last executing test programs: 11.592000813s ago: executing program 1 (id=38803): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, &(0x7f0000000200)=r1, 0x4) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0x8) 10.92000032s ago: executing program 3 (id=38806): socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.91373045s ago: executing program 1 (id=38816): sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, 0x0, 0x101d0) 10.91299028s ago: executing program 2 (id=38809): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x3, 0x29fd, 0x84, 0x105}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10.781176443s ago: executing program 2 (id=38810): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x4f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0x5, 0x6}, {0x2, 0x0, 0xf, 0xa}], 0x10, 0x4000000}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000)=r3, 0xc) 10.591518928s ago: executing program 1 (id=38811): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="1f75fe21cd52", 0x6}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x18}, 0xff00) 10.442418172s ago: executing program 1 (id=38812): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 10.442179792s ago: executing program 2 (id=38813): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000640)=r1, 0x4) 8.749013903s ago: executing program 1 (id=38815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x36) 8.748743054s ago: executing program 2 (id=38817): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x100000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x0, 'net_prio'}]}, 0xa) 8.671671766s ago: executing program 3 (id=38830): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0xffffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.552672459s ago: executing program 2 (id=38819): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 8.552406849s ago: executing program 4 (id=38820): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xd}, 0x21, 0x0, 0x0, 0x0, 0x3, 0x200, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000300000000000000000000010500000010000001000000000000000902"], 0x0, 0x4e}, 0x28) 8.538004639s ago: executing program 0 (id=38833): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000c40), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0xc46, 0x5, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000000000000b703000000000000850000007c000000b70000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, &(0x7f0000000200)="000000000000000002", 0x0}, 0x50) 8.417115932s ago: executing program 2 (id=38821): socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffffc1, 0xa5}, 0x0, 0x10, 0x4, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000080)) 5.551023393s ago: executing program 0 (id=38822): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x103, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x20) 5.490045524s ago: executing program 3 (id=38824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 5.469527745s ago: executing program 4 (id=38825): sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, 0x0, 0x101d0) 4.930766308s ago: executing program 4 (id=38827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x6f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 4.895015029s ago: executing program 3 (id=38828): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.758852433s ago: executing program 4 (id=38829): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x712, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)}, 0x10000) 4.758061662s ago: executing program 0 (id=38841): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.615102866s ago: executing program 0 (id=38831): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 4.608052706s ago: executing program 4 (id=38832): socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.481454663s ago: executing program 0 (id=38834): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.481221083s ago: executing program 3 (id=38835): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 1.14623ms ago: executing program 1 (id=38836): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000640)=r1, 0x4) 885.08µs ago: executing program 3 (id=38837): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000200), 0x4) 625.48µs ago: executing program 4 (id=38838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 0s ago: executing program 0 (id=38847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') kernel console output (not intermixed with test programs): 92585][ T7787] netlink: 'syz.1.32545': attribute type 2 has an invalid length. [ 1667.741837][ T7791] netlink: 'syz.0.32542': attribute type 2 has an invalid length. [ 1668.341964][T27156] tipc: Subscription rejected, illegal request [ 1668.825480][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.837552][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.112170][ T7838] __nla_validate_parse: 6 callbacks suppressed [ 1669.112187][ T7838] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.32567'. [ 1669.238295][ T7840] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.32565'. [ 1669.449175][T27156] tipc: Subscription rejected, illegal request [ 1669.472952][ T7848] netlink: 'syz.4.32571': attribute type 2 has an invalid length. [ 1669.503857][ T7848] netlink: 'syz.4.32571': attribute type 1 has an invalid length. [ 1669.681026][ T7854] netlink: 'syz.3.32575': attribute type 7 has an invalid length. [ 1669.930028][ T7858] netlink: 'syz.2.32577': attribute type 2 has an invalid length. [ 1669.960883][ T7860] netlink: 'syz.1.32580': attribute type 2 has an invalid length. [ 1669.994798][ T7860] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.32580'. [ 1670.519355][ T6629] tipc: Subscription rejected, illegal request [ 1670.759914][ T7892] tun0: tun_chr_ioctl cmd 1074025675 [ 1670.773657][ T7892] tun0: persist enabled [ 1670.798534][ T7892] tun0: tun_chr_ioctl cmd 1074025675 [ 1670.823759][ T7892] tun0: persist enabled [ 1671.901624][ T7915] netlink: 'syz.0.32604': attribute type 8 has an invalid length. [ 1671.915527][ T7915] netlink: 'syz.0.32604': attribute type 7 has an invalid length. [ 1671.937805][ T7915] netlink: 126196 bytes leftover after parsing attributes in process `syz.0.32604'. [ 1672.034525][ T7921] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.32607'. [ 1673.011286][ T5576] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1673.327698][ T7960] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.32622'. [ 1673.334339][ T4334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1673.471274][ T7969] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.32628'. [ 1673.586223][ T7973] tun0: tun_chr_ioctl cmd 1074025675 [ 1673.593660][ T7973] tun0: persist enabled [ 1673.609585][ T7973] tun0: tun_chr_ioctl cmd 1074025675 [ 1673.623910][ T7973] tun0: persist enabled [ 1674.068258][ T7991] netlink: 'syz.1.32635': attribute type 7 has an invalid length. [ 1674.187264][ T7996] netlink: 'syz.2.32638': attribute type 8 has an invalid length. [ 1674.205787][ T7996] netlink: 'syz.2.32638': attribute type 7 has an invalid length. [ 1674.223664][ T7996] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.32638'. [ 1674.896785][ T8031] netlink: 'syz.1.32655': attribute type 8 has an invalid length. [ 1674.953164][ T8031] netlink: 'syz.1.32655': attribute type 7 has an invalid length. [ 1674.973292][ T8031] netlink: 126196 bytes leftover after parsing attributes in process `syz.1.32655'. [ 1675.216969][ T8041] netlink: 'syz.1.32661': attribute type 3 has an invalid length. [ 1675.275949][ T8041] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.32661'. [ 1677.755427][ T8108] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.32705'. [ 1677.815043][ T8108] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1678.292237][ T8125] netlink: 'syz.4.32700': attribute type 3 has an invalid length. [ 1678.325186][ T8125] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.32700'. [ 1679.347541][ T8164] netlink: 'syz.3.32718': attribute type 3 has an invalid length. [ 1679.367935][ T8164] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.32718'. [ 1680.565970][ T8197] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.32731'. [ 1680.575908][ T8197] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1681.591060][ T8214] netlink: 176 bytes leftover after parsing attributes in process `syz.4.32739'. [ 1683.705549][ T8308] netlink: 176 bytes leftover after parsing attributes in process `syz.2.32783'. [ 1684.031245][ T8328] netlink: 10 bytes leftover after parsing attributes in process `syz.2.32794'. [ 1684.421307][ T8347] netlink: 176 bytes leftover after parsing attributes in process `syz.1.32799'. [ 1685.026322][ T8382] netlink: 176 bytes leftover after parsing attributes in process `syz.2.32819'. [ 1686.594223][ T8437] netlink: 176 bytes leftover after parsing attributes in process `syz.4.32846'. [ 1687.314568][ T8477] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.32865'. [ 1693.381984][ T8579] netlink: 'syz.1.32910': attribute type 29 has an invalid length. [ 1693.445573][ T8579] netlink: 'syz.1.32910': attribute type 29 has an invalid length. [ 1693.489029][ T8579] netlink: 'syz.1.32910': attribute type 29 has an invalid length. [ 1693.515936][ T8579] netlink: 'syz.1.32910': attribute type 29 has an invalid length. [ 1693.550662][ T8579] netlink: 'syz.1.32910': attribute type 29 has an invalid length. [ 1694.136039][ T8614] netlink: 'syz.3.32929': attribute type 29 has an invalid length. [ 1694.155780][ T8614] netlink: 'syz.3.32929': attribute type 29 has an invalid length. [ 1694.171643][ T8614] netlink: 'syz.3.32929': attribute type 29 has an invalid length. [ 1694.181317][ T8614] netlink: 'syz.3.32929': attribute type 29 has an invalid length. [ 1694.196286][ T8614] netlink: 'syz.3.32929': attribute type 29 has an invalid length. [ 1694.782830][ T8632] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.32937'. [ 1699.911279][ T8723] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.32979'. [ 1704.038407][ T6629] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1704.345806][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1706.063135][ T8814] validate_nla: 15 callbacks suppressed [ 1706.063153][ T8814] netlink: 'syz.0.33026': attribute type 1 has an invalid length. [ 1706.099609][ T8816] netlink: 176 bytes leftover after parsing attributes in process `syz.4.33014'. [ 1706.103606][ T8814] netlink: 'syz.0.33026': attribute type 1 has an invalid length. [ 1706.143764][ T8814] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.33026'. [ 1709.975516][ T8864] netlink: 'syz.1.33040': attribute type 21 has an invalid length. [ 1709.997913][ T8864] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.33040'. [ 1710.005580][ T8869] netlink: 188 bytes leftover after parsing attributes in process `syz.0.33038'. [ 1710.186439][ T8877] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.33044'. [ 1710.619805][ T8899] netlink: 'syz.3.33056': attribute type 21 has an invalid length. [ 1710.639175][ T8899] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.33056'. [ 1711.239335][ T8919] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.33067'. [ 1711.632482][ T8933] netlink: 'syz.2.33072': attribute type 21 has an invalid length. [ 1711.672430][ T8933] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.33072'. [ 1711.901721][ T8951] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.33081'. [ 1712.255345][ T8961] netlink: 'syz.1.33087': attribute type 29 has an invalid length. [ 1712.298030][ T8961] netlink: 'syz.1.33087': attribute type 29 has an invalid length. [ 1712.344112][ T8964] netlink: 'syz.1.33087': attribute type 29 has an invalid length. [ 1712.389092][ T8961] netlink: 'syz.1.33087': attribute type 29 has an invalid length. [ 1712.431637][ T8961] netlink: 'syz.1.33087': attribute type 29 has an invalid length. [ 1712.719434][ T8974] netlink: 'syz.1.33093': attribute type 10 has an invalid length. [ 1712.749449][ T8974] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.33093'. [ 1713.828829][ T9006] netlink: 'syz.3.33106': attribute type 10 has an invalid length. [ 1713.867839][ T9006] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.33106'. [ 1716.934596][ T9021] netlink: 'syz.4.33116': attribute type 10 has an invalid length. [ 1716.947988][ T9021] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.33116'. [ 1717.237325][ T9037] netlink: 'syz.3.33121': attribute type 1 has an invalid length. [ 1717.273783][ T9037] netlink: 5 bytes leftover after parsing attributes in process `syz.3.33121'. [ 1717.306051][ T9041] netlink: 144 bytes leftover after parsing attributes in process `syz.4.33123'. [ 1717.367794][ T9045] netlink: 22 bytes leftover after parsing attributes in process `syz.0.33127'. [ 1717.427239][ T9047] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.33128'. [ 1717.441094][ T9047] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.33128'. [ 1717.451223][ T9047] netlink: 2 bytes leftover after parsing attributes in process `syz.1.33128'. [ 1717.588109][ T9053] netlink: 22 bytes leftover after parsing attributes in process `syz.2.33140'. [ 1718.535459][ T9080] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.33145'. [ 1718.551270][ T9080] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.33145'. [ 1718.903070][ T9087] netlink: 'syz.0.33158': attribute type 10 has an invalid length. [ 1719.691754][ T9111] netlink: 'syz.1.33160': attribute type 1 has an invalid length. [ 1719.810757][ T9113] netlink: 'syz.2.33161': attribute type 10 has an invalid length. [ 