last executing test programs: 5.990483475s ago: executing program 3 (id=16877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.87023191s ago: executing program 3 (id=16878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.945179987s ago: executing program 1 (id=16880): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 3.907183159s ago: executing program 0 (id=16881): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0xbb23, 0x7}, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x440000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 3.817987488s ago: executing program 1 (id=16883): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000280)='\x02;\xe5\b\x00\x14\x96)]\xa3\xcdB!\xf7\xe5\fc\xe9\x00\x9c\x00\x00\x00\x00\x00\x00') close(0x3) 3.776543783s ago: executing program 1 (id=16884): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x100004}, 0x6000, 0xc8, 0x0, 0x7, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff5"], 0xfdef) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xffc0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2102, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0x1}, 0x18020, 0x1, 0x0, 0x0, 0x2, 0xfffff273}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.25989055s ago: executing program 1 (id=16887): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) 3.09636619s ago: executing program 3 (id=16889): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8082, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x1, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 3.09557127s ago: executing program 1 (id=16890): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.845701999s ago: executing program 3 (id=16892): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000280)='\x02;\xe5\b\x00\x14\x96)]\xa3\xcdB!\xf7\xe5\fc\xe9\x00\x9c\x00\x00\x00\x00\x00\x00') close(0x3) 2.738769506s ago: executing program 2 (id=16893): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4da1a}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.737835516s ago: executing program 3 (id=16894): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x5, 0x400, 0x9, 0x42103, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) mkdir(0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, 0x0, &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x5) write$cgroup_subtree(r6, &(0x7f00000002c0)={[{0x2d, 'cpu'}, {0x2d, 'pids'}]}, 0xb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000240)=0x800020025) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 2.590442828s ago: executing program 0 (id=16895): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x10}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYRES32], 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000014"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 2.389291383s ago: executing program 2 (id=16896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.335306447s ago: executing program 2 (id=16897): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x40000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10320, 0x0, 0x8, 0x0, 0x75eef597, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000003c0)=ANY=[]) 2.066241714s ago: executing program 0 (id=16898): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 2.03819641s ago: executing program 0 (id=16899): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff000000000004000085100000020000008500000023"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) 2.005071506s ago: executing program 2 (id=16900): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8082, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x1, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 1.933284767s ago: executing program 0 (id=16901): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080)) 152.651589ms ago: executing program 2 (id=16902): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000280)='\x02;\xe5\b\x00\x14\x96)]\xa3\xcdB!\xf7\xe5\fc\xe9\x00\x9c\x00\x00\x00\x00\x00\x00') close(0x3) 94.208472ms ago: executing program 0 (id=16903): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 93.936702ms ago: executing program 1 (id=16904): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4da1a}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 49.783446ms ago: executing program 3 (id=16905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 2 (id=16906): openat$tun(0xffffffffffffff9c, 0x0, 0x40200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000679cd62be4d6657acb7225e143a300000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000020000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x33}, 0xc8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) kernel console output (not intermixed with test programs): check. [ 2422.674265][T11893] netlink: 'syz.3.12086': attribute type 10 has an invalid length. [ 2426.076621][T11930] netlink: 'syz.0.12100': attribute type 46 has an invalid length. [ 2426.101810][T11930] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12100'. [ 2426.112140][T11930] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2430.386892][T11962] netlink: 'syz.2.12112': attribute type 46 has an invalid length. [ 2430.477544][T11962] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.12112'. [ 2430.501189][T11962] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2430.680287][T11972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2430.874648][T11976] netlink: 'syz.1.12125': attribute type 46 has an invalid length. [ 2430.919572][T11976] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.12125'. [ 2430.946854][T11976] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2434.735290][T11996] netlink: 'syz.2.12124': attribute type 10 has an invalid length. [ 2434.743705][T11996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12124'. [ 2434.849713][T12001] syzkaller0: entered promiscuous mode [ 2434.855227][T12001] syzkaller0: entered allmulticast mode [ 2434.870126][T12003] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.12129'. [ 2434.922230][T12005] netlink: 'syz.2.12130': attribute type 46 has an invalid length. [ 2434.989880][T12005] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.12130'. [ 2435.010703][T12005] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2437.594106][T12014] netlink: 'syz.1.12132': attribute type 19 has an invalid length. [ 2437.602603][T12014] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.12132'. [ 2440.968897][T12048] netlink: 'syz.3.12145': attribute type 46 has an invalid length. [ 2441.015172][T12048] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.12145'. [ 2441.077108][T12048] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2441.197622][T12054] syzkaller0: entered promiscuous mode [ 2441.199439][T12058] netlink: 'syz.2.12150': attribute type 9 has an invalid length. [ 2441.204326][T12054] syzkaller0: entered allmulticast mode [ 2441.245617][T12058] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12150'. [ 2441.657426][T12061] netlink: 'syz.2.12150': attribute type 9 has an invalid length. [ 2441.677296][T12061] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12150'. [ 2443.820766][T12082] netlink: 'syz.0.12158': attribute type 2 has an invalid length. [ 2443.829272][T12082] netlink: 'syz.0.12158': attribute type 8 has an invalid length. [ 2443.846985][T12082] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12158'. [ 2443.891231][T12086] netlink: 'syz.3.12159': attribute type 46 has an invalid length. [ 2443.931123][T12086] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.12159'. [ 2443.957079][T12086] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2444.095288][T12090] syzkaller0: entered promiscuous mode [ 2444.146221][T12092] netlink: 'syz.2.12162': attribute type 12 has an invalid length. [ 2444.174749][T12092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12162'. [ 2444.377074][T12101] netlink: 'syz.2.12165': attribute type 4 has an invalid length. [ 2444.398559][T12101] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12165'. [ 2446.760584][T12124] syzkaller0: entered promiscuous mode [ 2446.769407][T12124] syzkaller0: entered allmulticast mode [ 2446.817907][T12126] netlink: 'syz.1.12172': attribute type 46 has an invalid length. [ 2446.858837][T12126] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.12172'. [ 2446.886999][T12126] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2448.989794][T12142] syzkaller0: entered promiscuous mode [ 2448.995472][T12142] syzkaller0: entered allmulticast mode [ 2449.010921][T12149] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.12178'. [ 2452.114227][T12164] syzkaller0: entered promiscuous mode [ 2452.127826][T12168] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12185'. [ 2452.138715][T12172] netlink: 'syz.2.12185': attribute type 4 has an invalid length. [ 2452.220324][T12172] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12185'. [ 2452.249108][T12169] netlink: 'syz.0.12184': attribute type 39 has an invalid length. [ 2452.830915][T12177] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12186'. [ 2452.843340][T12177] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2455.029842][T12186] netlink: 'syz.0.12186': attribute type 46 has an invalid length. [ 2455.056813][T12192] netlink: 'syz.2.12189': attribute type 10 has an invalid length. [ 2455.271688][ T5776] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 2455.493536][T12212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12197'. [ 2455.510422][T12212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12197'. [ 2455.542008][T12208] netlink: 'syz.2.12196': attribute type 39 has an invalid length. [ 2455.569921][T12211] delete_channel: no stack [ 2455.663425][T12215] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12199'. [ 2455.700964][T12215] netlink: 'syz.3.12199': attribute type 4 has an invalid length. [ 2455.712517][T12215] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12199'. [ 2455.738280][T12219] netlink: 'syz.2.12200': attribute type 46 has an invalid length. [ 2455.762028][T12219] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.12200'. [ 2455.792008][T12219] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2455.980017][T12226] syzkaller0: entered promiscuous mode [ 2456.210595][T12232] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.12211'. [ 2456.257565][T12232] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2456.508483][T12231] netlink: 'syz.2.12211': attribute type 46 has an invalid length. [ 2456.687429][T12209] delete_channel: no stack [ 2458.304771][T12230] netlink: 'syz.3.12203': attribute type 10 has an invalid length. [ 2458.656048][T12246] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.12206'. [ 2458.734251][T12250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12208'. [ 2458.767350][T12250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12208'. [ 2458.850079][T12254] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12209'. [ 2458.867655][T12248] delete_channel: no stack [ 2458.952463][T12254] netlink: 'syz.0.12209': attribute type 4 has an invalid length. [ 2458.972428][T12254] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12209'. [ 2459.032079][T12260] netlink: 'syz.3.12214': attribute type 46 has an invalid length. [ 2459.097379][T12260] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.12214'. [ 2459.109223][T12260] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2459.297260][T12265] syzkaller0: entered promiscuous mode [ 2459.302972][T12265] syzkaller0: entered allmulticast mode [ 2461.737519][T12270] netlink: 'syz.1.12217': attribute type 2 has an invalid length. [ 2461.872779][T12282] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.12220'. [ 2462.139148][T12289] netlink: 'syz.2.12223': attribute type 39 has an invalid length. [ 2462.308227][T12299] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12226'. [ 2462.383569][T12299] netlink: 'syz.1.12226': attribute type 4 has an invalid length. [ 2462.452074][T12299] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12226'. [ 2462.471728][T12306] netlink: 'syz.0.12228': attribute type 46 has an invalid length. [ 2462.511043][T12303] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12228'. [ 2462.538458][T12303] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2462.944204][T12314] netlink: 'syz.2.12229': attribute type 2 has an invalid length. [ 2463.097753][T12313] syzkaller0: entered promiscuous mode [ 2463.111373][T12313] syzkaller0: entered allmulticast mode [ 2466.369758][T12325] netlink: 'syz.3.12234': attribute type 39 has an invalid length. [ 2466.387164][T12327] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.12233'. [ 2466.822584][T12345] netlink: 'syz.0.12242': attribute type 2 has an invalid length. [ 2467.591001][T12350] netlink: 'syz.3.12244': attribute type 46 has an invalid length. [ 2467.641208][T12350] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.12244'. [ 2467.676893][T12350] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2467.793022][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.799856][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.867953][T12353] netlink: 'syz.1.12245': attribute type 39 has an invalid length. [ 2468.063631][T12357] netlink: 'syz.3.12248': attribute type 21 has an invalid length. [ 2468.091563][T12357] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12248'. [ 2468.117134][T12357] netlink: 'syz.3.12248': attribute type 5 has an invalid length. [ 2468.156539][T12357] netlink: 'syz.3.12248': attribute type 6 has an invalid length. [ 2468.186608][T12357] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12248'. [ 2468.196660][T12363] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.12247'. [ 2468.457866][ T5776] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5 [ 2468.524045][T12361] netlink: 'syz.1.12246': attribute type 39 has an invalid length. [ 2468.797095][T12375] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12252'. [ 2469.048115][T12382] netlink: 'syz.3.12256': attribute type 39 has an invalid length. [ 2469.635708][T12393] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.12259'. [ 2470.029029][T12398] netlink: 'syz.2.12260': attribute type 3 has an invalid length. [ 2470.039217][T12398] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.12260'. [ 2471.408154][T12410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12263'. [ 2472.883794][T12413] validate_nla: 1 callbacks suppressed [ 2472.883806][T12413] netlink: 'syz.3.12264': attribute type 10 has an invalid length. [ 2474.830212][T12437] delete_channel: no stack [ 2476.661394][T12459] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12276'. [ 2477.024739][T12466] netlink: 'syz.2.12279': attribute type 46 has an invalid length. [ 2477.102609][T12466] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.12279'. [ 2477.136951][T12466] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2477.724868][T12486] bridge0: port 2(gretap0) entered blocking state [ 2477.740470][T12486] bridge0: port 2(gretap0) entered disabled state [ 2477.764724][T12486] gretap0: entered allmulticast mode [ 2477.828475][T12486] gretap0: entered promiscuous mode [ 2478.748071][T12473] delete_channel: no stack [ 2478.907110][T12508] netlink: 'syz.3.12293': attribute type 46 has an invalid length. [ 2478.952104][T12508] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.12293'. [ 2478.971001][T12508] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2479.081159][T12511] IPv6: Can't replace route, no match found [ 2479.093374][T12511] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2480.008347][T12528] netlink: 'syz.0.12300': attribute type 28 has an invalid length. [ 2480.021621][T12528] netlink: 'syz.0.12300': attribute type 29 has an invalid length. [ 2480.046938][T12528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12300'. [ 2481.063472][T12549] netlink: 'syz.1.12306': attribute type 46 has an invalid length. [ 2481.098811][T12549] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.12306'. [ 2481.108397][T12549] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 2481.360548][T12552] netlink: 'syz.1.12307': attribute type 10 has an invalid length. [ 2481.677770][T12537] delete_channel: no stack [ 2482.592483][T12574] netlink: 'syz.3.12317': attribute type 46 has an invalid length. [ 2482.761088][T12578] netlink: 'syz.3.12318': attribute type 3 has an invalid length. [ 2482.762232][T12580] netlink: 'syz.2.12326': attribute type 46 has an invalid length. [ 2482.787140][T12578] netlink: 'syz.3.12318': attribute type 1 has an invalid length. [ 2482.808076][T12578] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.12318'. [ 2483.533003][T12595] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2483.572860][T12595] netlink: 'syz.1.12324': attribute type 3 has an invalid length. [ 2483.584434][T12595] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.12324'. [ 2484.347410][T12588] delete_channel: no stack [ 2484.660999][T12618] validate_nla: 1 callbacks suppressed [ 2484.661017][T12618] netlink: 'syz.0.12333': attribute type 3 has an invalid length. [ 2484.675969][T12618] netlink: 'syz.0.12333': attribute type 1 has an invalid length. [ 2484.690324][T12618] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.12333'. [ 2485.391770][T12635] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2485.413344][T12635] netlink: 'syz.3.12337': attribute type 3 has an invalid length. [ 2485.422265][T12635] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.12337'. [ 2485.469498][T12635] netlink: 'syz.3.12337': attribute type 12 has an invalid length. [ 2485.496666][T12635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12337'. [ 2485.622780][T12640] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12340'. [ 2486.577295][T12644] delete_channel: no stack [ 2488.193806][T12659] netlink: 'syz.0.12350': attribute type 3 has an invalid length. [ 2488.221033][T12659] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12350'. [ 2488.250412][T12659] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2488.715265][T12671] netlink: 'syz.3.12346': attribute type 46 has an invalid length. [ 2488.788453][T12673] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12347'. [ 2488.909425][T12675] netlink: 'syz.1.12348': attribute type 3 has an invalid length. [ 2488.922366][T12675] netlink: 'syz.1.12348': attribute type 1 has an invalid length. [ 2488.930681][T12677] netlink: 'syz.0.12357': attribute type 46 has an invalid length. [ 2488.943275][T12675] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.12348'. [ 2489.738596][T12694] netlink: 'syz.0.12354': attribute type 9 has an invalid length. [ 2489.746943][T12694] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12354'. [ 2490.220418][T12699] netlink: 'syz.0.12354': attribute type 9 has an invalid length. [ 2490.228491][T12699] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12354'. [ 2490.482689][T12703] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12358'. [ 2490.883978][T12715] netlink: 'syz.0.12361': attribute type 46 has an invalid length. [ 2491.048722][T12719] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2491.066022][T12721] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12364'. [ 2491.072467][T12719] netlink: 'syz.0.12363': attribute type 3 has an invalid length. [ 2491.085526][T12719] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.12363'. [ 2491.103798][T12717] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2491.137751][T12719] netlink: 'syz.0.12363': attribute type 12 has an invalid length. [ 2491.155591][T12719] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12363'. [ 2491.202846][T12717] netlink: 'syz.2.12362': attribute type 3 has an invalid length. [ 2491.217114][T12717] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.12362'. [ 2491.766364][T12731] netlink: 'syz.2.12366': attribute type 3 has an invalid length. [ 2491.775331][T12731] netlink: 'syz.2.12366': attribute type 1 has an invalid length. [ 2493.100857][T12734] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2493.410254][T12751] netlink: 'syz.2.12369': attribute type 9 has an invalid length. [ 2493.410593][T12749] netlink: 'syz.1.12371': attribute type 46 has an invalid length. [ 2493.430460][T12751] __nla_validate_parse: 2 callbacks suppressed [ 2493.430476][T12751] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12369'. [ 2493.482337][T12746] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12369'. [ 2494.251896][T12759] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2494.302115][T12762] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.12374'. [ 2494.637749][T12780] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12379'. [ 2494.780530][T12757] delete_channel: no stack [ 2494.897344][T12790] validate_nla: 3 callbacks suppressed [ 2494.897367][T12790] netlink: 'syz.2.12383': attribute type 46 has an invalid length. [ 2495.132834][T12794] netlink: 'syz.3.12385': attribute type 9 has an invalid length. [ 2495.149374][T12794] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12385'. [ 2495.189101][T12799] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12388'. [ 2495.689168][T12801] netlink: 'syz.3.12385': attribute type 9 has an invalid length. [ 2495.706834][T12801] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12385'. [ 2495.777560][T12805] netlink: 'syz.1.12389': attribute type 10 has an invalid length. [ 2495.975432][T12817] netlink: 'syz.1.12395': attribute type 46 has an invalid length. [ 2496.056035][T12819] netlink: 'syz.3.12396': attribute type 28 has an invalid length. [ 2496.069398][T12819] netlink: 'syz.3.12396': attribute type 29 has an invalid length. [ 2496.078073][T12819] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12396'. [ 2496.677460][T12807] delete_channel: no stack [ 2496.883594][T12828] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12398'. [ 2496.937714][T12830] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2496.964668][T12830] netlink: 'syz.1.12399': attribute type 3 has an invalid length. [ 2496.979917][T12830] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.12399'. [ 2497.005459][T12830] netlink: 'syz.1.12399': attribute type 12 has an invalid length. [ 2498.227850][T12841] delete_channel: no stack [ 2499.151371][T12878] netlink: 'syz.0.12428': attribute type 46 has an invalid length. [ 2499.443605][T12890] __nla_validate_parse: 3 callbacks suppressed [ 2499.443631][T12890] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12427'. [ 2499.673079][T12895] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12429'. [ 2499.930662][T12909] validate_nla: 2 callbacks suppressed [ 2499.930688][T12909] netlink: 'syz.3.12434': attribute type 46 has an invalid length. [ 2501.020597][T12915] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12438'. [ 2501.764843][T12943] netlink: 'syz.3.12444': attribute type 3 has an invalid length. [ 2501.776965][T12943] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12444'. [ 2501.796613][T12943] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2503.032716][T12999] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12466'. [ 2503.212662][T13008] netlink: 'syz.2.12467': attribute type 3 has an invalid length. [ 2503.221976][T13008] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12467'. [ 2503.248009][T13008] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2503.718761][T13031] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12478'. [ 2505.199302][T13099] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12507'. [ 2505.607477][T13115] netlink: 'syz.3.12512': attribute type 46 has an invalid length. [ 2506.288566][T13149] netlink: 'syz.0.12525': attribute type 46 has an invalid length. [ 2506.897805][T13173] netlink: 'syz.1.12535': attribute type 9 has an invalid length. [ 2506.908393][T13173] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12535'. [ 2508.016835][T13186] netlink: 'syz.3.12537': attribute type 46 has an invalid length. [ 2508.039080][T13175] netlink: 'syz.1.12535': attribute type 9 has an invalid length. [ 2508.048594][T13175] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12535'. [ 2508.576510][T13207] netlink: 'syz.1.12552': attribute type 46 has an invalid length. [ 2509.085423][T13194] delete_channel: no stack [ 2509.665983][T13253] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12567'. [ 2509.740966][T13258] netlink: 'syz.2.12568': attribute type 46 has an invalid length. [ 2510.251603][T13279] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12578'. [ 2510.312202][T13281] netlink: 'syz.2.12579': attribute type 46 has an invalid length. [ 2510.407575][T13243] delete_channel: no stack [ 2510.491221][T13285] netlink: 'syz.0.12590': attribute type 46 has an invalid length. [ 2510.631326][T13255] delete_channel: no stack [ 2511.112334][T13310] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12602'. [ 2511.157049][T13314] netlink: 'syz.2.12594': attribute type 46 has an invalid length. [ 2512.247822][T13317] delete_channel: no stack [ 2512.384051][T13343] netlink: 'syz.0.12605': attribute type 46 has an invalid length. [ 2512.721738][T13345] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12607'. [ 2513.958739][T13379] netlink: 'syz.2.12622': attribute type 46 has an invalid length. [ 2514.063382][T13381] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12623'. [ 2515.645079][T13409] netlink: 'syz.0.12632': attribute type 46 has an invalid length. [ 2515.669023][T13409] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12632'. [ 2515.679042][T13409] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2515.712982][T13411] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12633'. [ 2516.877097][T13437] netlink: 'syz.3.12643': attribute type 46 has an invalid length. [ 2516.898269][T13437] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.12643'. [ 2516.908101][T13437] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2518.119698][T13465] netlink: 'syz.2.12655': attribute type 46 has an invalid length. [ 2518.141437][T13465] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.12655'. [ 2518.151758][T13465] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2529.231134][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.240511][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2533.851325][T13732] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.12754'. [ 2533.877849][T13732] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2534.285388][T13731] netlink: 'syz.1.12754': attribute type 46 has an invalid length. [ 2537.577310][T13765] netlink: 'syz.0.12764': attribute type 46 has an invalid length. [ 2537.616470][T13765] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12764'. [ 2537.664367][T13765] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2541.437513][T13809] delete_channel: no stack [ 2542.681833][T13815] delete_channel: no stack [ 2542.784842][T13827] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12785'. [ 2543.171951][T13834] netlink: 'syz.2.12788': attribute type 46 has an invalid length. [ 2543.245980][T13834] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.12788'. [ 2543.270696][T13834] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2544.241762][T13847] netlink: 'syz.2.12799': attribute type 46 has an invalid length. [ 2544.301369][T13847] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.12799'. [ 2544.321535][T13847] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2547.549302][T13853] netlink: 'syz.0.12792': attribute type 3 has an invalid length. [ 2547.565638][T13853] netlink: 'syz.0.12792': attribute type 1 has an invalid length. [ 2547.586857][T13853] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.12792'. [ 2548.658424][T13870] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12797'. [ 2548.968084][T13861] delete_channel: no stack [ 2551.497533][T13896] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12809'. [ 2551.985135][T13910] netlink: 'syz.1.12813': attribute type 3 has an invalid length. [ 2551.998944][T13910] netlink: 'syz.1.12813': attribute type 1 has an invalid length. [ 2552.011065][T13910] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.12813'. [ 2552.197007][T13913] netlink: 'syz.1.12814': attribute type 46 has an invalid length. [ 2552.260594][T13912] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.12814'. [ 2552.283015][T13912] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2552.787468][T13905] delete_channel: no stack [ 2553.049796][T13929] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12820'. [ 2553.806099][T13923] delete_channel: no stack [ 2554.171386][T13946] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12824'. [ 2554.208011][T13946] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2554.209144][T13945] netlink: 'syz.0.12824': attribute type 46 has an invalid length. [ 2554.928087][T13962] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12830'. [ 2556.647604][T13973] delete_channel: no stack [ 2557.903938][T13980] delete_channel: no stack [ 2558.257647][T13992] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12843'. [ 2560.626555][T14029] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12856'. [ 2560.748894][T14031] netlink: 'syz.0.12857': attribute type 3 has an invalid length. [ 2560.764368][T14031] netlink: 'syz.0.12857': attribute type 1 has an invalid length. [ 2560.777552][T14031] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.12857'. [ 2561.969553][T14060] netlink: 'syz.2.12868': attribute type 3 has an invalid length. [ 2562.006801][T14060] netlink: 'syz.2.12868': attribute type 1 has an invalid length. [ 2562.014677][T14060] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.12868'. [ 2562.099621][T14062] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12869'. [ 2564.277371][T14090] netlink: 'syz.2.12879': attribute type 3 has an invalid length. [ 2564.316040][T14090] netlink: 'syz.2.12879': attribute type 1 has an invalid length. [ 2564.333249][T14090] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.12879'. [ 2564.648214][T14092] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12880'. [ 2567.024461][T14114] netlink: 'syz.0.12888': attribute type 3 has an invalid length. [ 2567.033894][T14114] netlink: 'syz.0.12888': attribute type 1 has