 2020.438850][T10975] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.32971'. [ 2020.462347][T10975] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.32971'. [ 2020.471832][T10975] netlink: 2 bytes leftover after parsing attributes in process `syz.0.32971'. [ 2020.596532][T10984] netlink: 'syz.2.32976': attribute type 16 has an invalid length. [ 2021.533301][T11015] IPv6: NLM_F_CREATE should be specified when creating new route [ 2021.940241][T11025] netlink: 'syz.3.32995': attribute type 17 has an invalid length. [ 2021.959315][T11025] netlink: 152 bytes leftover after parsing attributes in process `syz.3.32995'. [ 2021.997731][T11025] net_ratelimit: 214 callbacks suppressed [ 2021.997756][T11025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2022.042568][T11027] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.32996'. [ 2022.367403][T11037] IPv6: NLM_F_CREATE should be specified when creating new route [ 2022.599621][T11050] netlink: 'syz.0.33010': attribute type 17 has an invalid length. [ 2022.619368][T11050] netlink: 152 bytes leftover after parsing attributes in process `syz.0.33010'. [ 2022.636925][T11050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2023.204127][T11075] netlink: 'syz.2.33022': attribute type 17 has an invalid length. [ 2023.218420][T11075] netlink: 152 bytes leftover after parsing attributes in process `syz.2.33022'. [ 2023.262869][T11075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2023.748915][T11100] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.33032'. [ 2025.221785][T11121] netlink: 152 bytes leftover after parsing attributes in process `syz.0.33043'. [ 2025.657259][T11142] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.33052'. [ 2025.923222][T11148] netlink: 152 bytes leftover after parsing attributes in process `syz.2.33056'. [ 2026.438255][T11170] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.33066'. [ 2027.443568][T11201] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.33080'. [ 2028.056225][T11219] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.33089'. [ 2029.876714][T11279] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.33117'. [ 2033.094082][T11304] sock: sock_timestamping_bind_phc: sock not bind to device [ 2033.428083][T11319] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 2034.125594][T25659] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 2035.188967][T25659] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 2036.586670][T11416] netlink: 'syz.0.33174': attribute type 1 has an invalid length. [ 2036.597116][T25659] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 2036.602555][T11416] netlink: 'syz.0.33174': attribute type 2 has an invalid length. [ 2036.650510][T11418] netlink: 'syz.1.33175': attribute type 1 has an invalid length. [ 2036.660324][T11418] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.33175'. [ 2036.662032][T11416] netlink: 'syz.0.33174': attribute type 2 has an invalid length. [ 2036.709448][T11416] netlink: 'syz.0.33174': attribute type 3 has an invalid length. [ 2036.755154][T11416] netlink: 'syz.0.33174': attribute type 4 has an invalid length. [ 2036.782133][T11416] netlink: 'syz.0.33174': attribute type 5 has an invalid length. [ 2036.798224][T11416] netlink: 'syz.0.33174': attribute type 6 has an invalid length. [ 2036.815354][T11416] netlink: 'syz.0.33174': attribute type 7 has an invalid length. [ 2036.830794][T11416] netlink: 'syz.0.33174': attribute type 9 has an invalid length. [ 2036.862278][T11416] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.33174'. [ 2037.224488][T11438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33182'. [ 2038.086441][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.093039][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.396661][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2040.625628][T11460] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.33192'. [ 2040.762459][T11468] sock: sock_timestamping_bind_phc: sock not bind to device [ 2040.939186][T11471] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.33205'. [ 2041.112102][T11475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33206'. [ 2041.726786][T11496] sock: sock_timestamping_bind_phc: sock not bind to device [ 2041.879021][T11502] validate_nla: 27 callbacks suppressed [ 2041.879044][T11502] netlink: 'syz.3.33209': attribute type 4 has an invalid length. [ 2041.894311][T11502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33209'. [ 2042.803153][T11511] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.33221'. [ 2043.188027][T11524] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.33227'. [ 2043.336332][T11530] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.33222'. [ 2043.469574][ T60] hsr_slave_0: left promiscuous mode [ 2043.504290][ T60] hsr_slave_1: left promiscuous mode [ 2043.526603][ T60] `: left allmulticast mode [ 2043.531593][ T60] team_slave_1: left allmulticast mode [ 2043.540025][T11537] netlink: 'syz.0.33224': attribute type 4 has an invalid length. [ 2043.548734][ T60] `: left promiscuous mode [ 2043.552734][T11537] netlink: 132 bytes leftover after parsing attributes in process `syz.0.33224'. [ 2043.553815][ T60] team_slave_1: left promiscuous mode [ 2043.580072][ T60] bridge0: port 4(`) entered disabled state [ 2043.600023][ T60] bond0: left allmulticast mode [ 2043.609576][ T60] bond_slave_0: left allmulticast mode [ 2043.633809][ T60] bond_slave_1: left allmulticast mode [ 2043.644245][ T60] bridge0: port 3(bond0) entered disabled state [ 2043.673161][ T60] bridge_slave_1: left allmulticast mode [ 2043.678976][ T60] bridge_slave_1: left promiscuous mode [ 2043.689736][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 2043.700577][ T60] bridge_slave_0: left allmulticast mode [ 2043.726398][ T60] bridge_slave_0: left promiscuous mode [ 2043.737935][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 2043.754227][T11543] netlink: 'syz.0.33228': attribute type 1 has an invalid length. [ 2043.764123][T11543] netlink: 'syz.0.33228': attribute type 2 has an invalid length. [ 2043.778683][T11543] netlink: 'syz.0.33228': attribute type 2 has an invalid length. [ 2043.802916][T11543] netlink: 'syz.0.33228': attribute type 3 has an invalid length. [ 2043.824062][ T60] veth1_macvtap: left promiscuous mode [ 2043.830185][ T60] veth0_macvtap: left promiscuous mode [ 2043.832106][T11543] netlink: 'syz.0.33228': attribute type 4 has an invalid length. [ 2043.852773][ T60] veth1_vlan: left promiscuous mode [ 2043.858090][T11543] netlink: 'syz.0.33228': attribute type 5 has an invalid length. [ 2043.862307][ T60] veth0_vlan: left promiscuous mode [ 2043.871411][T11543] netlink: 'syz.0.33228': attribute type 6 has an invalid length. [ 2043.894915][T11543] netlink: 'syz.0.33228': attribute type 7 has an invalid length. [ 2043.907802][T11543] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.33228'. [ 2045.014590][T11558] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.33236'. [ 2045.656612][ T60] ` (unregistering): Port device team_slave_1 removed [ 2045.785774][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2045.796091][ T60] bond_slave_1 (unregistering): left promiscuous mode [ 2045.866044][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2045.879709][ T60] bond_slave_0 (unregistering): left promiscuous mode [ 2046.273680][ T60] bond0 (unregistering): Released all slaves [ 2046.413011][T11558] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2046.894409][T11574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.33242'. [ 2046.910823][T11574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.33242'. [ 2048.219845][T11597] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33258'. [ 2048.265858][T11595] validate_nla: 4 callbacks suppressed [ 2048.265877][T11595] netlink: 'syz.2.33251': attribute type 1 has an invalid length. [ 2048.362431][T11595] netlink: 'syz.2.33251': attribute type 2 has an invalid length. [ 2048.382891][T11595] netlink: 'syz.2.33251': attribute type 2 has an invalid length. [ 2048.403058][T11595] netlink: 'syz.2.33251': attribute type 3 has an invalid length. [ 2048.417196][T11595] netlink: 'syz.2.33251': attribute type 4 has an invalid length. [ 2048.436922][T11595] netlink: 'syz.2.33251': attribute type 5 has an invalid length. [ 2048.463475][T11595] netlink: 'syz.2.33251': attribute type 6 has an invalid length. [ 2048.494522][T11595] netlink: 'syz.2.33251': attribute type 7 has an invalid length. [ 2048.516906][T11595] netlink: 'syz.2.33251': attribute type 9 has an invalid length. [ 2048.544673][T11595] netlink: 'syz.2.33251': attribute type 10 has an invalid length. [ 2048.572187][T11595] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.33251'. [ 2048.880479][T11609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33255'. [ 2048.897067][T11609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33255'. [ 2049.894254][T11631] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33265'. [ 2055.165625][T11735] validate_nla: 2 callbacks suppressed [ 2055.165657][T11735] netlink: 'syz.3.33312': attribute type 22 has an invalid length. [ 2056.079020][T11749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33318'. [ 2056.828528][T11759] netlink: 'syz.0.33324': attribute type 22 has an invalid length. [ 2057.370317][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33330'. [ 2057.845671][T11790] netlink: 'syz.1.33335': attribute type 22 has an invalid length. [ 2059.324687][T11822] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.33350'. [ 2060.557944][T11834] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.33357'. [ 2060.569242][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33357'. [ 2060.759574][T11841] netlink: 'syz.1.33360': attribute type 2 has an invalid length. [ 2060.802057][T11841] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.33360'. [ 2060.861558][T11842] wg2: entered promiscuous mode [ 2060.866731][T11842] wg2: entered allmulticast mode [ 2062.529874][T11882] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.33377'. [ 2062.547381][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33377'. [ 2062.847150][T11888] netlink: 'syz.2.33379': attribute type 2 has an invalid length. [ 2062.865794][T11888] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.33379'. [ 2063.734289][T11907] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.33396'. [ 2063.908101][T11911] netlink: 'syz.3.33390': attribute type 2 has an invalid length. [ 2063.928925][T11911] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.33390'. [ 2065.000881][T11927] wg2: entered promiscuous mode [ 2065.030297][T11927] wg2: entered allmulticast mode [ 2065.457543][T11938] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.33400'. [ 2065.471381][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33400'. [ 2065.913755][T11949] netlink: 'syz.2.33405': attribute type 2 has an invalid length. [ 2065.942770][T11949] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.33405'. [ 2066.492594][T11951] netlink: 'syz.1.33406': attribute type 2 has an invalid length. [ 2066.511554][T11951] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.33406'. [ 2067.221048][T11974] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.33416'. [ 2067.802911][T11985] wg2: entered promiscuous mode [ 2067.813235][T11985] wg2: entered allmulticast mode [ 2067.987658][T11992] netlink: 'syz.3.33423': attribute type 2 has an invalid length. [ 2068.024040][T11992] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.33423'. [ 2068.068723][T11994] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.33425'. [ 2068.118127][T11994] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.33425'. [ 2068.996070][T12025] netlink: 164 bytes leftover after parsing attributes in process `syz.1.33440'. [ 2069.107824][T12023] netlink: 'syz.0.33438': attribute type 2 has an invalid length. [ 2069.132081][T12023] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.33438'. [ 2069.854957][T12058] netlink: 164 bytes leftover after parsing attributes in process `syz.3.33454'. [ 2070.002141][T12064] netlink: 'syz.1.33458': attribute type 1 has an invalid length. [ 2070.399657][T21576] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2071.883680][T25659] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2073.826159][ T5781] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2077.528613][T12182] sit0: entered allmulticast mode [ 2077.694454][T12182] sit0: entered promiscuous mode [ 2079.390040][T12203] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33519'. [ 2079.996505][T12211] netlink: 'syz.1.33531': attribute type 22 has an invalid length. [ 2080.426645][T12215] sit0: entered allmulticast mode [ 2080.561486][T12215] sit0: entered promiscuous mode [ 2080.755951][T12218] netlink: 'syz.0.33526': attribute type 27 has an invalid length. [ 2080.905155][T12220] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.33527'. [ 2081.124461][T12223] netlink: 'syz.2.33538': attribute type 27 has an invalid length. [ 2081.601740][T12230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2081.944367][T12237] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33533'. [ 2081.985715][T12238] netlink: 'syz.3.33534': attribute type 22 has an invalid length. [ 2082.852702][T12248] sit0: entered allmulticast mode [ 2083.113915][T12248] sit0: entered promiscuous mode [ 2086.277187][T12321] sit0: entered allmulticast mode [ 2086.411359][T12326] sit0: entered promiscuous mode [ 2089.796233][T12395] sit0: left promiscuous mode [ 2090.046398][T12395] sit0: entered promiscuous mode [ 2090.913192][T25659] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 2092.421984][T25659] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 2092.717554][T12453] sit0: left promiscuous mode [ 2093.060680][T12453] sit0: entered promiscuous mode [ 2093.439337][T12467] netlink: 'syz.1.33638': attribute type 1 has an invalid length. [ 2093.472062][T12467] netlink: 'syz.1.33638': attribute type 4 has an invalid length. [ 2093.496104][T12467] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.33638'. [ 2093.733803][T25659] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 2093.858272][T12471] netlink: 'syz.1.33640': attribute type 3 has an invalid length. [ 2093.892081][T12471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33640'. [ 2094.287705][T12483] netlink: 168 bytes leftover after parsing attributes in process `syz.2.33646'. [ 2095.068111][T12503] netlink: 'syz.0.33657': attribute type 3 has an invalid length. [ 2095.113028][T12503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.33657'. [ 2095.404763][T12508] netlink: 168 bytes leftover after parsing attributes in process `syz.1.33659'. [ 2095.749817][T12518] sit0: left promiscuous mode [ 2096.060019][T12518] sit0: entered promiscuous mode [ 2096.449487][T12527] netlink: 'syz.1.33667': attribute type 33 has an invalid length. [ 2096.476661][T12527] netlink: 164 bytes leftover after parsing attributes in process `syz.1.33667'. [ 2097.792470][T12548] netlink: 'syz.3.33670': attribute type 3 has an invalid length. [ 2097.800679][T12548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33670'. [ 2098.070350][T12557] sit0: left promiscuous mode [ 2098.222461][T12563] sit0: entered promiscuous mode [ 2098.487625][T12566] netlink: 'syz.3.33679': attribute type 33 has an invalid length. [ 2098.572081][T12566] netlink: 164 bytes leftover after parsing attributes in process `syz.3.33679'. [ 2098.923607][T12580] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.33685'. [ 2099.519060][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.526744][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.525719][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2100.535435][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2100.545676][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2100.554990][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2100.564287][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2100.573500][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2100.582739][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2100.592274][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2100.601610][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2100.611204][T12604] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2101.471983][T21578] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2102.173852][T12618] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.33699'. [ 2102.741094][T12633] netlink: 'syz.2.33702': attribute type 3 has an invalid length. [ 2102.794387][T12633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33702'. [ 2106.157420][T12701] netlink: 'syz.1.33738': attribute type 3 has an invalid length. [ 2106.177417][T12701] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33738'. [ 2109.090197][T12754] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.33768'. [ 2109.803625][T12771] netlink: 156 bytes leftover after parsing attributes in process `syz.2.33766'. [ 2111.372320][T12796] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.33776'. [ 2112.379799][T12805] netlink: 156 bytes leftover after parsing attributes in process `syz.1.33780'. [ 2114.029638][T12831] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.33793'. [ 2114.579813][T12843] netlink: 156 bytes leftover after parsing attributes in process `syz.0.33795'. [ 2115.797679][T12853] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.33802'. [ 2115.854590][T12853] netlink: 8454 bytes leftover after parsing attributes in process `syz.2.33802'. [ 2120.411724][T25659] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 2122.276040][T25659] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 2122.472339][T25659] Bluetooth: hci3: command 0x0406 tx timeout [ 2124.312176][T25659] Bluetooth: hci1: command 0x0406 tx timeout [ 2126.417471][T13071] netlink: 'syz.3.33894': attribute type 3 has an invalid length. [ 2126.477135][T13071] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33894'. [ 2127.200406][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 2127.275058][T25659] Bluetooth: hci2: command 0x0406 tx timeout [ 2128.487812][T13120] netlink: 'syz.1.33920': attribute type 10 has an invalid length. [ 2128.514509][T13120] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.33920'. [ 2128.538348][T13120] net_ratelimit: 3319 callbacks suppressed [ 2128.538374][T13120] openvswitch: netlink: Flow key attr not present in new flow. [ 2130.325354][T13148] netlink: 'syz.3.33924': attribute type 3 has an invalid length. [ 