1720.531462][ T9136] netlink: 'syz.0.33172': attribute type 10 has an invalid length. [ 1720.673509][ T9144] netlink: 'syz.3.33173': attribute type 10 has an invalid length. [ 1720.792740][ T9148] netlink: 'syz.0.33175': attribute type 1 has an invalid length. [ 1722.898448][ T9205] netlink: 'syz.1.33203': attribute type 29 has an invalid length. [ 1722.908907][ T9205] netlink: 'syz.1.33203': attribute type 29 has an invalid length. [ 1722.942367][ T9205] netlink: 'syz.1.33203': attribute type 29 has an invalid length. [ 1722.983767][ T9205] netlink: 'syz.1.33203': attribute type 29 has an invalid length. [ 1723.021137][ T9205] netlink: 'syz.1.33203': attribute type 29 has an invalid length. [ 1723.219600][ T9216] netlink: 'syz.1.33209': attribute type 3 has an invalid length. [ 1723.241558][ T9216] __nla_validate_parse: 11 callbacks suppressed [ 1723.241737][ T9216] netlink: 152 bytes leftover after parsing attributes in process `syz.1.33209'. [ 1723.608142][ T9234] netlink: 144 bytes leftover after parsing attributes in process `syz.2.33217'. [ 1724.180703][ T9254] netlink: 'syz.2.33225': attribute type 29 has an invalid length. [ 1724.224019][ T9254] netlink: 'syz.2.33225': attribute type 29 has an invalid length. [ 1724.244157][ T9255] netlink: 'syz.2.33225': attribute type 29 has an invalid length. [ 1724.257254][ T9254] netlink: 'syz.2.33225': attribute type 29 has an invalid length. [ 1724.836504][ T9277] netlink: 144 bytes leftover after parsing attributes in process `syz.3.33234'. [ 1726.071602][ T9318] netlink: 152 bytes leftover after parsing attributes in process `syz.3.33253'. [ 1727.958960][ T9385] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.33285'. [ 1727.975880][ T9387] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.33287'. [ 1729.630005][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller1: link becomes ready [ 1729.650628][ T9458] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1729.663760][ T9458] syzkaller1: Linktype set failed because interface is up [ 1730.267282][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.273994][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.282194][ T9482] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.33332'. [ 1731.064006][ T9518] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.33347'. [ 1731.152761][ T9520] ip6gretap0: mtu less than device minimum [ 1731.480695][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33361'. [ 1731.792641][ T9546] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.33367'. [ 1732.938326][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33387'. [ 1732.966985][ T9603] validate_nla: 13 callbacks suppressed [ 1732.967004][ T9603] netlink: 'syz.1.33388': attribute type 39 has an invalid length. [ 1733.108077][ T9603] device hsr_slave_1 left promiscuous mode [ 1733.430287][ T9625] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.33398'. [ 1733.589077][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33402'. [ 1733.807488][ T9647] netlink: 64771 bytes leftover after parsing attributes in process `syz.3.33406'. [ 1733.894435][ T9650] ip6gretap0: mtu less than device minimum [ 1734.224282][ T9664] netlink: 'syz.4.33416': attribute type 13 has an invalid length. [ 1734.247000][ T9664] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.33416'. [ 1734.269263][ T9666] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.33414'. [ 1735.475227][ T5571] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1735.487996][ T6629] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1735.586411][ T9722] netlink: 'syz.2.33444': attribute type 39 has an invalid length. [ 1735.891171][ T9722] device hsr_slave_1 left promiscuous mode [ 1735.982771][ T9724] netlink: 64771 bytes leftover after parsing attributes in process `syz.1.33446'. [ 1736.221326][ T9748] netlink: 64771 bytes leftover after parsing attributes in process `syz.0.33468'. [ 1736.725177][ T9776] netlink: 'syz.1.33480': attribute type 13 has an invalid length. [ 1736.773758][ T9776] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.33480'. [ 1736.791062][ T9778] netlink: 'syz.4.33470': attribute type 39 has an invalid length. [ 1739.123381][ T9854] netlink: 'syz.2.33504': attribute type 9 has an invalid length. [ 1739.132235][ T9854] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.33504'. [ 1740.550906][ T9858] netlink: 'syz.1.33506': attribute type 1 has an invalid length. [ 1740.577843][ T9864] netlink: 'syz.2.33507': attribute type 4 has an invalid length. [ 1740.579407][ T9858] netlink: 'syz.1.33506': attribute type 1 has an invalid length. [ 1740.627874][ T9858] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.33506'. [ 1741.035256][ T9881] netlink: 'syz.4.33513': attribute type 2 has an invalid length. [ 1741.053632][ T9881] netlink: 'syz.4.33513': attribute type 1 has an invalid length. [ 1741.093252][ T9881] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.33513'. [ 1742.395483][ T9916] netlink: 'syz.4.33531': attribute type 1 has an invalid length. [ 1742.403391][ T9916] netlink: 'syz.4.33531': attribute type 1 has an invalid length. [ 1742.472961][ T9916] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.33531'. [ 1743.370886][ T9942] syz.0.33543[9942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1743.371042][ T9942] syz.0.33543[9942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1743.803808][ T9962] netlink: 'syz.1.33559': attribute type 2 has an invalid length. [ 1743.836811][ T9964] netlink: 'syz.0.33551': attribute type 4 has an invalid length. [ 1743.851147][ T9962] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.33559'. [ 1745.342729][ T9992] validate_nla: 1 callbacks suppressed [ 1745.342746][ T9992] netlink: 'syz.2.33567': attribute type 2 has an invalid length. [ 1745.350148][ T9994] netlink: 'syz.3.33566': attribute type 4 has an invalid length. [ 1745.373313][ T9992] netlink: 'syz.2.33567': attribute type 1 has an invalid length. [ 1745.405181][ T9992] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.33567'. [ 1745.513489][T10003] syz.3.33570[10003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1745.518645][T10003] syz.3.33570[10003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1746.163930][T10029] netlink: 'syz.1.33582': attribute type 4 has an invalid length. [ 1746.219071][T29969] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1746.454420][T10037] syz.4.33586[10037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1746.483923][T10037] syz.4.33586[10037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1748.621535][T10072] netlink: 'syz.4.33600': attribute type 4 has an invalid length. [ 1751.901292][T29969] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1752.062158][T10092] netlink: 'syz.0.33620': attribute type 10 has an invalid length. [ 1752.102584][T10092] netlink: 'syz.0.33620': attribute type 4 has an invalid length. [ 1752.128428][T10092] netlink: 116 bytes leftover after parsing attributes in process `syz.0.33620'. [ 1752.582683][T10107] netlink: 'syz.0.33617': attribute type 4 has an invalid length. [ 1753.285534][T10131] netlink: 'syz.3.33629': attribute type 10 has an invalid length. [ 1753.305450][T10131] netlink: 'syz.3.33629': attribute type 4 has an invalid length. [ 1753.327451][T10131] netlink: 116 bytes leftover after parsing attributes in process `syz.3.33629'. [ 1753.339892][T10131] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1756.554319][T10163] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.33644'. [ 1757.950261][T10206] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.33665'. [ 1758.520800][T10220] netlink: 'syz.4.33672': attribute type 2 has an invalid length. [ 1758.575585][T10220] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33672'. [ 1759.981273][T10258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33687'. [ 1760.007794][T10258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33687'. [ 1760.051701][T10261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33687'. [ 1762.116505][T10323] netlink: 'syz.3.33717': attribute type 10 has an invalid length. [ 1762.141505][T10323] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.33717'. [ 1762.515277][T10345] netlink: 'syz.4.33730': attribute type 10 has an invalid length. [ 1762.708981][T10352] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.33733'. [ 1762.907869][T10358] netlink: 198388 bytes leftover after parsing attributes in process `syz.0.33736'. [ 1763.111987][T10371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.33752'. [ 1763.121816][T10371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.33752'. [ 1763.135885][T10371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.33752'. [ 1763.730815][T10397] netlink: 'syz.4.33753': attribute type 39 has an invalid length. [ 1764.307033][T10421] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.33767'. [ 1764.812666][T10446] netlink: 'syz.2.33779': attribute type 10 has an invalid length. [ 1765.112594][T10452] netlink: 198388 bytes leftover after parsing attributes in process `syz.3.33783'. [ 1765.132690][T10454] tap0: tun_chr_ioctl cmd 1074025675 [ 1765.147498][T10454] tap0: persist enabled [ 1765.180046][T10454] tap0: tun_chr_ioctl cmd 1074025675 [ 1765.191669][T10454] tap0: persist disabled [ 1766.502345][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1766.503931][ T5571] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1766.695683][T10530] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.33817'. [ 1767.659908][T10569] netlink: 'syz.2.33838': attribute type 10 has an invalid length. [ 1767.669033][T10569] netlink: 'syz.2.33838': attribute type 19 has an invalid length. [ 1767.677286][T10569] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.33838'. [ 1767.692575][T10570] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.33837'. [ 1768.551016][T10608] netlink: 'syz.2.33857': attribute type 39 has an invalid length. [ 1768.652467][T10614] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.33860'. [ 1769.085225][T10634] netlink: 'syz.3.33869': attribute type 10 has an invalid length. [ 1769.102331][T10634] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.33869'. [ 1769.609470][T10651] netlink: 'syz.1.33876': attribute type 10 has an invalid length. [ 1769.623690][T10651] netlink: 'syz.1.33876': attribute type 19 has an invalid length. [ 1769.641243][T10651] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.33876'. [ 1770.084868][T10678] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.33889'. [ 1770.170195][T10684] netlink: 'syz.0.33891': attribute type 10 has an invalid length. [ 1770.188072][T10684] netlink: 'syz.0.33891': attribute type 19 has an invalid length. [ 1770.196973][T10684] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.33891'. [ 1771.891115][T10724] netlink: 35347 bytes leftover after parsing attributes in process `syz.2.33909'. [ 1772.846027][T10752] netlink: 35347 bytes leftover after parsing attributes in process `syz.3.33923'. [ 1773.564497][T10782] netlink: 144 bytes leftover after parsing attributes in process `syz.3.33935'. [ 1773.928675][T10782] team0: Port device team_slave_0 removed [ 1774.014750][T10782] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1774.102297][T10788] netlink: 'syz.4.33938': attribute type 21 has an invalid length. [ 1774.124527][T10788] netlink: 156 bytes leftover after parsing attributes in process `syz.4.33938'. [ 1774.163204][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33938'. [ 1774.504329][T10802] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.33946'. [ 1774.690027][T10815] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.33962'. [ 1775.460171][T10841] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.33966'. [ 1775.517643][T10841] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.33966'. [ 1775.536083][T10841] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.33966'. [ 1777.746967][T10874] netlink: 144 bytes leftover after parsing attributes in process `syz.4.33980'. [ 1779.142989][T10915] netlink: 144 bytes leftover after parsing attributes in process `syz.2.34001'. [ 1779.242386][T10915] team0: Port device team_slave_0 removed [ 1779.249661][T10915] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1779.538364][T10930] netlink: 'syz.2.34007': attribute type 39 has an invalid length. [ 1779.573793][T10930] device macvlan0 entered promiscuous mode [ 1779.579988][T10930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1779.614086][T10930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1779.810644][T10943] netlink: 'syz.3.34013': attribute type 21 has an invalid length. [ 1779.825544][T10943] netlink: 'syz.3.34013': attribute type 1 has an invalid length. [ 1779.837741][T10943] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.34013'. [ 1780.982443][T10982] netlink: 'syz.2.34032': attribute type 4 has an invalid length. [ 1781.011412][T10982] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34032'. [ 1781.693672][T11004] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.34041'. [ 1781.703715][T11004] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.34041'. [ 1781.729851][T11004] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.34041'. [ 1782.698037][T11034] netlink: 'syz.1.34055': attribute type 21 has an invalid length. [ 1782.724647][T11034] netlink: 'syz.1.34055': attribute type 1 has an invalid length. [ 1782.732512][T11034] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.34055'. [ 1783.032795][T11048] netlink: 'syz.1.34061': attribute type 39 has an invalid length. [ 1783.053740][T11048] device