an invalid length. [ 2567.048742][T14114] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.12888'. [ 2567.172558][T14116] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12889'. [ 2568.034023][T14128] netlink: 'syz.0.12895': attribute type 46 has an invalid length. [ 2568.061287][T14128] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12895'. [ 2568.096851][T14128] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2568.176384][T14131] netlink: 'syz.1.12897': attribute type 3 has an invalid length. [ 2568.210130][T14131] netlink: 'syz.1.12897': attribute type 1 has an invalid length. [ 2568.237183][T14131] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.12897'. [ 2568.372101][T14137] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12898'. [ 2569.591884][T14169] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.12906'. [ 2569.624986][T14169] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2569.848665][T14174] netlink: 'syz.3.12908': attribute type 3 has an invalid length. [ 2569.870052][T14174] netlink: 'syz.3.12908': attribute type 1 has an invalid length. [ 2569.892408][T14174] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.12908'. [ 2569.902445][T14168] netlink: 'syz.1.12906': attribute type 46 has an invalid length. [ 2570.136449][T14178] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12911'. [ 2571.219799][T14204] netlink: 'syz.1.12919': attribute type 3 has an invalid length. [ 2571.249265][T14204] netlink: 'syz.1.12919': attribute type 1 has an invalid length. [ 2571.277714][T14204] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.12919'. [ 2571.635101][T14207] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12920'. [ 2571.662261][T14207] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2572.390959][T14230] validate_nla: 1 callbacks suppressed [ 2572.390978][T14230] netlink: 'syz.0.12929': attribute type 3 has an invalid length. [ 2572.436764][T14230] netlink: 'syz.0.12929': attribute type 1 has an invalid length. [ 2572.454804][T14230] __nla_validate_parse: 1 callbacks suppressed [ 2572.454819][T14230] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.12929'. [ 2572.906137][T14237] netlink: 'syz.1.12932': attribute type 46 has an invalid length. [ 2573.020907][T14237] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.12932'. [ 2573.037672][T14237] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2573.405266][T14231] delete_channel: no stack [ 2573.659571][T14234] delete_channel: no stack [ 2573.875676][T14247] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12935'. [ 2574.605229][T14257] netlink: 'syz.1.12939': attribute type 3 has an invalid length. [ 2574.628171][T14257] netlink: 'syz.1.12939': attribute type 1 has an invalid length. [ 2574.652936][T14257] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.12939'. [ 2575.162522][T14266] netlink: 'syz.0.12942': attribute type 46 has an invalid length. [ 2575.207137][T14266] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12942'. [ 2575.248790][T14266] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2576.092440][T14281] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12946'. [ 2577.264479][T14303] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.12953'. [ 2577.286232][T14303] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2577.502424][T14302] netlink: 'syz.1.12953': attribute type 46 has an invalid length. [ 2578.218800][T14310] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12956'. [ 2579.361982][T14324] netlink: 'syz.0.12961': attribute type 3 has an invalid length. [ 2579.400711][T14324] netlink: 'syz.0.12961': attribute type 1 has an invalid length. [ 2579.425478][T14324] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.12961'. [ 2579.894731][T14330] netlink: 'syz.1.12963': attribute type 46 has an invalid length. [ 2579.942700][T14330] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.12963'. [ 2579.968695][T14330] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2580.278207][T14337] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12966'. [ 2580.550900][T14346] netlink: 'syz.0.12970': attribute type 3 has an invalid length. [ 2580.583991][T14346] netlink: 'syz.0.12970': attribute type 1 has an invalid length. [ 2580.642540][T14346] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.12970'. [ 2581.813182][T14362] netlink: 'syz.3.12974': attribute type 46 has an invalid length. [ 2581.923322][T14362] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.12974'. [ 2581.985140][T14362] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2582.224163][T14368] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12978'. [ 2582.831334][T14376] netlink: 'syz.3.12980': attribute type 3 has an invalid length. [ 2582.881944][T14376] netlink: 'syz.3.12980': attribute type 1 has an invalid length. [ 2582.900818][T14376] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.12980'. [ 2583.575919][T14373] delete_channel: no stack [ 2583.973159][T14392] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12987'. [ 2584.160058][T14400] netlink: 'syz.2.12988': attribute type 46 has an invalid length. [ 2584.251083][T14400] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.12988'. [ 2584.267120][T14400] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2584.984976][T14414] netlink: 'syz.0.12992': attribute type 3 has an invalid length. [ 2585.017686][T14414] netlink: 'syz.0.12992': attribute type 1 has an invalid length. [ 2585.034905][T14414] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.12992'. [ 2585.881197][T14413] delete_channel: no stack [ 2586.085695][T14430] netlink: 'syz.0.12999': attribute type 46 has an invalid length. [ 2586.168948][T14428] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12998'. [ 2586.241314][T14430] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.12999'. [ 2586.346810][T14430] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2586.828971][T14444] netlink: 'syz.0.13010': attribute type 46 has an invalid length. [ 2586.880830][T14444] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.13010'. [ 2586.896007][T14444] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2587.815103][T14461] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13011'. [ 2588.090081][T14453] delete_channel: no stack [ 2588.337988][T14473] netlink: 'syz.0.13015': attribute type 46 has an invalid length. [ 2588.393862][T14473] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.13015'. [ 2588.448677][T14473] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2588.855685][T14490] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13021'. [ 2590.077339][T14493] delete_channel: no stack [ 2590.681140][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.687728][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.149367][T14498] delete_channel: no stack [ 2591.620589][T14514] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.13029'. [ 2591.687898][T14514] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2591.772239][T14513] netlink: 'syz.2.13029': attribute type 46 has an invalid length. [ 2592.378964][T14521] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13032'. [ 2593.144828][T14543] netlink: 'syz.2.13039': attribute type 46 has an invalid length. [ 2593.197484][T14542] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.13039'. [ 2593.219259][T14542] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2593.837109][T14535] delete_channel: no stack [ 2594.916514][T14554] delete_channel: no stack [ 2595.087352][T14565] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13045'. [ 2595.596233][T14577] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.13049'. [ 2595.649341][T14575] netlink: 'syz.3.13049': attribute type 46 has an invalid length. [ 2595.666835][T14577] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2597.308750][T14589] netlink: 'syz.1.13060': attribute type 46 has an invalid length. [ 2597.431657][T14588] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.13060'. [ 2597.680671][T14588] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2599.493539][T14590] delete_channel: no stack [ 2600.076836][T14602] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13057'. [ 2600.610892][T14598] delete_channel: no stack [ 2602.048599][T14627] netlink: 'syz.3.13065': attribute type 46 has an invalid length. [ 2602.110982][T14627] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.13065'. [ 2602.127426][T14627] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2602.333299][T14632] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13067'. [ 2602.366925][T14622] delete_channel: no stack [ 2602.748278][T14642] netlink: 'syz.1.13070': attribute type 3 has an invalid length. [ 2602.776838][T14642] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.13070'. [ 2603.667067][T14637] delete_channel: no stack [ 2604.446328][T14652] netlink: 'syz.3.13076': attribute type 46 has an invalid length. [ 2604.504028][T14652] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.13076'. [ 2604.535128][T14652] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2604.854851][T14662] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13077'. [ 2605.851104][T14663] delete_channel: no stack [ 2605.996254][T14686] netlink: 'syz.3.13085': attribute type 46 has an invalid length. [ 2606.090242][T14686] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.13085'. [ 2606.182737][T14686] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2606.561507][T14696] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13088'. [ 2607.803322][T14704] delete_channel: no stack [ 2608.218764][T14720] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.13096'. [ 2608.435016][T14720] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2608.518306][T14719] netlink: 'syz.3.13096': attribute type 46 has an invalid length. [ 2609.149384][T14729] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13100'. [ 2611.569860][T14757] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.13108'. [ 2611.726843][T14757] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2611.947278][T14755] netlink: 'syz.1.13108': attribute type 46 has an invalid length. [ 2612.845735][T14766] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13112'. [ 2613.272123][T14769] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13121'. [ 2614.416273][T14785] netlink: 'syz.3.13117': attribute type 3 has an invalid length. [ 2614.453141][T14785] netlink: 'syz.3.13117': attribute type 1 has an invalid length. [ 2614.473392][T14785] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.13117'. [ 2614.949354][T14789] netlink: 'syz.3.13118': attribute type 3 has an invalid length. [ 2615.027749][T14789] netlink: 'syz.3.13118': attribute type 1 has an invalid length. [ 2615.059209][T14789] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.13118'. [ 2615.947669][T14797] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.13120'. [ 2615.988308][T14797] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2616.034385][T14794] netlink: 'syz.3.13120': attribute type 46 has an invalid length. [ 2617.085455][T14807] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13125'. [ 2617.384485][T14817] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13138'. [ 2617.709928][T14824] netlink: 'syz.0.13130': attribute type 3 has an invalid length. [ 2617.735595][T14824] netlink: 'syz.0.13130': attribute type 1 has an invalid length. [ 2617.759901][T14824] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.13130'. [ 2618.181411][T14828] netlink: 'syz.1.13132': attribute type 46 has an invalid length. [ 2618.441019][T14828] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.13132'. [ 2618.627055][T14828] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2620.303336][T14846] netlink: 'syz.0.13139': attribute type 3 has an invalid length. [ 2620.337025][T14846] netlink: 'syz.0.13139': attribute type 1 has an invalid length. [ 2620.345018][T14846] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.13139'. [ 2620.496054][T14850] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13140'. [ 2620.588629][T14855] netlink: 'syz.0.13142': attribute type 3 has an invalid length. [ 2620.627124][T14855] netlink: 'syz.0.13142': attribute type 1 has an invalid length. [ 2620.634997][T14855] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.13142'. [ 2621.063069][T14859] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13151'. [ 2622.394674][T14872] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.13146'. [ 2622.439280][T14872] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2622.504862][T14871] netlink: 'syz.2.13146': attribute type 46 has an invalid length. [ 2624.004169][T14885] netlink: 'syz.2.13152': attribute type 3 has an invalid length. [ 2624.012128][T14885] netlink: 'syz.2.13152': attribute type 1 has an invalid length. [ 2624.020546][T14885] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.13152'. [ 2625.789900][T14899] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.13157'. [ 2625.896971][T14899] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2625.934174][T14898] netlink: 'syz.0.13157': attribute type 46 has an invalid length. [ 2626.812245][T14912] netlink: 'syz.3.13162': attribute type 3 has an invalid length. [ 2626.823730][T14912] netlink: 'syz.3.13162': attribute type 1 has an invalid length. [ 2626.832301][T14912] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.13162'. [ 2627.238375][T14902] delete_channel: no stack [ 2627.742969][T14925] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.13166'. [ 2627.806819][T14925] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2627.912230][T14922] netlink: 'syz.2.13166': attribute type 46 has an invalid length. [ 2628.325591][T14933] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13169'. [ 2629.200650][T14941] netlink: 'syz.1.13171': attribute type 3 has an invalid length. [ 2629.300244][T14941] netlink: 'syz.1.13171': attribute type 1 has an invalid length. [ 2629.335714][T14941] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.13171'. [ 2630.558499][T14943] delete_channel: no stack [ 2630.947661][T14954] netlink: 'syz.0.13176': attribute type 46 has an invalid length. [ 2631.030663][T14953] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.13176'. [ 2631.107429][T14953] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2631.615495][T14961] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13178'. [ 2631.818969][T14966] netlink: 'syz.3.13180': attribute type 3 has an invalid length. [ 2631.899298][T14966] netlink: 'syz.3.13180': attribute type 1 has an invalid length. [ 2632.088617][T14966] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.13180'. [ 2634.024712][T14992] netlink: 145208 bytes leftover after parsing attributes in process `syz.1.13187'. [ 2634.096858][T14992] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2634.210352][T14991] netlink: 'syz.1.13187': attribute type 46 has an invalid length. [ 2634.348485][T14979] delete_channel: no stack [ 2634.688387][T14998] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13190'. [ 2634.784248][T15001] netlink: 'syz.1.13191': attribute type 3 has an