last executing test programs: 3.253011937s ago: executing program 4 (id=29209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 3.251965606s ago: executing program 1 (id=29221): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605a7", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.498554197s ago: executing program 0 (id=29210): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010040) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) 2.498049267s ago: executing program 4 (id=29213): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a1", 0x1c}], 0x1}, 0x804) 2.470289608s ago: executing program 1 (id=29214): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x4040800) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r1) 2.271769869s ago: executing program 0 (id=29216): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001880)="2e00000010008188e6b66aa73772ccb21ba1f84848000000de140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000800) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x800000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) socket$kcm(0xa, 0x2, 0x0) 2.24142484s ago: executing program 4 (id=29217): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2.170978214s ago: executing program 2 (id=29218): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80fffa}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40400}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) 1.900247408s ago: executing program 4 (id=29220): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x28, 0x1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)="41fed4bc0622", 0x6}], 0x1}, 0x4c004) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 1.899584278s ago: executing program 3 (id=29222): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) 1.855056541s ago: executing program 2 (id=29224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 1.854270051s ago: executing program 0 (id=29225): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) 1.854056341s ago: executing program 1 (id=29226): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 1.578273715s ago: executing program 0 (id=29227): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.4867847s ago: executing program 2 (id=29228): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 1.361619567s ago: executing program 3 (id=29229): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81884d8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1.154128318s ago: executing program 1 (id=29230): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a1", 0x1c}], 0x1}, 0x804) 1.11833384s ago: executing program 3 (id=29231): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20) 862.849764ms ago: executing program 4 (id=29232): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 862.072354ms ago: executing program 0 (id=29242): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20) 861.749164ms ago: executing program 2 (id=29233): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 861.585364ms ago: executing program 3 (id=29234): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001880)="2e00000010008188e6b66aa73772ccb21ba1f84848000000de140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000800) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x800000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) socket$kcm(0xa, 0x2, 0x0) 860.372294ms ago: executing program 1 (id=29235): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80fffa}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40400}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) 619.775497ms ago: executing program 2 (id=29236): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r1], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) 378.48887ms ago: executing program 3 (id=29237): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605a7", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 377.07184ms ago: executing program 1 (id=29238): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x8, 0x8, 0x2, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000001c0)) socketpair(0x18, 0x3, 0x3, &(0x7f00000000c0)) 1.724109ms ago: executing program 3 (id=29239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 797.349µs ago: executing program 4 (id=29250): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x400) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20) 450.56µs ago: executing program 2 (id=29240): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) 0s ago: executing program 0 (id=29251): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001880)="2e00000010008188e6b66aa73772ccb21ba1f84848000000de140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000800) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x800000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) socket$kcm(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): devsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.868587][T21293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.887672][T21293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.918022][T21293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.019448][T24662] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.148649][T24662] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.292079][T24662] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.405761][ T8774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.429246][ T8774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.496028][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1397.533945][ T8777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.555680][ T8777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.556054][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1397.583917][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1397.592381][T12778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1397.613682][T12778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1397.622470][T12778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1397.631814][T12778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1397.671679][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1398.316058][T21466] __nla_validate_parse: 5 callbacks suppressed [ 1398.316077][T21466] netlink: 198388 bytes leftover after parsing attributes in process `syz.0.23186'. [ 1398.581829][T21453] chnl_net:caif_netlink_parms(): no params data found [ 1398.809061][T21453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.857306][T21453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.866215][T21453] device bridge_slave_0 entered promiscuous mode [ 1398.964579][T21453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.982146][T21453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.005216][T21453] device bridge_slave_1 entered promiscuous mode [ 1399.391469][ T8478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1399.402306][ T8478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1399.410749][ T8478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1399.419367][ T8478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1399.430875][ T8478] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1399.438163][ T8478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1399.661050][ T8478] Bluetooth: hci2: command 0x0409 tx timeout [ 1401.193612][T21453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.221793][T21453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.347753][T21512] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.23232'. [ 1401.379358][T21453] team0: Port device team_slave_0 added [ 1401.402673][T21453] team0: Port device team_slave_1 added [ 1401.500227][ T8478] Bluetooth: hci1: command 0x0409 tx timeout [ 1401.687116][T21453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.743253][ T8478] Bluetooth: hci2: command 0x041b tx timeout [ 1401.758770][T21453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.811446][T21453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.834165][T21529] netlink: 'syz.1.23241': attribute type 2 has an invalid length. [ 1401.903704][T21531] device syzkaller0 entered promiscuous mode [ 1401.922811][T21453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.929779][T21453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.000421][T21453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.699022][T21557] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.23249'. [ 1403.583257][ T8478] Bluetooth: hci1: command 0x041b tx timeout [ 1403.823890][ T8478] Bluetooth: hci2: command 0x040f tx timeout [ 1403.920524][T24662] device hsr_slave_0 left promiscuous mode [ 1403.928005][T24662] device hsr_slave_1 left promiscuous mode [ 1403.950891][T24662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.976585][T24662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.992202][T24662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.999639][T24662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.009430][T24662] device bridge_slave_1 left promiscuous mode [ 1404.023305][T24662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.176432][T24662] device bridge_slave_0 left promiscuous mode [ 1404.185189][T24662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.251379][T24662] device veth1_macvtap left promiscuous mode [ 1404.264428][T24662] device veth0_macvtap left promiscuous mode [ 1404.279071][T24662] device veth1_vlan left promiscuous mode [ 1404.285660][T24662] device veth0_vlan left promiscuous mode [ 1405.660343][ T8478] Bluetooth: hci1: command 0x040f tx timeout [ 1405.900433][ T8478] Bluetooth: hci2: command 0x0419 tx timeout [ 1407.182607][T21575] netlink: 'syz.0.23255': attribute type 2 has an invalid length. [ 1407.727758][T21588] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.23262'. [ 1407.750357][T12778] Bluetooth: hci1: command 0x0419 tx timeout [ 1407.830687][T24662] team0 (unregistering): Port device team_slave_1 removed [ 1408.051185][T24662] team0 (unregistering): Port device team_slave_0 removed [ 1408.125347][T24662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.177136][T24662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.472512][T24662] bond0 (unregistering): Released all slaves [ 1408.606736][T21453] device hsr_slave_0 entered promiscuous mode [ 1408.618525][T21453] device hsr_slave_1 entered promiscuous mode [ 1408.650438][T21453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1408.658026][T21453] Cannot create hsr debugfs directory [ 1408.687244][T21598] delete_channel: no stack [ 1408.697000][T21599] netlink: 'syz.4.23279': attribute type 29 has an invalid length. [ 1408.843242][T21599] netlink: 'syz.4.23279': attribute type 29 has an invalid length. [ 1408.870755][T21605] netlink: 'syz.4.23279': attribute type 29 has an invalid length. [ 1408.949892][T21608] netlink: 'syz.4.23279': attribute type 29 has an invalid length. [ 1408.988338][T21599] netlink: 'syz.4.23279': attribute type 29 has an invalid length. [ 1409.016431][T21505] chnl_net:caif_netlink_parms(): no params data found [ 1409.169922][T21505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.177841][T21505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.189671][T21505] device bridge_slave_0 entered promiscuous mode [ 1409.248029][T21505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.257834][T21505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.266875][T21626] netlink: 'syz.4.23271': attribute type 2 has an invalid length. [ 1409.312353][T21505] device bridge_slave_1 entered promiscuous mode [ 1409.424414][T21505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.563057][T21505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.654564][T21505] team0: Port device team_slave_0 added [ 1409.720297][T21505] team0: Port device team_slave_1 added [ 1409.775378][T21505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.810237][T21505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1409.880206][T21505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.963686][T24662] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.023297][T21505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.050870][T21505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.086624][T21505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.168341][T24662] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.227986][T21453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1410.264411][T24662] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.285377][T21505] device hsr_slave_0 entered promiscuous mode [ 1410.292436][T21505] device hsr_slave_1 entered promiscuous mode [ 1410.298914][T21505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1410.307089][T21505] Cannot create hsr debugfs directory [ 1410.314726][T21453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1410.326109][T21453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1410.346426][T24662] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.370536][T21453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1410.540472][T21453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.665037][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1410.673575][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1410.699380][T21453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.788255][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1410.806849][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1410.822176][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.829302][ T9885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.839403][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1410.848458][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1410.864434][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.871587][ T9885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.942250][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1410.961962][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1410.978428][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1410.987546][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1410.998473][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1411.011939][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1411.022296][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1411.038117][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1411.048784][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1411.096996][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1411.119655][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1411.129609][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1411.155421][T21453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1411.508291][T21505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1411.546936][T21505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1411.556698][T21505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1411.567312][T21505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1411.592099][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1411.599647][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1411.643646][T21453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1411.733619][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1411.743382][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1411.797470][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1411.813820][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1411.827879][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1411.838452][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1411.853586][T21453] device veth0_vlan entered promiscuous mode [ 1411.927927][T21453] device veth1_vlan entered promiscuous mode [ 1411.954546][T21505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.975331][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1411.994984][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1412.006481][T21505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.019549][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1412.029016][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1412.046979][T21453] device veth0_macvtap entered promiscuous mode [ 