macvlan0 entered promiscuous mode [ 1783.078749][T11052] netlink: 'syz.4.34065': attribute type 4 has an invalid length. [ 1783.170564][T11052] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34065'. [ 1783.697942][T11074] netlink: 126324 bytes leftover after parsing attributes in process `syz.4.34076'. [ 1784.147513][T11085] netlink: 'syz.3.34081': attribute type 4 has an invalid length. [ 1784.160035][T11085] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34081'. [ 1784.310669][T11093] netlink: 'syz.2.34084': attribute type 2 has an invalid length. [ 1784.374903][T11093] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.34084'. [ 1784.439799][T27156] tipc: Subscription rejected, illegal request [ 1784.790877][T11113] device batadv0 entered promiscuous mode [ 1784.975032][T11125] netlink: 126324 bytes leftover after parsing attributes in process `syz.2.34099'. [ 1786.407625][T11181] device batadv0 entered promiscuous mode [ 1787.558823][T11222] netlink: 'syz.4.34145': attribute type 8 has an invalid length. [ 1787.597325][T11222] netlink: 'syz.4.34145': attribute type 1 has an invalid length. [ 1787.614492][T11222] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.34145'. [ 1788.245682][T11240] netlink: 'syz.4.34153': attribute type 7 has an invalid length. [ 1788.296121][T11240] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.34153'. [ 1789.800981][T11289] netlink: 'syz.3.34176': attribute type 8 has an invalid length. [ 1789.841936][T11289] netlink: 'syz.3.34176': attribute type 1 has an invalid length. [ 1789.891865][T11289] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.34176'. [ 1790.000213][T11293] netlink: 'syz.2.34180': attribute type 7 has an invalid length. [ 1790.029530][T11293] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.34180'. [ 1791.237362][T11328] netlink: 'syz.3.34194': attribute type 7 has an invalid length. [ 1791.270823][T11328] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.34194'. [ 1791.333020][T11334] netlink: 'syz.2.34197': attribute type 8 has an invalid length. [ 1791.358362][T11334] netlink: 'syz.2.34197': attribute type 1 has an invalid length. [ 1791.404055][T11334] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.34197'. [ 1791.711400][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.717919][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.026040][T11379] netlink: 144 bytes leftover after parsing attributes in process `syz.0.34218'. [ 1793.451522][T11397] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.34226'. [ 1793.748871][T11413] netlink: 144 bytes leftover after parsing attributes in process `syz.4.34237'. [ 1794.229906][T11423] netlink: 144 bytes leftover after parsing attributes in process `syz.1.34250'. [ 1797.449752][ T5576] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1797.531847][ T5576] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1800.407511][T11544] sock: sock_timestamping_bind_phc: sock not bind to device [ 1802.901314][T11535] netlink: 144 bytes leftover after parsing attributes in process `syz.3.34282'. [ 1803.610532][T11578] netlink: 'syz.3.34304': attribute type 29 has an invalid length. [ 1803.631306][T11578] netlink: 'syz.3.34304': attribute type 29 has an invalid length. [ 1803.668466][T11582] netlink: 'syz.3.34304': attribute type 29 has an invalid length. [ 1803.712484][T11578] netlink: 'syz.3.34304': attribute type 29 has an invalid length. [ 1803.721774][T11578] netlink: 'syz.3.34304': attribute type 29 has an invalid length. [ 1803.736567][T11578] netlink: 'syz.3.34304': attribute type 29 has an invalid length. [ 1804.662344][T11623] netlink: 'syz.3.34325': attribute type 2 has an invalid length. [ 1804.680982][T11623] netlink: 'syz.3.34325': attribute type 1 has an invalid length. [ 1804.702282][T11623] netlink: 'syz.3.34325': attribute type 8 has an invalid length. [ 1804.728294][T11623] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34325'. [ 1804.868085][T11625] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.34327'. [ 1805.449602][T11639] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.34334'. [ 1805.945580][T11654] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.34340'. [ 1808.204279][T11686] netlink: 'syz.0.34363': attribute type 11 has an invalid length. [ 1808.283773][T11686] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34363'. [ 1808.571676][T11701] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.34356'. [ 1808.659479][T11703] netlink: 'syz.4.34356': attribute type 1 has an invalid length. [ 1808.758789][T11703] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.34356'. [ 1810.609141][T11734] sock: sock_timestamping_bind_phc: sock not bind to device [ 1815.177706][T11762] netlink: 168 bytes leftover after parsing attributes in process `syz.1.34388'. [ 1817.024495][T11798] netlink: 'syz.2.34399': attribute type 11 has an invalid length. [ 1817.041046][T11798] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34399'. [ 1817.263979][T11803] netlink: 'syz.2.34400': attribute type 1 has an invalid length. [ 1817.301941][T11803] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.34400'. [ 1818.939461][T11802] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.34400'. [ 1821.256679][T11853] netlink: 'syz.1.34425': attribute type 11 has an invalid length. [ 1821.266181][T11853] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34425'. [ 1823.400031][T11862] netlink: 'syz.3.34429': attribute type 21 has an invalid length. [ 1823.410020][T11862] IPv6: NLM_F_CREATE should be specified when creating new route [ 1823.426947][T11862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1823.434270][T11862] IPv6: NLM_F_CREATE should be set when creating new route [ 1823.441660][T11862] IPv6: NLM_F_CREATE should be set when creating new route [ 1823.448929][T11862] IPv6: NLM_F_CREATE should be set when creating new route [ 1824.236665][T11881] netlink: 'syz.3.34437': attribute type 11 has an invalid length. [ 1824.297525][T11881] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34437'. [ 1825.221130][T11906] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1826.880288][T11943] netlink: 'syz.3.34468': attribute type 3 has an invalid length. [ 1826.899102][T11943] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.34468'. [ 1827.301632][T11954] netlink: 'syz.4.34472': attribute type 11 has an invalid length. [ 1827.313951][T11954] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34472'. [ 1828.582378][ T5571] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1828.584095][ T5576] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1828.746435][T29969] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 1828.880017][T11996] netlink: 'syz.0.34492': attribute type 21 has an invalid length. [ 1828.892115][T11996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1828.899672][T11996] IPv6: NLM_F_CREATE should be set when creating new route [ 1828.907378][T11996] IPv6: NLM_F_CREATE should be set when creating new route [ 1828.914948][T11996] IPv6: NLM_F_CREATE should be set when creating new route [ 1828.945725][T11990] netlink: 'syz.2.34489': attribute type 11 has an invalid length. [ 1828.973936][T11990] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34489'. [ 1829.375062][T12005] netlink: 168 bytes leftover after parsing attributes in process `syz.1.34496'. [ 1829.957505][T12015] netlink: 168 bytes leftover after parsing attributes in process `syz.0.34512'. [ 1830.172290][T29969] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 1830.218861][T12024] sctp: [Deprecated]: syz.0.34515 (pid 12024) Use of int in maxseg socket option. [ 1830.218861][T12024] Use struct sctp_assoc_value instead [ 1830.538715][T12028] netlink: 'syz.2.34506': attribute type 21 has an invalid length. [ 1830.563993][T12028] IPv6: NLM_F_CREATE should be specified when creating new route [ 1830.582512][T12028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1830.590005][T12028] IPv6: NLM_F_CREATE should be set when creating new route [ 1830.597762][T12028] IPv6: NLM_F_CREATE should be set when creating new route [ 1830.605272][T12028] IPv6: NLM_F_CREATE should be set when creating new route [ 1831.505496][T29969] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1833.927785][T12086] netlink: 'syz.4.34532': attribute type 3 has an invalid length. [ 1833.982481][T12086] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.34532'. [ 1835.240373][T12128] netlink: 'syz.2.34550': attribute type 3 has an invalid length. [ 1835.248562][T12128] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.34550'. [ 1839.215575][T12217] syz.1.34587[12217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1839.215737][T12217] syz.1.34587[12217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1840.132928][T12244] syz.0.34600[12244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1840.151906][T12244] syz.0.34600[12244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1841.681979][T12271] syz.3.34613[12271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1841.699492][T12271] syz.3.34613[12271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1845.335864][T12351] netlink: 'syz.1.34658': attribute type 21 has an invalid length. [ 1845.366225][T12351] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.34658'. [ 1846.273474][T29969] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1846.544840][T12380] netlink: 'syz.1.34663': attribute type 3 has an invalid length. [ 1846.710566][T12386] netlink: 'syz.0.34664': attribute type 21 has an invalid length. [ 1846.719422][T12386] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.34664'. [ 1847.555673][T12422] netlink: 'syz.3.34680': attribute type 21 has an invalid length. [ 1847.580876][T12422] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.34680'. [ 1849.112107][T12459] netlink: 'syz.4.34696': attribute type 21 has an invalid length. [ 1849.151972][T12459] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.34696'. [ 1849.957385][T12498] netlink: 'syz.2.34714': attribute type 21 has an invalid length. [ 1849.995348][T12498] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.34714'. [ 1851.359878][T12528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.34736'. [ 1851.414940][T12528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.34736'. [ 1851.453877][T12530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.34736'. [ 1851.560471][T12536] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.34731'. [ 1851.791865][T12540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.799531][T12540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.153193][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.159613][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.338275][T12561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.34742'. [ 1853.367034][T12561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.34742'. [ 1853.408820][T12566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.34742'. [ 1854.389917][T12570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.397439][T12570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.145840][T12591] delete_channel: no stack [ 1856.411483][T12621] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.34768'. [ 1856.842699][T12631] netlink: 'syz.1.34771': attribute type 9 has an invalid length. [ 1856.905996][T12631] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.34771'. [ 1859.686813][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1859.698075][ T1077] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1860.687108][T12662] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.34785'. [ 1860.740160][T12662] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1861.475641][T12677] netlink: 'syz.0.34790': attribute type 2 has an invalid length. [ 1861.556046][T12677] netlink: 'syz.0.34790': attribute type 1 has an invalid length. [ 1862.301261][T12686] netlink: 'syz.2.34793': attribute type 21 has an invalid length. [ 1862.363647][T12686] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.34793'. [ 1863.303817][T12704] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.34799'. [ 1863.368214][T12704] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1866.352717][T12738] netlink: 'syz.4.34816': attribute type 9 has an invalid length. [ 1866.371705][T12738] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.34816'. [ 1866.392664][T12739] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.34815'. [ 1866.429743][T12739] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1867.348162][T12773] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.34832'. [ 1867.387191][T12773] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1867.405798][T12773] CPU: 0 PID: 12773 Comm: syz.4.34832 Not tainted syzkaller #0 [ 1867.413403][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1867.423486][T12773] Call Trace: [ 1867.426778][T12773] [ 1867.429726][T12773] dump_stack_lvl+0x188/0x24e [ 1867.434423][T12773] ? show_regs_print_info+0x12/0x12 [ 1867.439636][T12773] ? load_image+0x410/0x410 [ 1867.444172][T12773] sysfs_warn_dup+0x8a/0xa0 [ 1867.448687][T12773] sysfs_do_create_link_sd+0xc0/0x110 [ 1867.454064][T12773] device_add+0x83b/0x1050 [ 1867.458486][T12773] wiphy_register+0x1d8b/0x2aa0 [ 1867.463354][T12773] ? cfg80211_event_work+0x40/0x40 [ 1867.468467][T12773] ? minstrel_ht_alloc+0x894/0xa20 [ 1867.473586][T12773] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1867.479659][T12773] ieee80211_register_hw+0x2e33/0x3b00 [ 1867.485127][T12773] ? ieee80211_register_hw+0xf61/0x3b00 [ 