2130.725619][T13158] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.33928'. [ 2131.244828][T13173] netlink: 'syz.2.33936': attribute type 3 has an invalid length. [ 2131.331156][T13177] syzkaller0: entered promiscuous mode [ 2131.353164][T13177] syzkaller0: entered allmulticast mode [ 2132.290351][T13205] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.33947'. [ 2132.385227][T13211] netlink: 'syz.0.33949': attribute type 3 has an invalid length. [ 2132.606876][ T7834] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2133.094755][T13230] netlink: 'syz.0.33967': attribute type 10 has an invalid length. [ 2133.112286][T13230] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.33967'. [ 2133.136050][T13231] syzkaller0: entered promiscuous mode [ 2133.141570][T13231] syzkaller0: entered allmulticast mode [ 2135.218197][T13295] netlink: 'syz.2.33990': attribute type 10 has an invalid length. [ 2135.236928][T13295] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.33990'. [ 2136.266659][T13326] netlink: 'syz.1.34003': attribute type 10 has an invalid length. [ 2136.279234][T13326] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.34003'. [ 2137.409192][T13355] netlink: 'syz.3.34014': attribute type 10 has an invalid length. [ 2137.425886][T13355] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.34014'. [ 2138.310235][T13378] netlink: 830 bytes leftover after parsing attributes in process `syz.2.34026'. [ 2138.500144][T13390] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2138.506862][T13390] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2138.744263][T13401] netlink: 142556 bytes leftover after parsing attributes in process `syz.0.34037'. [ 2138.754766][T13401] netlink: 'syz.0.34037': attribute type 1 has an invalid length. [ 2138.763962][T13401] netlink: 'syz.0.34037': attribute type 2 has an invalid length. [ 2138.772526][T13401] netlink: 'syz.0.34037': attribute type 3 has an invalid length. [ 2138.785998][T13401] netlink: 'syz.0.34037': attribute type 4 has an invalid length. [ 2139.462663][T13414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2139.469274][T13414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2140.098802][T13428] netlink: 142556 bytes leftover after parsing attributes in process `syz.1.34049'. [ 2140.111973][T13428] netlink: 'syz.1.34049': attribute type 1 has an invalid length. [ 2140.147009][T13428] netlink: 'syz.1.34049': attribute type 2 has an invalid length. [ 2140.162226][T13428] netlink: 'syz.1.34049': attribute type 3 has an invalid length. [ 2140.181081][T13428] netlink: 'syz.1.34049': attribute type 4 has an invalid length. [ 2142.138887][T13462] netlink: 142556 bytes leftover after parsing attributes in process `syz.3.34062'. [ 2142.149071][T13462] netlink: 'syz.3.34062': attribute type 1 has an invalid length. [ 2144.285327][T13520] netlink: 36 bytes leftover after parsing attributes in process `syz.1.34090'. [ 2144.301112][T13520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2145.373618][T13544] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.34103'. [ 2145.457092][T13544] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2145.645378][T13554] syzkaller0: entered promiscuous mode [ 2147.460660][T13580] delete_channel: no stack [ 2148.451681][T13586] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.34119'. [ 2148.695887][T13589] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.34121'. [ 2148.705860][T13589] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2149.836059][T13591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34122'. [ 2149.862063][T13591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2150.177981][T13602] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2150.185867][T13602] syzkaller1: Linktype set failed because interface is up [ 2150.508125][T13618] netlink: 152 bytes leftover after parsing attributes in process `syz.2.34133'. [ 2150.934430][T13631] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.34141'. [ 2151.473527][T13646] netlink: 152 bytes leftover after parsing attributes in process `syz.3.34148'. [ 2153.082840][T13683] validate_nla: 3 callbacks suppressed [ 2153.082861][T13683] netlink: 'syz.0.34172': attribute type 2 has an invalid length. [ 2153.096905][T13683] netlink: 'syz.0.34172': attribute type 1 has an invalid length. [ 2153.106098][T13683] netlink: 'syz.0.34172': attribute type 8 has an invalid length. [ 2153.114480][T13683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.34172'. [ 2153.218797][T13686] netlink: 152 bytes leftover after parsing attributes in process `syz.1.34164'. [ 2154.605537][T13739] netlink: 'syz.1.34190': attribute type 2 has an invalid length. [ 2154.652909][T13739] netlink: 'syz.1.34190': attribute type 1 has an invalid length. [ 2154.670157][T13739] netlink: 'syz.1.34190': attribute type 8 has an invalid length. [ 2154.679729][T13739] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34190'. [ 2155.330950][T13766] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.34203'. [ 2156.289575][T13776] netlink: 'syz.3.34205': attribute type 2 has an invalid length. [ 2156.299062][T13776] netlink: 'syz.3.34205': attribute type 1 has an invalid length. [ 2156.310195][T13776] netlink: 'syz.3.34205': attribute type 8 has an invalid length. [ 2156.319421][T13776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34205'. [ 2156.476737][T13779] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.34211'. [ 2158.951614][T13857] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.34243'. [ 2159.673479][T13887] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.34256'. [ 2160.956638][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.963057][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2163.637220][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2165.137180][T13962] netlink: 152 bytes leftover after parsing attributes in process `syz.3.34284'. [ 2166.188390][T13970] netlink: 'syz.0.34291': attribute type 29 has an invalid length. [ 2166.197755][T13970] netlink: 'syz.0.34291': attribute type 29 has an invalid length. [ 2166.213280][T13970] netlink: 'syz.0.34291': attribute type 29 has an invalid length. [ 2166.227584][T13970] netlink: 'syz.0.34291': attribute type 29 has an invalid length. [ 2166.238013][T13970] netlink: 'syz.0.34291': attribute type 29 has an invalid length. [ 2166.251321][T13970] netlink: 'syz.0.34291': attribute type 29 has an invalid length. [ 2169.120070][T14035] netlink: 'syz.1.34322': attribute type 29 has an invalid length. [ 2169.138893][T14035] netlink: 'syz.1.34322': attribute type 29 has an invalid length. [ 2169.170387][T14035] netlink: 'syz.1.34322': attribute type 29 has an invalid length. [ 2169.183112][T14035] netlink: 'syz.1.34322': attribute type 29 has an invalid length. [ 2174.749049][T14158] validate_nla: 8 callbacks suppressed [ 2174.749072][T14158] netlink: 'syz.3.34378': attribute type 1 has an invalid length. [ 2174.796923][T14158] netlink: 'syz.3.34378': attribute type 4 has an invalid length. [ 2174.825509][T14158] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.34378'. [ 2176.345380][T14196] netlink: 'syz.0.34397': attribute type 1 has an invalid length. [ 2176.381443][T14196] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.34397'. [ 2178.653776][T14220] syzkaller0: entered promiscuous mode [ 2178.660124][T14220] syzkaller0: entered allmulticast mode [ 2181.372037][T14234] netlink: 'syz.1.34415': attribute type 1 has an invalid length. [ 2181.379918][T14234] netlink: 'syz.1.34415': attribute type 4 has an invalid length. [ 2181.390988][T14234] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.34415'. [ 2181.670832][T14247] netlink: 'syz.2.34420': attribute type 2 has an invalid length. [ 2181.692470][T14247] netlink: 'syz.2.34420': attribute type 1 has an invalid length. [ 2181.711447][T14247] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.34420'. [ 2182.626089][T14281] netlink: 'syz.2.34433': attribute type 1 has an invalid length. [ 2182.639784][T14281] netlink: 'syz.2.34433': attribute type 4 has an invalid length. [ 2182.648976][T14281] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.34433'. [ 2182.651448][T14280] syz.1.34442[14280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2182.676031][T14280] syz.1.34442[14280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2183.810688][T14319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.34452'. [ 2183.867492][T14319] bond0: left allmulticast mode [ 2183.902005][T14319] bond_slave_0: left allmulticast mode [ 2183.939994][T14321] netlink: 'syz.1.34453': attribute type 2 has an invalid length. [ 2183.948312][T14319] bond_slave_1: left allmulticast mode [ 2183.963251][T14319] bridge0: port 3(bond0) entered disabled state [ 2183.965652][T14321] netlink: 'syz.1.34453': attribute type 1 has an invalid length. [ 2183.998051][T14319] bridge_slave_1: left allmulticast mode [ 2184.017003][T14319] bridge_slave_1: left promiscuous mode [ 2184.019267][T14321] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.34453'. [ 2184.044890][T14319] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.131373][T14319] bridge_slave_0: left allmulticast mode [ 2184.139225][T14319] bridge_slave_0: left promiscuous mode [ 2184.150841][T14319] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.543621][T14334] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 2184.573321][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2184.953286][T14346] netlink: 'syz.0.34467': attribute type 2 has an invalid length. [ 2184.972127][T14346] netlink: 'syz.0.34467': attribute type 1 has an invalid length. [ 2184.980229][T14346] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.34467'. [ 2185.118956][T14351] syz.3.34468[14351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2185.119115][T14351] syz.3.34468[14351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2185.449573][T14362] hsr0: entered promiscuous mode [ 2185.533119][T14362] hsr0: entered allmulticast mode [ 2185.538428][T14362] hsr_slave_0: entered allmulticast mode [ 2185.545087][T14362] hsr_slave_1: entered allmulticast mode [ 2185.740082][T14370] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 2185.760812][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.777817][T14370] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 2185.799112][T14370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2185.972256][T14377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2185.979051][T14377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2186.125430][T14383] syzkaller0: entered promiscuous mode [ 2186.131001][T14383] syzkaller0: entered allmulticast mode [ 2186.171299][T14388] syz.2.34481[14388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2186.171581][T14388] syz.2.34481[14388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2186.223473][T14386] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.34492'. [ 2189.222419][T14418] syzkaller0: entered promiscuous mode [ 2189.229264][T14418] syzkaller0: entered allmulticast mode [ 2192.738718][T14463] syzkaller0: entered promiscuous mode [ 2192.745405][T14463] syzkaller0: entered allmulticast mode [ 2194.655630][T21581] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2196.907342][T14521] syzkaller0: entered promiscuous mode [ 2196.913472][T14521] syzkaller0: entered allmulticast mode [ 2200.467090][T14566] syzkaller0: entered promiscuous mode [ 2200.477157][T14566] syzkaller0: entered allmulticast mode [ 2201.000422][T14578] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 2204.947683][T14629] netlink: 'syz.1.34582': attribute type 22 has an invalid length. [ 2205.297195][T14640] netlink: 'syz.3.34589': attribute type 1 has an invalid length. [ 2205.316076][T14640] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.34589'. [ 2205.486930][T14646] Â: renamed from pim6reg1 [ 2205.558915][T14652] netlink: 'syz.0.34594': attribute type 22 has an invalid length. [ 2206.199075][T14678] netlink: 'syz.3.34606': attribute type 22 has an invalid length. [ 2206.399765][T14688] netlink: 'syz.1.34607': attribute type 1 has an invalid length. [ 2206.422601][T14688] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.34607'. [ 2207.513381][ T7834] wlan1: Trigger new scan to find an IBSS to join [ 2207.805475][T14723] netlink: 'syz.0.34621': attribute type 1 has an invalid length. [ 2207.836254][T14723] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.34621'. [ 2208.481301][ T7834] wlan1: Trigger new scan to find an IBSS to join [ 2211.513685][T21578] wlan1: Trigger new scan to find an IBSS to join [ 2212.548267][T21581] wlan1: Creating new IBSS network, BSSID 1e:da:7b:6a:3c:a3 [ 2213.130351][T14810] netlink: 'syz.2.34662': attribute type 11 has an invalid length. [ 2213.141943][T14810] netlink: 176 bytes leftover after parsing attributes in process `syz.2.34662'. [ 2213.479992][T21581] wlan1: Trigger new scan to find an IBSS to join [ 2214.038241][T14839] netlink: 'syz.3.34672': attribute type 11 has an invalid length. [ 2214.051564][T14839] netlink: 176 bytes leftover after parsing attributes in process `syz.3.34672'. [ 2214.397173][T30733] wlan1: Creating new IBSS network, BSSID ae:76:dc:2f:27:f0 [ 2214.703621][T14858] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.34680'. [ 2214.724398][T14858] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.34680'. [ 2214.847173][T14863] netlink: 14 bytes leftover after parsing attributes in process `syz.0.34690'. [ 2215.184276][T14871] netlink: 'syz.1.34686': attribute type 11 has an invalid length. [ 2215.231978][T14871] netlink: 176 bytes leftover after parsing attributes in process `syz.1.34686'. [ 2216.833817][T14915] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.34707'. [ 2217.253284][T14929] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.34713'. [ 2217.278175][T14929] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.34713'. [ 2217.852157][T14946] sock: sock_set_timeout: `syz.0.34721' (pid 14946) tries to set negative timeout [ 2219.701301][T14972] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.34729'. [ 2219.722570][T14972] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.34729'. [ 2220.380680][T14993] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.34737'. [ 2220.628055][T15002] sock: sock_set_timeout: `syz.3.34740' (pid 15002) tries to set negative timeout [ 2222.083475][T15026] sock: sock_set_timeout: `syz.2.34750' (pid 15026) tries to set negative timeout [ 2222.420592][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.442013][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.081986][T15062] netlink: 'syz.2.34761': attribute type 3 has an invalid length. [ 2224.089907][T15062] netlink: 'syz.2.34761': attribute type 5 has an invalid length. [ 2224.952759][T15074] netlink: 'syz.1.34766': attribute type 3 has an invalid length. [ 2225.028719][T15074] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.34766'. [ 2228.163308][T15115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2233.271465][T15193] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.34815'. [ 2233.983905][T15202] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.34817'. [ 2235.431303][T10668] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 2235.763025][T15233] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.34830'. [ 2236.005515][T15239] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.34839'. [ 2237.478219][T15255] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.34840'. [ 2238.323647][T15275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.34850'. [ 2239.505053][T15297] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.34857'. [ 2239.566101][T10668] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 2240.449676][T15331] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.34873'. [ 2240.646197][T15337] netlink: 144 bytes leftover after parsing attributes in process `syz.2.34875'. [ 2240.893395][T15340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.34877'. [ 2242.580996][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2243.581304][T10668] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2244.309153][T15383] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.34896'. [ 2244.635671][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2245.609564][T15400] macsec0: entered promiscuous mode [ 2245.672817][T15400] macsec0: entered allmulticast mode [ 2245.698727][T15400] veth1_macvtap: entered allmulticast mode [ 2245.933925][T10668] Bluetooth: hci1: ACL packet too small [ 2247.005438][T15427] macsec0: entered promiscuous mode [ 2247.029887][T15427] macsec0: entered allmulticast mode [ 2247.049631][T15427] veth1_macvtap: entered allmulticast mode [ 2247.291401][T10668] Bluetooth: hci3: ACL packet too small [ 2248.230478][T15457] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.34929'. [ 2251.624058][T15548] netlink: 'syz.2.34973': attribute type 10 has an invalid length. [ 2251.648355][T15548] team0: Device hsr_slave_0 failed to register rx_handler [ 2252.376935][T15577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2252.387733][T15577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2252.432527][T15577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2252.449282][T15577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2252.878534][T15587] netlink: 'syz.0.34990': attribute type 10 has an invalid length. [ 2253.045919][T15587] team0: Device hsr_slave_0 failed to register rx_handler [ 2254.358866][T15616] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.35002'. [ 2254.434090][T15620] netlink: 'syz.3.35003': attribute type 10 has an invalid length. [ 2254.494902][T15620] `: Device hsr_slave_0 failed to register rx_handler [ 2255.031577][T15635] netlink: 204416 bytes leftover after parsing attributes in process `syz.2.35012'. [ 2255.042756][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35012'. [ 2255.074933][T15633] netlink: 'syz.1.35011': attribute type 33 has an invalid length. [ 2255.090261][T15633] netlink: 152 bytes leftover after parsing attributes in process `syz.1.35011'. [ 2256.350410][T15662] netlink: 'syz.1.35020': attribute type 10 has an invalid length. [ 2256.363825][T15663] netlink: 'syz.0.35029': attribute type 11 has an invalid length. [ 2256.385080][T15663] netlink: 126332 bytes leftover after parsing attributes in process `syz.0.35029'. [ 2256.431685][T15662] `: Device hsr_slave_0 failed to register rx_handler [ 