1412.057319][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1412.071446][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1412.100554][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1412.109165][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.116295][ T8774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.124465][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1412.198302][T21453] device veth1_macvtap entered promiscuous mode [ 1412.207735][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1412.235784][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1412.244466][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1412.267595][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.274768][ T8774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.317023][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1412.338643][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1412.350761][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1412.362562][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1412.372926][T21453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.399579][T21453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.412426][T21453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.426629][T21453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.438177][T21453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.449154][T21453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.469434][T21453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.480145][T21453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.498596][T21453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.509633][T24662] device hsr_slave_0 left promiscuous mode [ 1412.519446][T24662] device hsr_slave_1 left promiscuous mode [ 1412.526279][T24662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.533973][T24662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.542818][T24662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.550615][T24662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.559243][T24662] device bridge_slave_1 left promiscuous mode [ 1412.565840][T24662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.580992][T24662] device bridge_slave_0 left promiscuous mode [ 1412.587193][T24662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.627637][T24662] device veth1_macvtap left promiscuous mode [ 1412.636947][T24662] device veth0_macvtap left promiscuous mode [ 1412.643478][T24662] device veth1_vlan left promiscuous mode [ 1412.649251][T24662] device veth0_vlan left promiscuous mode [ 1413.056225][T24662] team0 (unregistering): Port device team_slave_1 removed [ 1413.092791][T24662] team0 (unregistering): Port device team_slave_0 removed [ 1413.127929][T24662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.160036][T24662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.392708][T24662] bond0 (unregistering): Released all slaves [ 1413.479359][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1413.487815][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1413.497580][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1413.513168][T21453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.529802][T21453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.540396][T21453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.553562][T21453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.564163][T21453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.577477][T21453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.589697][T21453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.606826][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1413.620424][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1413.628714][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1413.640732][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1413.650580][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1413.662422][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1413.683402][T21453] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.693371][T21453] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.703211][T21453] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.711963][T21453] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.733790][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1413.745476][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1413.764745][T21505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1413.912750][ T9859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.928720][ T9859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.951941][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1413.979267][ T9859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.001610][ T9859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.009197][ T9885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1414.157380][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1414.170342][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1414.221195][T21505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.226340][T21708] netlink: 'syz.1.23287': attribute type 29 has an invalid length. [ 1414.236964][T21708] netlink: 'syz.1.23287': attribute type 29 has an invalid length. [ 1414.276375][T21708] netlink: 'syz.1.23287': attribute type 29 has an invalid length. [ 1414.282955][T21706] delete_channel: no stack [ 1414.292007][T21708] netlink: 'syz.1.23287': attribute type 29 has an invalid length. [ 1414.320458][T21708] netlink: 'syz.1.23287': attribute type 29 has an invalid length. [ 1414.351859][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1414.386070][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1414.440852][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1414.461465][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1414.482269][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1414.514234][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1414.543547][T21505] device veth0_vlan entered promiscuous mode [ 1414.570767][T21505] device veth1_vlan entered promiscuous mode [ 1414.634608][T21505] device veth0_macvtap entered promiscuous mode [ 1414.671596][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1414.696348][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1414.718445][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1414.747713][T21725] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.23292'. [ 1414.769878][T21505] device veth1_macvtap entered promiscuous mode [ 1414.824634][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1414.852739][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.869552][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1414.885703][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.907766][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1414.941314][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1414.965900][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1414.986921][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.005817][T21505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.035696][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1415.055232][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1415.078903][ T8774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1415.113640][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.148449][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.168768][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.190294][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.220296][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.250374][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.262200][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.275810][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.287174][T21505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1415.305265][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1415.319383][ T9859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1415.335967][T21505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.345570][T21505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.359987][T21505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.368828][T21505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.422674][ T8703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.436197][ T8703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.443934][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1415.461480][ T8703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.469339][ T8703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.478967][T24662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1416.981408][T21827] netlink: 'syz.1.23344': attribute type 13 has an invalid length. [ 1417.000408][T21827] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.23344'. [ 1417.385349][T21847] netlink: 144 bytes leftover after parsing attributes in process `syz.1.23351'. [ 1417.547265][T21857] netlink: 'syz.0.23367': attribute type 29 has an invalid length. [ 1417.598376][T21855] device syzkaller0 entered promiscuous mode [ 1417.609062][T21857] netlink: 'syz.0.23367': attribute type 29 has an invalid length. [ 1417.682822][T21860] netlink: 'syz.0.23367': attribute type 29 has an invalid length. [ 1419.683030][T21862] netlink: 'syz.0.23367': attribute type 29 has an invalid length. [ 1419.886128][T21883] delete_channel: no stack [ 1421.572017][T21969] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.23411'. [ 1421.662700][T21974] netlink: 'syz.2.23413': attribute type 29 has an invalid length. [ 1421.703335][T21974] netlink: 'syz.2.23413': attribute type 29 has an invalid length. [ 1421.729399][T21979] netlink: 'syz.2.23413': attribute type 29 has an invalid length. [ 1421.762948][T21978] netlink: 'syz.4.23415': attribute type 10 has an invalid length. [ 1421.819081][T21978] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.23415'. [ 1421.846232][T21974] netlink: 'syz.2.23413': attribute type 29 has an invalid length. [ 1421.876023][T21979] netlink: 'syz.2.23413': attribute type 29 has an invalid length. [ 1422.523273][T22013] syz.3.23431[22013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1422.523370][T22013] syz.3.23431[22013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1422.871171][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.893262][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.918163][T22029] netlink: 'syz.1.23448': attribute type 10 has an invalid length. [ 1422.941078][T22029] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.23448'. [ 1425.928327][T22045] netlink: 168 bytes leftover after parsing attributes in process `syz.0.23455'. [ 1427.310987][T22105] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.23474'. [ 1427.845859][T22127] syz.2.23486[22127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1427.845958][T22127] syz.2.23486[22127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1428.667054][T22154] syz.4.23508[22154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1428.722129][T22154] syz.4.23508[22154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1429.745028][T22193] netlink: 'syz.2.23515': attribute type 2 has an invalid length. [ 1429.837750][T22193] netlink: 'syz.2.23515': attribute type 4 has an invalid length. [ 1429.862146][T22193] netlink: 'syz.2.23515': attribute type 8 has an invalid length. [ 1429.880202][T22193] netlink: 'syz.2.23515': attribute type 9 has an invalid length. [ 1429.908486][T22193] netlink: 'syz.2.23515': attribute type 10 has an invalid length. [ 1429.940499][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23515'. [ 1430.053549][T22197] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.23517'. [ 1430.302852][T22210] netlink: 'syz.4.23523': attribute type 2 has an invalid length. [ 1430.320205][T22210] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.23523'. [ 1430.581879][T22221] netlink: 'syz.0.23537': attribute type 2 has an invalid length. [ 1430.589756][T22221] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.23537'. [ 1430.638596][T22225] netlink: 'syz.3.23529': attribute type 1 has an invalid length. [ 1430.656053][T22225] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.23529'. [ 1430.892302][T22237] netlink: 'syz.1.23535': attribute type 2 has an invalid length. [ 1430.923875][T22237] netlink: 'syz.1.23535': attribute type 4 has an invalid length. [ 1430.948614][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23535'. [ 1431.424394][T22259] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.23545'. [ 1431.509345][T22265] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.23546'. [ 1431.955649][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23551'. [ 1434.008163][T22360] device syzkaller0 entered promiscuous mode [ 1434.809787][T22394] syz.0.23603[22394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1434.809891][T22394] syz.0.23603[22394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1436.330836][T22443] syz.1.23638[22443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1436.349522][T22443] syz.1.23638[22443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1436.617486][T22451] device syzkaller0 entered promiscuous mode [ 1437.447416][T22473] __nla_validate_parse: 1 callbacks suppressed [ 1437.447433][T22473] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.23649'. [ 1439.156558][T22516] validate_nla: 12 callbacks suppressed [ 1439.156575][T22516] netlink: 'syz.4.23658': attribute type 25 has an invalid length. [ 1439.176304][T22516] netlink: 'syz.4.23658': attribute type 29 has an invalid length. [ 1439.358480][T22519] syz.3.23660[22519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1439.358578][T22519] syz.3.23660[22519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1439.676308][T22538] device syzkaller0 entered promiscuous mode [ 1440.015928][T22549] syz.3.23681[22549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1440.016027][T22549] syz.3.23681[22549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1441.005943][T22576] device syzkaller0 entered promiscuous mode [ 1443.581278][T22657] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1446.911653][T22747] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1448.023050][T22773] netlink: 'syz.3.23766': attribute type 10 has an invalid length. [ 1449.144168][T22809] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1449.778775][T22821] device veth0_to_team entered promiscuous mode [ 1450.724465][T22872] device veth0_to_team entered promiscuous mode [ 1451.149053][T22885] netlink: 'syz.4.23810': attribute type 10 has an invalid length. [ 1452.026341][T22909] device veth0_to_team entered promiscuous mode [ 1453.121877][T22938] : renamed from pim6reg1 [ 1453.422127][T22948] netlink: 'syz.1.23836': attribute type 10 has an invalid length. [ 1454.493328][T22966] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.23846'. [ 1454.663313][T22972] : renamed from pim6reg1 [ 1455.495932][T23001] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.23860'. [ 1455.973560][T23011] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1456.460640][T23025] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.23874'. [ 1458.703335][ T9885] wlan1: Trigger new scan to find an IBSS to join [ 1460.789690][T12778] Bluetooth: hci0: command 0x0406 tx timeout [ 1460.909309][T23084] netlink: 'syz.0.23899': attribute type 10 has an invalid length. [ 1461.151888][T23087] netlink: 'syz.1.23912': attribute type 2 has an invalid length. [ 1461.159771][T23087] netlink: 'syz.1.23912': attribute type 1 has an invalid length. [ 1461.230373][T23087] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.23912'. [ 1461.765770][T23100] mac80211_hwsim hwsim66 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1461.849019][T23096] : renamed from pim6reg1 [ 1461.977481][T23108] netlink: 'syz.0.23907': attribute type 10 has an invalid length. [ 1462.012832][T23108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23907'. [ 1462.032360][T23108] device dummy0 entered promiscuous mode [ 1462.058574][T23108] bridge0: port 3(dummy0) entered blocking state [ 1462.087600][T23108] bridge0: port 3(dummy0) entered disabled state [ 1462.119331][T23108] bridge0: port 3(dummy0) entered blocking state [ 1462.125871][T23108] bridge0: port 3(dummy0) entered forwarding state [ 1464.293649][T23152] netlink: 'syz.3.23929': attribute type 10 has an invalid length. [ 1464.350314][T23152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23929'. [ 1464.389879][T23152] device dummy0 entered promiscuous mode [ 1464.398994][T23152] bridge0: port 3(dummy0) entered blocking state [ 1464.416229][T23152] bridge0: port 3(dummy0) entered disabled state [ 1464.432684][T23152] bridge0: port 3(dummy0) entered blocking state [ 1464.439210][T23152] bridge0: port 3(dummy0) entered forwarding state [ 1466.081483][T23191] netlink: 'syz.2.23944': attribute type 10 has an invalid length. [ 1466.349045][T23195] mac80211_hwsim hwsim72 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1466.488788][T23201] netlink: 'syz.2.23948': attribute type 10 has an invalid length. [ 1466.510210][T23201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23948'. [ 1466.538851][T23201] device dummy0 entered promiscuous mode [ 1466.550021][T23201] bridge0: port 3(dummy0) entered blocking state [ 1466.569306][T23201] bridge0: port 3(dummy0) entered disabled state [ 1466.582208][T23201] bridge0: port 3(dummy0) entered blocking state [ 1466.588707][T23201] bridge0: port 3(dummy0) entered forwarding state [ 1467.663827][T24662] wlan1: Trigger new scan to find an IBSS to join [ 1467.670289][T27105] wlan1: Trigger new scan to find an IBSS to join [ 1468.304103][T23227] mac80211_hwsim hwsim68 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1468.620865][ T8774] wlan1: Trigger new scan to find an IBSS to join [ 1470.700630][ T9885] wlan1: Trigger new scan to find an IBSS to join [ 1471.381065][T21560] wlan1: Creating new IBSS network, BSSID 56:e6:07:d6:e8:77 [ 1471.689425][T23255] netlink: 'syz.1.23974': attribute type 10 has an invalid length. [ 1471.959763][T23263] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1473.660418][T21560] wlan1: Trigger new scan to find an IBSS to join [ 1473.667331][ T8703] wlan1: Trigger new scan to find an IBSS to join [ 1473.674130][T27105] wlan1: Trigger new scan to find an IBSS to join [ 1475.649111][T23292] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1475.658692][T22512] wlan1: Creating new IBSS network, BSSID 6e:a3:1a:bb:d8:f5 [ 1475.666313][ T8703] wlan1: Creating new IBSS network, BSSID 9e:23:7d:65:7a:f9 [ 1475.673921][T21560] wlan1: Creating new IBSS network, BSSID 16:cb:e7:5f:5a:5d [ 1475.874251][T23306] netlink: 'syz.4.23997': attribute type 10 has an invalid length. [ 1476.380131][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.428468][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.462672][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.490212][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.508433][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.525173][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.538713][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.550253][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.561699][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.572368][T23327] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1476.585550][T23334] netlink: 192432 bytes leftover after parsing attributes in process `syz.0.24010'. [ 1477.672172][T22512] wlan1: Trigger new scan to find an IBSS to join [ 1478.688829][T23347] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.24016'. [ 1478.741840][T23355] netlink: 'syz.0.24017': attribute type 22 has an invalid length. [ 1479.640498][T23389] netlink: 'syz.2.24033': attribute type 22 has an invalid length. [ 1480.700428][ T8703] wlan1: Trigger new scan to find an IBSS to join [ 1481.713633][T23400] netlink: 192432 bytes leftover after parsing attributes in process `syz.2.24038'. [ 1481.728541][T23400] net_ratelimit: 66047 callbacks suppressed [ 1481.728557][T23400] netlink: get zone limit has 4 unknown bytes [ 1482.057760][T23411] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.24043'. [ 1482.173228][T23417] netlink: 'syz.0.24045': attribute type 10 has an invalid length. [ 1482.725745][T23429] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.24051'. [ 1483.667967][ T9885] wlan1: Trigger new scan to find an IBSS to join [ 1484.114235][T23457] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.24064'. [ 1484.302476][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.308866][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.650659][ T8777] wlan1: Creating new IBSS network, BSSID b2:6a:e2:3b:1c:e8 [ 1484.698643][T23475] netlink: 'syz.3.24069': attribute type 10 has an invalid length. [ 1486.458952][T23517] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.24090'. [ 1487.364092][T23539] netlink: 168 bytes leftover after parsing attributes in process `syz.4.24099'. [ 1488.629643][T23564] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.24109'. [ 1488.713925][T23571] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.24114'. [ 1489.772650][T23604] netlink: 'syz.0.24128': attribute type 11 has an invalid length. [ 1489.817186][T23604] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.24128'. [ 1490.596117][T23602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1491.239935][T23616] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.24132'. [ 1491.888657][T23633] device syzkaller0 entered promiscuous mode [ 1491.993231][T23640] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.24145'. [ 1496.091701][T23666] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.24153'. [ 1500.906198][T23679] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.24161'. [ 1501.079495][T23698] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.24172'. [ 1501.187928][T23701] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.24173'. [ 1501.450399][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1502.173941][T23727] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.24187'. [ 1502.211054][T23730] netlink: 'syz.4.24185': attribute type 3 has an invalid length. [ 1502.250937][T23730] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.24185'. [ 1502.374305][T12778] Bluetooth: hci4: unexpected event 0x01 length: 15 > 1 [ 1502.736793][T23748] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.24196'. [ 1503.536315][T12778] Bluetooth: hci3: unexpected event 0x01 length: 15 > 1 [ 1504.021989][T23791] netlink: 'syz.3.24211': attribute type 3 has an invalid length. [ 1504.080193][T23791] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.24211'. [ 1504.230476][T12778] Bluetooth: hci0: unexpected event 0x01 length: 15 > 1 [ 1504.935324][T23814] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.24223'. [ 1505.178766][T23826] netlink: 'syz.1.24228': attribute type 3 has an invalid length. [ 1505.193324][T23826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.24228'. [ 1505.742747][T24662] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1505.742860][T22512] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1505.753341][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1506.103567][T23850] netlink: 'syz.3.24241': attribute type 1 has an invalid length. [ 1506.138767][T23850] netlink: 'syz.3.24241': attribute type 4 has an invalid length. [ 1506.175793][T23852] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.24240'. [ 1506.195679][T23850] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.24241'. [ 1506.510377][T23861] netlink: 'syz.2.24244': attribute type 3 has an invalid length. [ 1506.533893][T23861] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.24244'. [ 1507.449564][T23892] netlink: 'syz.0.24257': attribute type 1 has an invalid length. [ 1507.493831][T23892] netlink: 'syz.0.24257': attribute type 4 has an invalid length. [ 1507.547860][T23892] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.24257'. [ 1507.612917][T12778] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 1508.411663][T23928] netlink: 'syz.4.24274': attribute type 1 has an invalid length. [ 1508.465897][T23928] netlink: 'syz.4.24274': attribute type 4 has an invalid length. [ 1508.484316][T23928] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.24274'. [ 1509.129474][T12778] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 1509.804588][T12778] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1511.980313][ T8478] Bluetooth: hci3: command 0x0406 tx timeout [ 1511.994205][T12778] Bluetooth: hci4: command 0x0406 tx timeout [ 1514.660250][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1515.719142][T24124] netlink: 'syz.0.24366': attribute type 10 has an invalid length. [ 1515.754673][T24124] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.24366'. [ 1517.253729][T24159] netlink: 'syz.4.24381': attribute type 10 has an invalid length. [ 1517.270227][T24159] netlink: 9279 bytes leftover after parsing attributes in process `syz.4.24381'. [ 1517.303851][T24161] netlink: 'syz.2.24380': attribute type 3 has an invalid length. [ 1517.320528][T24161] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.24380'. [ 1518.366926][T24189] netlink: 'syz.2.24393': attribute type 33 has an invalid length. [ 1518.464428][T24189] netlink: 152 bytes leftover after parsing attributes in process `syz.2.24393'. [ 1519.197980][T24200] netlink: 'syz.1.24397': attribute type 10 has an invalid length. [ 1519.220561][T24200] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.24397'. [ 1519.576659][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1521.230930][T24230] netlink: 'syz.4.24410': attribute type 33 has an invalid length. [ 1521.244003][T24230] netlink: 152 bytes leftover after parsing attributes in process `syz.4.24410'. [ 1522.220285][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 1522.226419][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 1522.994018][T24269] netlink: 'syz.1.24429': attribute type 3 has an invalid length. [ 1523.029502][T24269] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.24429'. [ 1524.588823][ T4285] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1527.520723][T24385] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24478'. [ 1528.213855][T24408] netlink: 'syz.0.24494': attribute type 7 has an invalid length. [ 1528.232526][T24408] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.24494'. [ 1530.627620][T24478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.24523'. [ 1531.122486][T24492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24542'. [ 1531.168510][T24497] netlink: 'syz.1.24532': attribute type 7 has an invalid length. [ 1531.189937][T24497] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.24532'. [ 1532.467584][ T8777] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1535.301032][T24565] netlink: 'syz.1.24572': attribute type 10 has an invalid length. [ 1535.362508][T24565] team0: Port device macvlan0 added [ 1537.075328][ T8777] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1537.086417][T23877] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1537.086667][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1539.588621][ T4285] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1541.505166][T23877] tipc: Subscription rejected, illegal request [ 1541.949739][T24722] netlink: 132 bytes leftover after parsing attributes in process `syz.4.24628'. [ 1543.480594][T24761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24644'. [ 1544.596746][T24792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24662'. [ 1545.679248][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1545.762237][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.768589][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.501046][T24839] netlink: 132 bytes leftover after parsing attributes in process `syz.4.24679'. [ 1547.908954][T24876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24700'. [ 1548.400803][T24888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24716'. [ 1549.001162][T24906] netlink: 'syz.3.24715': attribute type 22 has an invalid length. [ 1549.367523][T24917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.24720'. [ 1549.713733][T24930] netlink: 'syz.3.24734': attribute type 10 has an invalid length. [ 1549.763915][T24930] device hsr0 entered promiscuous mode [ 1549.792900][T24930] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1549.856926][T24930] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1549.875936][T24930] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1549.920145][T24930] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1549.956963][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1549.994645][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.003851][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.013046][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.022196][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.031381][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.040533][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.049620][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.058800][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1550.067939][T24932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1554.529763][T25017] device syzkaller0 entered promiscuous mode [ 1556.917488][T25042] net_ratelimit: 3256 callbacks suppressed [ 1556.917536][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1556.988457][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1556.997752][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1557.006948][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1557.016118][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1557.025290][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1557.034464][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1557.043637][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1557.052793][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1557.061947][T25042] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1558.641779][T25076] device syzkaller0 entered promiscuous mode [ 1562.430408][ T4285] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 1562.694948][T25178] netlink: 14 bytes leftover after parsing attributes in process `syz.3.24819'. [ 1563.130917][T25194] device syzkaller0 entered promiscuous mode [ 1563.827108][ T4285] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 1565.132618][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1565.664335][T25210] device pim6reg1 entered promiscuous mode [ 1566.067426][ T4285] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1566.433501][T25267] netlink: 14 bytes leftover after parsing attributes in process `syz.0.24858'. [ 1566.591944][ T4285] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 1566.863618][T25276] device syzkaller0 entered promiscuous mode [ 1568.306990][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1568.317530][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1568.318051][T25109] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1568.464891][ T4285] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 1569.607873][T25322] netlink: 'syz.1.24879': attribute type 9 has an invalid length. [ 1569.664124][T25322] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.24879'. [ 1572.168878][T25336] netlink: 'syz.2.24885': attribute type 1 has an invalid length. [ 1572.480693][T25345] device syzkaller0 entered promiscuous mode [ 1575.564268][T25368] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.24891'. [ 1575.584204][T25372] device pim6reg1 entered promiscuous mode [ 1575.789251][T25378] netlink: 'syz.4.24895': attribute type 1 has an invalid length. [ 1576.120252][T25398] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.24903'. [ 1576.225173][T25402] netlink: 'syz.2.24905': attribute type 10 has an invalid length. [ 1576.271065][T25402] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1576.806931][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1577.132443][T25428] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.24917'. [ 1577.408748][T25435] netlink: 'syz.3.24919': attribute type 10 has an invalid length. [ 1577.495637][T25435] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1577.901774][T25456] netlink: 'syz.1.24939': attribute type 10 