1867.490669][T12773] ? ieee80211_register_hw+0xf61/0x3b00 [ 1867.496226][T12773] ? ieee80211_tasklet_handler+0x20/0x20 [ 1867.501868][T12773] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1867.507757][T12773] ? __debug_object_init+0xed/0x440 [ 1867.512950][T12773] ? memset+0x1e/0x40 [ 1867.516930][T12773] ? __hrtimer_init+0x189/0x270 [ 1867.521780][T12773] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1867.527500][T12773] ? memcpy+0x3c/0x60 [ 1867.531484][T12773] hwsim_new_radio_nl+0xab7/0xc90 [ 1867.536603][T12773] genl_family_rcv_msg_doit+0x22f/0x350 [ 1867.542145][T12773] ? end_current_label_crit_section+0x170/0x170 [ 1867.548388][T12773] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1867.554285][T12773] ? bpf_lsm_capable+0x5/0x10 [ 1867.558960][T12773] ? security_capable+0x85/0xb0 [ 1867.563837][T12773] genl_rcv_msg+0x601/0x790 [ 1867.568365][T12773] ? lock_chain_count+0x20/0x20 [ 1867.573220][T12773] ? genl_bind+0x360/0x360 [ 1867.577634][T12773] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1867.583974][T12773] netlink_rcv_skb+0x1ef/0x440 [ 1867.588734][T12773] ? genl_bind+0x360/0x360 [ 1867.593145][T12773] ? netlink_ack+0x1160/0x1160 [ 1867.597913][T12773] ? down_read+0x1a8/0x2d0 [ 1867.602351][T12773] genl_rcv+0x24/0x40 [ 1867.606330][T12773] netlink_unicast+0x7ad/0x920 [ 1867.611101][T12773] netlink_sendmsg+0x8ad/0xbd0 [ 1867.615871][T12773] ? netlink_getsockopt+0x550/0x550 [ 1867.621068][T12773] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1867.626617][T12773] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1867.631898][T12773] ? security_socket_sendmsg+0x7c/0xa0 [ 1867.637359][T12773] ? netlink_getsockopt+0x550/0x550 [ 1867.642559][T12773] ____sys_sendmsg+0x5ed/0x9a0 [ 1867.647326][T12773] ? __sys_sendmsg_sock+0x30/0x30 [ 1867.652352][T12773] ? __import_iovec+0x306/0x510 [ 1867.657213][T12773] ? import_iovec+0x6f/0xa0 [ 1867.661718][T12773] ___sys_sendmsg+0x2a2/0x360 [ 1867.666394][T12773] ? __sys_sendmsg+0x2a0/0x2a0 [ 1867.671193][T12773] __se_sys_sendmsg+0x1c3/0x2b0 [ 1867.676042][T12773] ? __x64_sys_sendmsg+0x80/0x80 [ 1867.680992][T12773] ? lockdep_hardirqs_on+0x94/0x140 [ 1867.686216][T12773] do_syscall_64+0x4c/0xa0 [ 1867.690647][T12773] ? clear_bhb_loop+0x60/0xb0 [ 1867.695332][T12773] ? clear_bhb_loop+0x60/0xb0 [ 1867.700024][T12773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1867.705919][T12773] RIP: 0033:0x7fb5b639e199 [ 1867.710337][T12773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.730046][T12773] RSP: 002b:00007fb5b7225028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1867.738459][T12773] RAX: ffffffffffffffda RBX: 00007fb5b6625fa0 RCX: 00007fb5b639e199 [ 1867.746424][T12773] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1867.754389][T12773] RBP: 00007fb5b64358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1867.762359][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1867.770325][T12773] R13: 00007fb5b6626038 R14: 00007fb5b6625fa0 R15: 00007ffd6af5c098 [ 1867.778320][T12773] [ 1867.993915][T12789] netlink: 'syz.2.34847': attribute type 21 has an invalid length. [ 1868.001924][T12789] netlink: 'syz.2.34847': attribute type 3 has an invalid length. [ 1868.053732][T12789] netlink: 144 bytes leftover after parsing attributes in process `syz.2.34847'. [ 1868.083718][T12788] netlink: 'syz.3.34848': attribute type 10 has an invalid length. [ 1868.112300][T12788] team0: Device ipvlan1 failed to register rx_handler [ 1868.628197][T12808] netlink: 'syz.3.34846': attribute type 21 has an invalid length. [ 1868.639392][T12808] netlink: 'syz.3.34846': attribute type 23 has an invalid length. [ 1868.650123][T12808] netlink: 'syz.3.34846': attribute type 25 has an invalid length. [ 1868.669991][T12808] netlink: 'syz.3.34846': attribute type 27 has an invalid length. [ 1868.708289][T12808] netlink: 'syz.3.34846': attribute type 28 has an invalid length. [ 1868.728371][T12808] netlink: 'syz.3.34846': attribute type 29 has an invalid length. [ 1868.753996][T12808] netlink: 'syz.3.34846': attribute type 30 has an invalid length. [ 1868.932530][T12819] netlink: 144 bytes leftover after parsing attributes in process `syz.3.34852'. [ 1869.674484][T12850] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.34864'. [ 1870.370934][T12863] netlink: 144 bytes leftover after parsing attributes in process `syz.1.34868'. [ 1870.835936][T12870] team0: Device ipvlan1 failed to register rx_handler [ 1872.765591][T12895] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.34885'. [ 1873.188432][T12914] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.34892'. [ 1875.209469][T12955] validate_nla: 9 callbacks suppressed [ 1875.209486][T12955] netlink: 'syz.4.34909': attribute type 21 has an invalid length. [ 1875.247458][T12955] netlink: 'syz.4.34909': attribute type 23 has an invalid length. [ 1875.268845][T12955] netlink: 'syz.4.34909': attribute type 25 has an invalid length. [ 1875.309018][T12955] netlink: 'syz.4.34909': attribute type 27 has an invalid length. [ 1875.352435][T12955] netlink: 'syz.4.34909': attribute type 28 has an invalid length. [ 1875.379694][T12955] netlink: 'syz.4.34909': attribute type 29 has an invalid length. [ 1875.396899][T12955] netlink: 'syz.4.34909': attribute type 30 has an invalid length. [ 1876.632938][T12983] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.34924'. [ 1876.940863][T29969] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1877.050948][T12999] netlink: 'syz.1.34929': attribute type 21 has an invalid length. [ 1877.083947][T12999] netlink: 156 bytes leftover after parsing attributes in process `syz.1.34929'. [ 1877.797531][T13013] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.34937'. [ 1878.449146][T12992] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1881.037009][T12992] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1883.660571][T13132] netlink: 'syz.3.34984': attribute type 21 has an invalid length. [ 1883.689492][T13132] netlink: 156 bytes leftover after parsing attributes in process `syz.3.34984'. [ 1890.714074][ T5571] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1890.729282][ T4334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1893.995062][T12992] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1894.016548][T13266] netlink: 'syz.3.35037': attribute type 3 has an invalid length. [ 1894.054425][T13266] netlink: 'syz.3.35037': attribute type 1 has an invalid length. [ 1894.083869][T13266] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.35037'. [ 1894.801213][T13288] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.35050'. [ 1895.182475][T13299] netlink: 'syz.1.35056': attribute type 3 has an invalid length. [ 1895.216314][T13299] netlink: 'syz.1.35056': attribute type 1 has an invalid length. [ 1895.273738][T13299] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.35056'. [ 1895.979227][T13335] netlink: 'syz.4.35072': attribute type 3 has an invalid length. [ 1895.999684][T13335] netlink: 'syz.4.35072': attribute type 1 has an invalid length. [ 1896.014057][T13335] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.35072'. [ 1896.023788][T12992] Bluetooth: hci2: command 0x2016 tx timeout [ 1898.249161][T13420] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35111'. [ 1899.678541][T13458] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.35126'. [ 1900.451473][T13468] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1900.472597][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.034097][T13495] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.35144'. [ 1901.055288][T13495] netlink: zone id is out of range [ 1901.066227][T13495] netlink: zone id is out of range [ 1901.071552][T13495] netlink: zone id is out of range [ 1901.090207][T13495] netlink: del zone limit has 4 unknown bytes [ 1902.105240][T13528] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.35158'. [ 1902.375605][T13536] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1902.404775][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.881830][T13554] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.35171'. [ 1903.768372][T13575] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 1903.780262][T13575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.106246][T13588] cgroup: fork rejected by pids controller in /syz0 [ 1904.927407][ T5605] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.102729][ T5605] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.213047][ T5605] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.340146][ T5605] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.574530][ T5605] device 0 left promiscuous mode [ 1905.664736][ T5605] device 0 left promiscuous mode [ 1905.771082][T13631] sctp: [Deprecated]: syz.3.35204 (pid 13631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1905.771082][T13631] Use struct sctp_sack_info instead [ 1905.919080][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1905.950793][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1905.959911][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1905.968766][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1905.987695][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1905.994942][ T5605] tipc: Left network mode [ 1905.999830][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1906.277898][T13651] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.35208'. [ 1906.368477][T13658] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.35212'. [ 1906.556980][T13666] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.35214'. [ 1907.062802][T13638] chnl_net:caif_netlink_parms(): no params data found [ 1907.531559][T13638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.557953][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.580974][T13638] device bridge_slave_0 entered promiscuous mode [ 1907.635635][T13638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.642808][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.659279][T13638] device bridge_slave_1 entered promiscuous mode [ 1907.728262][T13638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1907.802319][T13638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1907.897156][T13638] team0: Port device team_slave_0 added [ 1907.975909][T13638] team0: Port device team_slave_1 added [ 1907.979458][T13720] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.35229'. [ 1908.023682][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 1908.126200][T13638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1908.133195][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1908.163158][T13638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.220083][T13638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.244484][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1908.326831][T13638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.402568][T13638] device hsr_slave_0 entered promiscuous mode [ 1908.420123][T13638] device hsr_slave_1 entered promiscuous mode [ 1908.925799][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1908.943311][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1908.967120][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1908.989329][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1909.012994][ T5605] device batadv0 left promiscuous mode [ 1909.032209][ T5605] bridge0: port 1(batadv0) entered disabled state [ 1909.070335][ T5605] device veth0_to_bond left promiscuous mode [ 1909.095695][ T5605] bridge0: port 3(veth0_to_bond) entered disabled state [ 1909.121240][ T5605] device bridge_slave_1 left promiscuous mode [ 1909.142952][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.504506][T12992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1909.536341][T12992] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1909.544704][T12992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1909.553810][T29969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1909.562475][T29969] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1909.579322][T29969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1910.103731][T29969] Bluetooth: hci0: command 0x041b tx timeout [ 1911.437175][T13751] chnl_net:caif_netlink_parms(): no params data found [ 1911.579500][T13751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.593186][T13751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.601342][T13751] device bridge_slave_0 entered promiscuous mode [ 1911.623783][T29969] Bluetooth: hci3: command 0x0409 tx timeout [ 1911.635671][T13751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1911.642804][T13751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.652987][T13751] device bridge_slave_1 entered promiscuous mode [ 1911.699362][ T5605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.750317][T13751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1911.778330][T13751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1911.817274][ T5605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.840664][T13751] team0: Port device team_slave_0 added [ 1911.850044][T13751] team0: Port device team_slave_1 added [ 1911.864166][T13638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1911.873621][T13638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1911.906470][ T5605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.927203][T13638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1911.936247][T13751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1911.943223][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1911.972105][T13751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1911.998280][ T5605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.011404][T13638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1912.032207][T13751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1912.039478][T13751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1912.065479][T13751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1912.127995][T13751] device hsr_slave_0 entered promiscuous mode [ 1912.134764][T13751] device hsr_slave_1 entered promiscuous mode [ 1912.141285][T13751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1912.149003][T13751] Cannot create hsr debugfs directory [ 1912.183682][T29969] Bluetooth: hci0: command 0x040f tx timeout [ 1912.261219][T13638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1912.347251][ T5605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.374929][T13638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1912.384828][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1912.392539][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1912.431758][ T5605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.455126][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1912.464271][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1912.472881][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.480027][ T5576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.489617][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1912.498900][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1912.507907][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.515141][ T5576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1912.522857][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1912.533454][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1912.542210][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1912.552173][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1912.571386][T13638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1912.582727][T13638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1912.611254][ T5605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.625288][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1912.634279][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1912.642388][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1912.652966][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1912.672556][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1912.687639][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1912.697010][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1912.705842][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1912.769275][ T5605] team0: Port device netdevsim0 removed [ 1912.777429][ T5605] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.807005][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1913.049739][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1913.057322][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1913.077702][T13638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1913.108685][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1913.125041][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1913.157278][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1913.170388][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1913.191265][T13638] device veth0_vlan entered promiscuous mode [ 1913.199263][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1913.212343][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1913.228175][T13638] device veth1_vlan entered promiscuous mode [ 1913.254921][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1913.265175][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1913.273490][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1913.283109][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1913.295933][T13638] device veth0_macvtap entered promiscuous mode [ 1913.305767][T13638] device veth1_macvtap entered promiscuous mode [ 1913.331843][T13638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1913.355940][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1913.367607][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1913.377944][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1913.390694][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1913.409772][T13638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.423940][T13638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.439254][T13638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.463677][T13638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.478862][T13638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1913.489481][T13638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1913.508495][T13638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1913.519947][T13638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.529070][T13638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.538499][T13638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.549109][T13638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.561983][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1913.572602][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1913.637560][T27156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.648410][T27156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.667502][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1913.693029][T12179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.701545][T12179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.703732][T29969] Bluetooth: hci3: command 0x041b tx timeout [ 1913.714816][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1914.266063][T29969] Bluetooth: hci0: command 0x0419 tx timeout [ 1914.588756][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.595330][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.428550][T29969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1915.439951][T29969] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1915.455396][T29969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1915.463952][T29969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1915.471700][T29969] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1915.479142][T29969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1915.783738][T29969] Bluetooth: hci3: command 0x040f tx timeout [ 1916.054880][T13751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1916.109937][T13751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1916.152600][T13751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1916.221611][T13751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1916.387467][T13863] chnl_net:caif_netlink_parms(): no params data found [ 1916.554177][T13863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.561374][T13863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.569595][T13863] device bridge_slave_0 entered promiscuous mode [ 1916.609661][T13863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.617088][T13863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1916.627151][T13863] device bridge_slave_1 entered promiscuous mode [ 1916.655123][T13863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1916.681500][T13863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1916.711361][T13751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.752812][T13751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.780331][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1916.796190][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1916.862277][T13863] team0: Port device team_slave_0 added [ 1916.875538][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1916.885726][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1916.894996][T27156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.902128][T27156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1916.921553][T13863] team0: Port device team_slave_1 added [ 1916.962748][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1917.031101][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1917.040140][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1917.049297][T27156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.056443][T27156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.090507][T13863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1917.097815][T13863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1917.130030][T13863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1917.173214][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1917.197152][T13863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1917.213189][T13863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1917.247984][T13863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1917.270210][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1917.293987][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1917.310124][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1917.319321][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1917.328880][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1917.339255][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1917.348237][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1917.357458][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1917.390453][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1917.409373][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1917.431769][T13751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1917.450582][T13863] device hsr_slave_0 entered promiscuous mode [ 1917.461695][T13863] device hsr_slave_1 entered promiscuous mode [ 1917.473117][T13863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1917.483518][T13863] Cannot create hsr debugfs directory [ 1917.544071][T29969] Bluetooth: hci1: command 0x0409 tx timeout [ 1917.811948][ T5605] device hsr_slave_0 left promiscuous mode [ 1917.819065][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1917.826897][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1917.834947][ T5605] device bridge_slave_1 left promiscuous mode [ 1917.841210][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1917.850315][ T5605] device bridge_slave_0 left promiscuous mode [ 1917.857090][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.865634][T29969] Bluetooth: hci3: command 0x0419 tx timeout [ 1917.882142][ T5605] device hsr_slave_0 left promiscuous mode [ 1917.888663][ T5605] device hsr_slave_1 left promiscuous mode [ 1917.895495][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1917.902951][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1917.911230][ T5605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1917.919145][ T5605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1917.927406][ T5605] device bridge_slave_1 left promiscuous mode [ 1917.933844][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1917.941808][ T5605] device bridge_slave_0 left promiscuous mode [ 1917.950821][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.978828][ T5605] device veth1_macvtap left promiscuous mode [ 1917.986618][ T5605] device veth0_macvtap left promiscuous mode [ 1917.992760][ T5605] device veth1_vlan left promiscuous mode [ 1917.998946][ T5605] device veth0_vlan left promiscuous mode [ 1918.007176][ T5605] device veth1_vlan left promiscuous mode [ 1918.012970][ T5605] device veth0_vlan left promiscuous mode [ 1918.472657][ T5605] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1918.516594][ T5605] team0 (unregistering): Port device team_slave_1 removed [ 1918.586096][ T5605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1918.623724][ T5605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1918.899965][ T5605] bond0 (unregistering): Released all slaves [ 1919.286473][ T5605] team0 (unregistering): Port device team_slave_1 removed [ 1919.357942][ T5605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1919.398584][ T5605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1919.623725][T29969] Bluetooth: hci1: command 0x041b tx timeout [ 1919.669301][ T5605] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1919.678308][ T5605] bond0 (unregistering): Released all slaves [ 1919.776816][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1919.790573][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1919.819191][T13751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.868440][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1919.878611][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1919.938791][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1919.949047][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1919.965952][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1919.985885][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1920.001943][T13751] device veth0_vlan entered promiscuous mode [ 1920.068268][T13751] device veth1_vlan entered promiscuous mode [ 1920.121223][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1920.132454][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1920.148840][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1920.165357][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1920.191182][T13751] device veth0_macvtap entered promiscuous mode [ 1920.217175][T13751] device veth1_macvtap entered promiscuous mode [ 