invalid length. [ 2634.860524][T15001] netlink: 'syz.1.13191': attribute type 1 has an invalid length. [ 2634.909368][T15001] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.13191'. [ 2637.950112][T15030] netlink: 'syz.2.13199': attribute type 46 has an invalid length. [ 2638.011322][T15024] delete_channel: no stack [ 2638.038538][T15027] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.13199'. [ 2638.081169][T15027] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2638.399993][T15033] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13201'. [ 2640.803371][T15063] delete_channel: no stack [ 2641.479019][T15069] netlink: 'syz.2.13210': attribute type 46 has an invalid length. [ 2641.574570][T15069] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.13210'. [ 2641.657174][T15069] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2642.031616][T15074] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13212'. [ 2644.412549][T15092] delete_channel: no stack [ 2646.338302][T15106] netlink: 'syz.0.13224': attribute type 46 has an invalid length. [ 2646.403049][T15106] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.13224'. [ 2646.432357][T15110] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13225'. [ 2646.464295][T15106] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2647.374932][T15118] delete_channel: no stack [ 2649.693612][T15151] netlink: 'syz.0.13237': attribute type 46 has an invalid length. [ 2649.766988][T15150] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13238'. [ 2649.791369][T15151] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.13237'. [ 2649.818582][T15151] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2650.260949][T15158] netlink: 'syz.0.13252': attribute type 46 has an invalid length. [ 2650.662989][T15158] netlink: 145208 bytes leftover after parsing attributes in process `syz.0.13252'. [ 2650.868731][T15158] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2652.142992][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.157737][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.153626][T15182] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13251'. [ 2653.779347][T15193] netlink: 'syz.3.13257': attribute type 46 has an invalid length. [ 2653.814894][T15193] netlink: 145208 bytes leftover after parsing attributes in process `syz.3.13257'. [ 2653.908810][T15193] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2655.782306][T15215] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13263'. [ 2656.083690][T15223] netlink: 'syz.2.13266': attribute type 46 has an invalid length. [ 2656.112330][T15223] netlink: 145208 bytes leftover after parsing attributes in process `syz.2.13266'. [ 2656.127088][T15223] openvswitch: netlink: Tunnel attr 2617 out of range max 16 [ 2658.753908][T15243] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13274'. [ 2661.489538][T15281] delete_channel: no stack [ 2661.553429][T15287] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13289'. [ 2661.663981][T15291] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13299'. [ 2662.948335][T15304] delete_channel: no stack [ 2663.761591][T15317] delete_channel: no stack [ 2663.886122][T15326] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13301'. [ 2664.690723][T15339] delete_channel: no stack [ 2664.976506][T15347] delete_channel: no stack [ 2665.049678][T15354] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13313'. [ 2665.407386][T15365] delete_channel: no stack [ 2665.889017][T15376] delete_channel: no stack [ 2665.983584][T15381] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13324'. [ 2666.221818][T15387] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13335'. [ 2666.418050][T15388] delete_channel: no stack [ 2667.101720][T15402] delete_channel: no stack [ 2667.317302][T15421] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13339'. [ 2667.817609][T15427] delete_channel: no stack [ 2668.760852][T15442] delete_channel: no stack [ 2668.912995][T15448] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13348'. [ 2669.455322][T15453] delete_channel: no stack [ 2670.150409][T15472] delete_channel: no stack [ 2671.222282][T15490] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13362'. [ 2671.921099][T15503] delete_channel: no stack [ 2673.937200][T15530] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13375'. [ 2674.321186][T15538] delete_channel: no stack [ 2675.866096][T15567] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13387'. [ 2675.882594][T15563] delete_channel: no stack [ 2676.259415][T15569] delete_channel: no stack [ 2676.296068][T15568] delete_channel: no stack [ 2677.371306][T15600] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13398'. [ 2678.160589][T15603] delete_channel: no stack [ 2678.201369][T15601] delete_channel: no stack [ 2680.216180][T15648] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.13413'. [ 2680.260335][T15642] delete_channel: no stack [ 2681.207882][T15645] delete_channel: no stack [ 2682.507176][T15688] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.13424'. [ 2684.933498][T15702] delete_channel: no stack [ 2685.817460][T15727] netlink: 64847 bytes leftover after parsing attributes in process `syz.2.13437'. [ 2686.327064][T15722] delete_channel: no stack [ 2690.717431][T15750] delete_channel: no stack [ 2692.642145][T15768] delete_channel: no stack [ 2694.864245][T15795] delete_channel: no stack [ 2696.177358][T15815] delete_channel: no stack [ 2698.541450][T15844] delete_channel: no stack [ 2699.092153][T15865] netlink: 'syz.1.13480': attribute type 3 has an invalid length. [ 2699.119449][T15865] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.13480'. [ 2699.405950][T15869] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13482'. [ 2699.924068][T15862] delete_channel: no stack [ 2701.087836][T15877] delete_channel: no stack [ 2702.062314][T15885] delete_channel: no stack [ 2702.237513][T15901] netlink: 'syz.2.13490': attribute type 3 has an invalid length. [ 2702.245397][T15901] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.13490'. [ 2702.298524][T15903] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13491'. [ 2704.597389][T15920] delete_channel: no stack [ 2704.805843][T15939] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13504'. [ 2705.979982][T15938] delete_channel: no stack [ 2706.327890][T15958] netlink: 'syz.3.13507': attribute type 3 has an invalid length. [ 2706.345702][T15958] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.13507'. [ 2707.022064][T15950] delete_channel: no stack [ 2710.762432][T15994] delete_channel: no stack [ 2712.103935][T16010] delete_channel: no stack [ 2713.607338][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.614137][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2716.507282][T16063] delete_channel: no stack [ 2720.740986][T16129] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13560'. [ 2721.488102][T16123] delete_channel: no stack [ 2722.797823][T16149] delete_channel: no stack [ 2722.997196][T16166] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13570'. [ 2725.844453][T16207] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13582'. [ 2726.697938][T16199] delete_channel: no stack [ 2726.869795][T16215] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13592'. [ 2730.154824][T16257] netlink: 'syz.3.13594': attribute type 3 has an invalid length. [ 2730.177721][T16257] netlink: 61155 bytes leftover after parsing attributes in process `syz.3.13594'. [ 2731.658144][T16260] delete_channel: no stack [ 2732.654651][T16271] delete_channel: no stack [ 2736.331026][T16306] delete_channel: no stack [ 2736.478908][T16319] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13613'. [ 2736.519586][T16310] delete_channel: no stack [ 2739.267321][T16341] delete_channel: no stack [ 2739.493119][T16355] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13625'. [ 2740.258478][T16348] delete_channel: no stack [ 2742.023961][T16391] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13636'. [ 2742.299310][T16381] delete_channel: no stack [ 2743.561329][T16394] delete_channel: no stack [ 2744.629924][T16418] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13646'. [ 2746.612616][T16428] delete_channel: no stack [ 2746.797353][T16434] delete_channel: no stack [ 2747.614819][T16454] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13656'. [ 2747.798297][T16447] delete_channel: no stack [ 2748.988197][T16463] delete_channel: no stack [ 2751.191331][T16501] netlink: 'syz.3.13671': attribute type 3 has an invalid length. [ 2751.200610][T16501] netlink: 'syz.3.13671': attribute type 1 has an invalid length. [ 2751.206505][T16500] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13670'. [ 2751.208903][T16501] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.13671'. [ 2751.318902][T16505] netlink: 'syz.2.13674': attribute type 3 has an invalid length. [ 2751.328043][T16505] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.13674'. [ 2751.897653][T16495] delete_channel: no stack [ 2754.668868][T16536] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13683'. [ 2755.769066][T16542] delete_channel: no stack [ 2756.761297][T16563] delete_channel: no stack [ 2758.282291][T16586] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13696'. [ 2758.488119][T16591] netlink: 'syz.3.13700': attribute type 3 has an invalid length. [ 2758.495988][T16591] netlink: 61203 bytes leftover after parsing attributes in process `syz.3.13700'. [ 2761.167503][T16603] delete_channel: no stack [ 2761.891818][T16620] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13710'. [ 2762.131178][T16622] netlink: 'syz.3.13711': attribute type 3 has an invalid length. [ 2762.149083][T16622] netlink: 61203 bytes leftover after parsing attributes in process `syz.3.13711'. [ 2763.356206][T16626] delete_channel: no stack [ 2765.092845][T16658] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13724'. [ 2766.186207][T16659] delete_channel: no stack [ 2766.363818][T16667] delete_channel: no stack [ 2768.443364][T16696] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13734'. [ 2770.087550][T16704] delete_channel: no stack [ 2771.376472][T16725] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13744'. [ 2771.578133][T16730] netlink: 'syz.0.13753': attribute type 3 has an invalid length. [ 2771.623017][T16730] netlink: 61155 bytes leftover after parsing attributes in process `syz.0.13753'. [ 2775.034881][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.041949][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2777.909288][T16775] delete_channel: no stack [ 2778.161773][T16790] netlink: 'syz.2.13764': attribute type 3 has an invalid length. [ 2778.173724][T16790] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.13764'. [ 2778.859922][T16778] delete_channel: no stack [ 2781.421000][T16823] netlink: 'syz.2.13776': attribute type 3 has an invalid length. [ 2781.457004][T16823] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.13776'. [ 2781.527295][T16806] delete_channel: no stack [ 2782.598025][T16829] delete_channel: no stack [ 2782.669452][T16844] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13790'. [ 2783.579705][T16857] netlink: 'syz.1.13786': attribute type 3 has an invalid length. [ 2783.634926][T16857] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.13786'. [ 2785.409791][T16882] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13794'. [ 2785.499118][T16862] delete_channel: no stack [ 2786.269452][T16875] delete_channel: no stack [ 2790.621294][T16914] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13805'. [ 2791.364677][T16911] delete_channel: no stack [ 2791.647445][T16918] delete_channel: no stack [ 2793.779631][T16958] delete_channel: no stack [ 2794.430954][T16964] delete_channel: no stack [ 2796.811027][T16996] delete_channel: no stack [ 2800.595332][T17039] delete_channel: no stack [ 2801.738435][T17057] delete_channel: no stack [ 2804.871245][T17093] delete_channel: no stack [ 2808.349171][T17123] delete_channel: no stack [ 2810.970998][T17154] delete_channel: no stack [ 2813.010028][T17184] delete_channel: no stack [ 2813.141271][T17186] delete_channel: no stack [ 2814.147056][T17197] delete_channel: no stack [ 2816.307678][T17225] delete_channel: no stack [ 2817.449793][T17247] delete_channel: no stack [ 2821.658151][T17315] delete_channel: no stack [ 2822.702152][T17325] delete_channel: no stack [ 2823.844618][T17348] delete_channel: no stack [ 2824.956954][T17364] delete_channel: no stack [ 2828.348117][T17414] delete_channel: no stack [ 2830.440470][T17452] delete_channel: no stack [ 2831.423049][T17462] delete_channel: no stack [ 2833.817448][T17505] delete_channel: no stack [ 2836.457692][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.464709][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.999441][T17576] delete_channel: no stack [ 2837.221502][T17585] delete_channel: no stack [ 2837.999101][T17599] delete_channel: no stack [ 2839.115150][T17636] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.14052'. [ 2839.599555][T17627] delete_channel: no stack [ 2840.709718][T17672] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.14067'. [ 2841.847583][T17675] delete_channel: no stack [ 2842.915010][T17712] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.14079'. [ 2844.926212][T17752] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14095'. [ 2845.972015][T17780] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14108'. [ 2846.579260][T17772] delete_channel: no stack [ 2846.951059][T17782] delete_channel: no stack [ 2847.090995][T17806] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14118'. [ 2848.548327][T17818] delete_channel: no stack [ 2849.438074][T17830] delete_channel: no stack [ 2850.134740][T17862] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.14139'. [ 2850.469200][T17853] delete_channel: no stack [ 2851.021253][T17893] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.14151'. [ 2851.683147][T17910] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14159'. [ 2852.244310][T17902] delete_channel: no stack [ 2853.115500][T17937] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14169'. [ 2853.394257][T17944] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14180'. [ 2853.502201][T17930] delete_channel: no stack [ 2856.331696][T18000] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14204'. [ 2857.206316][T18033] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14211'. [ 2857.721050][T18018] delete_channel: no stack [ 2858.167089][T18061] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.14221'. [ 2858.231119][T18035] delete_channel: no stack [ 2858.254565][T18059] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14220'. [ 2859.595330][T18095] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14232'. [ 2859.707143][T18071] delete_channel: no stack [ 2860.228903][T18086] delete_channel: no stack [ 2861.871722][T18125] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14245'. [ 2862.133640][T18133] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14256'. [ 2862.781856][T18121] delete_channel: no stack [ 