has an invalid length. [ 1577.938106][T25456] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1578.058989][T25463] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.24930'. [ 1578.072684][T25461] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.24942'. [ 1579.751805][T25494] netlink: 'syz.0.24945': attribute type 10 has an invalid length. [ 1582.589385][T25494] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1583.721026][T25536] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.24964'. [ 1585.161588][T25565] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.24977'. [ 1585.387635][T25570] netlink: 'syz.3.24979': attribute type 10 has an invalid length. [ 1585.430426][T25570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24979'. [ 1585.453055][T25570] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1585.459691][T25570] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.500251][T25570] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1585.660447][T27105] wlan1: Trigger new scan to find an IBSS to join [ 1589.660721][ T9885] wlan1: Trigger new scan to find an IBSS to join [ 1590.685153][ T8703] wlan1: Creating new IBSS network, BSSID be:74:1c:7d:b2:ca [ 1595.954166][ T4285] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1596.060268][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1596.672065][T25699] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.25038'. [ 1597.016887][T25715] sctp: [Deprecated]: syz.3.25044 (pid 25715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1597.016887][T25715] Use struct sctp_sack_info instead [ 1599.310939][T25761] sctp: [Deprecated]: syz.0.25062 (pid 25761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1599.310939][T25761] Use struct sctp_sack_info instead [ 1599.335189][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1599.345865][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1599.661335][ T9885] wlan1: Trigger new scan to find an IBSS to join [ 1600.897233][T25772] device syzkaller0 entered promiscuous mode [ 1602.620307][T25109] wlan1: Trigger new scan to find an IBSS to join [ 1602.702249][T27105] wlan1: Trigger new scan to find an IBSS to join [ 1604.273887][T25824] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.25089'. [ 1605.661256][T25119] wlan1: Trigger new scan to find an IBSS to join [ 1606.133279][T25849] netlink: 'syz.2.25100': attribute type 33 has an invalid length. [ 1606.160310][T25849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.25100'. [ 1606.640531][T25114] wlan1: Creating new IBSS network, BSSID 32:7b:d1:85:1e:d5 [ 1607.011192][T25886] netlink: 'syz.1.25117': attribute type 33 has an invalid length. [ 1607.046380][T25886] netlink: 152 bytes leftover after parsing attributes in process `syz.1.25117'. [ 1607.182483][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.188871][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.662054][T25109] wlan1: Trigger new scan to find an IBSS to join [ 1607.965365][T25928] netlink: 'syz.3.25135': attribute type 33 has an invalid length. [ 1607.991363][T25928] netlink: 152 bytes leftover after parsing attributes in process `syz.3.25135'. [ 1608.138832][T25934] netlink: 'syz.4.25139': attribute type 2 has an invalid length. [ 1608.148336][T25934] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.25139'. [ 1608.595554][T25114] wlan1: Creating new IBSS network, BSSID f2:91:bb:ec:5c:39 [ 1609.187925][T25980] netlink: 'syz.4.25162': attribute type 29 has an invalid length. [ 1609.228034][T25980] netlink: 'syz.4.25162': attribute type 29 has an invalid length. [ 1609.279200][T25983] netlink: 'syz.4.25162': attribute type 29 has an invalid length. [ 1609.299575][T25980] netlink: 'syz.4.25162': attribute type 29 has an invalid length. [ 1609.308567][T25980] netlink: 'syz.4.25162': attribute type 29 has an invalid length. [ 1609.816163][T26010] netlink: 'syz.4.25176': attribute type 2 has an invalid length. [ 1609.842705][T26010] netlink: 185292 bytes leftover after parsing attributes in process `syz.4.25176'. [ 1610.929329][T26034] netlink: 152 bytes leftover after parsing attributes in process `syz.4.25187'. [ 1612.773510][T26065] validate_nla: 2 callbacks suppressed [ 1612.773531][T26065] netlink: 'syz.2.25196': attribute type 2 has an invalid length. [ 1612.862968][T26065] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.25196'. [ 1613.768834][T26081] netlink: 'syz.2.25204': attribute type 29 has an invalid length. [ 1613.820943][T26081] netlink: 'syz.2.25204': attribute type 29 has an invalid length. [ 1613.854028][T26083] netlink: 'syz.2.25204': attribute type 29 has an invalid length. [ 1613.905824][T26081] netlink: 'syz.2.25204': attribute type 29 has an invalid length. [ 1613.951853][T26081] netlink: 'syz.2.25204': attribute type 29 has an invalid length. [ 1620.735976][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1623.397293][T26239] bridge0: port 4(batadv0) entered blocking state [ 1623.443057][T26239] bridge0: port 4(batadv0) entered disabled state [ 1623.490930][T26239] device batadv0 entered promiscuous mode [ 1623.526895][T26239] bridge0: port 4(batadv0) entered blocking state [ 1623.533489][T26239] bridge0: port 4(batadv0) entered forwarding state [ 1623.540821][ T9885] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1623.550222][ T9885] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1624.854916][T26265] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.25284'. [ 1625.747564][ T4285] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1628.429218][T26352] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.25317'. [ 1630.361588][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1630.361623][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1630.735951][T26403] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.25336'. [ 1631.060613][T26408] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.25350'. [ 1635.308133][T26467] netlink: 15007 bytes leftover after parsing attributes in process `syz.4.25364'. [ 1636.368395][T26505] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.25381'. [ 1636.711033][ T8703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1637.511015][T26523] netlink: 'syz.1.25390': attribute type 1 has an invalid length. [ 1637.931645][T26537] netlink: 15007 bytes leftover after parsing attributes in process `syz.3.25394'. [ 1638.656967][T25109] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1639.297899][T26563] netlink: 'syz.0.25406': attribute type 11 has an invalid length. [ 1640.215559][T26585] netlink: 'syz.0.25416': attribute type 1 has an invalid length. [ 1640.295870][T26585] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.25416'. [ 1641.067244][T26600] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.25423'. [ 1641.452392][T26607] netlink: 'syz.0.25425': attribute type 1 has an invalid length. [ 1643.070242][T26642] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.25441'. [ 1643.443185][T26651] netlink: 'syz.2.25445': attribute type 1 has an invalid length. [ 1644.162368][T26677] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.25458'. [ 1644.744220][T26686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25463'. [ 1644.801509][T26686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.25463'. [ 1644.818385][T26688] netlink: 'syz.1.25474': attribute type 1 has an invalid length. [ 1644.882399][T26688] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.25474'. [ 1645.803991][T26701] netlink: 'syz.4.25470': attribute type 11 has an invalid length. [ 1648.557313][T26737] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.25486'. [ 1648.612059][T26742] netlink: 'syz.2.25486': attribute type 1 has an invalid length. [ 1648.637710][T26742] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.25486'. [ 1649.144330][T26752] device syzkaller0 entered promiscuous mode [ 1651.763270][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1652.269393][T26779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25504'. [ 1652.287464][T26779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25504'. [ 1656.034017][T26858] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.25540'. [ 1657.039081][T26885] netlink: 'syz.1.25550': attribute type 1 has an invalid length. [ 1657.068271][T26885] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.25550'. [ 1660.184305][T26904] netlink: 'syz.3.25560': attribute type 3 has an invalid length. [ 1660.210210][T26904] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.25560'. [ 1660.536459][T26915] net_ratelimit: 6522 callbacks suppressed [ 1660.536477][T26915] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1661.496596][T26946] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.25578'. [ 1661.547514][T26952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1661.593876][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1661.604356][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1661.928610][ T4285] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 1662.178763][T26970] device syzkaller0 entered promiscuous mode [ 1662.401965][T26981] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1664.496001][T27003] netlink: 'syz.1.25604': attribute type 10 has an invalid length. [ 1664.524001][T27003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25604'. [ 1664.558472][T27003] device team0 entered promiscuous mode [ 1664.578753][T27003] device team_slave_0 entered promiscuous mode [ 1664.602665][T27003] device team_slave_1 entered promiscuous mode [ 1664.622948][T27003] device macvlan0 entered promiscuous mode [ 1664.634638][T27003] bridge0: port 3(team0) entered blocking state [ 1664.651330][T27003] bridge0: port 3(team0) entered disabled state [ 1664.690887][T27003] bridge0: port 3(team0) entered blocking state [ 1664.697704][T27003] bridge0: port 3(team0) entered forwarding state [ 1665.577680][T27038] device syzkaller0 entered promiscuous mode [ 1666.895307][T27056] netlink: 'syz.0.25625': attribute type 3 has an invalid length. [ 1666.910188][T27056] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.25625'. [ 1667.738952][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1668.635080][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.641486][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.686039][ T8703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1671.085140][ T4285] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1671.479822][T27122] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.25653'. [ 1671.720210][ T4285] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1673.282997][T27181] netlink: 'syz.2.25681': attribute type 10 has an invalid length. [ 1673.310235][T27181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25681'. [ 1673.361855][T27181] device team0 entered promiscuous mode [ 1673.367696][T27181] device team_slave_0 entered promiscuous mode [ 1673.426831][T27181] device team_slave_1 entered promiscuous mode [ 1673.455524][T27181] bridge0: port 4(team0) entered blocking state [ 1673.478184][T27181] bridge0: port 4(team0) entered disabled state [ 1673.541892][T27181] bridge0: port 4(team0) entered blocking state [ 1673.549026][T27181] bridge0: port 4(team0) entered forwarding state [ 1673.744277][ T4285] Bluetooth: hci2: command 0x2016 tx timeout [ 1674.044985][ T4285] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1674.763489][T27230] netlink: 'syz.3.25702': attribute type 10 has an invalid length. [ 1674.790535][T27230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25702'. [ 1674.823262][T27230] device team0 entered promiscuous mode [ 1674.829216][T27230] device team_slave_0 entered promiscuous mode [ 1674.843655][T27230] device team_slave_1 entered promiscuous mode [ 1674.864998][T27230] bridge0: port 5(team0) entered blocking state [ 1674.887798][T27230] bridge0: port 5(team0) entered disabled state [ 1674.935894][T27230] bridge0: port 5(team0) entered blocking state [ 1674.942767][T27230] bridge0: port 5(team0) entered forwarding state [ 1676.060300][ T4285] Bluetooth: hci1: command 0x2016 tx timeout [ 1676.428316][T27274] netlink: 128 bytes leftover after parsing attributes in process `syz.3.25716'. [ 1676.459335][T27274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1676.502444][ T9885] bridge0: port 5(team0) entered disabled state [ 1676.721850][T27282] netlink: 128 bytes leftover after parsing attributes in process `syz.1.25729'. [ 1676.748930][T27282] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1676.853247][ T9885] bridge0: port 3(team0) entered disabled state [ 1679.945929][T27374] netlink: 1 bytes leftover after parsing attributes in process `syz.3.25761'. [ 1681.836028][T27410] netlink: 1 bytes leftover after parsing attributes in process `syz.4.25776'. [ 1682.454398][T27423] netlink: 'syz.4.25781': attribute type 29 has an invalid length. [ 1682.565631][T27423] netlink: 'syz.4.25781': attribute type 29 has an invalid length. [ 1682.644579][T27430] netlink: 'syz.4.25781': attribute type 29 has an invalid length. [ 1682.753237][T27434] netlink: 'syz.4.25781': attribute type 29 has an invalid length. [ 1683.917700][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1684.126098][T27423] netlink: 'syz.4.25781': attribute type 29 has an invalid length. [ 1684.158464][T27440] netlink: 'syz.4.25781': attribute type 29 has an invalid length. [ 1684.475475][T27452] netlink: 1 bytes leftover after parsing attributes in process `syz.2.25793'. [ 1685.174557][T27466] sctp: [Deprecated]: syz.0.25810 (pid 27466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1685.174557][T27466] Use struct sctp_sack_info instead [ 1685.213189][T27464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25798'. [ 1686.323818][T27495] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.25812'. [ 1688.662853][T27528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25827'. [ 1688.864448][T27532] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 1689.339212][ T4285] Bluetooth: hci3: ACL packet too small [ 1690.599094][T27587] netlink: 'syz.3.25853': attribute type 29 has an invalid length. [ 1690.617603][T27587] netlink: 'syz.3.25853': attribute type 29 has an invalid length. [ 1690.834888][T27591] netlink: 'syz.3.25853': attribute type 29 has an invalid length. [ 1690.848956][T27587] netlink: 'syz.3.25853': attribute type 29 has an invalid length. [ 1690.882846][T27593] netlink: 'syz.3.25853': attribute type 29 has an invalid length. [ 1690.911701][T27594] netlink: 'syz.3.25853': attribute type 29 has an invalid length. [ 1691.861821][T27621] device syzkaller0 entered promiscuous mode [ 1692.011581][T27627] netlink: 'syz.0.25868': attribute type 29 has an invalid length. [ 1692.622385][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1692.630322][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1693.589788][T27627] netlink: 'syz.0.25868': attribute type 29 has an invalid length. [ 1695.418779][T27671] netlink: 'syz.3.25884': attribute type 1 has an invalid length. [ 1695.439754][T27671] netlink: 'syz.3.25884': attribute type 1 has an invalid length. [ 1695.449508][T27671] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.25884'. [ 1695.913208][T27681] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.25887'. [ 1697.072441][T27712] device syzkaller0 entered promiscuous mode [ 1698.664613][ T8703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1699.588373][T27726] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.25908'. [ 1700.568381][T27770] device syzkaller0 entered promiscuous mode [ 1700.711132][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1702.263307][T27803] netlink: 'syz.3.25939': attribute type 3 has an invalid length. [ 1702.284894][T27803] netlink: 'syz.3.25939': attribute type 4 has an invalid length. [ 1702.300130][T27803] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.25939'. [ 1706.296467][T27885] netlink: 'syz.2.25971': attribute type 3 has an invalid length. [ 1706.324953][T27885] netlink: 'syz.2.25971': attribute type 4 has an invalid length. [ 1706.363283][T27885] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.25971'. [ 1714.944241][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1717.724855][T28072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26049'. [ 