1920.287012][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1920.298649][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.320041][T13751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1920.329141][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1920.344723][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1920.357369][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1920.370614][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1920.399243][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1920.413014][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.423268][T13751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1920.434155][T13751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1920.445571][T13751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1920.460160][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1920.496130][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1920.508671][T13751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.519118][T13751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.528713][T13751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.538658][T13751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.603528][T13863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1920.642050][T13863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1920.672712][T13863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1920.685159][ T5576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.692991][ T5576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.717742][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1920.733883][T13863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1920.758064][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.775243][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.787511][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1920.860800][T13863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1920.888695][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1920.905896][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1920.922403][T13863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1920.937765][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1920.949499][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1920.959147][T27156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.966310][T27156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1920.986712][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1920.999325][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1921.009095][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1921.024781][T27156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.031904][T27156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1921.045351][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1921.056755][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1921.079070][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1921.090360][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1921.103417][T27156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1921.123815][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1921.133262][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1921.148915][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1921.157689][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1921.171402][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1921.183681][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1921.196303][T13863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1921.447322][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1921.456466][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1921.478496][T13863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1921.509646][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1921.521389][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1921.558272][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1921.571058][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1921.582596][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1921.594501][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1921.611248][T13863] device veth0_vlan entered promiscuous mode [ 1921.630050][T13863] device veth1_vlan entered promiscuous mode [ 1921.660869][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1921.670747][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1921.681625][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1921.691130][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1921.703263][T13863] device veth0_macvtap entered promiscuous mode [ 1921.703960][T29969] Bluetooth: hci1: command 0x040f tx timeout [ 1921.721487][T13863] device veth1_macvtap entered promiscuous mode [ 1921.746484][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1921.762789][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.777480][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1921.794142][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.808888][T13863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1921.820831][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1921.832663][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1921.842409][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1921.858441][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1921.877445][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1921.891442][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.904061][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1921.920557][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.930684][T13863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1921.946054][T13863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.960991][T13863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1921.971861][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1921.981654][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1921.995295][T13863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.005071][T13863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.015346][T13863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.024803][T13863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.088261][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1922.105063][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1922.120359][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1922.142311][T12179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1922.151610][T12179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1922.159552][T12179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1923.620298][T14006] sock: sock_timestamping_bind_phc: sock not bind to device [ 1923.784459][T29969] Bluetooth: hci1: command 0x0419 tx timeout [ 1926.814908][T14114] netlink: 'syz.1.35324': attribute type 3 has an invalid length. [ 1927.764892][T14146] netlink: 'syz.2.35340': attribute type 3 has an invalid length. [ 1928.637236][T14182] netlink: 'syz.3.35355': attribute type 3 has an invalid length. [ 1930.339128][T29969] Bluetooth: hci1: ACL packet too small [ 1933.705265][T14342] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1936.560182][T14446] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.35477'. [ 1936.799628][T14452] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.35492'. [ 1937.625938][T14479] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.35495'. [ 1937.685590][T14481] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.35496'. [ 1937.930372][T14487] device syzkaller0 entered promiscuous mode [ 1940.592130][T14515] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.35511'. [ 1940.725218][T14526] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.35514'. [ 1940.805005][T14534] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.35518'. [ 1940.955053][T14539] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.35521'. [ 1941.252751][T14555] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.35530'. [ 1941.678680][T14560] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.35541'. [ 1941.693151][T14560] netlink: zone id is out of range [ 1941.727308][T14560] netlink: zone id is out of range [ 1941.732768][T14560] netlink: zone id is out of range [ 1941.755229][T14560] netlink: zone id is out of range [ 1941.773828][T14560] netlink: zone id is out of range [ 1941.793798][T14560] netlink: zone id is out of range [ 1941.800247][T14560] netlink: zone id is out of range [ 1941.830769][T14560] netlink: zone id is out of range [ 1941.860248][T14560] netlink: zone id is out of range [ 1941.889766][T14560] netlink: zone id is out of range [ 1941.938400][T14574] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.35536'. [ 1942.498047][T14606] netlink: 'syz.4.35551': attribute type 1 has an invalid length. [ 1942.643099][T14614] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.35553'. [ 1942.721443][T14617] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.35554'. [ 1944.732504][T14656] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.35569'. [ 1945.263182][T14682] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.35579'. [ 1945.273243][T14685] netlink: 'syz.1.35580': attribute type 1 has an invalid length. [ 1945.306010][T14685] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.35580'. [ 1945.583432][T14691] device syzkaller0 entered promiscuous mode [ 1945.659758][T14699] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.35586'. [ 1945.669618][T14696] netlink: 'syz.2.35585': attribute type 1 has an invalid length. [ 1946.388499][T14719] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.35596'. [ 1948.131411][T14717] netlink: 'syz.0.35595': attribute type 1 has an invalid length. [ 1948.148238][T14717] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.35595'. [ 1948.173636][T14725] netlink: 'syz.2.35598': attribute type 10 has an invalid length. [ 1948.181586][T14725] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.35598'. [ 1948.881230][T14758] netlink: 'syz.4.35612': attribute type 1 has an invalid length. [ 1948.923702][T14758] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.35612'. [ 1949.121069][T29969] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1949.292854][T14785] delete_channel: no stack [ 1949.307684][T14786] netlink: 'syz.4.35626': attribute type 2 has an invalid length. [ 1949.413636][T14785] delete_channel: no stack [ 1949.494573][T14785] netlink: 'syz.3.35625': attribute type 25 has an invalid length. [ 1949.502530][T14785] netlink: 'syz.3.35625': attribute type 9 has an invalid length. [ 1949.533892][T14785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35625'. [ 1950.231626][T14817] netlink: 'syz.3.35650': attribute type 3 has an invalid length. [ 1950.260612][T14817] netlink: 'syz.3.35650': attribute type 1 has an invalid length. [ 1950.279715][T14817] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.35650'. [ 1950.300541][T14815] device syzkaller0 entered promiscuous mode [ 1950.594708][T14830] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.35645'. [ 1950.630501][T14830] net_ratelimit: 1960 callbacks suppressed [ 1950.630519][T14830] netlink: zone id is out of range [ 1950.650566][T14830] netlink: zone id is out of range [ 1950.656913][T14830] netlink: zone id is out of range [ 1950.662207][T14830] netlink: zone id is out of range [ 1950.668803][T14830] netlink: zone id is out of range [ 1950.691104][T14830] netlink: zone id is out of range [ 1950.696833][T14830] netlink: get zone limit has 8 unknown bytes [ 1951.205386][T29969] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1952.709082][T14869] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.35664'. [ 1952.731483][T14869] netlink: zone id is out of range [ 1952.738715][T14869] netlink: zone id is out of range [ 1952.756204][T14869] netlink: zone id is out of range [ 1954.012684][T14903] device syzkaller0 entered promiscuous mode [ 1954.093117][T14910] device syzkaller0 entered promiscuous mode [ 1955.269045][T29969] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1960.157124][T14979] netlink: 14 bytes leftover after parsing attributes in process `syz.1.35713'. [ 1960.175347][T14979] net_ratelimit: 4 callbacks suppressed [ 1960.175392][T14979] openvswitch: netlink: Message has 6 unknown bytes. [ 1962.022060][T15012] netlink: 14 bytes leftover after parsing attributes in process `syz.4.35725'. [ 1962.033043][T15012] openvswitch: netlink: Message has 6 unknown bytes. [ 1963.251047][T15059] netlink: 14 bytes leftover after parsing attributes in process `syz.3.35745'. [ 1963.299588][T15059] openvswitch: netlink: Message has 6 unknown bytes. [ 1964.975322][T15103] netlink: 14 bytes leftover after parsing attributes in process `syz.0.35763'. [ 1965.013362][T15103] openvswitch: netlink: Message has 6 unknown bytes. [ 1966.940764][T15135] device syzkaller0 entered promiscuous mode [ 1968.028510][T15165] netlink: 'syz.3.35788': attribute type 3 has an invalid length. [ 1968.049055][T15165] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.35788'. [ 1968.080607][T15168] netlink: 'syz.3.35788': attribute type 3 has an invalid length. [ 1968.098746][T15168] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.35788'. [ 1968.132617][T15169] netlink: 'syz.3.35788': attribute type 3 has an invalid length. [ 1968.143731][T15169] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.35788'. [ 1971.491821][T15203] netlink: 'syz.1.35804': attribute type 11 has an invalid length. [ 1971.513710][T15203] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.35804'. [ 1971.610227][T15205] netlink: 'syz.0.35805': attribute type 27 has an invalid length. [ 1971.778603][T15205] bond0: (slave bond_slave_0): Releasing backup interface [ 1972.892913][T15236] netlink: 14 bytes leftover after parsing attributes in process `syz.2.35815'. [ 1972.943018][T15236] openvswitch: netlink: Message has 6 unknown bytes. [ 