2864.088232][T18146] delete_channel: no stack [ 2864.852614][T18166] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14259'. [ 2865.101993][T18176] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14273'. [ 2865.337602][T18158] delete_channel: no stack [ 2866.526899][T18181] delete_channel: no stack [ 2867.151755][T18203] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14276'. [ 2868.737081][T18212] delete_channel: no stack [ 2869.576109][T18232] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14287'. [ 2872.210067][T18261] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14298'. [ 2873.630915][T18270] delete_channel: no stack [ 2874.644433][T18293] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14309'. [ 2876.610438][T18301] delete_channel: no stack [ 2877.005702][T18319] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14319'. [ 2880.470732][T18347] delete_channel: no stack [ 2883.010766][T18377] delete_channel: no stack [ 2885.978285][T18413] delete_channel: no stack [ 2886.573172][T18427] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14360'. [ 2888.628397][T18446] delete_channel: no stack [ 2888.695242][T18448] delete_channel: no stack [ 2889.348167][T18464] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14372'. [ 2892.535055][T18499] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14384'. [ 2893.235148][T18492] delete_channel: no stack [ 2894.713427][T18524] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14393'. [ 2896.686897][T18535] delete_channel: no stack [ 2896.930071][T18552] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14403'. [ 2897.913504][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.939182][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.875154][T18566] delete_channel: no stack [ 2899.837500][T18577] delete_channel: no stack [ 2902.307405][T18608] delete_channel: no stack [ 2903.700087][T18623] delete_channel: no stack [ 2904.728626][T18640] delete_channel: no stack [ 2905.793999][T18647] delete_channel: no stack [ 2908.037186][T18682] delete_channel: no stack [ 2909.134070][T18688] delete_channel: no stack [ 2911.579793][T18716] delete_channel: no stack [ 2914.118706][T18745] delete_channel: no stack [ 2917.400191][T18781] delete_channel: no stack [ 2918.531688][T18790] delete_channel: no stack [ 2924.059833][T18839] delete_channel: no stack [ 2928.258628][T18883] delete_channel: no stack [ 2930.039839][T18895] delete_channel: no stack [ 2931.507918][T18917] delete_channel: no stack [ 2934.594132][T18938] delete_channel: no stack [ 2935.661470][T18956] delete_channel: no stack [ 2937.939470][T18984] delete_channel: no stack [ 2938.791321][T18991] delete_channel: no stack [ 2939.857760][T19006] delete_channel: no stack [ 2940.575986][T19022] delete_channel: no stack [ 2941.551508][T19051] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14578'. [ 2942.414778][T19044] delete_channel: no stack [ 2942.658566][T19055] delete_channel: no stack [ 2944.614014][T19083] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14587'. [ 2944.854395][T19095] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14599'. [ 2945.870027][T19090] delete_channel: no stack [ 2945.883501][T19098] delete_channel: no stack [ 2947.680534][T19126] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14602'. [ 2948.710518][T19129] delete_channel: no stack [ 2948.748025][T19131] delete_channel: no stack [ 2950.089780][T19162] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14615'. [ 2951.378356][T19175] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14627'. [ 2952.427784][T19170] delete_channel: no stack [ 2952.527956][T19176] delete_channel: no stack [ 2955.685032][T19201] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14631'. [ 2957.246197][T19213] delete_channel: no stack [ 2957.410666][T19231] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14642'. [ 2957.853286][T19217] delete_channel: no stack [ 2959.346800][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.356673][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.971523][T19258] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14652'. [ 2960.154045][ T5776] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 2960.879157][T19251] delete_channel: no stack [ 2960.951058][T19259] delete_channel: no stack [ 2961.798028][T19283] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14663'. [ 2962.154414][ T5776] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 2963.429573][T19296] delete_channel: no stack [ 2964.278547][T19302] delete_channel: no stack [ 2964.290663][T19314] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14673'. [ 2965.525977][T19320] delete_channel: no stack [ 2965.593184][T19325] delete_channel: no stack [ 2965.720204][T19343] netlink: 830 bytes leftover after parsing attributes in process `syz.2.14686'. [ 2966.712330][T19373] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14697'. [ 2967.038233][T19360] delete_channel: no stack [ 2967.155251][T19379] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14708'. [ 2967.428543][T19365] delete_channel: no stack [ 2968.120016][T19375] delete_channel: no stack [ 2968.417071][T19384] delete_channel: no stack [ 2969.577326][T19397] delete_channel: no stack [ 2969.717118][T19420] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14717'. [ 2969.753546][T19423] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14719'. [ 2970.558451][T19434] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14724'. [ 2971.108230][T19443] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14726'. [ 2971.553861][T19450] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14736'. [ 2972.069929][T19439] delete_channel: no stack [ 2972.160342][T19455] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14731'. [ 2973.772706][T19476] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14741'. [ 2975.233498][T19477] delete_channel: no stack [ 2975.565700][T19495] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14748'. [ 2976.498582][T19487] delete_channel: no stack [ 2976.564724][T19499] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14749'. [ 2976.610699][T19503] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14752'. [ 2977.691435][T19523] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14768'. [ 2978.335090][T19531] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14771'. [ 2979.205396][T19532] delete_channel: no stack [ 2979.251060][T19544] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14766'. [ 2979.397519][T19536] delete_channel: no stack [ 2979.461353][T19550] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.14769'. [ 2979.532312][T19554] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14772'. [ 2979.979613][T19571] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14777'. [ 2980.611784][T19559] delete_channel: no stack [ 2981.600656][T19577] delete_channel: no stack [ 2981.878128][T19593] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14786'. [ 2982.020604][T19598] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14788'. [ 2982.220992][T19603] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14789'. [ 2985.955993][T19620] delete_channel: no stack [ 2986.420620][T19638] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14802'. [ 2987.028658][T19629] delete_channel: no stack [ 2987.201365][T19644] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14804'. [ 2987.399829][T19650] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14805'. [ 2988.158475][T19645] delete_channel: no stack [ 2988.500951][T19666] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14813'. [ 2989.358552][T19662] delete_channel: no stack [ 2989.575953][T19685] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14818'. [ 2990.368346][T19679] delete_channel: no stack [ 2990.829337][T19702] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14824'. [ 2991.371354][T19689] delete_channel: no stack [ 2992.810498][T19713] delete_channel: no stack [ 2992.927853][T19725] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14836'. [ 2993.741068][T19739] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14847'. [ 2994.281475][T19733] delete_channel: no stack [ 2995.227207][T19741] delete_channel: no stack [ 2996.097887][ T5776] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5 [ 2996.448773][T19754] delete_channel: no stack [ 2996.480602][T19752] delete_channel: no stack [ 2996.584200][T19768] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14850'. [ 2996.602836][T19770] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14851'. [ 2997.308361][T19779] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14863'. [ 2997.379570][T19782] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14856'. [ 2998.216369][T19791] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14858'. [ 2999.127294][T19792] delete_channel: no stack [ 2999.222729][T19796] delete_channel: no stack [ 2999.293951][T19805] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14864'. [ 2999.406721][T19810] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14866'. [ 3001.369182][T19834] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14877'. [ 3001.557400][T19823] delete_channel: no stack [ 3001.766082][T19838] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14879'. [ 3003.668940][T19865] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14889'. [ 3004.262379][T19870] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14891'. [ 3004.298657][T19859] delete_channel: no stack [ 3005.171794][T19888] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14897'. [ 3005.287797][T19892] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14899'. [ 3005.768467][T19900] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14901'. [ 3005.822333][T19903] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14909'. [ 3005.976041][T19908] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14902'. [ 3006.501016][T19917] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14907'. [ 3006.955129][T19923] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14910'. [ 3007.442791][T19937] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14915'. [ 3009.014642][T19965] __nla_validate_parse: 3 callbacks suppressed [ 3009.014678][T19965] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14935'. [ 3009.037742][T19967] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14927'. [ 3009.084453][T19969] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14928'. [ 3012.049898][T19952] delete_channel: no stack [ 3012.671383][T19994] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14938'. [ 3013.350373][T19999] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14940'. [ 3015.143580][T20012] delete_channel: no stack [ 3015.260668][T20027] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14952'. [ 3016.600278][T20039] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3016.615088][T20039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3016.630877][T20039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3016.652610][T20039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3016.668431][T20039] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3016.679114][T20039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3016.945468][T20037] chnl_net:caif_netlink_parms(): no params data found [ 3017.092338][T10076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.165586][T20037] bridge0: port 1(bridge_slave_0) entered blocking state [ 3017.185833][T20037] bridge0: port 1(bridge_slave_0) entered disabled state [ 3017.208166][T20037] bridge_slave_0: entered allmulticast mode [ 3017.215865][T20037] bridge_slave_0: entered promiscuous mode [ 3017.681092][T10076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.694252][T20037] bridge0: port 2(bridge_slave_1) entered blocking state [ 3017.702822][T20037] bridge0: port 2(bridge_slave_1) entered disabled state [ 3017.710222][T20037] bridge_slave_1: entered allmulticast mode [ 3017.718720][T20037] bridge_slave_1: entered promiscuous mode [ 3017.828841][T10076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.863539][T20037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3017.919640][T10076] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.939160][T20037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3018.298043][T20037] team0: Port device team_slave_0 added [ 3018.307632][T20037] team0: Port device team_slave_1 added [ 3018.360087][T20037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3018.376880][T20037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3018.418595][T20037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3018.434626][T20037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3018.443752][T20037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3018.470000][T20037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3018.562201][T20065] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14962'. [ 3018.888541][T20037] hsr_slave_0: entered promiscuous mode [ 3019.071508][T20039] Bluetooth: hci4: command tx timeout [ 3019.148680][T20037] hsr_slave_1: entered promiscuous mode [ 3019.325998][T10076] tipc: Left network mode [ 3020.496049][T10076] ip6gretap0 (unregistering): left allmulticast mode [ 3020.503623][T10076] ip6gretap0 (unregistering): left promiscuous mode [ 3020.512245][T10076] Ÿë: port 1(ip6gretap0) entered disabled state [ 3020.755927][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.762453][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.070093][T20109] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14973'. [ 3021.146826][T20039] Bluetooth: hci4: command tx timeout [ 3021.885236][T20130] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14983'. [ 3022.468322][T20037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3022.484336][T20037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3022.507138][T20037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3022.593113][T20037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3022.885241][T20037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3022.958854][T20037] 8021q: adding VLAN 0 to HW filter on device team0 [ 3022.990076][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 3022.997322][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3023.040562][T18950] bridge0: port 2(bridge_slave_1) entered blocking state [ 3023.047819][T18950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3023.236891][T20039] Bluetooth: hci4: command tx timeout [ 3023.620563][T20037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3023.745822][T20037] veth0_vlan: entered promiscuous mode [ 3023.783461][T20037] veth1_vlan: entered promiscuous mode [ 3023.875823][T20037] veth0_macvtap: entered promiscuous mode [ 3023.901015][T20037] veth1_macvtap: entered promiscuous mode [ 3023.978591][T20037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3024.005113][T20037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3024.043788][T20037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3024.054452][T20037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3024.066905][T20037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3024.076121][T20037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3025.316903][T20039] Bluetooth: hci4: command tx timeout [ 3025.975991][T22086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3026.001213][T22086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3027.089967][T20211] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14990'. [ 3027.116030][T18286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3027.148540][T18286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3027.947848][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3027.967316][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3027.985000][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3028.027139][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3028.035353][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3028.043486][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3029.600425][T20222] chnl_net:caif_netlink_parms(): no params data found [ 3029.860239][T20222] bridge0: port 1(bridge_slave_0) entered blocking state [ 3029.884515][T20222] bridge0: port 1(bridge_slave_0) entered disabled state [ 3029.907442][T20222] bridge_slave_0: entered allmulticast mode [ 3029.914983][T20222] bridge_slave_0: entered promiscuous mode [ 3029.944826][T20222] bridge0: port 2(bridge_slave_1) entered blocking state [ 3029.972739][T20222] bridge0: port 2(bridge_slave_1) entered disabled state [ 3029.987327][T20222] bridge_slave_1: entered allmulticast mode [ 3029.996002][T20222] bridge_slave_1: entered promiscuous mode [ 3030.038105][T20222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3030.053815][T20222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3030.111332][ T5776] Bluetooth: hci2: command tx timeout [ 3030.192716][T20222] team0: Port device team_slave_0 added [ 3030.235403][T20222] team0: Port device team_slave_1 added [ 3030.362563][T20222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3030.374707][T20222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3030.405407][T20222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3030.424910][T20222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3030.432430][T20222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3030.461658][T20222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3031.079972][T20222] hsr_slave_0: entered promiscuous mode [ 3031.300301][T20222] hsr_slave_1: entered promiscuous mode [ 3031.308557][T20222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3031.316245][T20222] Cannot create hsr debugfs directory [ 3031.511806][T20248] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15001'. [ 3032.106377][T20222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3032.196562][ T5776] Bluetooth: hci2: command tx timeout [ 3032.220028][T20222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3032.333159][T20222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3033.679985][T20222] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3034.268869][ T5776] Bluetooth: hci2: command tx timeout [ 3034.529530][T20222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3034.583245][T20222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3034.632666][T20222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3034.646352][T20222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3034.723731][T20272] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15012'. [ 3034.754463][T20273] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15011'. [ 3035.166082][T20222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3035.216230][T20222] 8021q: adding VLAN 0 to HW filter on device team0 [ 3035.259201][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 3035.266433][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3035.296271][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 3035.303637][T16242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3035.786198][T20222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3035.892146][T20222] veth0_vlan: entered promiscuous mode [ 3035.922170][T20222] veth1_vlan: entered promiscuous mode [ 3035.990152][T20222] veth0_macvtap: entered promiscuous mode [ 3036.014524][T20222] veth1_macvtap: entered promiscuous mode [ 3036.059991][T20222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3036.072054][T20222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3036.089386][T20222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3036.133010][T20222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3036.148736][T20222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3036.163109][T20222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3036.184622][T20222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3036.197543][T20222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3036.211280][T20222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3036.222023][T20222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3036.353436][ T5776] Bluetooth: hci2: command tx timeout [ 3037.286941][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3037.304995][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3037.579986][ T6151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3037.588675][ T6151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3038.453823][T20039] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3038.472927][T20039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3038.490694][T20039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3038.529645][T20039] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3038.545894][T20039] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3038.561944][T20039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3038.959807][T20308] chnl_net:caif_netlink_parms(): no params data found [ 3040.045280][T20308] bridge0: port 1(bridge_slave_0) entered blocking state [ 3040.069401][T20308] bridge0: port 1(bridge_slave_0) entered disabled state [ 3040.092061][T20308] bridge_slave_0: entered allmulticast mode [ 3040.112797][T20308] bridge_slave_0: entered promiscuous mode [ 3040.164373][T20308] bridge0: port 2(bridge_slave_1) entered blocking state [ 3040.191414][T20308] bridge0: port 2(bridge_slave_1) entered disabled state [ 3040.201002][T20308] bridge_slave_1: entered allmulticast mode [ 3040.221940][T20308] bridge_slave_1: entered promiscuous mode [ 3040.333360][T20308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3040.347955][T20308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3040.386236][T20308] team0: Port device team_slave_0 added [ 3040.399081][T20308] team0: Port device team_slave_1 added [ 3040.484752][T20308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3040.492915][T20308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3040.521685][T20308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3040.535486][T20308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3040.547038][T20308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3040.580285][T20308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3040.671605][T20039] Bluetooth: hci1: command tx timeout [ 3040.742281][T20308] hsr_slave_0: entered promiscuous mode [ 3040.754367][T20308] hsr_slave_1: entered promiscuous mode [ 3040.761577][T20308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3040.769594][T20308] Cannot create hsr debugfs directory [ 3042.761938][T20039] Bluetooth: hci1: command tx timeout [ 3043.499049][T20308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3043.793338][T20308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3043.806014][T20308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3043.851954][T20308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3044.110146][T20308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3044.146186][T20308] 8021q: adding VLAN 0 to HW filter on device team0 [ 3044.828036][T20039] Bluetooth: hci1: command tx timeout [ 3045.621850][ T4979] bridge0: port 1(bridge_slave_0) entered blocking state [ 3045.629091][ T4979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3045.699660][ T4979] bridge0: port 2(bridge_slave_1) entered blocking state [ 3045.706885][ T4979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3046.562233][T20308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3046.756175][T20308] veth0_vlan: entered promiscuous mode [ 3046.773295][T20308] veth1_vlan: entered promiscuous mode [ 3046.912793][T20039] Bluetooth: hci1: command tx timeout [ 3046.999292][T20308] veth0_macvtap: entered promiscuous mode [ 3047.015622][T20308] veth1_macvtap: entered promiscuous mode [ 3047.054989][T20308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3047.069226][T20308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.084070][T20308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3047.096206][T20308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.184526][T20308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3047.310874][T20308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3047.413677][T20308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.438667][T20308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3047.481216][T20308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3047.501955][T20308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3047.545236][T20308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.564505][T20308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.591745][T20308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3047.600804][T20308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3048.480887][T10101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3048.493650][T10101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3049.141626][T22086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3049.176665][T22086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3052.503856][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3052.514991][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3052.524497][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3052.560554][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3052.577325][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3052.584908][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3053.235949][T20440] chnl_net:caif_netlink_parms(): no params data found [ 3053.681384][T20440] bridge0: port 1(bridge_slave_0) entered blocking state [ 3053.689754][T20440] bridge0: port 1(bridge_slave_0) entered disabled state [ 3053.697932][T20440] bridge_slave_0: entered allmulticast mode [ 3053.705784][T20440] bridge_slave_0: entered promiscuous mode [ 3053.732671][T20440] bridge0: port 2(bridge_slave_1) entered blocking state [ 3053.740095][T20440] bridge0: port 2(bridge_slave_1) entered disabled state [ 3053.752682][T20440] bridge_slave_1: entered allmulticast mode [ 3053.762182][T20440] bridge_slave_1: entered promiscuous mode [ 3054.674810][ T5776] Bluetooth: hci0: command tx timeout [ 3056.079588][T20440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3056.101860][T20440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3056.213336][T20440] team0: Port device team_slave_0 added [ 3056.248705][T20440] team0: Port device team_slave_1 added [ 3056.329758][T20440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3056.340699][T20440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3056.373504][T20440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3056.433140][T20440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3056.453339][T20440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3056.503087][T20440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3056.615826][T20440] hsr_slave_0: entered promiscuous mode [ 3056.640259][T20440] hsr_slave_1: entered promiscuous mode [ 3056.657812][T20440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3056.665426][T20440] Cannot create hsr debugfs directory [ 3056.756657][ T5776] Bluetooth: hci0: command tx timeout [ 3057.024621][T20440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3057.140328][T20440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3057.296166][T20440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3057.455330][T20440] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3057.823868][T20440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3057.850347][T20440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3057.871183][T20440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3057.911695][T20440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3058.457273][T20440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3058.592223][T20440] 8021q: adding VLAN 0 to HW filter on device team0 [ 3058.666173][T10101] bridge0: port 1(bridge_slave_0) entered blocking state [ 3058.673451][T10101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3058.742421][T18286] bridge0: port 2(bridge_slave_1) entered blocking state [ 3058.749617][T18286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3058.829024][ T5776] Bluetooth: hci0: command tx timeout [ 3059.154596][T20597] pim6reg: tun_chr_ioctl cmd 1074025677 [ 3059.166342][T20597] pim6reg: linktype set to 769 [ 3059.561946][T20440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3059.764966][T20440] veth0_vlan: entered promiscuous mode [ 3059.808318][T20440] veth1_vlan: entered promiscuous mode [ 3059.926297][T20440] veth0_macvtap: entered promiscuous mode [ 3060.073450][T20440] veth1_macvtap: entered promiscuous mode [ 3060.212305][T20440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3060.246534][T20440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3060.260798][T20440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3060.272229][T20440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3060.283463][T20440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3060.295451][T20440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3060.312395][T20440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3060.418627][T20440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3060.461646][T20440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3060.496681][T20440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3060.507904][T20440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3060.522831][T20440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3060.534383][T20440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3060.548190][T20440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3060.563374][T20440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3060.572764][T20440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3060.596658][T20440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3060.621289][T20440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3060.918009][ T5776] Bluetooth: hci0: command tx timeout [ 3061.368484][T16242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3061.376357][T16242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3061.648418][ T6151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3061.656305][ T6151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3062.942244][T20745] tun0: tun_chr_ioctl cmd 1074025681 [ 3072.149924][T20891] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15268'. [ 3073.896363][T20904] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15271'. [ 3074.262705][T20904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3074.349626][T20904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3074.399101][T20904] bond0 (unregistering): Released all slaves [ 3079.062878][T20951] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15282'. [ 3079.118785][T20952] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15283'. [ 3079.449188][T20952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3079.532947][T20952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3079.598426][T20952] bond0 (unregistering): Released all slaves [ 3080.982414][T20976] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15290'. [ 3081.861713][T20988] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15294'. [ 3082.191189][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.197994][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 3084.944784][T21008] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15299'. [ 3085.191650][T21008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3085.299393][T21008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3085.432974][T21008] bond0 (unregistering): Released all slaves [ 3091.006317][T21088] syzkaller0: entered promiscuous mode [ 3091.016685][T21088] syzkaller0: entered allmulticast mode [ 3091.679019][T21109] syz.0.15338[21109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3091.679439][T21109] syz.0.15338[21109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3096.640189][T21324] syz.1.15439[21324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3096.652383][T21324] syz.1.15439[21324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3098.792229][T21348] syz.0.15450[21348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3098.826886][T21348] syz.0.15450[21348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3099.536162][T21383] syz.0.15466[21383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3099.576954][T21383] syz.0.15466[21383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3099.883419][T21392] syzkaller0: entered promiscuous mode [ 3099.923422][T21392] syzkaller0: entered allmulticast mode [ 3100.289647][T21418] syz.1.15481[21418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3100.290020][T21418] syz.1.15481[21418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3101.377656][T21453] syzkaller0: entered promiscuous mode [ 3101.405344][T21453] syzkaller0: entered allmulticast mode [ 3106.008720][T21536] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3106.049097][T21536] syzkaller0: entered promiscuous mode [ 3106.054871][T21536] syzkaller0: entered allmulticast mode [ 3108.780270][T21556] tap0: tun_chr_ioctl cmd 1074025680 [ 3112.111152][T21627] syz.2.15565[21627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3112.111480][T21627] syz.2.15565[21627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3115.881831][T21650] syz.2.15574[21650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3116.078527][T21650] syz.2.15574[21650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3117.254688][T21681] syz.0.15585[21681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3117.290330][T21681] syz.0.15585[21681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3120.800922][T21753] syzkaller0: entered promiscuous mode [ 3120.877515][T21753] syzkaller0: entered allmulticast mode [ 3121.285939][T21762] syzkaller0: entered promiscuous mode [ 3121.291698][T21762] syzkaller0: entered allmulticast mode [ 3123.626401][T21805] syz.3.15632[21805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3123.626812][T21805] syz.3.15632[21805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3125.313984][T21826] syz.3.15641[21826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3125.332263][T21826] syz.3.15641[21826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3127.920585][T21847] syz.1.15651[21847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3128.037844][T21847] syz.1.15651[21847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3129.400770][T21876] syzkaller0: entered promiscuous mode [ 3129.457044][T21876] syzkaller0: entered allmulticast mode [ 3130.971836][T21912] syzkaller0: entered promiscuous mode [ 3130.986811][T21912] syzkaller0: entered allmulticast mode [ 3133.713607][T21956] syzkaller0: entered promiscuous mode [ 3133.794095][T21956] syzkaller0: entered allmulticast mode [ 3135.425571][T21990] syzkaller0: entered promiscuous mode [ 3135.496594][T21990] syzkaller0: entered allmulticast mode [ 3137.156627][T22005] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 3139.620581][T22005] sit0: entered allmulticast mode [ 3140.030816][T22028] syzkaller0: entered promiscuous mode [ 3140.036345][T22028] syzkaller0: entered allmulticast mode [ 3140.588637][T20039] Bluetooth: hci4: command 0x0406 tx timeout [ 3142.401937][T22069] syz.3.15742[22069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3142.402291][T22069] syz.3.15742[22069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3143.654256][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.676990][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 3149.669311][T22106] syz.0.15751[22106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3149.669631][T22106] syz.0.15751[22106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3149.933926][T22114] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 3149.953062][T22114] syzkaller0: linktype set to 774 [ 3150.628267][T22134] syz.0.15760[22134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3150.628604][T22134] syz.0.15760[22134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3150.829220][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 3155.395419][T10076] veth0_to_team: left allmulticast mode [ 3155.441512][T10076] veth0_to_team: left promiscuous mode [ 3155.463903][T10076] Ÿë: port 2(veth0_to_team) entered disabled state [ 3155.495209][T22161] syz.3.15770[22161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3155.495550][T22161] syz.3.15770[22161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3156.002207][T10076] ` (unregistering): Port device geneve1 removed [ 3156.088049][T10076] ` (unregistering): Port device hsr_slave_0 removed [ 3156.229841][T10076] ` (unregistering): Port device team_slave_1 removed [ 3159.100678][T22198] syz.1.15781[22198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3159.101004][T22198] syz.1.15781[22198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3159.204894][T10076] tipc: Left network mode [ 3159.301565][T10076] tipc: Left network mode [ 3159.350390][T10076] tipc: Left network mode [ 3159.509611][T22215] syzkaller0: entered promiscuous mode [ 3159.528179][T22215] syzkaller0: entered allmulticast mode [ 3161.075059][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 3161.319103][T10076] ip6gretap0 (unregistering): left allmulticast mode [ 3161.347103][T10076] ip6gretap0 (unregistering): left promiscuous mode [ 3161.386761][T10076] Ÿë: port 1(ip6gretap0) entered disabled state [ 3161.715645][T10076] ip6gretap0 (unregistering): left allmulticast mode [ 3161.745342][T10076] ip6gretap0 (unregistering): left promiscuous mode [ 3161.765875][T10076] Ÿë: port 1(ip6gretap0) entered disabled state [ 3161.915416][T22242] syz.1.15794[22242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3161.932633][T22242] syz.1.15794[22242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3162.101570][T10076] ip6gretap0 (unregistering): left allmulticast mode [ 3162.328408][T10076] ip6gretap0 (unregistering): left promiscuous mode [ 3162.335115][T10076] Ÿë: port 1(ip6gretap0) entered disabled state [ 3163.533143][T10076] erspan0 (unregistering): left allmulticast mode [ 3163.546299][T10076] erspan0 (unregistering): left promiscuous mode [ 3163.555613][T10076] bridge0: port 1(erspan0) entered disabled state [ 3163.636394][T10076] erspan0 (unregistering): left allmulticast mode [ 3163.643158][T10076] erspan0 (unregistering): left promiscuous mode [ 3163.650816][T10076] bridge0: port 1(erspan0) entered disabled state [ 3163.846086][T10076] gretap0 (unregistering): left allmulticast mode [ 3163.854531][T10076] gretap0 (unregistering): left promiscuous mode [ 3163.916734][T10076] bridge0: port 2(gretap0) entered disabled state [ 3165.662721][T22304] syzkaller0: entered promiscuous mode [ 3165.686346][T22304] syzkaller0: entered allmulticast mode [ 3168.742076][T22346] syzkaller0: entered promiscuous mode [ 3168.764715][T22346] syzkaller0: entered allmulticast mode [ 3173.816131][T22405] syzkaller0: entered promiscuous mode [ 3173.828276][T22405] syzkaller0: entered allmulticast mode [ 3175.528105][T22482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15881'. [ 3176.426689][T20039] Bluetooth: hci0: command 0x0406 tx timeout [ 3177.066682][T22482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15881'. [ 3177.230888][T22489] netlink: 'syz.2.15883': attribute type 21 has an invalid length. [ 3177.814422][T22509] syzkaller0: entered promiscuous mode [ 3177.853916][T22509] syzkaller0: entered allmulticast mode [ 3180.882881][T22542] netlink: 'syz.0.15905': attribute type 10 has an invalid length. [ 3181.162037][T22555] netlink: 'syz.1.15912': attribute type 12 has an invalid length. [ 3181.181727][T22555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15912'. [ 3181.619117][T22578] syzkaller0: entered promiscuous mode [ 3181.624644][T22578] syzkaller0: entered allmulticast mode [ 3184.356507][T22624] netlink: 'syz.3.15938': attribute type 10 has an invalid length. [ 3184.376551][T22624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15938'. [ 3184.385641][T22624] team0: entered promiscuous mode [ 3184.416564][T22624] team_slave_0: entered promiscuous mode [ 3184.422452][T22624] team_slave_1: entered promiscuous mode [ 3184.446711][T22624] team0: entered allmulticast mode [ 3184.451889][T22624] team_slave_0: entered allmulticast mode [ 3184.478612][T22624] team_slave_1: entered allmulticast mode [ 3184.500886][T22624] bridge0: port 3(team0) entered blocking state [ 3184.526018][T22624] bridge0: port 3(team0) entered disabled state [ 3184.541575][T22624] bridge0: port 3(team0) entered blocking state [ 3184.548112][T22624] bridge0: port 3(team0) entered forwarding state [ 3185.085392][T22649] syzkaller0: entered promiscuous mode [ 3185.103579][T22649] syzkaller0: entered allmulticast mode [ 3185.146235][T22652] syzkaller0: entered promiscuous mode [ 3185.159351][T22652] syzkaller0: entered allmulticast mode [ 3187.578020][T22665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3187.679980][T22670] netlink: 'syz.3.15958': attribute type 10 has an invalid length. [ 3187.917591][T22677] netlink: 'syz.1.15961': attribute type 12 has an invalid length. [ 3187.931920][T22677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15961'. [ 3188.001469][T22675] syzkaller0: entered promiscuous mode [ 3188.010942][T22675] syzkaller0: entered allmulticast mode [ 3188.604405][T22695] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.15968'. [ 3188.615375][T22695] bridge_slave_1: default FDB implementation only supports local addresses [ 3188.963348][T22705] netlink: 'syz.3.15973': attribute type 12 has an invalid length. [ 3188.972700][T22705] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15973'. [ 3189.154892][T22711] syzkaller0: entered promiscuous mode [ 3189.169059][T22711] syzkaller0: entered allmulticast mode [ 3189.593355][T22731] tap0: tun_chr_ioctl cmd 1074025677 [ 3189.602311][T22731] tap0: linktype set to 776 [ 3189.846232][T22736] netlink: 'syz.2.15985': attribute type 12 has an invalid length. [ 3189.879563][T22736] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15985'. [ 3190.230904][T22743] syzkaller0: entered promiscuous mode [ 3190.256953][T22743] syzkaller0: entered allmulticast mode [ 3191.520175][ T5776] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 3193.436178][T22854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3193.627490][T22869] netlink: 'syz.0.16036': attribute type 12 has an invalid length. [ 3193.636535][T22869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16036'. [ 3194.177842][T22886] netlink: 'syz.1.16044': attribute type 21 has an invalid length. [ 3194.863762][T22899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16047'. [ 3195.089974][T22909] netlink: 'syz.2.16048': attribute type 12 has an invalid length. [ 3195.137410][T22909] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16048'. [ 3197.648817][T23000] syzkaller0: entered promiscuous mode [ 3197.672491][T23000] syzkaller0: entered allmulticast mode [ 3198.084552][T23018] netlink: 'syz.0.16092': attribute type 12 has an invalid length. [ 3198.116651][T23018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16092'. [ 3198.389706][T23039] netlink: 'syz.3.16097': attribute type 10 has an invalid length. [ 3198.416734][T23039] netlink: 'syz.3.16097': attribute type 19 has an invalid length. [ 3198.434228][T23039] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16097'. [ 3198.486785][T23043] mac80211_hwsim hwsim1213 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3199.015649][T23054] syzkaller0: entered promiscuous mode [ 3199.023073][T23054] syzkaller0: entered allmulticast mode [ 3199.113378][T23066] netlink: 'syz.1.16106': attribute type 12 has an invalid length. [ 3199.126758][T23066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16106'. [ 3199.348494][T23081] netlink: 'syz.1.16112': attribute type 29 has an invalid length. [ 3199.366356][T23081] netlink: 'syz.1.16112': attribute type 29 has an invalid length. [ 3199.406833][T23081] netlink: 'syz.1.16112': attribute type 29 has an invalid length. [ 3199.662812][T23091] syzkaller0: entered promiscuous mode [ 3199.677579][T23091] syzkaller0: entered allmulticast mode [ 3199.778993][T23095] netlink: 'syz.0.16120': attribute type 12 has an invalid length. [ 3199.792065][T23101] netlink: 'syz.3.16121': attribute type 29 has an invalid length. [ 3199.794824][T23095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16120'. [ 3200.417794][T23127] syzkaller0: entered promiscuous mode [ 3200.423318][T23127] syzkaller0: entered allmulticast mode [ 3200.498616][T23131] validate_nla: 4 callbacks suppressed [ 3200.498636][T23131] netlink: 'syz.3.16134': attribute type 29 has an invalid length. [ 3200.591271][T23131] netlink: 'syz.3.16134': attribute type 29 has an invalid length. [ 3200.599844][T23135] netlink: 'syz.1.16136': attribute type 12 has an invalid length. [ 3200.608660][T23135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16136'. [ 3200.626654][T23137] netlink: 'syz.3.16134': attribute type 29 has an invalid length. [ 3201.068243][T18286] wlan1: Trigger new scan to find an IBSS to join [ 3201.210018][T23160] syzkaller0: entered promiscuous mode [ 3201.215530][T23160] syzkaller0: entered allmulticast mode [ 3201.294128][T23162] netlink: 'syz.0.16148': attribute type 12 has an invalid length. [ 3201.302555][T23162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16148'. [ 