1717.762499][T28072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26049'. [ 1720.543054][T28107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26064'. [ 1720.580086][T28107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26064'. [ 1722.816572][T28146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26079'. [ 1722.842372][ T4285] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12 [ 1722.855496][T28146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26079'. [ 1723.324148][T28155] bridge0: port 3(ip6gretap0) entered blocking state [ 1723.347704][T28155] bridge0: port 3(ip6gretap0) entered disabled state [ 1723.384920][T28155] device ip6gretap0 entered promiscuous mode [ 1723.405816][T28155] bridge0: port 3(ip6gretap0) entered blocking state [ 1723.412673][T28155] bridge0: port 3(ip6gretap0) entered forwarding state [ 1723.444411][T28156] device ip6gretap0 left promiscuous mode [ 1723.456428][T28156] bridge0: port 3(ip6gretap0) entered disabled state [ 1723.545261][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1723.546129][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1724.408873][T28180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.26093'. [ 1724.432636][T28180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.26093'. [ 1724.860542][ T4285] Bluetooth: hci0: command 0x201b tx timeout [ 1726.521247][T28196] bridge0: port 6(ip6gretap0) entered blocking state [ 1726.528059][T28196] bridge0: port 6(ip6gretap0) entered disabled state [ 1726.546122][T28196] device ip6gretap0 entered promiscuous mode [ 1726.570440][T28196] bridge0: port 6(ip6gretap0) entered blocking state [ 1726.577318][T28196] bridge0: port 6(ip6gretap0) entered forwarding state [ 1726.626084][T28202] device ip6gretap0 left promiscuous mode [ 1726.647313][T28202] bridge0: port 6(ip6gretap0) entered disabled state [ 1728.759274][T28246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26119'. [ 1728.774321][T28246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26119'. [ 1729.591391][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1730.073659][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.080269][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.174425][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26136'. [ 1731.362944][T28287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26136'. [ 1731.840432][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1733.365420][T28322] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26151'. [ 1733.403970][T28322] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26151'. [ 1736.236356][ T4285] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1742.609058][T28449] netlink: 'syz.4.26207': attribute type 25 has an invalid length. [ 1746.794628][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1751.882089][T28577] netlink: 'syz.4.26267': attribute type 2 has an invalid length. [ 1751.904545][T28577] netlink: 'syz.4.26267': attribute type 1 has an invalid length. [ 1751.930464][T28577] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.26267'. [ 1754.573069][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1754.584373][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1756.049476][T28631] netlink: 'syz.1.26290': attribute type 2 has an invalid length. [ 1756.095864][T28631] netlink: 'syz.1.26290': attribute type 1 has an invalid length. [ 1756.139011][T28631] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.26290'. [ 1756.340594][T28635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26292'. [ 1758.193042][T28671] device syzkaller0 entered promiscuous mode [ 1758.496883][T28687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.26307'. [ 1759.299408][ T4285] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1760.618088][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1760.690862][T28726] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26325'. [ 1761.340255][ T4285] Bluetooth: hci0: command 0x2016 tx timeout [ 1762.871123][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1762.978593][T28698] device syzkaller0 entered promiscuous mode [ 1768.286065][T28866] device syzkaller0 entered promiscuous mode [ 1771.620034][T28907] netlink: 'syz.4.26398': attribute type 1 has an invalid length. [ 1771.633260][T28907] netlink: 'syz.4.26398': attribute type 4 has an invalid length. [ 1771.644564][T28907] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.26398'. [ 1772.024627][T28927] netlink: 'syz.1.26408': attribute type 14 has an invalid length. [ 1772.060117][T28927] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.26408'. [ 1774.452176][T28961] netlink: 'syz.4.26423': attribute type 14 has an invalid length. [ 1774.489845][T28961] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.26423'. [ 1774.837501][T28976] netlink: 'syz.1.26430': attribute type 10 has an invalid length. [ 1774.860744][T28976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.26430'. [ 1774.881455][T28976] batman_adv: batadv0: Adding interface: veth0_vlan [ 1774.900687][T28976] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1774.935126][T28976] batman_adv: batadv0: Interface activated: veth0_vlan [ 1776.282783][T29000] netlink: 'syz.0.26438': attribute type 14 has an invalid length. [ 1776.290828][T29000] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.26438'. [ 1777.192057][T29012] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.26442'. [ 1777.392333][T29022] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.26449'. [ 1777.719442][T29027] netlink: 'syz.0.26455': attribute type 3 has an invalid length. [ 1777.773745][T29027] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.26455'. [ 1778.329830][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1783.553025][T29111] device syzkaller0 entered promiscuous mode [ 1785.601375][T25109] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1785.605558][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1786.830617][T29137] netlink: 'syz.2.26498': attribute type 10 has an invalid length. [ 1786.839443][T29137] netlink: 140 bytes leftover after parsing attributes in process `syz.2.26498'. [ 1786.959076][T29137] bridge0: port 4(team0) entered disabled state [ 1787.014906][T29137] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1788.042526][T29169] sctp: [Deprecated]: syz.3.26514 (pid 29169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1788.042526][T29169] Use struct sctp_sack_info instead [ 1789.638708][T29205] sctp: [Deprecated]: syz.2.26530 (pid 29205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1789.638708][T29205] Use struct sctp_sack_info instead [ 1790.663262][T29179] netlink: 'syz.3.26518': attribute type 10 has an invalid length. [ 1790.680519][T29179] netlink: 140 bytes leftover after parsing attributes in process `syz.3.26518'. [ 1790.711339][T29179] bridge0: port 5(team0) entered disabled state [ 1790.729221][T29179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1791.502617][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.509014][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.643190][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1791.655381][T29241] netlink: 'syz.3.26546': attribute type 2 has an invalid length. [ 1791.691712][T29242] sctp: [Deprecated]: syz.1.26545 (pid 29242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1791.691712][T29242] Use struct sctp_sack_info instead [ 1791.708602][T29241] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.26546'. [ 1794.496396][T29244] netlink: 'syz.1.26547': attribute type 10 has an invalid length. [ 1794.504546][T29244] netlink: 140 bytes leftover after parsing attributes in process `syz.1.26547'. [ 1794.510044][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1794.518047][T29244] bridge0: port 3(team0) entered disabled state [ 1794.531647][T29244] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1794.753671][T29262] netlink: 'syz.3.26555': attribute type 3 has an invalid length. [ 1794.781084][T29262] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.26555'. [ 1795.154352][T29275] netlink: 'syz.4.26559': attribute type 2 has an invalid length. [ 1795.180251][T29275] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.26559'. [ 1795.731007][T29288] netlink: 'syz.0.26565': attribute type 10 has an invalid length. [ 1795.777364][T29288] netlink: 140 bytes leftover after parsing attributes in process `syz.0.26565'. [ 1795.888110][T29288] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1796.163375][T29295] netlink: 'syz.4.26570': attribute type 3 has an invalid length. [ 1796.200297][T29295] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.26570'. [ 1797.127563][T29311] netlink: 'syz.0.26575': attribute type 2 has an invalid length. [ 1797.194575][T29311] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.26575'. [ 1799.927630][T29327] netlink: 'syz.4.26581': attribute type 10 has an invalid length. [ 1799.970605][T29327] netlink: 140 bytes leftover after parsing attributes in process `syz.4.26581'. [ 1800.065430][T29327] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1801.916393][T29357] netlink: 'syz.1.26592': attribute type 3 has an invalid length. [ 1801.970128][T29357] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.26592'. [ 1802.411097][T29366] delete_channel: no stack [ 1803.747692][T29394] netlink: 'syz.2.26608': attribute type 3 has an invalid length. [ 1803.783433][T29394] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.26608'. [ 1804.068979][T29395] delete_channel: no stack [ 1804.146909][T29402] netlink: 'syz.2.26609': attribute type 3 has an invalid length. [ 1804.182875][T29402] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.26609'. [ 1807.648753][T29431] netlink: 'syz.3.26636': attribute type 17 has an invalid length. [ 1807.770552][T29431] netlink: 164 bytes leftover after parsing attributes in process `syz.3.26636'. [ 1808.354205][T29438] delete_channel: no stack [ 1809.358209][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1814.675214][T29485] netlink: 'syz.4.26647': attribute type 17 has an invalid length. [ 1814.686164][T29485] netlink: 164 bytes leftover after parsing attributes in process `syz.4.26647'. [ 1816.284387][T29531] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1816.560111][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1816.629483][ T8703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1818.421940][T29546] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1818.655722][T29552] netlink: 'syz.0.26669': attribute type 17 has an invalid length. [ 1818.740124][T29552] netlink: 164 bytes leftover after parsing attributes in process `syz.0.26669'. [ 1821.706307][T29580] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1822.681735][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1825.458329][ T8703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1826.485027][T29651] netlink: 'syz.3.26710': attribute type 10 has an invalid length. [ 1826.530457][T29651] netlink: 140 bytes leftover after parsing attributes in process `syz.3.26710'. [ 1826.661143][T29651] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1827.098800][T29664] netlink: 'syz.3.26724': attribute type 10 has an invalid length. [ 1827.134945][T29664] netlink: 140 bytes leftover after parsing attributes in process `syz.3.26724'. [ 1827.212203][T29664] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1827.826176][T29673] netlink: 'syz.3.26729': attribute type 10 has an invalid length. [ 1827.855403][T29673] netlink: 140 bytes leftover after parsing attributes in process `syz.3.26729'. [ 1827.903350][T29673] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1833.135857][T29800] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.26769'. [ 1833.359643][T29806] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.26773'. [ 1833.385127][T29806] netlink: zone id is out of range [ 1833.400763][T29806] netlink: zone id is out of range [ 1833.502209][T29806] netlink: del zone limit has 4 unknown bytes [ 1834.420951][T29841] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.26786'. [ 1835.992730][T29882] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.26801'. [ 1836.728111][T29895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26807'. [ 1837.718020][T29911] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1837.743271][T29911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1837.932840][T29921] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.26818'. [ 1840.496356][T29955] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1840.528158][T29955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1840.793810][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1841.909659][T29993] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1841.921983][T29993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1842.884044][T30025] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.26866'. [ 1842.922126][T30025] netlink: zone id is out of range [ 1842.928107][T30025] netlink: zone id is out of range [ 1843.016018][T30025] netlink: del zone limit has 4 unknown bytes [ 1843.058542][T30030] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1843.072307][T30030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1846.744986][T30065] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.26881'. [ 1846.810592][T30070] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1846.811467][T30065] netlink: zone id is out of range [ 1846.828173][T30070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1846.932288][T30065] netlink: zone id is out of range [ 1847.089308][T30065] netlink: del zone limit has 4 unknown bytes [ 1847.962408][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1847.974246][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1848.554691][T30101] device syzkaller0 entered promiscuous mode [ 1852.945868][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.962893][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.604240][T30146] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.26917'. [ 1854.154989][T30165] netlink: 'syz.1.26923': attribute type 4 has an invalid length. [ 1854.204785][T30165] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.26923'. [ 1854.265164][T30171] netlink: 15794 bytes leftover after parsing attributes in process `syz.0.26929'. [ 1855.040067][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1855.516373][T30191] bY4`Ҙ: renamed from lo [ 1856.356204][T30216] bY4`Ҙ: renamed from lo [ 1856.465641][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1859.939141][T30275] netlink: 'syz.2.26974': attribute type 4 has an invalid length. [ 1859.975548][T30275] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.26974'. [ 1861.855316][T30310] netlink: 'syz.3.26991': attribute type 4 has an invalid length. [ 1861.863875][T30310] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.26991'. [ 1867.707558][T30439] netlink: 'syz.4.27043': attribute type 4 has an invalid length. [ 1867.736424][T30439] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.27043'. [ 1868.738857][T30461] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.27053'. [ 1869.637619][T30483] netlink: 'syz.0.27058': attribute type 4 has an invalid length. [ 1869.651927][T30483] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.27058'. [ 1871.267981][T30519] netlink: 'syz.3.27077': attribute type 4 has an invalid length. [ 1871.285722][T30519] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.27077'. [ 1871.821578][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1875.831860][T30560] netlink: 'syz.2.27092': attribute type 4 has an invalid length. [ 1875.857036][T30560] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.27092'. [ 1875.966417][T30562] device syzkaller0 entered promiscuous mode [ 1880.586679][T30609] netlink: 'syz.3.27110': attribute type 4 has an invalid length. [ 1880.602280][T30609] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.27110'. [ 1880.934950][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1880.940248][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1882.543104][T30635] netlink: 'syz.3.27124': attribute type 4 has an invalid length. [ 