2256.601498][T15668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2256.609723][T15668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2256.623493][T15668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2256.641383][T15668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2256.834832][T15670] netlink: 204416 bytes leftover after parsing attributes in process `syz.3.35024'. [ 2256.872875][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35024'. [ 2257.101400][T15674] netlink: 'syz.3.35026': attribute type 33 has an invalid length. [ 2257.109753][T15674] netlink: 152 bytes leftover after parsing attributes in process `syz.3.35026'. [ 2258.468420][T15693] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.35034'. [ 2258.653002][T15695] netlink: 204416 bytes leftover after parsing attributes in process `syz.0.35036'. [ 2258.802679][T15703] netlink: 'syz.0.35040': attribute type 33 has an invalid length. [ 2259.188488][T15713] netlink: 'syz.3.35039': attribute type 10 has an invalid length. [ 2259.531022][T15713] veth1_vlan: entered allmulticast mode [ 2259.636824][T15713] `: Device veth1_vlan failed to register rx_handler [ 2259.886958][T15724] __nla_validate_parse: 2 callbacks suppressed [ 2259.886981][T15724] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.35047'. [ 2261.175697][T15745] sock: sock_timestamping_bind_phc: sock not bind to device [ 2265.508802][T15807] veth1_macvtap: left allmulticast mode [ 2265.522372][T15807] veth1_macvtap: left promiscuous mode [ 2265.533609][T15807] macsec0: left promiscuous mode [ 2265.538627][T15807] macsec0: left allmulticast mode [ 2265.637689][T15810] veth1_macvtap: entered promiscuous mode [ 2265.692311][T15810] macsec0: entered promiscuous mode [ 2265.697787][T15810] macsec0: entered allmulticast mode [ 2265.782148][T15810] veth1_macvtap: entered allmulticast mode [ 2266.180893][T15824] sock: sock_timestamping_bind_phc: sock not bind to device [ 2266.720087][T15837] netlink: 'syz.0.35094': attribute type 10 has an invalid length. [ 2266.753493][T15837] veth1_vlan: entered allmulticast mode [ 2266.845112][T15837] team0: Device veth1_vlan failed to register rx_handler [ 2267.808400][T15855] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.35103'. [ 2268.508504][T15874] netlink: 112 bytes leftover after parsing attributes in process `syz.0.35120'. [ 2269.568338][T15908] netlink: 112 bytes leftover after parsing attributes in process `syz.3.35128'. [ 2269.635175][T15910] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.35129'. [ 2270.535608][T15943] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.35147'. [ 2270.569894][T15946] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.35149'. [ 2271.405258][T15966] netlink: 'syz.1.35157': attribute type 10 has an invalid length. [ 2271.416009][T15966] hsr0: left allmulticast mode [ 2271.420845][T15966] hsr_slave_0: left allmulticast mode [ 2271.427119][T15966] hsr_slave_1: left allmulticast mode [ 2271.433822][T15966] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2271.577374][T15970] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.35160'. [ 2273.580113][T10668] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 2274.094895][T16024] netlink: 16358 bytes leftover after parsing attributes in process `syz.2.35184'. [ 2274.498101][T16032] netlink: 16358 bytes leftover after parsing attributes in process `syz.1.35197'. [ 2274.894485][ T7834] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2275.755960][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2276.897435][T10668] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 2278.550727][T16104] syzkaller0: entered promiscuous mode [ 2278.574405][T16104] syzkaller0: entered allmulticast mode [ 2281.308438][T10668] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 2281.445190][T16122] syzkaller0: entered promiscuous mode [ 2281.454025][T16122] syzkaller0: entered allmulticast mode [ 2283.846359][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.852971][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2286.321015][T16178] syzkaller0: entered promiscuous mode [ 2286.336441][T16178] syzkaller0: entered allmulticast mode [ 2289.834927][T16202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35260'. [ 2291.575407][T16224] syzkaller0: entered promiscuous mode [ 2291.584606][T16224] syzkaller0: entered allmulticast mode [ 2291.635911][T16231] netlink: 60 bytes leftover after parsing attributes in process `syz.1.35274'. [ 2295.949913][T16264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.35286'. [ 2296.116362][T16268] netlink: 'syz.3.35287': attribute type 29 has an invalid length. [ 2296.132931][T16268] netlink: 'syz.3.35287': attribute type 29 has an invalid length. [ 2296.185785][T16268] netlink: 'syz.3.35287': attribute type 29 has an invalid length. [ 2296.901244][T16280] syzkaller0: entered promiscuous mode [ 2296.916167][T16280] syzkaller0: entered allmulticast mode [ 2305.967167][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2306.783517][T21581] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2307.384608][T16379] pim6reg1: entered promiscuous mode [ 2307.390290][T16379] pim6reg1: entered allmulticast mode [ 2309.536048][T16439] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.35364'. [ 2309.575835][T16439] netlink: del zone limit has 8 unknown bytes [ 2311.424921][T16468] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.35376'. [ 2311.485293][T16468] netlink: del zone limit has 8 unknown bytes [ 2311.798241][T16474] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.35388'. [ 2311.828711][T16474] netlink: del zone limit has 8 unknown bytes [ 2311.933183][T30726] tipc: Subscription rejected, illegal request [ 2312.992503][T16507] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.35393'. [ 2315.821574][T16586] pim6reg1: entered promiscuous mode [ 2315.833376][T16586] pim6reg1: entered allmulticast mode [ 2316.344906][T30733] tipc: Subscription rejected, illegal request [ 2316.958089][T16625] pim6reg1: entered promiscuous mode [ 2316.973071][T16625] pim6reg1: entered allmulticast mode [ 2317.358180][T16632] netlink: 'syz.3.35451': attribute type 9 has an invalid length. [ 2317.381999][T16632] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.35451'. [ 2317.586707][T16634] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.35442'. [ 2317.666287][T16637] netlink: 'syz.3.35451': attribute type 9 has an invalid length. [ 2317.682343][T16637] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.35451'. [ 2318.468423][T16658] pim6reg1: entered promiscuous mode [ 2318.482024][T16658] pim6reg1: entered allmulticast mode [ 2318.965885][T16665] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.35456'. [ 2319.315777][T16678] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.35464'. [ 2320.148645][T16681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2322.273705][T16743] netlink: 'syz.1.35489': attribute type 9 has an invalid length. [ 2322.307457][T16743] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.35489'. [ 2322.374192][T16748] netlink: 'syz.1.35489': attribute type 9 has an invalid length. [ 2322.402098][T16748] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.35489'. [ 2322.704128][T16754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2323.089924][T16775] netlink: 168 bytes leftover after parsing attributes in process `syz.2.35505'. [ 2323.271664][T16785] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.35509'. [ 2323.406184][T16790] netlink: 'syz.2.35511': attribute type 9 has an invalid length. [ 2323.416766][T16790] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.35511'. [ 2323.418176][T16782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2323.550158][T16790] netlink: 'syz.2.35511': attribute type 9 has an invalid length. [ 2323.569154][T16790] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.35511'. [ 2324.763814][T16824] netlink: 'syz.0.35527': attribute type 9 has an invalid length. [ 2324.772176][T16824] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.35527'. [ 2324.833313][T16825] netlink: 'syz.0.35527': attribute type 9 has an invalid length. [ 2324.841465][T16825] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.35527'. [ 2325.799945][T16843] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.35535'. [ 2325.918338][T16847] netlink: 'syz.3.35538': attribute type 3 has an invalid length. [ 2325.927979][T16847] netlink: 'syz.3.35538': attribute type 1 has an invalid length. [ 2325.942429][T16847] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.35538'. [ 2326.207571][T16852] netlink: 'syz.3.35539': attribute type 9 has an invalid length. [ 2326.215925][T16852] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.35539'. [ 2326.291440][T16855] netlink: 'syz.3.35539': attribute type 9 has an invalid length. [ 2327.335652][T16886] netlink: 'syz.2.35555': attribute type 9 has an invalid length. [ 2327.784191][T16894] __nla_validate_parse: 4 callbacks suppressed [ 2327.784214][T16894] netlink: 168 bytes leftover after parsing attributes in process `syz.0.35559'. [ 2327.977140][T16900] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.35561'. [ 2330.843076][T16914] validate_nla: 1 callbacks suppressed [ 2330.843094][T16914] netlink: 'syz.1.35568': attribute type 3 has an invalid length. [ 2330.857683][T16914] netlink: 'syz.1.35568': attribute type 1 has an invalid length. [ 2330.865715][T16914] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.35568'. [ 2331.030648][T16919] netlink: 168 bytes leftover after parsing attributes in process `syz.3.35570'. [ 2335.310909][T10668] Bluetooth: hci3: unknown advertising packet type: 0xff [ 2335.311066][T10668] Bluetooth: hci3: unknown advertising packet type: 0x80 [ 2335.354599][T10668] Bluetooth: hci3: unknown advertising packet type: 0x09 [ 2335.363136][T10668] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2336.371549][T16973] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.35597'. [ 2336.892274][T24275] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2337.812713][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2338.511075][T17019] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.35615'. [ 2339.949970][T17035] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.35632'. [ 2340.327660][T10668] Bluetooth: hci1: unknown advertising packet type: 0xff [ 2340.328672][T10668] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 2340.339839][T10668] Bluetooth: hci1: unknown advertising packet type: 0x09 [ 2340.347479][T10668] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2341.780629][T10668] Bluetooth: hci2: unknown advertising packet type: 0xff [ 2341.780709][T10668] Bluetooth: hci2: unknown advertising packet type: 0x80 [ 2341.789356][T10668] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 2341.796823][T10668] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2343.773374][T17099] syz.1.35653: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2343.790695][T17099] CPU: 1 PID: 17099 Comm: syz.1.35653 Not tainted syzkaller #0 [ 2343.798325][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2343.808609][T17099] Call Trace: [ 2343.812022][T17099] [ 2343.814986][T17099] dump_stack_lvl+0x18c/0x250 [ 2343.819722][T17099] ? show_regs_print_info+0x20/0x20 [ 2343.824965][T17099] ? load_image+0x400/0x400 [ 2343.829515][T17099] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2343.836198][T17099] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2343.842773][T17099] warn_alloc+0x246/0x340 [ 2343.847258][T17099] ? stack_trace_save+0xaa/0x100 [ 2343.852250][T17099] ? zone_watermark_ok_safe+0x230/0x230 [ 2343.857954][T17099] ? kasan_set_track+0x5f/0x70 [ 2343.862759][T17099] ? kasan_set_track+0x4e/0x70 [ 2343.867687][T17099] ? __kasan_kmalloc+0x8f/0xa0 [ 2343.872495][T17099] ? xsk_init_queue+0xad/0x100 [ 2343.877303][T17099] ? xsk_setsockopt+0x4e5/0x760 [ 2343.882202][T17099] ? do_sock_setsockopt+0x175/0x1a0 [ 2343.887479][T17099] ? __x64_sys_setsockopt+0x182/0x200 [ 2343.892906][T17099] __vmalloc_node_range+0x126/0x1330 [ 2343.898374][T17099] ? free_vm_area+0x50/0x50 [ 2343.902940][T17099] vmalloc_user+0x74/0x80 [ 2343.907320][T17099] ? xskq_create+0xbf/0x170 [ 2343.911914][T17099] xskq_create+0xbf/0x170 [ 2343.916317][T17099] xsk_init_queue+0xad/0x100 [ 2343.921024][T17099] xsk_setsockopt+0x4e5/0x760 [ 2343.925862][T17099] ? xsk_poll+0x680/0x680 [ 2343.930253][T17099] ? __fget_files+0x28/0x4b0 [ 2343.934976][T17099] ? __fget_files+0x28/0x4b0 [ 2343.939620][T17099] ? aa_sock_opt_perm+0x74/0x100 [ 2343.944693][T17099] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2343.950286][T17099] ? security_socket_setsockopt+0x7e/0xa0 [ 2343.956143][T17099] ? xsk_poll+0x680/0x680 [ 2343.960519][T17099] do_sock_setsockopt+0x175/0x1a0 [ 2343.965613][T17099] ? __fdget+0x180/0x210 [ 2343.970016][T17099] __x64_sys_setsockopt+0x182/0x200 [ 2343.975287][T17099] do_syscall_64+0x55/0xa0 [ 2343.979784][T17099] ? clear_bhb_loop+0x40/0x90 [ 2343.984677][T17099] ? clear_bhb_loop+0x40/0x90 [ 2343.989401][T17099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2343.995782][T17099] RIP: 0033:0x7f8edeb9aeb9 [ 2344.000246][T17099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2344.020356][T17099] RSP: 002b:00007f8edcdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2344.029367][T17099] RAX: ffffffffffffffda RBX: 00007f8edee15fa0 RCX: 00007f8edeb9aeb9 [ 2344.037471][T17099] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 2344.045664][T17099] RBP: 00007f8edec08c1f R08: 0000000000000004 R09: 0000000000000000 [ 2344.053758][T17099] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2344.061861][T17099] R13: 00007f8edee16038 R14: 00007f8edee15fa0 R15: 00007ffeb61738c8 [ 2344.070168][T17099] [ 2344.093096][T17099] Mem-Info: [ 2344.098703][T10668] Bluetooth: hci0: unknown advertising packet type: 0xff [ 2344.098779][T10668] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 2344.107461][T10668] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 2344.112014][T17099] active_anon:5359 inactive_anon:0 isolated_anon:0 [ 2344.112014][T17099] active_file:18611 inactive_file:40836 isolated_file:0 [ 2344.112014][T17099] unevictable:768 dirty:169 writeback:0 [ 2344.112014][T17099] slab_reclaimable:10705 slab_unreclaimable:99604 [ 2344.112014][T17099] mapped:23883 shmem:1361 pagetables:573 [ 2344.112014][T17099] sec_pagetables:0 bounce:0 [ 2344.112014][T17099] kernel_misc_reclaimable:0 [ 2344.112014][T17099] free:1338939 free_pcp:5311 free_cma:0 [ 2344.115228][T10668] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2344.127774][T17099] Node 0 active_anon:21436kB inactive_anon:0kB active_file:74444kB inactive_file:163140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95532kB dirty:672kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10968kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no [ 2344.231914][T17099] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2344.282780][T17099] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2344.321922][T17099] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2344.331893][T17099] Node 0 DMA32 free:1434912kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21396kB inactive_anon:0kB active_file:74444kB inactive_file:162316kB unevictable:1536kB writepending:672kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:14596kB local_pcp:1336kB free_cma:0kB [ 2344.371916][T17099] lowmem_reserve[]: 0 0 0 0 0 [ 2344.376982][T17099] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2344.414567][T17099] lowmem_reserve[]: 0 0 0 0 0 [ 2344.419664][T17099] Node 1 Normal free:3904024kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8512kB local_pcp:2368kB free_cma:0kB [ 2344.463655][T17099] lowmem_reserve[]: 0 0 0 0 0 [ 2344.469803][T17099] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2344.485624][T17099] Node 0 DMA32: 1676*4kB (UME) 1105*8kB (UME) 905*16kB (UME) 1576*32kB (UME) 655*64kB (UME) 587*128kB (UME) 196*256kB (UME) 69*512kB (UME) 37*1024kB (UME) 15*2048kB (UM) 264*4096kB (UM) = 1432968kB [ 2344.511016][T17099] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2344.525378][T17099] Node 1 Normal: 228*4kB (UME) 57*8kB (UME) 38*16kB (UME) 267*32kB (UME) 116*64kB (UME) 26*128kB (UME) 7*256kB (UME) 2*512kB (U) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3904024kB [ 2344.546342][T17099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2344.560203][T17099] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2344.575245][T17099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2344.601926][T17099] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2344.611532][T17099] 60808 total pagecache pages [ 2344.618189][T17099] 0 pages in swap cache [ 2344.625628][T17099] Free swap = 124996kB [ 2344.629944][T17099] Total swap = 124996kB [ 2344.636095][T17099] 2097051 pages RAM [ 2344.640193][T17099] 0 pages HighMem/MovableOnly [ 2344.645738][T17099] 416922 pages reserved [ 2344.650090][T17099] 0 pages cma reserved [ 2344.844693][T17103] syzkaller0: entered promiscuous mode [ 2344.850708][T17103] syzkaller0: entered allmulticast mode [ 2345.303300][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.309772][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.074903][T17115] tap0: tun_chr_ioctl cmd 1074025677 [ 2349.081158][T17115] tap0: linktype set to 773 [ 2349.711728][T17148] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.35673'. [ 2357.457369][T17274] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.35717'. [ 2357.630883][T17262] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2361.606286][T17317] syzkaller0: entered promiscuous mode [ 2361.614422][T17317] syzkaller0: entered allmulticast mode [ 2361.969998][T10668] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 2361.970040][T10668] Bluetooth: unknown link type 88 [ 2361.995211][T10668] Bluetooth: hci0: connection err: -111 [ 2364.933279][T10668] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 2364.933322][T10668] Bluetooth: unknown link type 88 [ 2364.945757][T10668] Bluetooth: hci3: connection err: -111 [ 2366.355022][T10668] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 2366.355062][T10668] Bluetooth: unknown link type 88 [ 2366.367592][T10668] Bluetooth: hci2: connection err: -111 [ 2367.916571][T21578] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2368.941681][T21578] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2369.674971][T17398] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.35772'. [ 2369.693213][T17413] netlink: 'syz.1.35779': attribute type 1 has an invalid length. [ 2369.709592][T17414] netlink: 'syz.1.35779': attribute type 1 has an invalid length. [ 2370.842143][T17449] netlink: 539 bytes leftover