3201.581787][T23179] netlink: 'syz.3.16155': attribute type 10 has an invalid length. [ 3201.897907][T23190] syzkaller0: entered promiscuous mode [ 3201.903446][T23190] syzkaller0: entered allmulticast mode [ 3201.985069][T23192] netlink: 'syz.0.16160': attribute type 12 has an invalid length. [ 3201.994711][T23192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16160'. [ 3202.378877][T23211] netlink: 'syz.1.16170': attribute type 10 has an invalid length. [ 3202.656800][T23218] syzkaller0: entered promiscuous mode [ 3202.683412][T23218] syzkaller0: entered allmulticast mode [ 3202.842699][T23223] netlink: 'syz.0.16175': attribute type 12 has an invalid length. [ 3202.866540][T23223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16175'. [ 3203.617968][T23249] syzkaller0: entered promiscuous mode [ 3203.623480][T23249] syzkaller0: entered allmulticast mode [ 3203.766353][T23247] netlink: 'syz.2.16186': attribute type 12 has an invalid length. [ 3203.785961][T23247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16186'. [ 3204.343274][T23281] syzkaller0: entered promiscuous mode [ 3204.357913][T23281] syzkaller0: entered allmulticast mode [ 3204.465252][T23285] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16203'. [ 3204.646275][ T5776] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 3204.646359][ T5776] Bluetooth: hci1: Malformed LE Event: 0x0d [ 3204.760403][T23300] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.16207'. [ 3205.090527][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.096947][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.181701][ T5776] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 3205.181758][ T5776] Bluetooth: hci1: Malformed LE Event: 0x0d [ 3205.761150][T23315] validate_nla: 3 callbacks suppressed [ 3205.761164][T23315] netlink: 'syz.0.16217': attribute type 12 has an invalid length. [ 3205.786135][T23315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16217'. [ 3205.930373][T23326] netlink: 'syz.2.16223': attribute type 29 has an invalid length. [ 3206.028188][T23326] netlink: 'syz.2.16223': attribute type 29 has an invalid length. [ 3206.040355][T23331] netlink: 'syz.2.16223': attribute type 29 has an invalid length. [ 3206.067049][T23333] netlink: 'syz.2.16223': attribute type 29 has an invalid length. [ 3206.130038][T23326] netlink: 'syz.2.16223': attribute type 29 has an invalid length. [ 3206.383754][ T5776] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 3206.383793][ T5776] Bluetooth: hci1: Malformed LE Event: 0x0d [ 3206.519639][T23351] netlink: 'syz.2.16233': attribute type 12 has an invalid length. [ 3206.538730][T23351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16233'. [ 3207.307817][ T5776] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 3207.526633][T23383] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 3207.599807][T23387] netlink: 'syz.1.16251': attribute type 12 has an invalid length. [ 3207.636585][T23387] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16251'. [ 3207.850707][ T5776] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 3208.435995][T23416] netlink: 'syz.0.16264': attribute type 12 has an invalid length. [ 3208.455299][T23416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16264'. [ 3211.275149][T23452] netlink: 'syz.3.16280': attribute type 12 has an invalid length. [ 3211.296953][T23452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16280'. [ 3211.383762][T23457] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 3212.053491][T23477] netlink: 'syz.0.16291': attribute type 12 has an invalid length. [ 3212.066470][T23477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16291'. [ 3212.073252][T23479] ref_ctr_offset mismatch. inode: 0x56a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 3212.293246][T23492] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.16295'. [ 3212.373968][ T5776] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 3213.228433][ T5776] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 3213.860190][T23550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16320'. [ 3214.123985][ T5776] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 3214.329915][T23565] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 3215.256812][T23597] ref_ctr_offset mismatch. inode: 0x691 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 3216.175081][T23634] ref_ctr_offset mismatch. inode: 0x6ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 3216.605348][T23650] netlink: 'syz.3.16362': attribute type 10 has an invalid length. [ 3216.656638][T23650] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16362'. [ 3216.687191][T23650] veth0_vlan: entered allmulticast mode [ 3216.745707][T23650] bridge0: port 4(veth0_vlan) entered blocking state [ 3216.767457][T23650] bridge0: port 4(veth0_vlan) entered disabled state [ 3216.805813][T23650] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3217.926310][ T5776] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 3218.529339][T23730] netlink: 'syz.2.16398': attribute type 5 has an invalid length. [ 3219.244146][T23761] syzkaller0: entered promiscuous mode [ 3219.256555][T23761] syzkaller0: entered allmulticast mode [ 3222.117708][T23776] netlink: 'syz.0.16418': attribute type 10 has an invalid length. [ 3222.127848][T23792] netlink: 'syz.2.16425': attribute type 12 has an invalid length. [ 3222.135792][T23792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16425'. [ 3223.028424][T23819] netlink: 'syz.3.16437': attribute type 12 has an invalid length. [ 3223.058336][T23819] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16437'. [ 3223.116886][T23817] netlink: 'syz.1.16436': attribute type 10 has an invalid length. [ 3223.124994][T23817] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16436'. [ 3224.171772][T23851] netlink: 'syz.2.16452': attribute type 12 has an invalid length. [ 3224.180192][T23851] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16452'. [ 3224.808856][T23860] netlink: 'syz.2.16456': attribute type 10 has an invalid length. [ 3225.416971][ T5776] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 3225.417042][ T5776] Bluetooth: hci0: Malformed LE Event: 0x0d [ 3225.538787][T23884] netlink: 'syz.3.16464': attribute type 12 has an invalid length. [ 3225.576693][T23884] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16464'. [ 3226.301450][ T5776] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 3226.301486][ T5776] Bluetooth: hci0: Malformed LE Event: 0x0d [ 3228.590947][T23910] netlink: 'syz.3.16477': attribute type 12 has an invalid length. [ 3228.609758][T23910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16477'. [ 3228.800406][ T5776] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 3228.800478][ T5776] Bluetooth: hci2: Malformed LE Event: 0x0d [ 3230.096312][T23977] netlink: 'syz.2.16505': attribute type 12 has an invalid length. [ 3230.125644][T23977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16505'. [ 3230.995086][T24016] netlink: 'syz.3.16522': attribute type 12 has an invalid length. [ 3231.007029][T24016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16522'. [ 3231.708326][T24044] syzkaller0: entered promiscuous mode [ 3231.735755][T24044] syzkaller0: entered allmulticast mode [ 3237.331974][T24150] syzkaller0: entered promiscuous mode [ 3237.347262][T24150] syzkaller0: entered allmulticast mode [ 3251.126832][T24302] syzkaller0: entered promiscuous mode [ 3251.132359][T24302] syzkaller0: entered allmulticast mode [ 3255.839598][T24398] syzkaller0: entered promiscuous mode [ 3255.845254][T24398] syzkaller0: entered allmulticast mode [ 3258.970686][T24440] syzkaller0: entered promiscuous mode [ 3258.997404][T24440] syzkaller0: entered allmulticast mode [ 3259.014112][T24440] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 3259.700534][T24467] syz.3.16705[24467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3259.700778][T24467] syz.3.16705[24467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3260.059972][T24477] syzkaller0: entered promiscuous mode [ 3260.151630][T24477] syzkaller0: entered allmulticast mode [ 3260.587805][T24499] syz.1.16718[24499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3260.588035][T24499] syz.1.16718[24499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3262.686055][T24526] syz.3.16729[24526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3262.702807][T24526] syz.3.16729[24526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3266.550280][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.573488][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.016680][T24549] syz.0.16738[24549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3267.016921][T24549] syz.0.16738[24549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3267.719410][T24560] syzkaller0: entered promiscuous mode [ 3267.879637][T24574] syz.0.16749[24574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3267.879881][T24574] syz.0.16749[24574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3268.399569][T24584] bridge0: port 3(team0) entered disabled state [ 3268.417755][T24584] bridge0: port 2(bridge_slave_1) entered disabled state [ 3268.425365][T24584] bridge0: port 1(bridge_slave_0) entered disabled state [ 3268.447540][T24584] bridge0: entered promiscuous mode [ 3269.724732][T24599] syz.3.16760[24599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3269.724967][T24599] syz.3.16760[24599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3271.137602][T24618] syz.3.16769[24618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3271.149665][T24618] syz.3.16769[24618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3273.232682][T24646] syz.2.16779[24646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3273.303474][T24646] syz.2.16779[24646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3274.625643][T24671] syz.3.16791[24671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3274.648206][T24671] syz.3.16791[24671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3275.909044][T24703] syz.1.16804[24703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3275.924331][T24703] syz.1.16804[24703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3277.753118][T24731] syz.1.16814[24731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3277.823869][T24731] syz.1.16814[24731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3278.765323][T24753] syz.3.16824[24753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3278.793499][T24753] syz.3.16824[24753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3279.856644][T24776] syz.0.16833[24776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3279.920084][T24776] syz.0.16833[24776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3281.309861][T24808] syz.2.16844[24808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3281.339252][T24792] syzkaller0: entered promiscuous mode [ 3281.356820][T24808] syz.2.16844[24808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3281.357208][T24792] syzkaller0: entered allmulticast mode [ 3283.583858][T24813] nr0: port 1(hsr0) entered blocking state [ 3283.596607][T24813] nr0: port 1(hsr0) entered disabled state [ 3283.602760][T24813] hsr0: entered allmulticast mode [ 3283.617185][T24813] hsr_slave_0: entered allmulticast mode [ 3283.623281][T24813] hsr_slave_1: entered allmulticast mode [ 3283.639299][T24813] hsr0: entered promiscuous mode [ 3284.248666][T24831] syz.3.16855[24831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3284.248905][T24831] syz.3.16855[24831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3284.359598][T24833] syzkaller0: entered promiscuous mode [ 3284.396596][T24833] syzkaller0: entered allmulticast mode [ 3289.729492][T24908] syzkaller0: entered promiscuous mode [ 3289.735903][T24908] syzkaller0: entered allmulticast mode [ 3292.726802][T24939] [ 3292.729514][T24939] ============================= [ 3292.734391][T24939] WARNING: suspicious RCU usage [ 3292.739349][T24939] syzkaller #0 Not tainted [ 3292.743784][T24939] ----------------------------- [ 3292.748935][T24939] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 3292.757766][T24939] [ 3292.757766][T24939] other info that might help us debug this: [ 3292.757766][T24939] [ 3292.768486][T24939] [ 3292.768486][T24939] rcu_scheduler_active = 2, debug_locks = 1 [ 3292.776647][T24939] 1 lock held by syz.0.16903/24939: [ 3292.782033][T24939] #0: ffffffff8d132180 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 3292.792415][T24939] [ 3292.792415][T24939] stack backtrace: [ 3292.798346][T24939] CPU: 0 PID: 24939 Comm: syz.0.16903 Not tainted syzkaller #0 [ 3292.805903][T24939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3292.815978][T24939] Call Trace: [ 3292.819273][T24939] [ 3292.822215][T24939] dump_stack_lvl+0x18c/0x250 [ 3292.826922][T24939] ? show_regs_print_info+0x20/0x20 [ 3292.832145][T24939] ? load_image+0x400/0x400 [ 3292.836683][T24939] lockdep_rcu_suspicious+0x1e1/0x300 [ 3292.842084][T24939] get_callchain_entry+0x2a9/0x3c0 [ 3292.847227][T24939] get_perf_callchain+0xc6/0x510 [ 3292.852175][T24939] ? put_callchain_entry+0xb0/0xb0 [ 3292.857283][T24939] __bpf_get_stack+0x2e4/0x540 [ 3292.862042][T24939] ? stack_map_get_build_id_offset+0x720/0x720 [ 3292.868203][T24939] ? __cant_sleep+0x220/0x220 [ 3292.872909][T24939] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 3292.878572][T24939] bpf_get_stack_raw_tp+0x1a9/0x210 [ 3292.883785][T24939] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 3292.889238][T24939] bpf_prog_run_pin_on_cpu+0xaa/0x150 [ 3292.894620][T24939] bpf_prog_test_run_syscall+0x317/0x4a0 [ 3292.900280][T24939] ? sock_gen_cookie+0x60/0x60 [ 3292.905077][T24939] ? sock_gen_cookie+0x60/0x60 [ 3292.909863][T24939] bpf_prog_test_run+0x321/0x390 [ 3292.914826][T24939] __sys_bpf+0x49d/0x890 [ 3292.919088][T24939] ? bpf_link_show_fdinfo+0x390/0x390 [ 3292.924472][T24939] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3292.930403][T24939] ? lock_chain_count+0x20/0x20 [ 3292.935282][T24939] __x64_sys_bpf+0x7c/0x90 [ 3292.939729][T24939] do_syscall_64+0x55/0xa0 [ 3292.944171][T24939] ? clear_bhb_loop+0x40/0x90 [ 3292.948954][T24939] ? clear_bhb_loop+0x40/0x90 [ 3292.953654][T24939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3292.959576][T24939] RIP: 0033:0x7ff23f39c799 [ 3292.964007][T24939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3292.983643][T24939] RSP: 002b:00007ff2401e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3292.992062][T24939] RAX: ffffffffffffffda RBX: 00007ff23f615fa0 RCX: 00007ff23f39c799 [ 3293.000035][T24939] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 3293.008004][T24939] RBP: 00007ff23f432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3293.015973][T24939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3293.023942][T24939] R13: 00007ff23f616038 R14: 00007ff23f615fa0 R15: 00007ffcfe4edc78 [ 3293.031920][T24939] [ 3293.165126][T24945] bridge0: port 2(bridge_slave_1) entered disabled state [ 3293.173226][T24945] bridge0: port 1(bridge_slave_0) entered disabled state [ 3293.183558][T24945] bridge0: entered promiscuous mode