1882.595993][T30635] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.27124'. [ 1882.731296][ T4285] Bluetooth: hci3: Dropping invalid advertising data [ 1882.738392][ T4285] Bluetooth: hci3: unknown advertising packet type: 0xff [ 1882.738416][ T4285] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1883.334487][T30659] device syzkaller0 entered promiscuous mode [ 1883.569652][T30669] netlink: 'syz.0.27141': attribute type 4 has an invalid length. [ 1883.589252][T30669] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.27141'. [ 1885.795003][T30697] netlink: 'syz.0.27155': attribute type 4 has an invalid length. [ 1885.822141][T30697] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.27155'. [ 1886.057879][T25109] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1887.392624][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1888.199270][T30725] netlink: 'syz.4.27168': attribute type 4 has an invalid length. [ 1888.221476][T30725] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.27168'. [ 1888.299448][T30729] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.27170'. [ 1888.301743][T30731] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.27171'. [ 1889.311210][T30752] device syzkaller0 entered promiscuous mode [ 1890.883084][T30760] netlink: 'syz.0.27183': attribute type 4 has an invalid length. [ 1890.906259][T30760] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.27183'. [ 1891.565865][T30767] netlink: 'syz.0.27196': attribute type 4 has an invalid length. [ 1891.575246][T30767] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.27196'. [ 1894.669643][T30808] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.27200'. [ 1895.100884][T30820] device syzkaller0 entered promiscuous mode [ 1898.872280][T30869] device syzkaller0 entered promiscuous mode [ 1899.952997][ T4285] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 1901.990839][ T8478] Bluetooth: hci1: command 0x0409 tx timeout [ 1902.438238][T30903] device syzkaller0 entered promiscuous mode [ 1903.328185][T30923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1904.695132][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1905.311672][T30948] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1907.332666][T30979] netlink: 'syz.3.27280': attribute type 3 has an invalid length. [ 1907.356968][T30979] netlink: 'syz.3.27280': attribute type 1 has an invalid length. [ 1907.367846][T30977] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1907.394976][T30979] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.27280'. [ 1908.758014][T31012] netlink: 'syz.1.27295': attribute type 3 has an invalid length. [ 1908.781979][T31012] netlink: 'syz.1.27295': attribute type 1 has an invalid length. [ 1908.810043][T31012] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.27295'. [ 1910.241348][T31046] netlink: 'syz.0.27311': attribute type 3 has an invalid length. [ 1910.290460][T31046] netlink: 'syz.0.27311': attribute type 1 has an invalid length. [ 1910.327030][T31046] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.27311'. [ 1914.411763][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.418156][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.986443][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1921.946550][T31166] device syzkaller0 entered promiscuous mode [ 1925.477163][T31216] device syzkaller0 entered promiscuous mode [ 1925.696585][ T8478] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 1925.985025][ T8478] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 1928.001660][ T8478] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 1928.060460][ T4285] Bluetooth: hci1: command 0x2021 tx timeout [ 1928.244401][ T4285] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 1928.335801][T31260] device syzkaller0 entered promiscuous mode [ 1928.355340][ T8478] Bluetooth: hci4: unexpected subevent 0x06 length: 150 > 10 [ 1928.760682][ T8478] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 1930.390180][ T4285] Bluetooth: hci4: command 0x2021 tx timeout [ 1930.780068][ T4285] Bluetooth: hci2: command 0x2021 tx timeout [ 1932.387023][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 1934.718373][T31337] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.27449'. [ 1934.818012][T31341] device syzkaller0 entered promiscuous mode [ 1935.615848][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1941.687138][T31416] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.27480'. [ 1941.698868][T31418] netlink: 'syz.3.27482': attribute type 3 has an invalid length. [ 1941.706930][T31418] netlink: 'syz.3.27482': attribute type 1 has an invalid length. [ 1941.736686][T31418] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.27482'. [ 1943.205155][T31445] device syzkaller0 entered promiscuous mode [ 1943.282838][T31452] netlink: 125520 bytes leftover after parsing attributes in process `syz.1.27495'. [ 1943.468684][T31459] netlink: 'syz.1.27498': attribute type 3 has an invalid length. [ 1943.504339][T31459] netlink: 'syz.1.27498': attribute type 1 has an invalid length. [ 1943.520528][T31459] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.27498'. [ 1946.499256][T31507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.27528'. [ 1948.007294][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1950.137118][T31546] device syzkaller0 entered promiscuous mode [ 1953.497526][T31591] netlink: 'syz.0.27552': attribute type 2 has an invalid length. [ 1953.560477][T31591] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.27552'. [ 1954.127253][T31608] netlink: 'syz.2.27559': attribute type 4 has an invalid length. [ 1954.956247][T31620] device syzkaller0 entered promiscuous mode [ 1955.156229][T31628] netlink: 'syz.1.27568': attribute type 2 has an invalid length. [ 1955.166173][T31628] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.27568'. [ 1957.517305][T31624] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.27567'. [ 1957.529607][T31646] netlink: 'syz.1.27575': attribute type 4 has an invalid length. [ 1957.762566][T31657] netlink: 'syz.2.27580': attribute type 2 has an invalid length. [ 1957.810169][T31657] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.27580'. [ 1958.233837][T31675] sock: sock_timestamping_bind_phc: sock not bind to device [ 1958.420225][T31684] netlink: 'syz.4.27590': attribute type 4 has an invalid length. [ 1958.595453][T31687] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.27591'. [ 1958.713550][T31689] device syzkaller0 entered promiscuous mode [ 1959.574573][T31713] sock: sock_timestamping_bind_phc: sock not bind to device [ 1960.089574][T31725] sctp: [Deprecated]: syz.4.27608 (pid 31725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1960.089574][T31725] Use struct sctp_sack_info instead [ 1961.626811][T31748] sock: sock_timestamping_bind_phc: sock not bind to device [ 1963.035503][T31735] device syzkaller0 entered promiscuous mode [ 1963.042748][T31758] netlink: 156 bytes leftover after parsing attributes in process `syz.1.27624'. [ 1963.957683][T31778] sock: sock_timestamping_bind_phc: sock not bind to device [ 1964.055382][T31780] netlink: 'syz.2.27642': attribute type 29 has an invalid length. [ 1965.846533][T31780] netlink: 'syz.2.27642': attribute type 29 has an invalid length. [ 1966.116424][T31813] sock: sock_timestamping_bind_phc: sock not bind to device [ 1966.325634][T31821] device bridge0 entered promiscuous mode [ 1966.550078][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1967.019066][T31842] device syzkaller0 entered promiscuous mode [ 1968.612062][T31882] netlink: 'syz.3.27673': attribute type 2 has an invalid length. [ 1968.621502][T31882] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.27673'. [ 1970.818189][T31922] device bridge0 entered promiscuous mode [ 1971.556174][T31941] netlink: 'syz.2.27701': attribute type 2 has an invalid length. [ 1971.579952][T31941] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.27701'. [ 1975.821912][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.828238][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.707285][T32087] device syzkaller0 entered promiscuous mode [ 1978.791419][T32094] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.27765'. [ 1979.751426][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1990.923670][T32166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.27796'. [ 1991.200526][ T4285] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1991.208038][ T4285] Bluetooth: hci3: Invalid handle: 0xffff > 0x0eff [ 1991.393101][T32192] netlink: 'syz.3.27807': attribute type 11 has an invalid length. [ 1991.416872][T32192] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.27807'. [ 1991.495002][T32192] netlink: 'syz.3.27807': attribute type 11 has an invalid length. [ 1991.540311][T32192] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.27807'. [ 1991.646143][T32190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1992.562770][T32228] device syzkaller0 entered promiscuous mode [ 1992.582613][T32227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.27825'. [ 1992.902450][T32189] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1992.910107][T32189] Bluetooth: hci4: Invalid handle: 0xffff > 0x0eff [ 1993.001765][T32248] netlink: 'syz.1.27833': attribute type 11 has an invalid length. [ 1993.010019][T32248] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.27833'. [ 1993.027484][T32248] netlink: 'syz.1.27833': attribute type 11 has an invalid length. [ 1993.035797][T32248] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.27833'. [ 1993.070264][T32247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1993.868943][T32189] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1993.876671][T32189] Bluetooth: hci1: Invalid handle: 0xffff > 0x0eff [ 1994.287127][T32281] netlink: 'syz.2.27848': attribute type 11 has an invalid length. [ 1994.313123][T32281] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.27848'. [ 1994.355119][T32282] netlink: 'syz.2.27848': attribute type 11 has an invalid length. [ 1994.403592][T32282] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.27848'. [ 1994.570292][T32280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1995.711849][T32262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.27841'. [ 1995.891345][ T8478] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1995.898834][ T8478] Bluetooth: hci2: Invalid handle: 0xffff > 0x0eff [ 1997.686531][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1999.105668][T32338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.27869'. [ 1999.117450][T32348] netlink: 'syz.1.27879': attribute type 2 has an invalid length. [ 1999.125780][T32348] netlink: 'syz.1.27879': attribute type 9 has an invalid length. [ 1999.139775][T32348] netlink: 'syz.1.27879': attribute type 10 has an invalid length. [ 1999.149971][T32348] netlink: 'syz.1.27879': attribute type 11 has an invalid length. [ 1999.158093][T32348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27879'. [ 2002.907570][T32375] netlink: 'syz.3.27889': attribute type 33 has an invalid length. [ 2002.918837][T32375] netlink: 152 bytes leftover after parsing attributes in process `syz.3.27889'. [ 2007.167467][T32448] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.27919'. [ 2007.196574][T32448] openvswitch: netlink: Flow actions attr not present in new flow. [ 2007.703300][T32470] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.27929'. [ 2010.560249][T32504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.27945'. [ 2010.577877][T32506] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.27946'. [ 2010.777110][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2010.827709][T32514] device syzkaller0 entered promiscuous mode [ 2010.870621][T32514] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 2011.471897][T32539] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.27962'. [ 2011.786228][T32535] netlink: 132 bytes leftover after parsing attributes in process `syz.0.27960'. [ 2012.187424][T32560] device syzkaller0 entered promiscuous mode [ 2013.935102][T32578] netlink: 132 bytes leftover after parsing attributes in process `syz.4.27979'. [ 2014.254391][T32589] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.27983'. [ 2014.298504][T32589] openvswitch: netlink: Flow actions attr not present in new flow. [ 2017.449393][T32613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.27993'. [ 2017.464838][T32641] netlink: 'syz.1.28004': attribute type 21 has an invalid length. [ 2017.477776][T32641] IPv6: NLM_F_CREATE should be specified when creating new route [ 2017.897528][T32658] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.28009'. [ 2018.873902][T32689] syz.4.28024[32689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2018.874053][T32689] syz.4.28024[32689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2021.292607][T32755] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.28049'. [ 2021.717649][ T301] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.28066'. [ 2021.787445][ T308] netlink: 'syz.2.28055': attribute type 21 has an invalid length. [ 2021.806604][ T308] IPv6: NLM_F_CREATE should be specified when creating new route [ 2023.232018][ T351] syz.1.28078[351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2023.232180][ T351] syz.1.28078[351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2023.639121][ T362] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.28082'. [ 2023.673462][ T362] bridge_slave_1: default FDB implementation only supports local addresses [ 2025.920430][ T417] netlink: 'syz.1.28105': attribute type 10 has an invalid length. [ 2025.929156][ T417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28105'. [ 2025.981787][ T417] bridge0: port 3(team0) entered blocking state [ 2026.001159][ T417] bridge0: port 3(team0) entered disabled state [ 2028.301301][ T477] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.28134'. [ 2028.343528][ T477] bridge_slave_1: default FDB implementation only supports local addresses [ 2028.699554][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2029.130823][ T493] device syzkaller0 entered promiscuous mode [ 2032.679991][ T512] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.28148'. [ 2032.699584][ T512] bridge_slave_1: default FDB implementation only supports local addresses [ 2032.733840][ T534] netlink: 'syz.4.28157': attribute type 10 has an invalid length. [ 2032.753656][ T534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.28157'. [ 2032.805333][ T534] device team0 entered promiscuous mode [ 2032.833637][ T534] device team_slave_0 entered promiscuous mode [ 2032.877880][ T534] device team_slave_1 entered promiscuous mode [ 2032.916666][ T534] bridge0: port 3(team0) entered blocking state [ 2032.972763][ T534] bridge0: port 3(team0) entered disabled state [ 2033.013515][ T534] bridge0: port 3(team0) entered blocking state [ 2033.019956][ T534] bridge0: port 3(team0) entered forwarding state [ 2033.126571][ T547] device syzkaller0 entered promiscuous mode [ 2034.085333][ T8478] Bluetooth: hci4: ISO packet too small [ 2034.263355][ T569] device syzkaller0 entered promiscuous mode [ 2037.274594][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.281004][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.877204][ T614] netlink: 'syz.0.28188': attribute type 10 has an invalid length. [ 2037.885442][ T614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28188'. [ 2037.894571][ T614] device team0 entered promiscuous mode [ 2037.900515][ T614] device team_slave_0 entered promiscuous mode [ 2037.906812][ T614] device team_slave_1 entered promiscuous mode [ 2037.914606][ T614] bridge0: port 4(team0) entered blocking state [ 2037.921147][ T614] bridge0: port 4(team0) entered disabled state [ 2037.929279][ T614] bridge0: port 4(team0) entered blocking state [ 2037.935703][ T614] bridge0: port 4(team0) entered forwarding state [ 2038.855675][ T650] device syzkaller0 entered promiscuous mode [ 2041.181689][ T669] netlink: 'syz.2.28209': attribute type 10 has an invalid length. [ 2041.191852][ T669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.28209'. [ 2041.203258][ T669] bridge0: port 4(team0) entered blocking