after parsing attributes in process `syz.3.35794'. [ 2380.382855][T17597] netlink: 'syz.0.35859': attribute type 1 has an invalid length. [ 2380.422340][T17597] netlink: 'syz.0.35859': attribute type 1 has an invalid length. [ 2380.432766][T17602] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.35861'. [ 2380.449465][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35861'. [ 2383.643903][T17625] netlink: 'syz.3.35872': attribute type 1 has an invalid length. [ 2383.680831][T17625] netlink: 'syz.3.35872': attribute type 1 has an invalid length. [ 2388.204180][T17692] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.35900'. [ 2388.215590][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35900'. [ 2391.264713][T17712] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.35912'. [ 2391.277655][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35912'. [ 2398.880436][T24275] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2399.870551][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2402.411494][T10668] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 2404.476182][T10668] Bluetooth: hci1: command 0x0406 tx timeout [ 2406.508792][T10668] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 2406.658642][T18024] syz.3.36047: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2406.714261][T18024] CPU: 0 PID: 18024 Comm: syz.3.36047 Not tainted syzkaller #0 [ 2406.721992][T18024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2406.732344][T18024] Call Trace: [ 2406.735655][T18024] [ 2406.738702][T18024] dump_stack_lvl+0x18c/0x250 [ 2406.741672][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.743433][T18024] ? show_regs_print_info+0x20/0x20 [ 2406.743469][T18024] ? load_image+0x400/0x400 [ 2406.750074][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.755068][T18024] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2406.755107][T18024] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2406.755136][T18024] warn_alloc+0x246/0x340 [ 2406.784427][T18024] ? stack_trace_save+0xaa/0x100 [ 2406.789616][T18024] ? zone_watermark_ok_safe+0x230/0x230 [ 2406.795307][T18024] ? kasan_set_track+0x5f/0x70 [ 2406.800092][T18024] ? kasan_set_track+0x4e/0x70 [ 2406.804945][T18024] ? __kasan_kmalloc+0x8f/0xa0 [ 2406.810350][T18024] ? xsk_init_queue+0xad/0x100 [ 2406.815186][T18024] ? xsk_setsockopt+0x4e5/0x760 [ 2406.820060][T18024] ? do_sock_setsockopt+0x175/0x1a0 [ 2406.825287][T18024] ? __x64_sys_setsockopt+0x182/0x200 [ 2406.830790][T18024] __vmalloc_node_range+0x126/0x1330 [ 2406.836310][T18024] ? free_vm_area+0x50/0x50 [ 2406.840848][T18024] vmalloc_user+0x74/0x80 [ 2406.845201][T18024] ? xskq_create+0xbf/0x170 [ 2406.849913][T18024] xskq_create+0xbf/0x170 [ 2406.854271][T18024] xsk_init_queue+0xad/0x100 [ 2406.858969][T18024] xsk_setsockopt+0x4e5/0x760 [ 2406.863696][T18024] ? xsk_poll+0x680/0x680 [ 2406.868048][T18024] ? __fget_files+0x28/0x4b0 [ 2406.872921][T18024] ? __fget_files+0x28/0x4b0 [ 2406.877621][T18024] ? aa_sock_opt_perm+0x74/0x100 [ 2406.882575][T18024] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2406.888403][T18024] ? security_socket_setsockopt+0x7e/0xa0 [ 2406.894417][T18024] ? xsk_poll+0x680/0x680 [ 2406.898767][T18024] do_sock_setsockopt+0x175/0x1a0 [ 2406.903956][T18024] ? __fdget+0x180/0x210 [ 2406.908224][T18024] __x64_sys_setsockopt+0x182/0x200 [ 2406.913469][T18024] do_syscall_64+0x55/0xa0 [ 2406.917943][T18024] ? clear_bhb_loop+0x40/0x90 [ 2406.922700][T18024] ? clear_bhb_loop+0x40/0x90 [ 2406.927438][T18024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2406.933631][T18024] RIP: 0033:0x7fd75459aeb9 [ 2406.938158][T18024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2406.958257][T18024] RSP: 002b:00007fd755374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2406.966810][T18024] RAX: ffffffffffffffda RBX: 00007fd754815fa0 RCX: 00007fd75459aeb9 [ 2406.975322][T18024] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 2406.983311][T18024] RBP: 00007fd754608c1f R08: 0000000000000004 R09: 0000000000000000 [ 2406.991480][T18024] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2406.999642][T18024] R13: 00007fd754816038 R14: 00007fd754815fa0 R15: 00007ffedd4b82f8 [ 2407.007648][T18024] [ 2407.102438][T18024] Mem-Info: [ 2407.105733][T18024] active_anon:5367 inactive_anon:0 isolated_anon:0 [ 2407.105733][T18024] active_file:18611 inactive_file:40860 isolated_file:0 [ 2407.105733][T18024] unevictable:768 dirty:132 writeback:0 [ 2407.105733][T18024] slab_reclaimable:10811 slab_unreclaimable:96888 [ 2407.105733][T18024] mapped:23883 shmem:1361 pagetables:574 [ 2407.105733][T18024] sec_pagetables:0 bounce:0 [ 2407.105733][T18024] kernel_misc_reclaimable:0 [ 2407.105733][T18024] free:1342363 free_pcp:4459 free_cma:0 [ 2407.214570][T18024] Node 0 active_anon:21468kB inactive_anon:0kB active_file:74444kB inactive_file:163236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95532kB dirty:528kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10820kB pagetables:2296kB sec_pagetables:0kB all_unreclaimable? no [ 2407.349076][T18024] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2407.465533][T18024] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2407.551864][T18024] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2407.577721][T18024] Node 0 DMA32 free:1449312kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21472kB inactive_anon:0kB active_file:74444kB inactive_file:162412kB unevictable:1536kB writepending:580kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:10044kB local_pcp:8684kB free_cma:0kB [ 2407.608733][T18024] lowmem_reserve[]: 0 0 0 0 0 [ 2407.613684][T18024] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2407.640798][T18024] lowmem_reserve[]: 0 0 0 0 0 [ 2407.645669][T18024] Node 1 Normal free:3904280kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8256kB local_pcp:6144kB free_cma:0kB [ 2407.676099][T18024] lowmem_reserve[]: 0 0 0 0 0 [ 2407.681109][T18024] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2407.703386][T18024] Node 0 DMA32: 1764*4kB (UME) 2117*8kB (UME) 1592*16kB (UME) 1135*32kB (UME) 780*64kB (UME) 597*128kB (UME) 196*256kB (UME) 70*512kB (UME) 37*1024kB (UME) 15*2048kB (UM) 264*4096kB (UM) = 1448088kB [ 2407.731966][T18024] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2407.758068][T18024] Node 1 Normal: 228*4kB (UME) 57*8kB (UME) 38*16kB (UME) 265*32kB (UME) 117*64kB (UME) 28*128kB (UME) 7*256kB (UME) 2*512kB (U) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3904280kB [ 2407.781917][T18024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2407.792143][T18024] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2407.801572][T18024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2407.811893][T18024] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2407.821225][T18024] 60832 total pagecache pages [ 2407.826607][T18024] 0 pages in swap cache [ 2407.830800][T18024] Free swap = 124996kB [ 2407.836337][T18024] Total swap = 124996kB [ 2407.840534][T18024] 2097051 pages RAM [ 2407.844993][T18024] 0 pages HighMem/MovableOnly [ 2407.849902][T18024] 416922 pages reserved [ 2407.855318][T18024] 0 pages cma reserved [ 2408.553532][T10668] Bluetooth: hci3: command 0x0406 tx timeout [ 2418.274430][T10668] Bluetooth: hci2: Malformed HCI Event [ 2422.801386][T10668] Bluetooth: hci1: Malformed HCI Event [ 2427.710193][T10668] Bluetooth: hci0: Malformed HCI Event [ 2428.202921][T18209] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.36119'. [ 2429.896277][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2430.995033][ T7834] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2432.120068][T18264] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.36140'. [ 2434.950250][T18296] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.36154'. [ 2435.289937][T18306] syz.1.36159[18306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2435.290085][T18306] syz.1.36159[18306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2438.184603][T18358] netlink: 'syz.0.36180': attribute type 1 has an invalid length. [ 2438.206822][T18358] netlink: 'syz.0.36180': attribute type 4 has an invalid length. [ 2438.252339][T18358] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.36180'. [ 2439.325888][T18377] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.36195'. [ 2448.829909][T18515] netlink: 'syz.0.36241': attribute type 21 has an invalid length. [ 2448.839112][T18515] netlink: 'syz.0.36241': attribute type 19 has an invalid length. [ 2448.847421][T18515] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.36241'. [ 2452.358058][T18559] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.36270'. [ 2452.916383][T18576] netlink: 'syz.0.36267': attribute type 3 has an invalid length. [ 2452.924925][T18576] netlink: 'syz.0.36267': attribute type 1 has an invalid length. [ 2452.940468][T18576] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.36267'. [ 2454.316654][T18589] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.36273'. [ 2454.795891][T18599] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.36277'. [ 2456.495401][T18599] netlink: 4612 bytes leftover after parsing attributes in process `syz.1.36277'. [ 2456.508760][T18599] netlink: 9 bytes leftover after parsing attributes in process `syz.1.36277'. [ 2456.662904][T10668] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 2458.571397][T18643] netlink: 'syz.3.36297': attribute type 3 has an invalid length. [ 2458.621462][T18643] netlink: 'syz.3.36297': attribute type 1 has an invalid length. [ 2458.655488][T18643] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.36297'. [ 2461.201224][T18656] netlink: 'syz.1.36302': attribute type 10 has an invalid length. [ 2461.214267][T18656] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.36302'. [ 2461.234946][T18653] netlink: 'syz.3.36300': attribute type 1 has an invalid length. [ 2461.240705][T18656] openvswitch: netlink: Flow key attr not present in new flow. [ 2461.244057][T18653] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.36300'. [ 2461.273404][T18658] netlink: 'syz.2.36303': attribute type 1 has an invalid length. [ 2461.281495][T18658] netlink: 'syz.2.36303': attribute type 4 has an invalid length. [ 2461.301948][T18658] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.36303'. [ 2461.510689][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2462.029101][ T7834] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2462.978900][T18686] netlink: 'syz.3.36314': attribute type 10 has an invalid length. [ 2462.987370][T18686] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.36314'. [ 2463.013349][T18686] openvswitch: netlink: Flow key attr not present in new flow. [ 2463.305325][T18691] netlink: 'syz.1.36316': attribute type 1 has an invalid length. [ 2463.313855][T18691] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.36316'. [ 2464.997429][T18689] netlink: 'syz.3.36315': attribute type 1 has an invalid length. [ 2465.005517][T18689] netlink: 'syz.3.36315': attribute type 4 has an invalid length. [ 2465.013554][T18689] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.36315'. [ 2465.336873][T18708] netlink: 'syz.0.36329': attribute type 1 has an invalid length. [ 2465.345257][T18708] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.36329'. [ 2466.189129][T18714] syzkaller0: entered promiscuous mode [ 2466.205853][T18719] netlink: 'syz.0.36325': attribute type 10 has an invalid length. [ 2466.207220][T18714] syzkaller0: entered allmulticast mode [ 2466.214570][T18719] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.36325'. [ 2466.231878][T18719] openvswitch: netlink: Flow key attr not present in new flow. [ 2468.166889][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.175038][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.840568][T18728] netlink: 'syz.0.36330': attribute type 1 has an invalid length. [ 2468.849068][T18728] netlink: 'syz.0.36330': attribute type 4 has an invalid length. [ 2468.857352][T18728] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.36330'. [ 2468.948341][T18730] netlink: 'syz.1.36332': attribute type 33 has an invalid length. [ 2468.968092][T18730] netlink: 'syz.1.36332': attribute type 36 has an invalid length. [ 2468.981786][T18730] netlink: 'syz.1.36332': attribute type 37 has an invalid length. [ 2470.307512][T18758] sock: sock_timestamping_bind_phc: sock not bind to device [ 2479.344182][T10668] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 2481.351858][T10668] Bluetooth: hci0: command 0x0406 tx timeout [ 2485.544909][T18913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36404'. [ 2485.609183][T18913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36404'. [ 2485.894698][T10668] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 2486.293405][T18937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.36416'. [ 2486.341125][T18937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.36416'. [ 2486.405148][T10668] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 2487.393013][T18974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.36430'. [ 2487.426630][T18974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.36430'. [ 2487.473151][T10668] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 2487.912039][T10668] Bluetooth: hci3: command 0x0406 tx timeout [ 2488.481863][T10668] Bluetooth: hci2: command 0x0406 tx timeout [ 2488.769478][T19007] syzkaller0: entered promiscuous mode [ 2488.786102][T19007] syzkaller0: entered allmulticast mode [ 2489.514270][T10668] Bluetooth: hci1: command 0x0406 tx timeout [ 2492.537559][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2493.048742][T21581] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2493.416335][T19060] syzkaller0: entered promiscuous mode [ 2493.427150][T19060] syzkaller0: entered allmulticast mode [ 2501.785078][T19155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2502.376979][T19181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2503.723638][T19216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2505.670209][T19246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2509.780676][T19318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2512.276802][T19356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2512.454924][T10668] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 2512.454967][T10668] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 2513.764957][T19382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2516.156891][T19421] mac80211_hwsim hwsim87 ..ãc¤±: renamed from wlan1 [ 2517.097515][T19439] syzkaller0: entered promiscuous mode [ 2517.154422][T19439] syzkaller0: entered allmulticast mode [ 2521.447187][T19470] netlink: 'syz.1.36642': attribute type 22 has an invalid length. [ 2521.981476][T19485] syzkaller0: entered promiscuous mode [ 2521.991440][T19485] syzkaller0: entered allmulticast mode [ 2523.465865][T21581] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2524.083605][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2524.887036][T19496] netlink: 'syz.3.36655': attribute type 22 has an invalid length. [ 2526.659520][T19540] syzkaller0: entered promiscuous mode [ 2526.669323][T19540] syzkaller0: entered allmulticast mode [ 2529.606912][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.624828][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.523067][T10668] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2530.872629][T19604] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.36699'. [ 2531.304109][T19614] delete_channel: no stack [ 2532.258755][T19590] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2532.437631][T19629] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.36711'. [ 2533.151236][T19636] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.36724'. [ 2533.540681][T25659] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2542.946756][T25659] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2545.032045][T19590] Bluetooth: hci2: command 0x0406 tx timeout [ 2550.432571][T19834] netlink: 'syz.1.36795': attribute type 2 has an invalid length. [ 2550.461951][T19834] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.36795'. [ 2553.820679][T19881] sctp: [Deprecated]: syz.0.36817 (pid 19881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2553.820679][T19881] Use struct sctp_sack_info instead [ 2554.395782][T21578] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2555.011140][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2556.659687][T19911] sctp: [Deprecated]: syz.2.36827 (pid 19911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2556.659687][T19911] Use struct sctp_sack_info instead [ 2558.745998][T19930] netlink: 'syz.1.36837': attribute type 10 has an invalid length. [ 2558.763491][T19930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36837'. [ 2559.013663][T19938] sctp: [Deprecated]: syz.1.36839 (pid 19938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2559.013663][T19938] Use struct sctp_sack_info instead [ 2566.718848][T20037] sctp: [Deprecated]: syz.2.36881 (pid 20037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2566.718848][T20037] Use struct sctp_sack_info instead [ 2568.339134][T20057] sctp: [Deprecated]: syz.3.36890 (pid 20057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2568.339134][T20057] Use struct sctp_sack_info instead [ 2578.837862][T20190] syzkaller0: entered promiscuous mode [ 2578.847714][T20190] syzkaller0: entered allmulticast mode [ 2578.874845][T20190] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 2580.642574][T20233] syzkaller0: entered promiscuous mode [ 2580.648402][T20233] syzkaller0: entered allmulticast mode [ 2580.739101][T20237] netlink: 539 bytes leftover after parsing attributes in process `syz.0.36965'. [ 2580.758865][T20239] ref_ctr_offset mismatch. inode: 0x1451 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 2581.693434][T20265] netlink: 'syz.3.36978': attribute type 10 has an invalid length. [ 2581.707505][T20265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.36978'. [ 2581.718153][T20265] caif0: entered promiscuous mode [ 2581.724179][T20265] caif0: entered allmulticast mode [ 2581.729894][T20265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2581.776823][T20269] syzkaller0: entered promiscuous mode [ 2581.782791][T20269] syzkaller0: entered allmulticast mode [ 2584.263067][T20314] netlink: 'syz.2.36993': attribute type 10 has an invalid length. [ 2584.271451][T20314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36993'. [ 2584.283213][T20314] caif0: entered promiscuous mode [ 