1973.203847][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35820'. [ 1973.218349][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35820'. [ 1973.583883][T15257] device syzkaller0 entered promiscuous mode [ 1974.422604][T15281] netlink: 14 bytes leftover after parsing attributes in process `syz.2.35834'. [ 1974.442953][T15281] openvswitch: netlink: Message has 6 unknown bytes. [ 1974.609100][T15289] netlink: 'syz.2.35840': attribute type 7 has an invalid length. [ 1974.623787][T15289] netlink: 'syz.2.35840': attribute type 7 has an invalid length. [ 1974.631830][T15289] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.35840'. [ 1975.031119][T29969] Bluetooth: hci1: Malformed Event: 0x02 [ 1975.396780][T15313] netlink: 14 bytes leftover after parsing attributes in process `syz.3.35852'. [ 1975.467301][T15313] openvswitch: netlink: Message has 6 unknown bytes. [ 1976.025972][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.032350][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.579555][T15338] netlink: 'syz.4.35863': attribute type 1 has an invalid length. [ 1976.609069][T15338] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.35863'. [ 1976.920115][T15348] netlink: 14 bytes leftover after parsing attributes in process `syz.1.35868'. [ 1976.952817][T15348] openvswitch: netlink: Message has 6 unknown bytes. [ 1977.145252][T15355] device syzkaller0 entered promiscuous mode [ 1977.190585][T29969] Bluetooth: hci0: Malformed Event: 0x02 [ 1977.860505][T15370] netlink: 'syz.0.35873': attribute type 11 has an invalid length. [ 1977.948113][T15370] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.35873'. [ 1981.387141][T15369] netlink: 'syz.1.35874': attribute type 27 has an invalid length. [ 1981.450710][T15369] bond0: (slave bond_slave_0): Releasing backup interface [ 1981.618082][T15391] netlink: 'syz.4.35884': attribute type 7 has an invalid length. [ 1981.651022][T15391] netlink: 'syz.4.35884': attribute type 7 has an invalid length. [ 1981.687959][T15391] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.35884'. [ 1981.843815][T15400] device syzkaller0 entered promiscuous mode [ 1982.128612][T15414] netlink: 'syz.2.35894': attribute type 29 has an invalid length. [ 1982.179452][T15414] netlink: 'syz.2.35894': attribute type 29 has an invalid length. [ 1982.366971][T15420] netlink: 'syz.3.35897': attribute type 27 has an invalid length. [ 1982.501489][T15420] bond0: (slave bond_slave_0): Releasing backup interface [ 1983.052070][T15430] netlink: 'syz.3.35903': attribute type 7 has an invalid length. [ 1983.090617][T15430] netlink: 'syz.3.35903': attribute type 7 has an invalid length. [ 1983.121607][T15430] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.35903'. [ 1983.171421][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35902'. [ 1983.203859][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35902'. [ 1983.408726][T15440] device syzkaller0 entered promiscuous mode [ 1983.445811][T15442] netlink: 'syz.4.35917': attribute type 10 has an invalid length. [ 1983.721677][T15457] netlink: 'syz.2.35913': attribute type 27 has an invalid length. [ 1984.470485][T15457] bond0: (slave bond_slave_0): Releasing backup interface [ 1984.529012][T15464] netlink: 132 bytes leftover after parsing attributes in process `syz.4.35916'. [ 1984.761900][T15475] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.35921'. [ 1990.592269][T15619] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35979'. [ 1991.204629][T15637] validate_nla: 3 callbacks suppressed [ 1991.204665][T15637] netlink: 'syz.4.35987': attribute type 16 has an invalid length. [ 1991.234076][T15637] netlink: 'syz.4.35987': attribute type 3 has an invalid length. [ 1991.248263][T15637] netlink: 132 bytes leftover after parsing attributes in process `syz.4.35987'. [ 1991.407372][T15645] netlink: 'syz.0.35990': attribute type 10 has an invalid length. [ 1991.806951][T15653] netlink: 'syz.4.35989': attribute type 27 has an invalid length. [ 1994.490077][T15669] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.35998'. [ 1994.509674][T15682] netlink: 'syz.3.36006': attribute type 10 has an invalid length. [ 1994.544049][T15686] netlink: 'syz.4.36008': attribute type 27 has an invalid length. [ 1996.063154][T29969] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 1997.861602][T15755] netlink: 'syz.3.36044': attribute type 2 has an invalid length. [ 1997.954550][T15755] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.36044'. [ 1998.598570][T15764] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.36038'. [ 2002.265859][T15837] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.36075'. [ 2007.327168][T16025] netlink: 'syz.1.36159': attribute type 10 has an invalid length. [ 2007.387288][T16025] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2008.876295][T16061] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.36171'. [ 2012.778794][T16115] netlink: 'syz.4.36198': attribute type 10 has an invalid length. [ 2013.060361][T16129] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.36204'. [ 2015.691795][T16194] netlink: 'syz.4.36232': attribute type 7 has an invalid length. [ 2015.701824][T16194] netlink: 'syz.4.36232': attribute type 7 has an invalid length. [ 2015.746982][T16194] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.36232'. [ 2019.263262][T16224] netlink: 132 bytes leftover after parsing attributes in process `syz.4.36242'. [ 2019.284669][T16224] netlink: 'syz.4.36242': attribute type 10 has an invalid length. [ 2019.292614][T16224] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36242'. [ 2019.441925][T16231] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.36246'. [ 2020.255889][T16262] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.36259'. [ 2021.264365][T16277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.36266'. [ 2022.699582][T16314] netlink: 44 bytes leftover after parsing attributes in process `syz.4.36278'. [ 2023.021826][T16321] netlink: 'syz.2.36280': attribute type 3 has an invalid length. [ 2023.068096][T16321] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.36280'. [ 2023.156916][T16325] netlink: 44 bytes leftover after parsing attributes in process `syz.0.36291'. [ 2023.616459][T16342] netlink: 'syz.0.36297': attribute type 7 has an invalid length. [ 2023.641764][T16342] netlink: 'syz.0.36297': attribute type 7 has an invalid length. [ 2023.661962][T16342] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.36297'. [ 2025.817523][T16381] netlink: 'syz.3.36312': attribute type 1 has an invalid length. [ 2025.845875][T16381] netlink: 'syz.3.36312': attribute type 4 has an invalid length. [ 2025.856552][T16381] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.36312'. [ 2028.989250][T16428] netlink: 'syz.3.36316': attribute type 9 has an invalid length. [ 2029.019371][T16428] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.36316'. [ 2029.304093][T29969] Bluetooth: hci0: command 0x0406 tx timeout [ 2029.399058][T16441] netlink: 60 bytes leftover after parsing attributes in process `syz.0.36322'. [ 2029.779844][T16457] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.36339'. [ 2030.133924][T16467] netlink: 'syz.0.36332': attribute type 9 has an invalid length. [ 2030.153714][T16467] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.36332'. [ 2031.888637][T16517] netlink: 'syz.4.36353': attribute type 9 has an invalid length. [ 2031.927313][T16517] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.36353'. [ 2034.253201][T16590] netlink: 60 bytes leftover after parsing attributes in process `syz.3.36384'. [ 2034.434078][T29969] Bluetooth: hci3: command 0x0406 tx timeout [ 2035.398817][T16628] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.36399'. [ 2035.655573][T16641] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.36406'. [ 2037.467601][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.473993][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.885201][T16724] __sock_release: fasync list not empty! [ 2039.543702][T29969] Bluetooth: hci1: command 0x0406 tx timeout [ 2039.918735][T16775] __sock_release: fasync list not empty! [ 2041.106820][T16828] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.36482'. [ 2042.017453][T16865] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.36496'. [ 2053.721667][T17064] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.36573'. [ 2060.522938][T17116] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.36596'. [ 2065.650058][ T4288] Bluetooth: hci1: Malformed LE Event: 0x1d [ 2066.019776][T17190] device syzkaller0 entered promiscuous mode [ 2066.951718][ T4288] Bluetooth: hci2: Malformed LE Event: 0x1d [ 2069.135208][T17229] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36647'. [ 2069.257308][T17238] netlink: 26 bytes leftover after parsing attributes in process `syz.0.36659'. [ 2069.293366][ T4288] Bluetooth: hci4: Malformed LE Event: 0x1d [ 2073.851746][T17314] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.36681'. [ 2074.170588][T17333] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.36690'. [ 2074.312205][T17338] device syzkaller0 entered promiscuous mode [ 2074.927058][T17358] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.36697'. [ 2076.558689][T17373] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.36704'. [ 2076.722186][T17377] netlink: 184 bytes leftover after parsing attributes in process `syz.2.36708'. [ 2076.728636][T17384] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.36709'. [ 2076.914820][T17394] netlink: 176 bytes leftover after parsing attributes in process `syz.1.36713'. [ 2077.839449][T17410] syz.3.36720[17410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2077.839597][T17410] syz.3.36720[17410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2077.976275][T17412] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.36721'. [ 2078.399984][T17425] netlink: 'syz.1.36727': attribute type 3 has an invalid length. [ 2078.424252][T17425] netlink: 'syz.1.36727': attribute type 4 has an invalid length. [ 2078.432132][T17425] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.36727'. [ 2078.648622][T17438] netlink: 'syz.2.36734': attribute type 3 has an invalid length. [ 2078.672358][T17438] netlink: 'syz.2.36734': attribute type 1 has an invalid length. [ 2078.709566][T17438] netlink: 128 bytes leftover after parsing attributes in process `syz.2.36734'. [ 2079.961298][T17467] netlink: 'syz.3.36745': attribute type 3 has an invalid length. [ 2079.993376][T17467] netlink: 'syz.3.36745': attribute type 4 has an invalid length. [ 2080.019639][T17467] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.36745'. [ 2080.612392][T17479] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.36752'. [ 2080.638527][T17479] openvswitch: netlink: Flow actions attr not present in new flow. [ 2081.525104][T17498] netlink: 'syz.0.36762': attribute type 3 has an invalid length. [ 2081.554185][T17498] netlink: 'syz.0.36762': attribute type 4 has an invalid length. [ 2081.562099][T17498] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.36762'. [ 2081.778080][ T4288] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 2081.992650][T17514] device syzkaller0 entered promiscuous mode [ 2082.008045][T17516] netlink: 176 bytes leftover after parsing attributes in process `syz.0.36771'. [ 2083.941686][T17523] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.36774'. [ 2086.233475][T17543] netlink: 'syz.4.36784': attribute type 3 has an invalid length. [ 2086.241811][T17543] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.36784'. [ 2086.543118][T17555] netlink: 'syz.2.36789': attribute type 3 has an invalid length. [ 2086.649896][T17555] netlink: 'syz.2.36789': attribute type 1 has an invalid length. [ 2086.659974][T17555] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.36789'. [ 2087.177758][T17567] netlink: 'syz.2.36795': attribute type 3 has an invalid length. [ 2087.201773][T17567] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.36795'. [ 2087.248838][T17569] device syzkaller0 entered promiscuous mode [ 2087.488747][T17574] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.36798'. [ 2091.381886][T17623] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.36817'. [ 2091.938994][T17636] device syzkaller0 entered promiscuous mode [ 2095.472261][T17674] device syzkaller0 entered promiscuous mode [ 2098.907516][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.914383][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.860759][ T4288] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 2100.605292][ T4288] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 2101.953846][T29969] Bluetooth: hci3: command 0x2021 tx timeout [ 2102.155617][T29969] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 2102.663700][T29969] Bluetooth: hci2: command 0x2021 tx timeout [ 2104.188377][ T4288] Bluetooth: hci1: command 0x2021 tx timeout [ 2105.518147][T29969] Bluetooth: hci4: unexpected subevent 0x06 length: 150 > 10 [ 2107.543947][T29969] Bluetooth: hci4: command 0x2021 tx timeout [ 2112.301063][T17919] netlink: 'syz.0.36941': attribute type 14 has an invalid length. [ 2112.314290][T17919] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.36941'. [ 2113.962120][T17957] netlink: 'syz.2.36960': attribute type 11 has an invalid length. [ 2113.976167][T17957] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.36960'. [ 2116.271314][T18001] device syzkaller0 entered promiscuous mode [ 2118.918887][T18010] netlink: 'syz.1.36991': attribute type 14 has an invalid length. [ 2118.926928][T18010] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.36991'. [ 