state [ 2041.209571][ T669] bridge0: port 4(team0) entered disabled state [ 2041.218750][ T669] bridge0: port 4(team0) entered blocking state [ 2041.225132][ T669] bridge0: port 4(team0) entered forwarding state [ 2041.812735][T25114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2042.707730][ T733] device syzkaller0 entered promiscuous mode [ 2046.227366][ T773] netlink: 'syz.2.28255': attribute type 21 has an invalid length. [ 2046.239970][ T782] netlink: 'syz.0.28260': attribute type 13 has an invalid length. [ 2046.327041][ T794] netlink: 'syz.2.28264': attribute type 1 has an invalid length. [ 2046.671144][ T8478] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 2047.798926][ T824] device syzkaller0 entered promiscuous mode [ 2051.193787][ T830] netlink: 'syz.1.28280': attribute type 1 has an invalid length. [ 2051.204870][ T856] netlink: 'syz.0.28292': attribute type 21 has an invalid length. [ 2051.594976][ T930] netlink: 'syz.1.28315': attribute type 13 has an invalid length. [ 2051.872994][ T942] netlink: 'syz.3.28324': attribute type 1 has an invalid length. [ 2052.301647][ T951] device syzkaller0 entered promiscuous mode [ 2053.086142][ T979] __sock_release: fasync list not empty! [ 2055.867124][ T1022] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.28346'. [ 2056.765530][ T1050] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.28369'. [ 2056.880557][ T1055] __sock_release: fasync list not empty! [ 2057.124542][ T1067] netlink: 'syz.4.28367': attribute type 4 has an invalid length. [ 2057.812051][ T1092] __sock_release: fasync list not empty! [ 2058.143720][ T1104] netlink: 'syz.3.28386': attribute type 7 has an invalid length. [ 2058.176264][ T1104] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.28386'. [ 2060.247781][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2061.053085][ T1137] netlink: 'syz.0.28400': attribute type 3 has an invalid length. [ 2061.077797][ T1137] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.28400'. [ 2061.419156][ T1140] netlink: 'syz.3.28412': attribute type 3 has an invalid length. [ 2061.445776][ T1140] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.28412'. [ 2061.504309][ T1145] netlink: 'syz.4.28402': attribute type 7 has an invalid length. [ 2061.531550][ T1145] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.28402'. [ 2063.493942][ T1190] netlink: 'syz.4.28420': attribute type 3 has an invalid length. [ 2063.540422][ T1190] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.28420'. [ 2063.721413][ T1198] netlink: 'syz.0.28423': attribute type 7 has an invalid length. [ 2063.768516][ T1198] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.28423'. [ 2066.362457][ T1239] netlink: 'syz.2.28440': attribute type 29 has an invalid length. [ 2066.387274][ T1239] netlink: 'syz.2.28440': attribute type 29 has an invalid length. [ 2066.469258][ T1243] netlink: 'syz.1.28443': attribute type 7 has an invalid length. [ 2066.489891][ T1243] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.28443'. [ 2070.174197][ T1316] sctp: [Deprecated]: syz.1.28472 (pid 1316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2070.174197][ T1316] Use struct sctp_sack_info instead [ 2070.247200][ T1318] netlink: 2739 bytes leftover after parsing attributes in process `syz.4.28474'. [ 2071.963532][ T1321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.28475'. [ 2073.244393][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2073.557879][ T1361] ref_ctr_offset mismatch. inode: 0x15a4 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2073.787600][ T1370] netlink: 2739 bytes leftover after parsing attributes in process `syz.1.28495'. [ 2075.983232][ T1397] ref_ctr_offset mismatch. inode: 0x1546 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2076.088961][ T1399] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.28507'. [ 2076.134094][ T1399] netlink: zone id is out of range [ 2076.146120][ T1399] netlink: zone id is out of range [ 2076.162120][ T1399] netlink: zone id is out of range [ 2076.199088][ T1399] netlink: del zone limit has 4 unknown bytes [ 2076.298524][ T1358] netlink: 48 bytes leftover after parsing attributes in process `syz.4.28488'. [ 2076.318546][ T1375] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.28506'. [ 2076.356593][ T1375] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2076.481692][ T1405] ref_ctr_offset mismatch. inode: 0x1703 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2077.968900][ T1430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.28520'. [ 2078.006380][ T1432] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.28522'. [ 2078.033569][ T1432] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2078.176524][ T1438] ref_ctr_offset mismatch. inode: 0x1496 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2078.259358][ T1442] netlink: 'syz.3.28526': attribute type 2 has an invalid length. [ 2078.267450][ T1442] netlink: 'syz.3.28526': attribute type 9 has an invalid length. [ 2078.276621][ T1442] netlink: 'syz.3.28526': attribute type 10 has an invalid length. [ 2078.294075][ T1442] netlink: 'syz.3.28526': attribute type 11 has an invalid length. [ 2078.303145][ T1442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28526'. [ 2078.608083][ T1447] device syzkaller0 entered promiscuous mode [ 2081.274542][ T1469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.28534'. [ 2081.285105][ T1473] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.28537'. [ 2081.301727][ T1473] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2081.455586][ T1478] ref_ctr_offset mismatch. inode: 0x1527 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2081.668948][ T1488] ref_ctr_offset mismatch. inode: 0x14ab offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2081.674798][ T1485] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.28553'. [ 2081.721276][ T1485] netlink: zone id is out of range [ 2081.727062][ T1485] netlink: zone id is out of range [ 2081.747383][ T1485] netlink: zone id is out of range [ 2081.799681][ T1485] netlink: del zone limit has 4 unknown bytes [ 2081.901618][ T1494] ref_ctr_offset mismatch. inode: 0x14b1 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2082.412955][ T1514] device syzkaller0 entered promiscuous mode [ 2082.706011][ T1524] netlink: 'syz.1.28556': attribute type 2 has an invalid length. [ 2082.740817][ T1524] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.28556'. [ 2082.987331][ T1532] ref_ctr_offset mismatch. inode: 0x1546 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2083.069606][ T1534] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.28564'. [ 2083.097379][ T1534] netlink: zone id is out of range [ 2083.106069][ T1534] netlink: zone id is out of range [ 2083.118062][ T1534] netlink: zone id is out of range [ 2083.157953][ T1534] netlink: del zone limit has 4 unknown bytes [ 2085.506709][ T1566] ref_ctr_offset mismatch. inode: 0x156f offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2085.692826][ T1572] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.28577'. [ 2085.729017][ T1572] netlink: zone id is out of range [ 2085.741592][ T1572] netlink: zone id is out of range [ 2085.937875][ T1582] ref_ctr_offset mismatch. inode: 0x1575 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2089.282913][ T1611] device syzkaller0 entered promiscuous mode [ 2090.133457][ T1623] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.28597'. [ 2090.175880][ T1623] net_ratelimit: 2 callbacks suppressed [ 2090.175914][ T1623] netlink: zone id is out of range [ 2090.194975][ T1623] netlink: zone id is out of range [ 2090.213574][ T1623] netlink: zone id is out of range [ 2090.235172][ T1623] netlink: del zone limit has 4 unknown bytes [ 2091.263642][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2093.046509][ T1616] netlink: 'syz.2.28595': attribute type 2 has an invalid length. [ 2093.058478][ T1616] netlink: 'syz.2.28595': attribute type 9 has an invalid length. [ 2093.066555][ T1616] netlink: 'syz.2.28595': attribute type 10 has an invalid length. [ 2093.077676][ T1616] netlink: 'syz.2.28595': attribute type 11 has an invalid length. [ 2093.085637][ T1616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28595'. [ 2098.702170][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.708561][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.127807][ T1790] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.28680'. [ 2100.142067][ T1790] openvswitch: netlink: Flow actions attr not present in new flow. [ 2101.905782][ T1826] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.28684'. [ 2101.921111][ T1826] openvswitch: netlink: Flow actions attr not present in new flow. [ 2102.136916][ T1834] netlink: 2639 bytes leftover after parsing attributes in process `syz.2.28687'. [ 2104.268711][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2113.018778][ T1928] netlink: 'syz.2.28730': attribute type 1 has an invalid length. [ 2113.029952][ T1928] netlink: 'syz.2.28730': attribute type 4 has an invalid length. [ 2113.037785][ T1928] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.28730'. [ 2113.071156][ T1931] netlink: 'syz.0.28731': attribute type 22 has an invalid length. [ 2113.091974][ T1931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28731'. [ 2113.903667][ T1960] bridge0: port 5(hsr_slave_1) entered blocking state [ 2113.929264][ T1960] bridge0: port 5(hsr_slave_1) entered disabled state [ 2121.580435][ T1977] netlink: 'syz.1.28748': attribute type 1 has an invalid length. [ 2121.588291][ T1977] netlink: 'syz.1.28748': attribute type 4 has an invalid length. [ 2121.596243][ T1977] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.28748'. [ 2121.714745][ T1994] netlink: 'syz.0.28767': attribute type 21 has an invalid length. [ 2121.734374][ T1994] netlink: 'syz.0.28767': attribute type 6 has an invalid length. [ 2121.756021][ T1994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28767'. [ 2122.009248][ T2009] bridge0: port 5(hsr_slave_1) entered blocking state [ 2122.035487][ T2009] bridge0: port 5(hsr_slave_1) entered disabled state [ 2122.598280][T27105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2123.054773][ T2030] netlink: 60583 bytes leftover after parsing attributes in process `syz.2.28771'. [ 2123.079922][ T2030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28771'. [ 2123.144947][ T2035] netlink: 'syz.3.28774': attribute type 21 has an invalid length. [ 2123.177044][ T2035] netlink: 'syz.3.28774': attribute type 6 has an invalid length. [ 2123.205061][ T2035] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28774'. [ 2127.213915][ T2037] netlink: 60583 bytes leftover after parsing attributes in process `syz.1.28786'. [ 2127.223398][ T2037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28786'. [ 2127.232899][ T2053] bridge0: port 5(hsr_slave_1) entered blocking state [ 2127.246145][ T2053] bridge0: port 5(hsr_slave_1) entered disabled state [ 2129.459339][ T2112] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.28805'. [ 2129.468903][ T2112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28805'. [ 2129.492097][ T2114] netlink: 'syz.2.28807': attribute type 2 has an invalid length. [ 2129.509092][ T2114] netlink: 'syz.2.28807': attribute type 1 has an invalid length. [ 2129.529552][ T2114] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.28807'. [ 2133.173065][ T2145] netlink: 60583 bytes leftover after parsing attributes in process `syz.4.28819'. [ 2133.182573][ T2145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28819'. [ 2133.901188][ T2183] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.28835'. [ 2134.306505][ T2196] netlink: 60583 bytes leftover after parsing attributes in process `syz.0.28838'. [ 2134.327046][ T2196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28838'. [ 2135.297151][T25112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2142.579650][ T2269] netlink: 'syz.1.28867': attribute type 2 has an invalid length. [ 2142.636389][ T2269] netlink: 'syz.1.28867': attribute type 1 has an invalid length. [ 2142.670090][ T2269] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.28867'. [ 2144.892930][ T2308] __sock_release: fasync list not empty! [ 2145.162669][ T2317] netlink: 'syz.3.28888': attribute type 2 has an invalid length. [ 2145.184805][ T2317] netlink: 'syz.3.28888': attribute type 1 has an invalid length. [ 2145.198289][ T2317] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.28888'. [ 2152.788265][ T2365] netlink: 'syz.4.28908': attribute type 1 has an invalid length. [ 2152.796352][ T2365] netlink: 'syz.4.28908': attribute type 4 has an invalid length. [ 2152.804546][ T2365] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.28908'. [ 2153.294418][ T2387] netlink: 'syz.0.28914': attribute type 3 has an invalid length. [ 2153.314451][ T2387] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.28914'. [ 2153.631384][ T8703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2154.710945][ T2413] netlink: 'syz.2.28923': attribute type 1 has an invalid length. [ 2154.720893][ T2413] netlink: 'syz.2.28923': attribute type 4 has an invalid length. [ 2154.734149][ T2413] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.28923'. [ 2157.946368][ T2433] netlink: 156 bytes leftover after parsing attributes in process `syz.0.28931'. [ 2157.955878][ T2447] netlink: 'syz.1.28936': attribute type 1 has an invalid length. [ 2157.972954][ T2447] netlink: 'syz.1.28936': attribute type 4 has an invalid length. [ 2158.000592][ T2447] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.28936'. [ 2160.155061][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.161627][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.555096][ T2511] netlink: 'syz.1.28959': attribute type 3 has an invalid length. [ 2162.566178][ T2511] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.28959'. [ 2166.322882][ T8703] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2168.924893][ T2607] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.28991'. [ 2170.198589][ T2624] netlink: 'syz.2.28995': attribute type 1 has an invalid length. [ 2170.209679][ T2624] netlink: 'syz.2.28995': attribute type 4 has an invalid length. [ 2170.218885][ T2624] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.28995'. [ 2171.063407][ T2647] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 2171.150068][ T2654] netlink: 'syz.4.29006': attribute type 1 has an invalid length. [ 2171.158256][ T2654] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.29006'. [ 2172.216939][ T2674] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.29015'. [ 2172.227650][ T2676] netlink: 'syz.4.29016': attribute type 1 has an invalid length. [ 2172.250194][ T2676] netlink: 'syz.4.29016': attribute type 4 has an invalid length. [ 2172.258057][ T2676] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.29016'. [ 2173.648735][ T2715] netlink: 'syz.0.29029': attribute type 1 has an invalid length. [ 2173.687307][ T2715] netlink: 'syz.0.29029': attribute type 4 has an invalid length. [ 2173.735021][ T2715] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.29029'. [ 2174.082966][ T2717] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.29032'. [ 2178.556097][ T2747] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 2178.649352][ T2763] device syzkaller0 entered promiscuous mode [ 2178.758499][ T2784] netlink: 'syz.4.29054': attribute type 4 has an invalid length. [ 2179.967136][ T2818] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2182.160015][ T2837] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 2182.538231][ T2855] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.29078'. [ 2182.604627][ T2853] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2183.801051][ T2867] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 2184.372760][ T2893] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2184.472999][ T2898] netlink: 'syz.3.29099': attribute type 4 has an invalid length. [ 2184.652452][T21560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2186.100447][ T8478] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 2186.369808][ T2936] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2188.139831][ T8478] Bluetooth: hci3: command 0x0409 tx timeout [ 2198.681515][T25119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2199.919061][ T3037] netlink: 'syz.1.29164': attribute type 10 has an invalid length. [ 2199.942151][ T3037] bond0: (slave wlan1): Opening slave failed [ 2202.775745][ T3079] netlink: 'syz.4.29183': attribute type 10 has an invalid length. [ 2202.842346][ T3079] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2205.322865][ T3133] netlink: 'syz.2.29199': attribute type 10 has an invalid length. [ 2205.359616][ T3133] bond0: (slave wlan1): Opening slave failed [ 2205.660268][T25119] wlan1: Trigger new scan to find an IBSS to join [ 2207.466013][ T3183] netlink: 'syz.0.29216': attribute type 10 has an invalid length. [ 2207.560468][ T3183] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2208.339273][ T3207] netlink: 'syz.2.29228': attribute type 3 has an invalid length. [ 2208.378388][ T3207] netlink: 132 bytes leftover after parsing attributes in process `syz.2.29228'. [ 2208.840563][ T3223] netlink: 'syz.3.29234': attribute type 10 has an invalid length. [ 2208.916187][ T3223] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2209.158964][ T3230] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.29236'. [ 2209.222408][ T3231] netlink: 'syz.2.29236': attribute type 1 has an invalid length. [ 2209.290197][ T3231] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.29236'. [ 2209.660170][ T8703] wlan1: Trigger new scan to find an IBSS to join [ 2209.666998][T25119] wlan1: Trigger new scan to find an IBSS to join [ 2209.713098][ T3242] netlink: 'syz.0.29251': attribute type 10 has an invalid length. [ 2209.760644][ T3242] ------------[ cut here ]------------ [ 2209.766416][ T3242] WARNING: CPU: 0 PID: 3242 at kernel/kcov.c:869 kcov_remote_start+0x54d/0x7e0 [ 2209.775384][ T3242] Modules linked in: [ 2209.779263][ T3242] CPU: 0 PID: 3242 Comm: syz.0.29251 Not tainted syzkaller #0 [ 2209.786724][ T3242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2209.796797][ T3242] RIP: 0010:kcov_remote_start+0x54d/0x7e0 [ 2209.802545][ T3242] Code: ff ff 4c 89 ff be 03 00 00 00 e8 9e cb 8e 02 e9 f0 fa ff ff e8 e4 73 ab 08 f7 c3 00 02 00 00 0f 84 df fa ff ff e9 5a fc ff ff <0f> 0b e8 6c 88 ab 08 89 c0 48 c7 c7 70 b1 02 00 48 03 3c c5 80 39 [ 2209.822177][ T3242] RSP: 0018:ffffc90003d9e510 EFLAGS: 00010002 [ 2209.828267][ T3242] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 2209.836258][ T3242] RDX: dffffc0000000000 RSI: ffffffff8a8c22a0 RDI: ffffffff8adf13a0 [ 2209.844254][ T3242] RBP: ffffc90003d9e770 R08: dffffc0000000000 R09: 1ffffffff215f254 [ 2209.852246][ T3242] R10: dffffc0000000000 R11: fffffbfff215f255 R12: ffff8880b8e2b170 [ 2209.860236][ T3242] R13: ffffffff81827d3b R14: ffff888045463b80 R15: 0000000000000000 [ 2209.868220][ T3242] FS: 00007f50541f16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2209.877164][ T3242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2209.883757][ T3242] CR2: 00007f04e29e8158 CR3: 0000000074329000 CR4: 00000000003506f0 [ 2209.891741][ T3242] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2209.899721][ T3242] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2209.907705][ T3242] Call Trace: [ 2209.910996][ T3242] [ 2209.913942][ T3242] ieee80211_rx_list+0x504/0x2e60 [ 2209.919003][ T3242] ? perf_trace_lock+0xf8/0x390 [ 2209.923892][ T3242] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 2209.930078][ T3242] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2209.936100][ T3242] ? read_lock_is_recursive+0x10/0x10 [ 2209.941512][ T3242] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 2209.947442][ T3242] ? ieee80211_rx_napi+0xd0/0x3d0 [ 2209.952494][ T3242] ieee80211_rx_napi+0x1ae/0x3d0 [ 2209.957469][ T3242] ? ieee80211_rx_list+0x2e60/0x2e60 [ 2209.962798][ T3242] ? skb_dequeue+0x120/0x150 [ 2209.967425][ T3242] ieee80211_handle_queued_frames+0x105/0x1b0 [ 2209.973534][ T3242] ? ieee80211_stop_device+0x12/0xa0 [ 2209.978851][ T3242] ieee80211_stop_device+0x27/0xa0 [ 2209.983989][ T3242] ieee80211_do_stop+0x1724/0x1e20 [ 2209.989128][ T3242] ? __mutex_lock+0x1ab/0xaf0 [ 2209.993826][ T3242] ? ieee80211_sdata_stop+0x80/0x80 [ 2209.999042][ T3242] ? mutex_lock_nested+0x10/0x10 [ 2210.003995][ T3242] ? __local_bh_enable_ip+0x136/0x1c0 [ 2210.009393][ T3242] ? do_raw_spin_unlock+0x11d/0x230 [ 2210.014618][ T3242] ieee80211_stop+0x432/0x4a0 [ 2210.019312][ T3242] ? dev_deactivate_many+0x244/0xcb0 [ 2210.024613][ T3242] ? ieee80211_open+0x200/0x200 [ 2210.029475][ T3242] __dev_close_many+0x1d1/0x2b0 [ 2210.034343][ T3242] ? dev_close_many+0x410/0x410 [ 2210.039204][ T3242] ? ieee80211_set_multicast_list+0x14f/0x1f0 [ 2210.045296][ T3242] __dev_change_flags+0x2d8/0x6a0 [ 2210.050351][ T3242] ? dev_get_flags+0x1c0/0x1c0 [ 2210.055137][ T3242] ? vprintk_emit+0x59f/0x6a0 [ 2210.059838][ T3242] dev_change_flags+0x84/0x1a0 [ 2210.064639][ T3242] do_setlink+0xba1/0x3e60 [ 2210.069100][ T3242] ? _printk+0xda/0x130 [ 2210.073279][ T3242] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 2210.079461][ T3242] ? load_image+0x400/0x400 [ 2210.083998][ T3242] ? __nla_validate_parse+0x2072/0x2ac0 [ 2210.089564][ T3242] ? netlink_rcv_skb+0x1fb/0x450 [ 2210.094524][ T3242] ? netlink_unicast+0x74d/0x8d0 [ 2210.099480][ T3242] ? netlink_sendmsg+0x8ad/0xbd0 [ 2210.104458][ T3242] ? __nla_validate+0x50/0x50 [ 2210.109170][ T3242] ? validate_linkmsg+0x3db/0x4c0 [ 2210.114218][ T3242] rtnl_newlink+0x17d9/0x20a0 [ 2210.118958][ T3242] ? rtnl_setlink+0x510/0x510 [ 2210.123654][ T3242] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2210.129840][ T3242] ? rcu_is_watching+0x11/0xa0 [ 2210.134623][ T3242] ? trace_contention_end+0x5f/0x170 [ 2210.139930][ T3242] ? __mutex_lock+0x1ab/0xaf0 [ 2210.144644][ T3242] ? rcu_read_unlock+0x8c/0xa0 [ 2210.149628][ T3242] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2210.154773][ T3242] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2210.159904][ T3242] ? rtnl_setlink+0x510/0x510 [ 2210.164602][ T3242] rtnetlink_rcv_msg+0x87c/0xfc0 [ 2210.169572][ T3242] ? rtnetlink_bind+0x80/0x80 [ 2210.174262][ T3242] ? __local_bh_enable_ip+0x136/0x1c0 [ 2210.179642][ T3242] ? lockdep_hardirqs_on+0x94/0x140 [ 2210.184858][ T3242] ? __local_bh_enable_ip+0x136/0x1c0 [ 2210.190243][ T3242] ? _local_bh_enable+0xa0/0xa0 [ 2210.195109][ T3242] ? __dev_queue_xmit+0x26b/0x37c0 [ 2210.200230][ T3242] ? __dev_queue_xmit+0x26b/0x37c0 [ 2210.205358][ T3242] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 2210.210582][ T3242] ? __dev_queue_xmit+0x26b/0x37c0 [ 2210.215723][ T3242] ? perf_trace_lock+0xf8/0x390 [ 2210.220590][ T3242] ? __copy_skb_header+0x3ba/0x4f0 [ 2210.225727][ T3242] ? trace_event_raw_event_lock+0x250/0x250 [ 2210.231639][ T3242] ? __skb_clone+0x480/0x790 [ 2210.236266][ T3242] netlink_rcv_skb+0x1fb/0x450 [ 2210.241058][ T3242] ? rtnetlink_bind+0x80/0x80 [ 2210.245760][ T3242] ? netlink_ack+0x1170/0x1170 [ 2210.250556][ T3242] ? netlink_deliver_tap+0x2e/0x1b0 [ 2210.255782][ T3242] netlink_unicast+0x74d/0x8d0 [ 2210.260577][ T3242] netlink_sendmsg+0x8ad/0xbd0 [ 2210.265369][ T3242] ? netlink_getsockopt+0x550/0x550 [ 2210.270592][ T3242] ? aa_sock_msg_perm+0x94/0x150 [ 2210.275539][ T3242] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2210.280831][ T3242] ? security_socket_sendmsg+0x7c/0xa0 [ 2210.286312][ T3242] ? netlink_getsockopt+0x550/0x550 [ 2210.291525][ T3242] ____sys_sendmsg+0x5be/0x970 [ 2210.296321][ T3242] ? __sys_sendmsg_sock+0x30/0x30 [ 2210.301366][ T3242] ? __import_iovec+0x315/0x500 [ 2210.306235][ T3242] ? import_iovec+0x6f/0xa0 [ 2210.310756][ T3242] ___sys_sendmsg+0x2a2/0x360 [ 2210.315472][ T3242] ? __sys_sendmsg+0x290/0x290 [ 2210.320284][ T3242] ? trace_call_bpf+0xbf/0x6b0 [ 2210.325095][ T3242] __se_sys_sendmsg+0x1bb/0x2a0 [ 2210.329976][ T3242] ? __x64_sys_sendmsg+0x80/0x80 [ 2210.334953][ T3242] ? lockdep_hardirqs_on+0x94/0x140 [ 2210.340169][ T3242] do_syscall_64+0x4c/0xa0 [ 2210.344603][ T3242] ? clear_bhb_loop+0x60/0xb0 [ 2210.349301][ T3242] ? clear_bhb_loop+0x60/0xb0 [ 2210.354001][ T3242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2210.359914][ T3242] RIP: 0033:0x7f505339cdd9 [ 2210.364341][ T3242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2210.383960][ T3242] RSP: 002b:00007f50541f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2210.392384][ T3242] RAX: ffffffffffffffda RBX: 00007f5053615fa0 RCX: 00007f505339cdd9 [ 2210.400365][ T3242] RDX: 0000000004000800 RSI: 00002000000007c0 RDI: 0000000000000003 [ 2210.408350][ T3242] RBP: 00007f5053432d69 R08: 0000000000000000 R09: 0000000000000000 [ 2210.416335][ T3242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2210.424319][ T3242] R13: 00007f5053616038 R14: 00007f5053615fa0 R15: 00007ffec40b34a8 [ 2210.432325][ T3242] [ 2210.435357][ T3242] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2210.442653][ T3242] CPU: 0 PID: 3242 Comm: syz.0.29251 Not tainted syzkaller #0 [ 2210.450117][ T3242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2210.460177][ T3242] Call Trace: [ 2210.463461][ T3242] [ 2210.466395][ T3242] dump_stack_lvl+0x188/0x24e [ 2210.471088][ T3242] ? memcpy+0x3c/0x60 [ 2210.475074][ T3242] ? show_regs_print_info+0x12/0x12 [ 2210.480284][ T3242] ? load_image+0x400/0x400 [ 2210.484808][ T3242] panic+0x2e5/0x730 [ 2210.488717][ T3242] ? bpf_jit_dump+0xd0/0xd0 [ 2210.493251][ T3242] __warn+0x2f8/0x4f0 [ 2210.497236][ T3242] ? kcov_remote_start+0x54d/0x7e0 [ 2210.502355][ T3242] ? kcov_remote_start+0x54d/0x7e0 [ 2210.507481][ T3242] report_bug+0x2ba/0x4f0 [ 2210.511825][ T3242] ? kcov_remote_start+0x54d/0x7e0 [ 2210.516954][ T3242] handle_bug+0x3a/0x70 [ 2210.521129][ T3242] exc_invalid_op+0x16/0x40 [ 2210.525650][ T3242] asm_exc_invalid_op+0x16/0x20 [ 2210.530512][ T3242] RIP: 0010:kcov_remote_start+0x54d/0x7e0 [ 2210.536244][ T3242] Code: ff ff 4c 89 ff be 03 00 00 00 e8 9e cb 8e 02 e9 f0 fa ff ff e8 e4 73 ab 08 f7 c3 00 02 00 00 0f 84 df fa ff ff e9 5a fc ff ff <0f> 0b e8 6c 88 ab 08 89 c0 48 c7 c7 70 b1 02 00 48 03 3c c5 80 39 [ 2210.555870][ T3242] RSP: 0018:ffffc90003d9e510 EFLAGS: 00010002 [ 2210.561949][ T3242] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 2210.569924][ T3242] RDX: dffffc0000000000 RSI: ffffffff8a8c22a0 RDI: ffffffff8adf13a0 [ 2210.577902][ T3242] RBP: ffffc90003d9e770 R08: dffffc0000000000 R09: 1ffffffff215f254 [ 2210.585882][ T3242] R10: dffffc0000000000 R11: fffffbfff215f255 R12: ffff8880b8e2b170 [ 2210.593859][ T3242] R13: ffffffff81827d3b R14: ffff888045463b80 R15: 0000000000000000 [ 2210.601852][ T3242] ? kcov_remote_start+0x8b/0x7e0 [ 2210.606911][ T3242] ieee80211_rx_list+0x504/0x2e60 [ 2210.611959][ T3242] ? perf_trace_lock+0xf8/0x390 [ 2210.616852][ T3242] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 2210.623039][ T3242] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2210.629045][ T3242] ? read_lock_is_recursive+0x10/0x10 [ 2210.634439][ T3242] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 2210.640351][ T3242] ? ieee80211_rx_napi+0xd0/0x3d0 [ 2210.645403][ T3242] ieee80211_rx_napi+0x1ae/0x3d0 [ 2210.650369][ T3242] ? ieee80211_rx_list+0x2e60/0x2e60 [ 2210.655675][ T3242] ? skb_dequeue+0x120/0x150 [ 2210.660278][ T3242] ieee80211_handle_queued_frames+0x105/0x1b0 [ 2210.666370][ T3242] ? ieee80211_stop_device+0x12/0xa0 [ 2210.671669][ T3242] ieee80211_stop_device+0x27/0xa0 [ 2210.676791][ T3242] ieee80211_do_stop+0x1724/0x1e20 [ 2210.681938][ T3242] ? __mutex_lock+0x1ab/0xaf0 [ 2210.686638][ T3242] ? ieee80211_sdata_stop+0x80/0x80 [ 2210.691857][ T3242] ? mutex_lock_nested+0x10/0x10 [ 2210.696806][ T3242] ? __local_bh_enable_ip+0x136/0x1c0 [ 2210.702191][ T3242] ? do_raw_spin_unlock+0x11d/0x230 [ 2210.707406][ T3242] ieee80211_stop+0x432/0x4a0 [ 2210.712104][ T3242] ? dev_deactivate_many+0x244/0xcb0 [ 2210.717412][ T3242] ? ieee80211_open+0x200/0x200 [ 2210.722277][ T3242] __dev_close_many+0x1d1/0x2b0 [ 2210.727145][ T3242] ? dev_close_many+0x410/0x410 [ 2210.732003][ T3242] ? ieee80211_set_multicast_list+0x14f/0x1f0 [ 2210.738094][ T3242] __dev_change_flags+0x2d8/0x6a0 [ 2210.743147][ T3242] ? dev_get_flags+0x1c0/0x1c0 [ 2210.747931][ T3242] ? vprintk_emit+0x59f/0x6a0 [ 2210.752635][ T3242] dev_change_flags+0x84/0x1a0 [ 2210.757426][ T3242] do_setlink+0xba1/0x3e60 [ 2210.761867][ T3242] ? _printk+0xda/0x130 [ 2210.766033][ T3242] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 2210.772204][ T3242] ? load_image+0x400/0x400 [ 2210.776731][ T3242] ? __nla_validate_parse+0x2072/0x2ac0 [ 2210.782283][ T3242] ? netlink_rcv_skb+0x1fb/0x450 [ 2210.787234][ T3242] ? netlink_unicast+0x74d/0x8d0 [ 2210.792183][ T3242] ? netlink_sendmsg+0x8ad/0xbd0 [ 2210.797157][ T3242] ? __nla_validate+0x50/0x50 [ 2210.801866][ T3242] ? validate_linkmsg+0x3db/0x4c0 [ 2210.806911][ T3242] rtnl_newlink+0x17d9/0x20a0 [ 2210.811644][ T3242] ? rtnl_setlink+0x510/0x510 [ 2210.816340][ T3242] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2210.822513][ T3242] ? rcu_is_watching+0x11/0xa0 [ 2210.827295][ T3242] ? trace_contention_end+0x5f/0x170 [ 2210.832593][ T3242] ? __mutex_lock+0x1ab/0xaf0 [ 2210.837312][ T3242] ? rcu_read_unlock+0x8c/0xa0 [ 2210.842111][ T3242] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2210.847243][ T3242] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2210.852372][ T3242] ? rtnl_setlink+0x510/0x510 [ 2210.857065][ T3242] rtnetlink_rcv_msg+0x87c/0xfc0 [ 2210.862031][ T3242] ? rtnetlink_bind+0x80/0x80 [ 2210.866724][ T3242] ? __local_bh_enable_ip+0x136/0x1c0 [ 2210.872103][ T3242] ? lockdep_hardirqs_on+0x94/0x140 [ 2210.877309][ T3242] ? __local_bh_enable_ip+0x136/0x1c0 [ 2210.882690][ T3242] ? _local_bh_enable+0xa0/0xa0 [ 2210.887551][ T3242] ? __dev_queue_xmit+0x26b/0x37c0 [ 2210.892672][ T3242] ? __dev_queue_xmit+0x26b/0x37c0 [ 2210.897793][ T3242] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 2210.903008][ T3242] ? __dev_queue_xmit+0x26b/0x37c0 [ 2210.908142][ T3242] ? perf_trace_lock+0xf8/0x390 [ 2210.913009][ T3242] ? __copy_skb_header+0x3ba/0x4f0 [ 2210.918143][ T3242] ? trace_event_raw_event_lock+0x250/0x250 [ 2210.924056][ T3242] ? __skb_clone+0x480/0x790 [ 2210.928673][ T3242] netlink_rcv_skb+0x1fb/0x450 [ 2210.933459][ T3242] ? rtnetlink_bind+0x80/0x80 [ 2210.938159][ T3242] ? netlink_ack+0x1170/0x1170 [ 2210.942953][ T3242] ? netlink_deliver_tap+0x2e/0x1b0 [ 2210.948175][ T3242] netlink_unicast+0x74d/0x8d0 [ 2210.952980][ T3242] netlink_sendmsg+0x8ad/0xbd0 [ 2210.957774][ T3242] ? netlink_getsockopt+0x550/0x550 [ 2210.963009][ T3242] ? aa_sock_msg_perm+0x94/0x150 [ 2210.967964][ T3242] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2210.973260][ T3242] ? security_socket_sendmsg+0x7c/0xa0 [ 2210.978741][ T3242] ? netlink_getsockopt+0x550/0x550 [ 2210.983959][ T3242] ____sys_sendmsg+0x5be/0x970 [ 2210.988758][ T3242] ? __sys_sendmsg_sock+0x30/0x30 [ 2210.993797][ T3242] ? __import_iovec+0x315/0x500 [ 2210.998671][ T3242] ? import_iovec+0x6f/0xa0 [ 2211.003189][ T3242] ___sys_sendmsg+0x2a2/0x360 [ 2211.007893][ T3242] ? __sys_sendmsg+0x290/0x290 [ 2211.012696][ T3242] ? trace_call_bpf+0xbf/0x6b0 [ 2211.017507][ T3242] __se_sys_sendmsg+0x1bb/0x2a0 [ 2211.022381][ T3242] ? __x64_sys_sendmsg+0x80/0x80 [ 2211.027356][ T3242] ? lockdep_hardirqs_on+0x94/0x140 [ 2211.032577][ T3242] do_syscall_64+0x4c/0xa0 [ 2211.037013][ T3242] ? clear_bhb_loop+0x60/0xb0 [ 2211.041709][ T3242] ? clear_bhb_loop+0x60/0xb0 [ 2211.046402][ T3242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2211.052312][ T3242] RIP: 0033:0x7f505339cdd9 [ 2211.056737][ T3242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2211.076349][ T3242] RSP: 002b:00007f50541f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2211.084774][ T3242] RAX: ffffffffffffffda RBX: 00007f5053615fa0 RCX: 00007f505339cdd9 [ 2211.092764][ T3242] RDX: 0000000004000800 RSI: 00002000000007c0 RDI: 0000000000000003 [ 2211.100746][ T3242] RBP: 00007f5053432d69 R08: 0000000000000000 R09: 0000000000000000 [ 2211.108725][ T3242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2211.116707][ T3242] R13: 00007f5053616038 R14: 00007f5053615fa0 R15: 00007ffec40b34a8 [ 2211.124711][ T3242] [ 2211.128072][ T3242] Kernel Offset: disabled [ 2211.132449][ T3242] Rebooting in 86400 seconds..