2584.289048][T20314] caif0: entered allmulticast mode [ 2584.295101][T20314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2584.327133][T20316] netlink: 'syz.3.36995': attribute type 1 has an invalid length. [ 2584.342009][T20316] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.36995'. [ 2584.411114][T20318] netlink: 'syz.1.36997': attribute type 2 has an invalid length. [ 2584.431876][T20318] netlink: 'syz.1.36997': attribute type 9 has an invalid length. [ 2584.439782][T20318] netlink: 'syz.1.36997': attribute type 10 has an invalid length. [ 2584.479443][T20318] netlink: 'syz.1.36997': attribute type 11 has an invalid length. [ 2584.489006][T20318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36997'. [ 2585.525198][T20194] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2586.028205][T20194] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2588.459682][T20349] netlink: 'syz.1.37007': attribute type 10 has an invalid length. [ 2588.468176][T20349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37007'. [ 2588.478947][T20349] caif0: entered promiscuous mode [ 2588.484375][T20349] caif0: entered allmulticast mode [ 2588.490135][T20349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2591.040918][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.048640][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.190950][T20390] netlink: 'syz.0.37026': attribute type 2 has an invalid length. [ 2592.199608][T20390] netlink: 'syz.0.37026': attribute type 9 has an invalid length. [ 2592.207617][T20390] netlink: 'syz.0.37026': attribute type 10 has an invalid length. [ 2592.216548][T20390] netlink: 'syz.0.37026': attribute type 11 has an invalid length. [ 2592.224849][T20390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.37026'. [ 2595.441915][T20194] wlan1: Trigger new scan to find an IBSS to join [ 2596.766283][T20443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.37049'. [ 2598.475246][T21576] wlan1: Trigger new scan to find an IBSS to join [ 2601.511925][T21576] wlan1: Trigger new scan to find an IBSS to join [ 2602.468238][T30733] wlan1: Creating new IBSS network, BSSID 72:88:53:70:9e:25 [ 2602.677902][T20539] syzkaller0: entered promiscuous mode [ 2602.701846][T20539] syzkaller0: entered allmulticast mode [ 2602.736221][T20545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.37091'. [ 2606.268465][T19590] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2608.781358][T20607] wg2: entered allmulticast mode [ 2608.883023][T20607] wg2: entered promiscuous mode [ 2610.516804][T20636] wg2: left promiscuous mode [ 2610.583832][T20636] wg2: entered promiscuous mode [ 2612.225263][T20670] wg2: left promiscuous mode [ 2612.276481][T20672] wg2: entered promiscuous mode [ 2613.169468][T20689] syzkaller0: entered promiscuous mode [ 2613.185541][T20689] syzkaller0: entered allmulticast mode [ 2613.413107][T19590] Bluetooth: hci0: Malformed Event: 0x2f [ 2613.724953][T19590] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12 [ 2615.752728][T19590] Bluetooth: hci0: command 0x0406 tx timeout [ 2617.055456][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2619.808754][T19590] Bluetooth: hci3: Malformed Event: 0x2f [ 2620.775202][T19590] Bluetooth: hci2: Malformed Event: 0x2f [ 2621.123627][T20775] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.37180'. [ 2621.181673][T20775] netlink: del zone limit has 8 unknown bytes [ 2626.698087][T20846] bond_slave_0: entered promiscuous mode [ 2626.711907][T20846] bond_slave_0: entered allmulticast mode [ 2629.652404][T20886] bond_slave_0: entered allmulticast mode [ 2631.572959][T20913] bond_slave_0: entered promiscuous mode [ 2631.578755][T20913] bond_slave_0: entered allmulticast mode [ 2631.861127][T19590] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 2632.542571][T24275] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2633.487941][T20940] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37244'. [ 2634.163231][T19590] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 2636.296952][T20973] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.37260'. [ 2636.331940][T20976] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37261'. [ 2636.674067][T20981] netlink: 'syz.2.37271': attribute type 153 has an invalid length. [ 2636.725755][T19590] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 2636.733796][T20981] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.37271'. [ 2639.569600][T21015] netlink: 'syz.0.37276': attribute type 153 has an invalid length. [ 2639.591851][T21015] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.37276'. [ 2642.386522][T21048] netlink: 'syz.3.37291': attribute type 153 has an invalid length. [ 2642.428018][T21048] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.37291'. [ 2642.815920][T19590] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 2643.148202][T21066] netlink: 'syz.2.37299': attribute type 1 has an invalid length. [ 2647.862554][T21094] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37309'. [ 2647.980472][T20194] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2648.012117][T21097] netlink: 'syz.0.37310': attribute type 1 has an invalid length. [ 2649.907177][T21134] netlink: 'syz.1.37322': attribute type 1 has an invalid length. [ 2652.496881][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.511088][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2663.762663][T20194] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2664.317284][T21289] sctp: [Deprecated]: syz.0.37382 (pid 21289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2664.317284][T21289] Use struct sctp_sack_info instead [ 2667.496480][T21305] netlink: 'syz.3.37388': attribute type 21 has an invalid length. [ 2667.530377][T21305] netlink: 'syz.3.37388': attribute type 10 has an invalid length. [ 2667.541191][T21305] netlink: 'syz.3.37388': attribute type 12 has an invalid length. [ 2667.551434][T21305] netlink: 'syz.3.37388': attribute type 13 has an invalid length. [ 2667.560654][T21305] netlink: 'syz.3.37388': attribute type 14 has an invalid length. [ 2667.571779][T21305] netlink: 'syz.3.37388': attribute type 15 has an invalid length. [ 2667.580255][T21305] netlink: 'syz.3.37388': attribute type 16 has an invalid length. [ 2667.589585][T21305] netlink: 'syz.3.37388': attribute type 19 has an invalid length. [ 2667.600348][T21305] netlink: 'syz.3.37388': attribute type 21 has an invalid length. [ 2667.609762][T21305] netlink: 'syz.3.37388': attribute type 22 has an invalid length. [ 2667.619034][T21305] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.37388'. [ 2674.872355][T21362] netlink: 'syz.2.37414': attribute type 21 has an invalid length. [ 2674.883133][T21362] netlink: 'syz.2.37414': attribute type 10 has an invalid length. [ 2674.891905][T21362] netlink: 'syz.2.37414': attribute type 12 has an invalid length. [ 2674.900086][T21362] netlink: 'syz.2.37414': attribute type 13 has an invalid length. [ 2674.921719][T21362] netlink: 'syz.2.37414': attribute type 14 has an invalid length. [ 2674.930014][T21362] netlink: 'syz.2.37414': attribute type 15 has an invalid length. [ 2674.938930][T21362] netlink: 'syz.2.37414': attribute type 16 has an invalid length. [ 2674.965886][T21362] netlink: 'syz.2.37414': attribute type 19 has an invalid length. [ 2674.974644][T21362] netlink: 'syz.2.37414': attribute type 21 has an invalid length. [ 2674.984084][T21362] netlink: 'syz.2.37414': attribute type 22 has an invalid length. [ 2674.993283][T21362] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.37414'. [ 2675.504670][T21381] sctp: [Deprecated]: syz.3.37413 (pid 21381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2675.504670][T21381] Use struct sctp_sack_info instead [ 2679.113503][T21576] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2679.160644][T21399] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.37420'. [ 2679.244454][T21405] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.37430'. [ 2680.962632][T21434] validate_nla: 10 callbacks suppressed [ 2680.962650][T21434] netlink: 'syz.0.37433': attribute type 21 has an invalid length. [ 2680.977470][T21434] netlink: 'syz.0.37433': attribute type 10 has an invalid length. [ 2680.985616][T21434] netlink: 'syz.0.37433': attribute type 12 has an invalid length. [ 2680.995976][T21434] netlink: 'syz.0.37433': attribute type 13 has an invalid length. [ 2681.004455][T21434] netlink: 'syz.0.37433': attribute type 14 has an invalid length. [ 2681.012765][T21434] netlink: 'syz.0.37433': attribute type 15 has an invalid length. [ 2681.021394][T21434] netlink: 'syz.0.37433': attribute type 16 has an invalid length. [ 2681.029645][T21434] netlink: 'syz.0.37433': attribute type 19 has an invalid length. [ 2681.037922][T21434] netlink: 'syz.0.37433': attribute type 21 has an invalid length. [ 2681.046195][T21434] netlink: 'syz.0.37433': attribute type 22 has an invalid length. [ 2681.054531][T21434] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.37433'. [ 2685.888558][T21471] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37455'. [ 2696.543216][T21552] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.37474'. [ 2697.343040][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2699.120395][T21557] syzkaller0: entered promiscuous mode [ 2699.145806][T21557] syzkaller0: entered allmulticast mode [ 2702.318604][T21571] netlink: 'syz.2.37478': attribute type 10 has an invalid length. [ 2702.335817][T21571] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2704.497689][T21609] syzkaller0: entered promiscuous mode [ 2704.522257][T21609] syzkaller0: entered allmulticast mode [ 2709.438403][T21619] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.37499'. [ 2710.444927][T21576] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2713.941971][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.961262][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2719.991977][T25659] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 2719.998825][T25659] Bluetooth: hci1: command 0x0406 tx timeout [ 2728.263588][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2729.747145][T21830] netlink: 196 bytes leftover after parsing attributes in process `syz.3.37580'. [ 2732.152082][T19590] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 2732.159228][T25659] Bluetooth: hci3: command 0x0406 tx timeout [ 2738.485212][T21886] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.37608'. [ 2740.866236][T21933] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37619'. [ 2742.700386][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2747.745250][T21969] __sock_release: fasync list not empty! [ 2747.768589][T21968] netlink: 'syz.2.37631': attribute type 10 has an invalid length. [ 2747.812476][T21968] team0: Cannot enslave team device to itself [ 2747.886822][T21974] netlink: 822 bytes leftover after parsing attributes in process `syz.1.37634'. [ 2748.129550][T25659] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 2750.448024][T22023] netlink: 822 bytes leftover after parsing attributes in process `syz.0.37655'. [ 2750.507460][T22025] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37657'. [ 2752.026581][T22052] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.37669'. [ 2752.047404][T22056] netlink: 822 bytes leftover after parsing attributes in process `syz.3.37668'. [ 2753.078895][T22080] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37679'. [ 2753.088665][T22083] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.37680'. [ 2753.733419][T22099] netlink: 'syz.2.37685': attribute type 3 has an invalid length. [ 2753.746641][T22099] netlink: 'syz.2.37685': attribute type 1 has an invalid length. [ 2753.764082][T22099] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.37685'. [ 2754.311900][T22111] syzkaller0: entered promiscuous mode [ 2754.326589][T22111] syzkaller0: entered allmulticast mode [ 2759.481559][T22126] netlink: 'syz.3.37699': attribute type 10 has an invalid length. [ 2759.508095][T22126] `: Cannot enslave team device to itself [ 2759.596252][T20194] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2759.615109][T22129] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.37700'. [ 2759.956782][T25659] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10 [ 2761.028551][T22157] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.37713'. [ 2761.357356][T22171] netlink: 'syz.0.37727': attribute type 9 has an invalid length. [ 2761.620270][T25659] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 2762.005654][T25659] Bluetooth: hci0: command 0x0406 tx timeout [ 2762.356089][T25659] Bluetooth: hci2: ISO packet too small [ 2763.202225][T25659] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 2763.681750][T25659] Bluetooth: hci2: command 0x0406 tx timeout [ 2765.278990][T25659] Bluetooth: hci1: command 0x0406 tx timeout [ 2765.736355][T22211] netlink: 156 bytes leftover after parsing attributes in process `syz.0.37744'. [ 2766.033443][T25659] Bluetooth: hci0: ISO packet too small [ 2767.701810][T25659] Bluetooth: hci3: ISO packet too small [ 2770.290921][T22242] netlink: 156 bytes leftover after parsing attributes in process `syz.1.37749'. [ 2772.356112][T25659] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12 [ 2774.397681][T25659] Bluetooth: hci0: command 0x0406 tx timeout [ 2774.443925][ T7834] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2775.366789][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.374806][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2779.333833][T22349] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.37788'. [ 2790.632189][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2795.765808][T22494] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37845'. [ 2799.497915][T22539] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.37863'. [ 2799.631557][T22539] netlink: zone id is out of range [ 2799.672730][T22539] netlink: zone id is out of range [ 2799.701863][T22539] netlink: zone id is out of range [ 2801.656890][T22577] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.37875'. [ 2801.704704][T22577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37875'. [ 2803.391332][T22594] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.37881'. [ 2805.014840][T22624] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.37894'. [ 2805.368998][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2808.336317][T22680] sctp: [Deprecated]: syz.2.37915 (pid 22680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2808.336317][T22680] Use struct sctp_sack_info instead [ 2812.598605][T22703] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.37926'. [ 2812.610892][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37926'. [ 2812.850771][T22716] sctp: [Deprecated]: syz.0.37929 (pid 22716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2812.850771][T22716] Use struct sctp_sack_info instead [ 2820.601705][T22774] netlink: 'syz.0.37948': attribute type 12 has an invalid length. [ 2820.618236][T22774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37948'. [ 2821.660668][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2828.797624][T22893] nr0: port 1(hsr0) entered blocking state [ 2828.811347][T22893] nr0: port 1(hsr0) entered disabled state [ 2828.820705][T22893] hsr0: entered allmulticast mode [ 2828.834035][T22893] hsr_slave_0: entered allmulticast mode [ 2828.841011][T22893] hsr_slave_1: entered allmulticast mode [ 2828.857852][T22893] hsr0: entered promiscuous mode [ 2829.316274][T25659] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 2833.865912][T22939] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.38010'. [ 2835.669000][T22971] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.38021'. [ 2836.601018][T21578] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2836.835171][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.844043][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.014460][T22988] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.38030'. [ 2839.677886][T23011] nr0: port 1(hsr0) entered blocking state [ 2839.685115][T23011] nr0: port 1(hsr0) entered disabled state [ 2839.707561][T23011] hsr0: entered allmulticast mode [ 2839.717516][T23011] hsr_slave_0: entered allmulticast mode [ 2839.733886][T23011] hsr_slave_1: entered allmulticast mode [ 2839.756334][T23011] hsr0: entered promiscuous mode [ 2839.808476][T23015] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.38041'. [ 2841.548972][T23046] nr0: port 1(hsr0) entered blocking state [ 2841.555674][T23046] nr0: port 1(hsr0) entered disabled state [ 2841.563965][T23046] hsr0: entered allmulticast mode [ 2841.569364][T23046] hsr_slave_0: entered allmulticast mode [ 2841.579877][T23046] hsr_slave_1: entered allmulticast mode [ 2843.976245][T23092] syzkaller0: entered promiscuous mode [ 2843.982308][T23092] syzkaller0: entered allmulticast mode [ 2847.946314][T23125] netlink: 'syz.2.38087': attribute type 8 has an invalid length. [ 2847.984120][T23125] netlink: 'syz.2.38087': attribute type 9 has an invalid length. [ 2848.041923][T23125] netlink: 'syz.2.38087': attribute type 10 has an invalid length. [ 2848.072496][T23125] netlink: 'syz.2.38087': attribute type 11 has an invalid length. [ 2848.121718][T23125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38087'. [ 2850.418039][T23165] netlink: 'syz.0.38103': attribute type 25 has an invalid length. [ 2850.447892][T23165] netlink: 'syz.0.38103': attribute type 7 has an invalid length. [ 2852.787053][T20194] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2852.902117][T23214] netlink: 'syz.0.38131': attribute type 8 has an invalid length. [ 2852.910727][T23214] netlink: 'syz.0.38131': attribute type 9 has an invalid length. [ 2852.921429][T23214] netlink: 'syz.0.38131': attribute type 10 has an invalid length. [ 2852.955487][T23214] netlink: 'syz.0.38131': attribute type 11 has an invalid length. [ 2852.967403][T23214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38131'. [ 2853.998977][T23238] syzkaller0: entered promiscuous mode [ 2854.015195][T23238] syzkaller0: entered allmulticast mode [ 2857.262259][T23247] netlink: 'syz.3.38136': attribute type 8 has an invalid length. [ 2857.270153][T23247] netlink: 'syz.3.38136': attribute type 9 has an invalid length. [ 2857.278574][T23247] netlink: 'syz.3.38136': attribute type 10 has an invalid length. [ 2857.287228][T23247] netlink: 'syz.3.38136': attribute type 11 has an invalid length. [ 2857.295230][T23247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38136'. [ 2857.915302][T23275] netlink: 'syz.3.38149': attribute type 2 has an invalid length. [ 2857.923917][T23275] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.38149'. [ 2857.984712][T23278] netlink: 'syz.1.38150': attribute type 8 has an invalid length. [ 2857.994635][T23278] netlink: 'syz.1.38150': attribute type 9 has an invalid length. [ 2858.021872][T23278] netlink: 'syz.1.38150': attribute type 10 has an invalid length. [ 2858.029998][T23278] netlink: 'syz.1.38150': attribute type 11 has an invalid length. [ 2858.040498][T23278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.38150'. [ 2858.344041][T23283] syzkaller0: entered promiscuous mode [ 2858.359923][T23283] syzkaller0: entered allmulticast mode [ 2859.321379][T23298] delete_channel: no stack [ 2859.584292][T23305] netlink: 'syz.2.38161': attribute type 2 has an invalid length. [ 2859.595952][T23305] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.38161'. [ 2862.196123][T23322] delete_channel: no stack [ 2865.168271][T23387] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2867.733867][ T7834] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2868.585513][T23459] netlink: 'syz.0.38227': attribute type 9 has an invalid length. [ 2868.639593][T23459] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.38227'. [ 2873.184176][T23527] netlink: 'syz.2.38256': attribute type 9 has an invalid length. [ 2873.281719][T23527] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.38256'. [ 2875.417338][T23556] netlink: 'syz.3.38269': attribute type 9 has an invalid length. [ 2875.460379][T23556] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.38269'. [ 2876.607138][T23590] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.38282'. [ 2882.073615][T23677] netlink: 'syz.2.38320': attribute type 2 has an invalid length. [ 2882.083371][T23677] netlink: 'syz.2.38320': attribute type 1 has an invalid length. [ 2882.095278][T23677] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.38320'. [ 2882.868600][T23705] netlink: 'syz.0.38331': attribute type 2 has an invalid length. [ 2882.891675][T23705] netlink: 'syz.0.38331': attribute type 1 has an invalid length. [ 2882.900113][T23705] netlink: 198800 bytes leftover after parsing attributes in process `syz.0.38331'. [ 2883.058774][T23711] netlink: 'syz.3.38341': attribute type 2 has an invalid length. [ 2883.119990][T23711] netlink: 'syz.3.38341': attribute type 1 has an invalid length. [ 2883.142864][T23711] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.38341'. [ 2883.910473][T30726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2889.873651][T23820] netlink: 'syz.1.38380': attribute type 4 has an invalid length. [ 2889.884648][T23820] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.38380'. [ 2890.447260][T23825] netlink: 'syz.1.38382': attribute type 46 has an invalid length. [ 2891.776241][T23825] netlink: 'syz.1.38382': attribute type 46 has an invalid length. [ 2892.176992][T25659] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 2892.500477][T23854] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.38397'. [ 2892.838284][T25659] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 2893.247725][T23865] netlink: 'syz.3.38402': attribute type 46 has an invalid length. [ 2893.295756][T23865] netlink: 'syz.3.38402': attribute type 46 has an invalid length. [ 2893.618708][T25659] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 2894.241775][T25659] Bluetooth: hci3: command 0x0406 tx timeout [ 2894.863314][T23900] netlink: 'syz.0.38415': attribute type 46 has an invalid length. [ 2894.872866][T23900] netlink: 'syz.0.38415': attribute type 46 has an invalid length. [ 2895.021166][T25659] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 2895.064245][T25659] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 2895.405258][T25659] Bluetooth: hci3: unexpected event 0x06 length: 151 > 3 [ 2895.522599][T23929] netlink: 'syz.2.38428': attribute type 46 has an invalid length. [ 2895.550553][T23929] netlink: 'syz.2.38428': attribute type 46 has an invalid length. [ 2895.672037][T19590] Bluetooth: hci1: command 0x0406 tx timeout [ 2896.209502][T23934] syzkaller0: entered promiscuous mode [ 2896.220211][T23934] syzkaller0: entered allmulticast mode [ 2896.408452][T19590] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10 [ 2896.658568][T19590] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 2896.861458][T23946] netlink: 'syz.0.38442': attribute type 4 has an invalid length. [ 2896.879709][T23946] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.38442'. [ 2897.112104][T19590] Bluetooth: hci2: command 0x0406 tx timeout [ 2897.402907][T19590] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 2897.402964][T19590] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 2897.436904][T19590] Bluetooth: hci3: command 0x0406 tx timeout [ 2897.557318][T25659] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 2897.565929][T25659] Bluetooth: min 0 < 6 [ 2897.652264][T23970] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.38444'. [ 2898.238054][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.245482][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.472460][T25659] Bluetooth: hci0: command 0x0406 tx timeout [ 2898.778229][T23979] netlink: 'syz.3.38447': attribute type 4 has an invalid length. [ 2898.788835][T23979] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.38447'. [ 2899.591692][T25659] Bluetooth: hci1: command 0x0406 tx timeout [ 2900.499779][ T7834] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2901.677381][T25659] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 2901.687321][T25659] Bluetooth: min 0 < 6 [ 2901.803824][T25659] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11 [ 2901.808403][T24006] netlink: 'syz.3.38454': attribute type 5 has an invalid length. [ 2901.889595][T24006] netlink: 176 bytes leftover after parsing attributes in process `syz.3.38454'. [ 2902.020247][T24012] syzkaller0: entered promiscuous mode [ 2902.052598][T24012] syzkaller0: entered allmulticast mode [ 2902.738133][T25659] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 2903.324117][T24030] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.38466'. [ 2903.755261][T25659] Bluetooth: hci1: command 0x0406 tx timeout [ 2906.633739][T24042] netlink: 'syz.0.38470': attribute type 39 has an invalid length. [ 2909.064432][T24073] IPv6: Can't replace route, no match found [ 2909.337069][T24081] netlink: 'syz.1.38486': attribute type 5 has an invalid length. [ 2909.352088][T24081] netlink: 176 bytes leftover after parsing attributes in process `syz.1.38486'. [ 2912.126679][T24129] netlink: 'syz.0.38512': attribute type 5 has an invalid length. [ 2912.140899][T24129] netlink: 176 bytes leftover after parsing attributes in process `syz.0.38512'. [ 2912.166375][T24131] netlink: 'syz.2.38503': attribute type 4 has an invalid length. [ 2912.181131][T24131] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.38503'. [ 2914.967559][T24179] netlink: 'syz.3.38521': attribute type 4 has an invalid length. [ 2915.012590][T24179] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.38521'. [ 2916.065774][T21581] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2919.938267][T24263] mac80211_hwsim hwsim91 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2920.391917][T25659] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 2922.021707][T25659] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 2923.195053][T24331] syzkaller0: entered promiscuous mode [ 2923.209033][T24331] syzkaller0: entered allmulticast mode [ 2923.688677][T25659] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 2926.561810][T24359] Bluetooth: hci1: command 0x0406 tx timeout [ 2928.071044][T24371] syzkaller0: entered promiscuous mode [ 2928.091186][T24371] syzkaller0: entered allmulticast mode [ 2928.156298][T24359] Bluetooth: hci2: command 0x0406 tx timeout [ 2928.680009][T24389] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.38610'. [ 2928.702739][T24392] netlink: 'syz.3.38611': attribute type 1 has an invalid length. [ 2928.710940][T24392] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.38611'. [ 2929.631148][T24421] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.38622'. [ 2929.835925][T25659] Bluetooth: hci0: command 0x0406 tx timeout [ 2930.186101][T24425] netlink: 'syz.1.38625': attribute type 1 has an invalid length. [ 2930.195208][T24425] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.38625'. [ 2935.032717][T24434] syzkaller0: entered promiscuous mode [ 2935.038700][T24434] syzkaller0: entered allmulticast mode [ 2935.652039][T24450] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.38633'. [ 2938.103792][T24487] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.38648'. [ 2940.017928][T24514] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.38661'. [ 2946.179935][T24538] netlink: 'syz.1.38670': attribute type 21 has an invalid length. [ 2946.188646][T24538] netlink: 'syz.1.38670': attribute type 12 has an invalid length. [ 2946.196986][T24538] netlink: 'syz.1.38670': attribute type 13 has an invalid length. [ 2946.205026][T24538] netlink: 'syz.1.38670': attribute type 14 has an invalid length. [ 2946.214766][T24538] netlink: 'syz.1.38670': attribute type 15 has an invalid length. [ 2946.222890][T24538] netlink: 'syz.1.38670': attribute type 16 has an invalid length. [ 2946.230917][T24538] netlink: 12914 bytes leftover after parsing attributes in process `syz.1.38670'. [ 2946.896599][T24562] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.38680'. [ 2948.245605][ T7834] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2948.253218][T24579] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.38693'. [ 2948.309282][T24580] syzkaller0: entered promiscuous mode [ 2948.317501][T24580] syzkaller0: entered allmulticast mode [ 2951.950562][T24590] netlink: 'syz.3.38688': attribute type 21 has an invalid length. [ 2951.959409][T24590] netlink: 'syz.3.38688': attribute type 12 has an invalid length. [ 2951.968762][T24590] netlink: 'syz.3.38688': attribute type 13 has an invalid length. [ 2951.976958][T24590] netlink: 'syz.3.38688': attribute type 14 has an invalid length. [ 2951.985203][T24590] netlink: 'syz.3.38688': attribute type 15 has an invalid length. [ 2951.993309][T24590] netlink: 'syz.3.38688': attribute type 16 has an invalid length. [ 2952.001577][T24590] netlink: 12914 bytes leftover after parsing attributes in process `syz.3.38688'. [ 2952.257230][T24604] syzkaller0: entered promiscuous mode [ 2952.263369][T24604] syzkaller0: entered allmulticast mode [ 2952.562096][T24612] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.38698'. [ 2958.072077][T24629] netlink: 'syz.0.38714': attribute type 1 has an invalid length. [ 2958.080185][T24629] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.38714'. [ 2958.113904][T24624] syzkaller0: entered promiscuous mode [ 2958.124290][T24624] syzkaller0: entered allmulticast mode [ 2958.161763][T24629] netlink: 1 bytes leftover after parsing attributes in process `syz.0.38714'. [ 2959.677084][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.684127][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2962.771547][T24669] syzkaller0: entered promiscuous mode [ 2962.778692][T24669] syzkaller0: entered allmulticast mode [ 2966.174671][T24678] netlink: 'syz.2.38729': attribute type 10 has an invalid length. [ 2966.630757][T24700] syzkaller0: entered promiscuous mode [ 2966.655284][T24700] syzkaller0: entered allmulticast mode [ 2972.157891][T24732] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.38747'. [ 2974.131132][T24811] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.38781'. [ 2975.236036][T24824] netlink: 'syz.2.38789': attribute type 3 has an invalid length. [ 2975.316804][T24824] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.38789'. [ 2976.215958][T24848] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.38799'. [ 2976.451376][T24853] netlink: 'syz.3.38801': attribute type 3 has an invalid length. [ 2976.486304][T24853] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.38801'. [ 2977.165521][T24862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.38803'. [ 2977.176703][T24862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.38803'. [ 2977.205925][T24862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.38803'. [ 2977.223106][T24862] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.38803'. [ 2977.235725][T24862] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2977.249166][T24862] CPU: 0 PID: 24862 Comm: syz.3.38803 Not tainted syzkaller #0 [ 2977.257087][T24862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2977.267174][T24862] Call Trace: [ 2977.270464][T24862] [ 2977.273435][T24862] dump_stack_lvl+0x18c/0x250 [ 2977.278194][T24862] ? show_regs_print_info+0x20/0x20 [ 2977.283501][T24862] ? load_image+0x400/0x400 [ 2977.288067][T24862] sysfs_warn_dup+0x8e/0xa0 [ 2977.292687][T24862] sysfs_do_create_link_sd+0xc0/0x110 [ 2977.298094][T24862] device_add_class_symlinks+0x1cf/0x240 [ 2977.303763][T24862] device_add+0x507/0xc20 [ 2977.308215][T24862] wiphy_register+0x1dad/0x2ae0 [ 2977.313297][T24862] ? cfg80211_event_work+0x40/0x40 [ 2977.318416][T24862] ? minstrel_ht_alloc+0x88a/0x990 [ 2977.323582][T24862] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2977.329676][T24862] ieee80211_register_hw+0x3464/0x4250 [ 2977.335364][T24862] ? ieee80211_tasklet_handler+0x20/0x20 [ 2977.341012][T24862] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2977.346922][T24862] ? __debug_object_init+0xec/0x450 [ 2977.352175][T24862] ? __asan_memset+0x22/0x40 [ 2977.356909][T24862] ? __hrtimer_init+0x186/0x270 [ 2977.361965][T24862] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2977.367862][T24862] ? mac80211_hwsim_free+0x220/0x220 [ 2977.373309][T24862] ? rcu_is_watching+0x15/0xb0 [ 2977.378695][T24862] ? kstrndup+0xbd/0x140 [ 2977.382968][T24862] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2977.388723][T24862] ? __nla_validate+0x50/0x50 [ 2977.393635][T24862] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2977.400366][T24862] ? __nla_parse+0x40/0x50 [ 2977.405069][T24862] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2977.411987][T24862] genl_family_rcv_msg_doit+0x211/0x310 [ 2977.417864][T24862] ? end_current_label_crit_section+0x170/0x170 [ 2977.424419][T24862] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2977.430438][T24862] ? bpf_lsm_capable+0x9/0x10 [ 2977.435149][T24862] ? security_capable+0x89/0xb0 [ 2977.440173][T24862] genl_rcv_msg+0x619/0x7a0 [ 2977.444811][T24862] ? genl_bind+0x360/0x360 [ 2977.449374][T24862] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2977.455757][T24862] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2977.462381][T24862] ? ref_tracker_free+0x690/0x840 [ 2977.467435][T24862] netlink_rcv_skb+0x241/0x4d0 [ 2977.472338][T24862] ? genl_bind+0x360/0x360 [ 2977.476900][T24862] ? netlink_ack+0x1180/0x1180 [ 2977.481808][T24862] ? __lock_acquire+0x7d40/0x7d40 [ 2977.487079][T24862] ? down_read+0x1ac/0x2e0 [ 2977.491714][T24862] genl_rcv+0x28/0x40 [ 2977.495805][T24862] netlink_unicast+0x751/0x8d0 [ 2977.500691][T24862] netlink_sendmsg+0x8d0/0xbf0 [ 2977.505576][T24862] ? netlink_getsockopt+0x590/0x590 [ 2977.510964][T24862] ? aa_sock_msg_perm+0x94/0x150 [ 2977.516045][T24862] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2977.521450][T24862] ? security_socket_sendmsg+0x80/0xa0 [ 2977.527020][T24862] ? netlink_getsockopt+0x590/0x590 [ 2977.532259][T24862] ____sys_sendmsg+0x5ba/0x960 [ 2977.537095][T24862] ? __asan_memset+0x22/0x40 [ 2977.541756][T24862] ? __sys_sendmsg_sock+0x30/0x30 [ 2977.546818][T24862] ? __import_iovec+0x5f2/0x850 [ 2977.551733][T24862] ? import_iovec+0x73/0xa0 [ 2977.556390][T24862] ___sys_sendmsg+0x2a6/0x360 [ 2977.561206][T24862] ? __sys_sendmsg+0x2a0/0x2a0 [ 2977.566068][T24862] __se_sys_sendmsg+0x1c2/0x2b0 [ 2977.571070][T24862] ? __x64_sys_sendmsg+0x80/0x80 [ 2977.576250][T24862] ? lockdep_hardirqs_on+0x98/0x150 [ 2977.581652][T24862] do_syscall_64+0x55/0xa0 [ 2977.586171][T24862] ? clear_bhb_loop+0x40/0x90 [ 2977.590883][T24862] ? clear_bhb_loop+0x40/0x90 [ 2977.596723][T24862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2977.602841][T24862] RIP: 0033:0x7fd75459aeb9 [ 2977.607417][T24862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2977.627612][T24862] RSP: 002b:00007fd755374028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2977.636522][T24862] RAX: ffffffffffffffda RBX: 00007fd754815fa0 RCX: 00007fd75459aeb9 [ 2977.645083][T24862] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2977.653504][T24862] RBP: 00007fd754608c1f R08: 0000000000000000 R09: 0000000000000000 [ 2977.662022][T24862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2977.670450][T24862] R13: 00007fd754816038 R14: 00007fd754815fa0 R15: 00007ffedd4b82f8 [ 2977.678742][T24862] [ 2977.856432][T24871] netlink: 60 bytes leftover after parsing attributes in process `syz.1.38814'. [ 2977.866265][T24871] netlink: 60 bytes leftover after parsing attributes in process `syz.1.38814'. [ 2977.927089][T24871] netlink: 60 bytes leftover after parsing attributes in process `syz.1.38814'. [ 2977.984306][T24871] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.38814'. [ 2978.028527][T24871] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2978.051824][T24871] CPU: 1 PID: 24871 Comm: syz.1.38814 Not tainted syzkaller #0 [ 2978.059748][T24871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2978.069978][T24871] Call Trace: [ 2978.073320][T24871] [ 2978.076302][T24871] dump_stack_lvl+0x18c/0x250 [ 2978.081282][T24871] ? show_regs_print_info+0x20/0x20 [ 2978.086675][T24871] ? load_image+0x400/0x400 [ 2978.091367][T24871] sysfs_warn_dup+0x8e/0xa0 [ 2978.095948][T24871] sysfs_do_create_link_sd+0xc0/0x110 [ 2978.101585][T24871] device_add_class_symlinks+0x1cf/0x240 [ 2978.107658][T24871] device_add+0x507/0xc20 [ 2978.112073][T24871] wiphy_register+0x1dad/0x2ae0 [ 2978.117294][T24871] ? cfg80211_event_work+0x40/0x40 [ 2978.122555][T24871] ? minstrel_ht_alloc+0x88a/0x990 [ 2978.127854][T24871] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2978.134080][T24871] ieee80211_register_hw+0x3464/0x4250 [ 2978.139772][T24871] ? ieee80211_tasklet_handler+0x20/0x20 [ 2978.145756][T24871] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2978.151926][T24871] ? __debug_object_init+0xec/0x450 [ 2978.157303][T24871] ? __asan_memset+0x22/0x40 [ 2978.161968][T24871] ? __hrtimer_init+0x186/0x270 [ 2978.166994][T24871] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2978.173199][T24871] ? mac80211_hwsim_free+0x220/0x220 [ 2978.178818][T24871] ? rcu_is_watching+0x15/0xb0 [ 2978.183739][T24871] ? kstrndup+0xbd/0x140 [ 2978.188353][T24871] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2978.193563][T24871] ? __nla_validate+0x50/0x50 [ 2978.198360][T24871] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2978.204812][T24871] ? __nla_parse+0x40/0x50 [ 2978.209504][T24871] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2978.216020][T24871] genl_family_rcv_msg_doit+0x211/0x310 [ 2978.221652][T24871] ? end_current_label_crit_section+0x170/0x170 [ 2978.227974][T24871] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2978.234034][T24871] ? bpf_lsm_capable+0x9/0x10 [ 2978.238799][T24871] ? security_capable+0x89/0xb0 [ 2978.243745][T24871] genl_rcv_msg+0x619/0x7a0 [ 2978.248425][T24871] ? genl_bind+0x360/0x360 [ 2978.252971][T24871] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2978.259571][T24871] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2978.266271][T24871] ? ref_tracker_free+0x690/0x840 [ 2978.271405][T24871] netlink_rcv_skb+0x241/0x4d0 [ 2978.276345][T24871] ? genl_bind+0x360/0x360 [ 2978.280857][T24871] ? netlink_ack+0x1180/0x1180 [ 2978.285730][T24871] ? __lock_acquire+0x7d40/0x7d40 [ 2978.290934][T24871] ? down_read+0x1ac/0x2e0 [ 2978.295530][T24871] genl_rcv+0x28/0x40 [ 2978.299594][T24871] netlink_unicast+0x751/0x8d0 [ 2978.304548][T24871] netlink_sendmsg+0x8d0/0xbf0 [ 2978.309605][T24871] ? netlink_getsockopt+0x590/0x590 [ 2978.315028][T24871] ? aa_sock_msg_perm+0x94/0x150 [ 2978.320041][T24871] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2978.325386][T24871] ? security_socket_sendmsg+0x80/0xa0 [ 2978.331338][T24871] ? netlink_getsockopt+0x590/0x590 [ 2978.336717][T24871] ____sys_sendmsg+0x5ba/0x960 [ 2978.341676][T24871] ? __asan_memset+0x22/0x40 [ 2978.346514][T24871] ? __sys_sendmsg_sock+0x30/0x30 [ 2978.351736][T24871] ? __import_iovec+0x5f2/0x850 [ 2978.356700][T24871] ? import_iovec+0x73/0xa0 [ 2978.361445][T24871] ___sys_sendmsg+0x2a6/0x360 [ 2978.366402][T24871] ? __sys_sendmsg+0x2a0/0x2a0 [ 2978.371411][T24871] ? debug_mutex_init+0x38/0x70 [ 2978.376400][T24871] __se_sys_sendmsg+0x1c2/0x2b0 [ 2978.381346][T24871] ? __x64_sys_sendmsg+0x80/0x80 [ 2978.386662][T24871] ? lockdep_hardirqs_on+0x98/0x150 [ 2978.392124][T24871] do_syscall_64+0x55/0xa0 [ 2978.396692][T24871] ? clear_bhb_loop+0x40/0x90 [ 2978.401422][T24871] ? clear_bhb_loop+0x40/0x90 [ 2978.406267][T24871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2978.412498][T24871] RIP: 0033:0x7f8edeb9aeb9 [ 2978.416986][T24871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2978.437733][T24871] RSP: 002b:00007f8edcdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2978.446403][T24871] RAX: ffffffffffffffda RBX: 00007f8edee15fa0 RCX: 00007f8edeb9aeb9 [ 2978.454616][T24871] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2978.462640][T24871] RBP: 00007f8edec08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2978.470844][T24871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2978.478879][T24871] R13: 00007f8edee16038 R14: 00007f8edee15fa0 R15: 00007ffeb61738c8 [ 2978.487009][T24871] [ 2979.074412][T24883] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.38818'. [ 2979.602919][T30733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2979.678110][T24892] netlink: 'syz.0.38823': attribute type 3 has an invalid length. [ 2979.721880][T24892] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.38823'. [ 2980.638592][T24905] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2981.913484][T24934] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2981.925376][T24934] CPU: 0 PID: 24934 Comm: syz.0.38834 Not tainted syzkaller #0 [ 2981.932995][T24934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2981.943118][T24934] Call Trace: [ 2981.946455][T24934] [ 2981.949458][T24934] dump_stack_lvl+0x18c/0x250 [ 2981.954228][T24934] ? show_regs_print_info+0x20/0x20 [ 2981.959503][T24934] ? load_image+0x400/0x400 [ 2981.964115][T24934] sysfs_warn_dup+0x8e/0xa0 [ 2981.968708][T24934] sysfs_do_create_link_sd+0xc0/0x110 [ 2981.974245][T24934] device_add_class_symlinks+0x1cf/0x240 [ 2981.979980][T24934] device_add+0x507/0xc20 [ 2981.984394][T24934] wiphy_register+0x1dad/0x2ae0 [ 2981.989527][T24934] ? cfg80211_event_work+0x40/0x40 [ 2981.994690][T24934] ? minstrel_ht_alloc+0x88a/0x990 [ 2981.999887][T24934] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2982.006167][T24934] ieee80211_register_hw+0x3464/0x4250 [ 2982.011759][T24934] ? ieee80211_tasklet_handler+0x20/0x20 [ 2982.017632][T24934] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2982.023859][T24934] ? __debug_object_init+0xec/0x450 [ 2982.029307][T24934] ? __asan_memset+0x22/0x40 [ 2982.034058][T24934] ? __hrtimer_init+0x186/0x270 [ 2982.039074][T24934] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2982.045111][T24934] ? mac80211_hwsim_free+0x220/0x220 [ 2982.050470][T24934] ? rcu_is_watching+0x15/0xb0 [ 2982.055295][T24934] ? kstrndup+0xbd/0x140 [ 2982.059669][T24934] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2982.064903][T24934] ? __nla_validate+0x50/0x50 [ 2982.069682][T24934] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2982.076351][T24934] ? __nla_parse+0x40/0x50 [ 2982.080889][T24934] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2982.087509][T24934] genl_family_rcv_msg_doit+0x211/0x310 [ 2982.093229][T24934] ? end_current_label_crit_section+0x170/0x170 [ 2982.100013][T24934] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2982.106100][T24934] ? bpf_lsm_capable+0x9/0x10 [ 2982.111282][T24934] ? security_capable+0x89/0xb0 [ 2982.116302][T24934] genl_rcv_msg+0x619/0x7a0 [ 2982.120993][T24934] ? genl_bind+0x360/0x360 [ 2982.125663][T24934] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2982.132349][T24934] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2982.139143][T24934] ? ref_tracker_free+0x690/0x840 [ 2982.144358][T24934] netlink_rcv_skb+0x241/0x4d0 [ 2982.149195][T24934] ? genl_bind+0x360/0x360 [ 2982.153691][T24934] ? netlink_ack+0x1180/0x1180 [ 2982.158893][T24934] ? __lock_acquire+0x7d40/0x7d40 [ 2982.164115][T24934] ? down_read+0x1ac/0x2e0 [ 2982.168606][T24934] genl_rcv+0x28/0x40 [ 2982.172736][T24934] netlink_unicast+0x751/0x8d0 [ 2982.177590][T24934] netlink_sendmsg+0x8d0/0xbf0 [ 2982.182611][T24934] ? netlink_getsockopt+0x590/0x590 [ 2982.187880][T24934] ? aa_sock_msg_perm+0x94/0x150 [ 2982.192887][T24934] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2982.198580][T24934] ? security_socket_sendmsg+0x80/0xa0 [ 2982.204120][T24934] ? netlink_getsockopt+0x590/0x590 [ 2982.209562][T24934] ____sys_sendmsg+0x5ba/0x960 [ 2982.214415][T24934] ? __asan_memset+0x22/0x40 [ 2982.219648][T24934] ? __sys_sendmsg_sock+0x30/0x30 [ 2982.224737][T24934] ? __import_iovec+0x5f2/0x850 [ 2982.229854][T24934] ? import_iovec+0x73/0xa0 [ 2982.234443][T24934] ___sys_sendmsg+0x2a6/0x360 [ 2982.239593][T24934] ? __sys_sendmsg+0x2a0/0x2a0 [ 2982.244836][T24934] ? trace_call_bpf+0xc3/0x6c0 [ 2982.249909][T24934] __se_sys_sendmsg+0x1c2/0x2b0 [ 2982.255198][T24934] ? __x64_sys_sendmsg+0x80/0x80 [ 2982.260421][T24934] ? lockdep_hardirqs_on+0x98/0x150 [ 2982.265703][T24934] do_syscall_64+0x55/0xa0 [ 2982.270191][T24934] ? clear_bhb_loop+0x40/0x90 [ 2982.275034][T24934] ? clear_bhb_loop+0x40/0x90 [ 2982.280041][T24934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2982.286086][T24934] RIP: 0033:0x7f674319aeb9 [ 2982.290643][T24934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2982.310586][T24934] RSP: 002b:00007f67413f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2982.319421][T24934] RAX: ffffffffffffffda RBX: 00007f6743415fa0 RCX: 00007f674319aeb9 [ 2982.327634][T24934] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2982.336181][T24934] RBP: 00007f6743208c1f R08: 0000000000000000 R09: 0000000000000000 [ 2982.344645][T24934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2982.353008][T24934] R13: 00007f6743416038 R14: 00007f6743415fa0 R15: 00007fffb5773068 [ 2982.361250][T24934] [ 2984.564505][T24972] __nla_validate_parse: 9 callbacks suppressed [ 2984.564528][T24972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.38847'. [ 2984.588583][T24972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.38847'. [ 2984.644353][T24969] netlink: 'syz.3.38846': attribute type 3 has an invalid length. [ 2984.713390][T24969] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.38846'. [ 2984.765853][T24975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.38847'. [ 2984.819823][T24975] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.38847'. [ 2984.849096][T24975] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2984.862515][T24975] CPU: 0 PID: 24975 Comm: syz.1.38847 Not tainted syzkaller #0 [ 2984.870529][T24975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2984.880809][T24975] Call Trace: [ 2984.884228][T24975] [ 2984.887216][T24975] dump_stack_lvl+0x18c/0x250 [ 2984.891983][T24975] ? show_regs_print_info+0x20/0x20 [ 2984.897255][T24975] ? load_image+0x400/0x400 [ 2984.901946][T24975] sysfs_warn_dup+0x8e/0xa0 [ 2984.906590][T24975] sysfs_do_create_link_sd+0xc0/0x110 [ 2984.912296][T24975] device_add_class_symlinks+0x1cf/0x240 [ 2984.918089][T24975] device_add+0x507/0xc20 [ 2984.922581][T24975] wiphy_register+0x1dad/0x2ae0 [ 2984.927633][T24975] ? cfg80211_event_work+0x40/0x40 [ 2984.932889][T24975] ? minstrel_ht_alloc+0x88a/0x990 [ 2984.938087][T24975] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2984.944312][T24975] ieee80211_register_hw+0x3464/0x4250 [ 2984.949893][T24975] ? ieee80211_tasklet_handler+0x20/0x20 [ 2984.955602][T24975] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2984.961730][T24975] ? __debug_object_init+0xec/0x450 [ 2984.966997][T24975] ? __asan_memset+0x22/0x40 [ 2984.971965][T24975] ? __hrtimer_init+0x186/0x270 [ 2984.976988][T24975] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2984.982932][T24975] ? mac80211_hwsim_free+0x220/0x220 [ 2984.988478][T24975] ? rcu_is_watching+0x15/0xb0 [ 2984.993424][T24975] ? kstrndup+0xbd/0x140 [ 2984.997843][T24975] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2985.003126][T24975] ? __nla_validate+0x50/0x50 [ 2985.008106][T24975] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2985.014542][T24975] ? __nla_parse+0x40/0x50 [ 2985.019046][T24975] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2985.025458][T24975] genl_family_rcv_msg_doit+0x211/0x310 [ 2985.031154][T24975] ? end_current_label_crit_section+0x170/0x170 [ 2985.037503][T24975] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2985.043585][T24975] ? bpf_lsm_capable+0x9/0x10 [ 2985.048407][T24975] ? security_capable+0x89/0xb0 [ 2985.053337][T24975] genl_rcv_msg+0x619/0x7a0 [ 2985.058015][T24975] ? genl_bind+0x360/0x360 [ 2985.062575][T24975] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2985.068981][T24975] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2985.075753][T24975] netlink_rcv_skb+0x241/0x4d0 [ 2985.080671][T24975] ? genl_bind+0x360/0x360 [ 2985.085158][T24975] ? netlink_ack+0x1180/0x1180 [ 2985.090102][T24975] ? __lock_acquire+0x7d40/0x7d40 [ 2985.095220][T24975] ? down_read+0x1ac/0x2e0 [ 2985.099879][T24975] genl_rcv+0x28/0x40 [ 2985.104132][T24975] netlink_unicast+0x751/0x8d0 [ 2985.109160][T24975] netlink_sendmsg+0x8d0/0xbf0 [ 2985.114033][T24975] ? netlink_getsockopt+0x590/0x590 [ 2985.119556][T24975] ? aa_sock_msg_perm+0x94/0x150 [ 2985.125280][T24975] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2985.131373][T24975] ? security_socket_sendmsg+0x80/0xa0 [ 2985.137264][T24975] ? netlink_getsockopt+0x590/0x590 [ 2985.142554][T24975] ____sys_sendmsg+0x5ba/0x960 [ 2985.147495][T24975] ? __asan_memset+0x22/0x40 [ 2985.152120][T24975] ? __sys_sendmsg_sock+0x30/0x30 [ 2985.157282][T24975] ? __import_iovec+0x5f2/0x850 [ 2985.162182][T24975] ? import_iovec+0x73/0xa0 [ 2985.166798][T24975] ___sys_sendmsg+0x2a6/0x360 [ 2985.171592][T24975] ? __sys_sendmsg+0x2a0/0x2a0 [ 2985.176417][T24975] ? debug_mutex_init+0x38/0x70 [ 2985.181327][T24975] __se_sys_sendmsg+0x1c2/0x2b0 [ 2985.186372][T24975] ? __x64_sys_sendmsg+0x80/0x80 [ 2985.191641][T24975] ? lockdep_hardirqs_on+0x98/0x150 [ 2985.196929][T24975] do_syscall_64+0x55/0xa0 [ 2985.201588][T24975] ? clear_bhb_loop+0x40/0x90 [ 2985.206456][T24975] ? clear_bhb_loop+0x40/0x90 [ 2985.211154][T24975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2985.217057][T24975] RIP: 0033:0x7f8edeb9aeb9 [ 2985.221580][T24975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2985.241849][T24975] RSP: 002b:00007f8edcdd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2985.250507][T24975] RAX: ffffffffffffffda RBX: 00007f8edee16090 RCX: 00007f8edeb9aeb9 [ 2985.258651][T24975] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2985.266874][T24975] RBP: 00007f8edec08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2985.275097][T24975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2985.283313][T24975] R13: 00007f8edee16128 R14: 00007f8edee16090 R15: 00007ffeb61738c8 [ 2985.291396][T24975] [ 2986.464892][T25001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.38859'. [ 2986.633938][T25009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.38863'. [ 2986.644876][T25009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.38863'. [ 2986.684029][T25009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.38863'. [ 2986.782950][T25010] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.38863'. [ 2986.855304][T25010] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2986.912200][T25010] CPU: 0 PID: 25010 Comm: syz.2.38863 Not tainted syzkaller #0 [ 2986.920149][T25010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2986.930244][T25010] Call Trace: [ 2986.933557][T25010] [ 2986.936696][T25010] dump_stack_lvl+0x18c/0x250 [ 2986.941511][T25010] ? show_regs_print_info+0x20/0x20 [ 2986.946902][T25010] ? load_image+0x400/0x400 [ 2986.951562][T25010] sysfs_warn_dup+0x8e/0xa0 [ 2986.956107][T25010] sysfs_do_create_link_sd+0xc0/0x110 [ 2986.961987][T25010] device_add_class_symlinks+0x1cf/0x240 [ 2986.967942][T25010] device_add+0x507/0xc20 [ 2986.972452][T25010] wiphy_register+0x1dad/0x2ae0 [ 2986.977477][T25010] ? cfg80211_event_work+0x40/0x40 [ 2986.982642][T25010] ? minstrel_ht_alloc+0x88a/0x990 [ 2986.987938][T25010] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2986.994248][T25010] ieee80211_register_hw+0x3464/0x4250 [ 2986.999805][T25010] ? ieee80211_tasklet_handler+0x20/0x20 [ 2987.005873][T25010] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2987.012159][T25010] ? __debug_object_init+0xec/0x450 [ 2987.017443][T25010] ? __asan_memset+0x22/0x40 [ 2987.022643][T25010] ? __hrtimer_init+0x186/0x270 [ 2987.027658][T25010] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2987.033660][T25010] ? mac80211_hwsim_free+0x220/0x220 [ 2987.039155][T25010] ? rcu_is_watching+0x15/0xb0 [ 2987.044258][T25010] ? kstrndup+0xbd/0x140 [ 2987.048653][T25010] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2987.053828][T25010] ? __nla_validate+0x50/0x50 [ 2987.058759][T25010] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2987.065280][T25010] ? __nla_parse+0x40/0x50 [ 2987.069758][T25010] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2987.076350][T25010] genl_family_rcv_msg_doit+0x211/0x310 [ 2987.082063][T25010] ? end_current_label_crit_section+0x170/0x170 [ 2987.088742][T25010] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2987.094807][T25010] ? bpf_lsm_capable+0x9/0x10 [ 2987.099824][T25010] ? security_capable+0x89/0xb0 [ 2987.104961][T25010] genl_rcv_msg+0x619/0x7a0 [ 2987.109625][T25010] ? genl_bind+0x360/0x360 [ 2987.114102][T25010] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2987.120510][T25010] netlink_rcv_skb+0x241/0x4d0 [ 2987.125341][T25010] ? genl_bind+0x360/0x360 [ 2987.129806][T25010] ? netlink_ack+0x1180/0x1180 [ 2987.134638][T25010] ? __lock_acquire+0x7d40/0x7d40 [ 2987.139702][T25010] ? net_generic+0x1e/0x240 [ 2987.144364][T25010] ? down_read+0x1ac/0x2e0 [ 2987.148958][T25010] genl_rcv+0x28/0x40 [ 2987.153082][T25010] netlink_unicast+0x751/0x8d0 [ 2987.157955][T25010] netlink_sendmsg+0x8d0/0xbf0 [ 2987.162780][T25010] ? netlink_getsockopt+0x590/0x590 [ 2987.168287][T25010] ? aa_sock_msg_perm+0x94/0x150 [ 2987.173316][T25010] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2987.178656][T25010] ? security_socket_sendmsg+0x80/0xa0 [ 2987.184254][T25010] ? netlink_getsockopt+0x590/0x590 [ 2987.189762][T25010] ____sys_sendmsg+0x5ba/0x960 [ 2987.194766][T25010] ? __asan_memset+0x22/0x40 [ 2987.199427][T25010] ? __sys_sendmsg_sock+0x30/0x30 [ 2987.204603][T25010] ? __import_iovec+0x5f2/0x850 [ 2987.209532][T25010] ? import_iovec+0x73/0xa0 [ 2987.214183][T25010] ___sys_sendmsg+0x2a6/0x360 [ 2987.219047][T25010] ? __sys_sendmsg+0x2a0/0x2a0 [ 2987.223922][T25010] __se_sys_sendmsg+0x1c2/0x2b0 [ 2987.228825][T25010] ? __x64_sys_sendmsg+0x80/0x80 [ 2987.233916][T25010] ? lockdep_hardirqs_on+0x98/0x150 [ 2987.239213][T25010] do_syscall_64+0x55/0xa0 [ 2987.243864][T25010] ? clear_bhb_loop+0x40/0x90 [ 2987.248685][T25010] ? clear_bhb_loop+0x40/0x90 [ 2987.253497][T25010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2987.259433][T25010] RIP: 0033:0x7f133639aeb9 [ 2987.263892][T25010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2987.283647][T25010] RSP: 002b:00007f1337300028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2987.292285][T25010] RAX: ffffffffffffffda RBX: 00007f1336616090 RCX: 00007f133639aeb9 [ 2987.300314][T25010] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2987.308331][T25010] RBP: 00007f1336408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2987.316349][T25010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2987.324557][T25010] R13: 00007f1336616128 R14: 00007f1336616090 R15: 00007ffe88af6448 [ 2987.332939][T25010] [ 2999.538573][T25163] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.38929'. [ 3001.357343][T19590] Bluetooth: Frame is too long (len 13, expected len 4) [ 3004.431791][T19590] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 3006.236315][T25245] netlink: 'syz.2.38956': attribute type 3 has an invalid length. [ 3006.248208][T25245] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.38956'. [ 3006.744935][T25253] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.38958'. [ 3007.830667][T25261] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.38970'. [ 3008.501957][T25274] syzkaller0: entered promiscuous mode [ 3008.509886][T25274] syzkaller0: entered allmulticast mode [ 3008.909006][T25276] netlink: 'syz.1.38968': attribute type 3 has an invalid length. [ 3008.936146][T25276] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.38968'. [ 3013.407850][T25317] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 3013.739886][T19590] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 3016.467646][T25360] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.39004'. [ 3018.062367][T25396] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 3019.103018][T25414] mac80211_hwsim hwsim93 wlan1: entered promiscuous mode [ 3019.122071][T25414] mac80211_hwsim hwsim93 wlan1: entered allmulticast mode [ 3021.115497][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.124252][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 3023.370453][T25454] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.39036'. [ 3024.168536][T25474] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.39041'. [ 3024.235889][T25475] mac80211_hwsim hwsim85 wlan1: entered promiscuous mode [ 3024.243563][T25475] mac80211_hwsim hwsim85 wlan1: entered allmulticast mode [ 3025.384961][T25506] mac80211_hwsim hwsim110 wlan1: entered promiscuous mode [ 3025.394098][T25506] mac80211_hwsim hwsim110 wlan1: entered allmulticast mode [ 3026.686630][T25548] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.39078'. [ 3026.767633][T25547] mac80211_hwsim hwsim91 wlan1: entered promiscuous mode [ 3026.783291][T25547] mac80211_hwsim hwsim91 wlan1: entered allmulticast mode [ 3028.804041][T25587] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.39093'. [ 3033.174381][T25628] netlink: 'syz.1.39110': attribute type 29 has an invalid length. [ 3033.187124][T25628] netlink: 'syz.1.39110': attribute type 29 has an invalid length. [ 3033.206029][T25628] netlink: 'syz.1.39110': attribute type 29 has an invalid length. [ 3033.229440][T25628] netlink: 'syz.1.39110': attribute type 29 has an invalid length. [ 3033.261173][T25628] netlink: 'syz.1.39110': attribute type 29 has an invalid length. [ 3035.466610][T25663] netlink: 'syz.2.39121': attribute type 29 has an invalid length. [ 3035.479640][T25663] netlink: 'syz.2.39121': attribute type 29 has an invalid length. [ 3035.524242][T25663] netlink: 'syz.2.39121': attribute type 29 has an invalid length. [ 3035.536521][T25663] netlink: 'syz.2.39121': attribute type 29 has an invalid length. [ 3035.566434][T25663] netlink: 'syz.2.39121': attribute type 29 has an invalid length. [ 3035.896923][T19590] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 3036.717764][T19590] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 3036.782286][T25707] __sock_release: fasync list not empty! [ 3041.014388][T19590] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 3041.540997][T25756] __sock_release: fasync list not empty! [ 3043.734155][T25793] __sock_release: fasync list not empty! [ 3046.364715][T25822] -1: renamed from syzkaller0 [ 3052.202184][T19590] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 3053.686083][T25929] netlink: 188 bytes leftover after parsing attributes in process `syz.1.39223'. [ 3056.032717][T25966] syzkaller0: entered promiscuous mode [ 3056.038287][T25966] syzkaller0: entered allmulticast mode [ 3056.512202][T19590] Bluetooth: hci2: Dropping invalid advertising data [ 3056.519249][T19590] Bluetooth: hci2: Malformed LE Event: 0x02 [ 3062.155849][T19590] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 3063.255176][T26028] netlink: 188 bytes leftover after parsing attributes in process `syz.0.39255'. [ 3063.403626][T26032] -1: renamed from syzkaller0 [ 3064.126031][T19590] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 3064.723516][T26063] netlink: 188 bytes leftover after parsing attributes in process `syz.3.39271'. [ 3064.826946][T26067] -1: renamed from syzkaller0 [ 3065.907726][T19590] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 3066.400894][T19590] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 3072.935621][T19590] Bluetooth: hci1: Dropping invalid advertising data [ 3072.950284][T19590] Bluetooth: hci1: Malformed LE Event: 0x02 [ 3082.553918][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.560325][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 3101.503858][T26470] validate_nla: 5 callbacks suppressed [ 3101.503882][T26470] netlink: 'syz.2.39431': attribute type 10 has an invalid length. [ 3101.602637][T26470] veth0_vlan: left promiscuous mode [ 3101.627027][T26470] veth0_vlan: entered promiscuous mode [ 3101.681012][T26470] team0: Device veth0_vlan failed to register rx_handler [ 3101.766840][T26475] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.39432'. [ 3101.781260][T26475] netlink: zone id is out of range [ 3101.787837][T26475] netlink: zone id is out of range [ 3101.862127][T26475] netlink: zone id is out of range [ 3101.868602][T26475] netlink: zone id is out of range [ 3101.922059][T26475] netlink: zone id is out of range [ 3101.945592][T26475] netlink: zone id is out of range [ 3101.999592][T26475] netlink: zone id is out of range [ 3102.016253][T26475] netlink: zone id is out of range [ 3102.062137][T26475] netlink: zone id is out of range [ 3102.079975][T26475] netlink: zone id is out of range [ 3102.281972][T26484] netlink: 'syz.2.39434': attribute type 10 has an invalid length. [ 3102.290010][T26484] netlink: 55 bytes leftover after parsing attributes in process `syz.2.39434'. [ 3104.110124][T26505] netlink: 'syz.3.39443': attribute type 10 has an invalid length. [ 3104.219659][T26505] veth0_vlan: left promiscuous mode [ 3104.274210][T26505] veth0_vlan: entered promiscuous mode [ 3104.312807][T26505] `: Device veth0_vlan failed to register rx_handler [ 3104.463580][T26512] netlink: 'syz.0.39447': attribute type 10 has an invalid length. [ 3104.536638][T26512] team0: Device hsr_slave_0 failed to register rx_handler [ 3104.769468][T26515] netlink: 'syz.1.39446': attribute type 10 has an invalid length. [ 3104.785498][T26515] netlink: 55 bytes leftover after parsing attributes in process `syz.1.39446'. [ 3105.860533][T26536] netlink: 'syz.1.39456': attribute type 10 has an invalid length. [ 3107.924673][T26568] netlink: 'syz.0.39465': attribute type 10 has an invalid length. [ 3107.932789][T26568] netlink: 55 bytes leftover after parsing attributes in process `syz.0.39465'. [ 3108.811891][T26582] netlink: 'syz.3.39475': attribute type 10 has an invalid length. [ 3108.840662][T26582] `: Device hsr_slave_0 failed to register rx_handler [ 3109.078381][T26590] syzkaller0: entered promiscuous mode [ 3109.093896][T26590] syzkaller0: entered allmulticast mode [ 3113.323379][T26609] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.39486'. [ 3114.492153][T26623] netlink: 'syz.3.39488': attribute type 10 has an invalid length. [ 3114.500245][T26623] netlink: 55 bytes leftover after parsing attributes in process `syz.3.39488'. [ 3115.630272][T26620] netlink: 'syz.1.39489': attribute type 10 has an invalid length. [ 3115.640491][T26620] `: Device hsr_slave_0 failed to register rx_handler [ 3116.044008][T26638] sock: sock_timestamping_bind_phc: sock not bind to device [ 3116.072096][T26633] netlink: 'syz.0.39493': attribute type 10 has an invalid length. [ 3116.096896][T26633] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 3117.278976][T26661] netlink: 'syz.2.39503': attribute type 10 has an invalid length. [ 3117.306525][T26661] team0: Device hsr_slave_0 failed to register rx_handler [ 3117.641954][T26662] netlink: 'syz.1.39505': attribute type 10 has an invalid length. [ 3117.662122][T26662] netlink: 55 bytes leftover after parsing attributes in process `syz.1.39505'. [ 3117.917705][T26670] netlink: 'syz.2.39516': attribute type 10 has an invalid length. [ 3118.009066][T26670] team0: Device hsr_slave_0 failed to register rx_handler [ 3118.225542][T26674] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.39508'. [ 3121.280256][T26705] netlink: 'syz.1.39518': attribute type 10 has an invalid length. [ 3121.397200][T26705] netlink: 55 bytes leftover after parsing attributes in process `syz.1.39518'. [ 3121.970513][T26709] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.39521'. [ 3123.535553][T26730] netlink: 152 bytes leftover after parsing attributes in process `syz.1.39525'. [ 3125.351159][T26742] syzkaller0: entered promiscuous mode [ 3125.387010][T26751] sock: sock_timestamping_bind_phc: sock not bind to device [ 3125.396674][T26742] syzkaller0: entered allmulticast mode [ 3130.225415][T26779] netlink: 'syz.1.39544': attribute type 10 has an invalid length. [ 3130.245661][T26779] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 3130.266509][T26779] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 3130.408840][T26783] sock: sock_timestamping_bind_phc: sock not bind to device [ 3131.873332][T26804] netlink: 'syz.3.39554': attribute type 4 has an invalid length. [ 3131.895749][T26804] netlink: 'syz.3.39554': attribute type 1 has an invalid length. [ 3131.912423][T26804] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.39554'. [ 3132.784863][T26810] syzkaller0: entered promiscuous mode [ 3132.790642][T26810] syzkaller0: entered allmulticast mode [ 3136.271910][T26831] netlink: 'syz.2.39562': attribute type 10 has an invalid length. [ 3136.280109][T26831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.39562'. [ 3136.294360][T26831] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3136.301008][T26831] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3136.327164][T26831] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3138.340562][T26862] netlink: 'syz.2.39574': attribute type 10 has an invalid length. [ 3138.349003][T26862] netlink: 152 bytes leftover after parsing attributes in process `syz.2.39574'. [ 3139.745373][T26866] syzkaller0: entered promiscuous mode [ 3139.751474][T26866] syzkaller0: entered allmulticast mode [ 3139.765232][T26874] netlink: 'syz.0.39583': attribute type 10 has an invalid length. [ 3139.784121][T26874] netlink: 55 bytes leftover after parsing attributes in process `syz.0.39583'. [ 3140.331222][T19590] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 3141.687900][T25659] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 3143.722580][T26903] netlink: 'syz.0.39586': attribute type 10 has an invalid length. [ 3143.738151][T26903] netlink: 152 bytes leftover after parsing attributes in process `syz.0.39586'. [ 3143.995866][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 3144.002660][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 3144.056125][T26919] netlink: 'syz.0.39593': attribute type 10 has an invalid length. [ 3144.068936][T26919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.39593'. [ 3144.124101][T26919] net_ratelimit: 331 callbacks suppressed [ 3144.124143][T26919] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 3144.188447][T26917] netlink: 152 bytes leftover after parsing attributes in process `syz.2.39590'. [ 3145.457737][T26942] netlink: 'syz.3.39600': attribute type 10 has an invalid length. [ 3145.467692][T26942] netlink: 152 bytes leftover after parsing attributes in process `syz.3.39600'. [ 3145.720803][T26945] syzkaller0: entered promiscuous mode [ 3145.737002][T26945] syzkaller0: entered allmulticast mode [ 3146.396367][T25659] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 3154.788260][T25659] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 3156.298536][T27049] netlink: 'syz.1.39637': attribute type 10 has an invalid length. [ 3156.331877][T27049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.39637'. [ 3156.370400][T27049] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 3161.585200][T27112] netlink: 'syz.1.39662': attribute type 10 has an invalid length. [ 3161.599546][T27112] netlink: 144 bytes leftover after parsing attributes in process `syz.1.39662'. [ 3161.620888][T27112] bridge0: port 3(`) entered disabled state [ 3161.800350][T27112] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 3164.019519][T27147] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.39674'. [ 3167.900107][T25659] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 3167.928726][T27194] netlink: 'syz.3.39689': attribute type 10 has an invalid length. [ 3168.059334][T27194] netlink: 144 bytes leftover after parsing attributes in process `syz.3.39689'. [ 3168.113097][T27194] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 3168.318212][T27201] netlink: 'syz.1.39692': attribute type 2 has an invalid length. [ 3168.371510][T27201] netlink: 'syz.1.39692': attribute type 9 has an invalid length. [ 3168.380147][T27201] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39692'. [ 3168.501035][T27203] netlink: 'syz.0.39693': attribute type 10 has an invalid length. [ 3168.511771][T27203] netlink: 'syz.0.39693': attribute type 10 has an invalid length. [ 3168.531922][T27203] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.39693'. [ 3168.543191][T27203] openvswitch: netlink: Message has 4 unknown bytes. [ 3168.746938][T27208] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.39694'. [ 3173.140059][T27259] netlink: 'syz.3.39712': attribute type 10 has an invalid length. [ 3173.167690][T27259] netlink: 'syz.3.39712': attribute type 10 has an invalid length. [ 3173.201718][T27259] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.39712'. [ 3173.232520][T27259] openvswitch: netlink: Message has 4 unknown bytes. [ 3175.382483][T25659] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 3175.390173][T25659] Bluetooth: hci0: Invalid handle: 0x1100 > 0x0eff [ 3176.125455][T27298] netlink: 'syz.1.39725': attribute type 10 has an invalid length. [ 3176.166253][T27298] netlink: 'syz.1.39725': attribute type 10 has an invalid length. [ 3176.218450][T27298] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.39725'. [ 3176.270412][T27298] openvswitch: netlink: Message has 4 unknown bytes. [ 3178.104537][T19590] Bluetooth: hci2: unexpected event 0x0b length: 151 > 11 [ 3183.441255][T27368] netlink: 'syz.2.39750': attribute type 10 has an invalid length. [ 3183.488334][T27368] netlink: 'syz.2.39750': attribute type 10 has an invalid length. [ 3183.500573][T27368] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.39750'. [ 3183.514173][T27368] openvswitch: netlink: Message has 4 unknown bytes. [ 3183.547263][T19590] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 3183.558264][T19590] Bluetooth: hci1: Invalid handle: 0x1100 > 0x0eff [ 3185.245195][T27397] netlink: 'syz.1.39763': attribute type 10 has an invalid length. [ 3185.273808][T27397] netlink: 'syz.1.39763': attribute type 10 has an invalid length. [ 3185.303186][T27397] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.39763'. [ 3185.338279][T27397] openvswitch: netlink: Message has 4 unknown bytes. [ 3185.456051][T27404] syzkaller0: entered promiscuous mode [ 3185.462006][T27404] syzkaller0: entered allmulticast mode [ 3189.852655][T27441] netlink: 'syz.3.39777': attribute type 10 has an invalid length. [ 3189.878198][T27441] netlink: 'syz.3.39777': attribute type 10 has an invalid length. [ 3189.912975][T27441] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.39777'. [ 3189.935143][T27441] openvswitch: netlink: Message has 4 unknown bytes. [ 3191.434010][T27476] netlink: 'syz.2.39791': attribute type 10 has an invalid length. [ 3191.457647][T27476] netlink: 'syz.2.39791': attribute type 10 has an invalid length. [ 3191.491973][T27476] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.39791'. [ 3191.533930][T27476] openvswitch: netlink: Message has 4 unknown bytes. [ 3192.925475][T27510] netlink: 'syz.1.39804': attribute type 10 has an invalid length. [ 3192.934498][T27510] netlink: 'syz.1.39804': attribute type 10 has an invalid length. [ 3192.947816][T27510] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.39804'. [ 3192.969692][T27510] openvswitch: netlink: Message has 4 unknown bytes. [ 3197.172854][T27545] netlink: 'syz.2.39820': attribute type 10 has an invalid length. [ 3197.189496][T27545] netlink: 'syz.2.39820': attribute type 10 has an invalid length. [ 3197.222340][T27545] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.39820'. [ 3197.252354][T27545] openvswitch: netlink: Message has 4 unknown bytes. [ 3197.414984][T19590] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 3199.431645][T19590] Bluetooth: hci2: command 0x0406 tx timeout [ 3202.098530][T27577] syzkaller0: entered promiscuous mode [ 3202.111096][T27577] syzkaller0: entered allmulticast mode [ 3202.250162][T27580] netlink: 'syz.3.39835': attribute type 10 has an invalid length. [ 3202.262692][T27580] netlink: 'syz.3.39835': attribute type 10 has an invalid length. [ 3202.288306][T27580] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.39835'. [ 3202.300086][T27580] openvswitch: netlink: Message has 4 unknown bytes. [ 3202.357694][T27574] netlink: 'syz.0.39833': attribute type 1 has an invalid length. [ 3202.366802][T27574] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.39833'. [ 3202.385967][T27574] netlink: 9 bytes leftover after parsing attributes in process `syz.0.39833'. [ 3202.424666][T19590] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 3203.884140][T27613] netlink: 'syz.2.39848': attribute type 10 has an invalid length. [ 3203.900395][T27613] netlink: 'syz.2.39848': attribute type 10 has an invalid length. [ 3203.916811][T27613] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.39848'. [ 3203.928242][T27613] openvswitch: netlink: Message has 4 unknown bytes. [ 3205.452326][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.459154][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 3206.076567][T27611] netlink: 72 bytes leftover after parsing attributes in process `syz.1.39847'. [ 3207.069953][T19590] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 3208.207734][T19590] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 3210.531563][T27667] lo: entered allmulticast mode [ 3210.594390][T27670] lo: entered promiscuous mode [ 3210.599355][T27670] lo: left allmulticast mode [ 3211.758574][T27696] netlink: 830 bytes leftover after parsing attributes in process `syz.3.39882'. [ 3213.879901][T27768] netpci0: tun_chr_ioctl cmd 2147767511 [ 3215.475659][T27812] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.39934'. [ 3215.884852][T27828] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.39929'. [ 3216.499989][T27840] netlink: 'syz.1.39936': attribute type 1 has an invalid length. [ 3216.536320][T27840] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.39936'. [ 3216.577747][T27840] netlink: 9 bytes leftover after parsing attributes in process `syz.1.39936'. serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.