2119.049264][T18024] netlink: 'syz.3.36999': attribute type 11 has an invalid length. [ 2119.076768][T18024] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.36999'. [ 2121.633118][T18106] netlink: 'syz.0.37020': attribute type 11 has an invalid length. [ 2121.663368][T18106] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.37020'. [ 2122.566534][T18146] netlink: 'syz.1.37036': attribute type 11 has an invalid length. [ 2122.594544][T18146] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.37036'. [ 2122.640014][T29969] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2124.771591][T18199] device syzkaller0 entered promiscuous mode [ 2124.797549][T18205] netlink: 60 bytes leftover after parsing attributes in process `syz.2.37063'. [ 2127.925483][T29969] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2128.150148][T18255] device syzkaller0 entered promiscuous mode [ 2128.163789][T29969] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2129.089330][T29969] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2132.347180][T18361] netlink: 'syz.4.37130': attribute type 1 has an invalid length. [ 2132.423896][T18361] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.37130'. [ 2132.786439][T18370] netlink: 144 bytes leftover after parsing attributes in process `syz.1.37133'. [ 2132.899682][T18375] device syzkaller0 entered promiscuous mode [ 2132.911197][T18375] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 2133.059135][T18380] netlink: 'syz.4.37140': attribute type 3 has an invalid length. [ 2133.081850][T18380] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.37140'. [ 2133.287417][T18391] netlink: 'syz.2.37154': attribute type 3 has an invalid length. [ 2133.301230][T18390] device syzkaller0 entered promiscuous mode [ 2133.313801][T18391] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.37154'. [ 2133.548324][T18396] netlink: 'syz.1.37145': attribute type 1 has an invalid length. [ 2133.584409][T18396] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.37145'. [ 2137.758579][T18431] netlink: 'syz.0.37159': attribute type 3 has an invalid length. [ 2137.769702][T18431] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.37159'. [ 2139.108527][T18420] device syzkaller0 entered promiscuous mode [ 2139.426732][T18444] netlink: 'syz.1.37166': attribute type 2 has an invalid length. [ 2139.461557][T18444] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.37166'. [ 2139.637235][T18454] sctp: [Deprecated]: syz.1.37169 (pid 18454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2139.637235][T18454] Use struct sctp_sack_info instead [ 2139.972776][T18463] netlink: 'syz.2.37172': attribute type 2 has an invalid length. [ 2140.023825][T18463] netlink: 'syz.2.37172': attribute type 1 has an invalid length. [ 2140.041985][T18463] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.37172'. [ 2140.165233][T18467] device syzkaller0 entered promiscuous mode [ 2140.772091][T18475] netlink: 144 bytes leftover after parsing attributes in process `syz.0.37177'. [ 2140.860728][T18477] device syzkaller0 entered promiscuous mode [ 2141.152888][T18489] netlink: 'syz.4.37180': attribute type 2 has an invalid length. [ 2141.193927][T18489] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.37180'. [ 2141.572825][T18497] sctp: [Deprecated]: syz.0.37183 (pid 18497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2141.572825][T18497] Use struct sctp_sack_info instead [ 2145.216771][T18538] netlink: 'syz.3.37196': attribute type 2 has an invalid length. [ 2145.271842][T18538] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.37196'. [ 2145.654744][T18546] sctp: [Deprecated]: syz.3.37200 (pid 18546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2145.654744][T18546] Use struct sctp_sack_info instead [ 2145.910734][T18551] netlink: 'syz.3.37206': attribute type 1 has an invalid length. [ 2145.937553][T18551] netlink: 'syz.3.37206': attribute type 4 has an invalid length. [ 2145.967149][T18551] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.37206'. [ 2146.619561][T18573] netlink: 'syz.2.37215': attribute type 2 has an invalid length. [ 2146.662830][T18573] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.37215'. [ 2148.004183][T18613] netlink: 'syz.0.37231': attribute type 2 has an invalid length. [ 2148.069625][T18613] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.37231'. [ 2149.325039][T18657] netlink: 'syz.4.37253': attribute type 21 has an invalid length. [ 2149.334974][T18657] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.37253'. [ 2151.950648][T18677] device syzkaller0 entered promiscuous mode [ 2151.984874][T18682] sctp: [Deprecated]: syz.2.37265 (pid 18682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2151.984874][T18682] Use struct sctp_sack_info instead [ 2157.914751][T18754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.37296'. [ 2158.092882][T18764] netlink: 3 bytes leftover after parsing attributes in process `syz.2.37300'. [ 2160.359284][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.365673][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.725327][T18842] netlink: 'syz.3.37337': attribute type 3 has an invalid length. [ 2162.743978][T18842] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.37337'. [ 2165.497665][T18879] netlink: 'syz.3.37354': attribute type 8 has an invalid length. [ 2165.543930][T18879] netlink: 156 bytes leftover after parsing attributes in process `syz.3.37354'. [ 2166.819327][T18891] netlink: 95 bytes leftover after parsing attributes in process `syz.0.37360'. [ 2169.274880][T18935] netlink: 'syz.4.37380': attribute type 21 has an invalid length. [ 2169.293939][T18935] netlink: 'syz.4.37380': attribute type 13 has an invalid length. [ 2169.301981][T18935] netlink: 6188 bytes leftover after parsing attributes in process `syz.4.37380'. [ 2169.408018][T18938] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.37381'. [ 2170.936891][T18978] netlink: 'syz.4.37398': attribute type 3 has an invalid length. [ 2170.974070][T18978] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.37398'. [ 2171.058085][T18982] netlink: 'syz.2.37400': attribute type 10 has an invalid length. [ 2171.103776][T18982] netlink: 'syz.2.37400': attribute type 11 has an invalid length. [ 2171.144016][T18982] netlink: 5145 bytes leftover after parsing attributes in process `syz.2.37400'. [ 2171.444030][T18994] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37405'. [ 2172.141506][T19017] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.37414'. [ 2172.271457][T19017] netlink: zone id is out of range [ 2172.327176][T19017] netlink: zone id is out of range [ 2172.363371][T19017] netlink: zone id is out of range [ 2172.379071][T19017] netlink: zone id is out of range [ 2172.390519][T19017] netlink: zone id is out of range [ 2172.434794][T19017] netlink: zone id is out of range [ 2172.440731][T19017] netlink: zone id is out of range [ 2172.461681][T19017] netlink: zone id is out of range [ 2172.470647][T19017] netlink: zone id is out of range [ 2172.481455][T19017] netlink: zone id is out of range [ 2173.079328][T19034] netlink: 125520 bytes leftover after parsing attributes in process `syz.0.37419'. [ 2179.922766][T19131] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.37463'. [ 2180.091086][T19141] netlink: 'syz.1.37467': attribute type 1 has an invalid length. [ 2180.116149][T19141] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.37467'. [ 2180.270862][T19149] device syzkaller0 entered promiscuous mode [ 2180.340036][T19151] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.37474'. [ 2180.385118][T19151] net_ratelimit: 3543 callbacks suppressed [ 2180.385154][T19151] netlink: zone id is out of range [ 2180.423936][T19151] netlink: zone id is out of range [ 2180.434241][T19151] netlink: zone id is out of range [ 2180.440165][T19151] netlink: get zone limit has 8 unknown bytes [ 2181.081895][T29969] Bluetooth: hci0: Dropping invalid advertising data [ 2181.089558][T29969] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2181.367542][T19196] netlink: 'syz.0.37490': attribute type 2 has an invalid length. [ 2181.384574][T19196] netlink: 'syz.0.37490': attribute type 1 has an invalid length. [ 2181.392564][T19196] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.37490'. [ 2182.746318][T19190] netlink: 'syz.3.37486': attribute type 12 has an invalid length. [ 2182.754474][T19190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.37486'. [ 2182.915095][T19201] netlink: 'syz.3.37493': attribute type 3 has an invalid length. [ 2182.937377][T29969] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2182.945078][T29969] Bluetooth: hci1: Invalid handle: 0xffff > 0x0eff [ 2182.945460][T19201] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.37493'. [ 2183.107182][T19208] device syzkaller0 entered promiscuous mode [ 2185.603176][T19238] netlink: 'syz.1.37508': attribute type 3 has an invalid length. [ 2185.626719][T19238] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.37508'. [ 2187.836068][T19263] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37519'. [ 2188.097781][T19269] netlink: 'syz.2.37522': attribute type 3 has an invalid length. [ 2188.124061][T19269] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.37522'. [ 2188.918040][T19275] netlink: 'syz.2.37534': attribute type 3 has an invalid length. [ 2188.927148][T19275] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.37534'. [ 2189.752988][T19304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.37537'. [ 2189.791855][T19304] : renamed from caif0 [ 2189.853215][T19304] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2190.213144][T19310] netlink: 'syz.3.37540': attribute type 3 has an invalid length. [ 2190.248682][T19310] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.37540'. [ 2190.510951][T19319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37545'. [ 2190.564988][T19319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37545'. [ 2190.667689][T19326] netlink: 184 bytes leftover after parsing attributes in process `syz.3.37548'. [ 2191.197359][T19341] netlink: 'syz.1.37555': attribute type 3 has an invalid length. [ 2191.233899][T19341] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.37555'. [ 2192.072977][T19390] netlink: 'syz.1.37574': attribute type 3 has an invalid length. [ 2192.133830][T19390] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.37574'. [ 2193.294174][T19422] netlink: 'syz.3.37592': attribute type 3 has an invalid length. [ 2193.319235][T19422] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.37592'. [ 2194.406054][T19458] netlink: 60583 bytes leftover after parsing attributes in process `syz.4.37609'. [ 2194.454801][T19458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37609'. [ 2194.523549][T19462] netlink: 'syz.1.37610': attribute type 3 has an invalid length. [ 2194.562616][T19462] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.37610'. [ 2194.761820][T19469] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.37613'. [ 2194.793769][T19469] netlink: zone id is out of range [ 2194.798971][T19469] netlink: zone id is out of range [ 2194.816010][T19469] netlink: get zone limit has 8 unknown bytes [ 2195.433292][T19494] netlink: 'syz.0.37624': attribute type 3 has an invalid length. [ 2195.495267][T19494] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.37624'. [ 2195.768502][T29969] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 2196.811864][T19510] netlink: 'syz.0.37630': attribute type 1 has an invalid length. [ 2196.830676][T19510] netlink: 'syz.0.37630': attribute type 4 has an invalid length. [ 2196.850928][T19510] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.37630'. [ 2197.353196][T19533] netlink: 'syz.0.37639': attribute type 3 has an invalid length. [ 2197.383175][T19533] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.37639'. [ 2197.783631][T29969] Bluetooth: hci1: command 0x201b tx timeout [ 2198.255356][T29969] Bluetooth: hci3: Malformed HCI Event [ 2199.795028][T19569] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.37654'. [ 2199.822200][T19569] netlink: zone id is out of range [ 2199.843306][T19569] netlink: zone id is out of range [ 2199.853436][T19569] netlink: zone id is out of range [ 2199.879375][T19569] netlink: zone id is out of range [ 2199.896663][T19569] netlink: zone id is out of range [ 2199.922043][T19569] netlink: zone id is out of range [ 2199.940971][T19569] netlink: zone id is out of range [ 2199.962719][T19569] netlink: zone id is out of range [ 2199.980807][T19569] netlink: zone id is out of range [ 2199.996700][T19569] netlink: zone id is out of range [ 2200.817740][T19596] netlink: 'syz.0.37667': attribute type 2 has an invalid length. [ 2200.847046][T19596] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.37667'. [ 2201.831701][T19608] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.37673'. [ 2204.062229][T19606] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.37672'. [ 2208.848568][T19670] sock: sock_timestamping_bind_phc: sock not bind to device [ 2209.641609][T19683] netlink: 'syz.3.37703': attribute type 11 has an invalid length. [ 2209.682698][T19683] netlink: 'syz.3.37703': attribute type 2 has an invalid length. [ 2209.711695][T19683] netlink: 126196 bytes leftover after parsing attributes in process `syz.3.37703'. [ 2209.821636][T19694] netlink: 'syz.0.37707': attribute type 15 has an invalid length. [ 2209.844057][T19694] netlink: 'syz.0.37707': attribute type 16 has an invalid length. [ 2209.866620][T19694] netlink: 'syz.0.37707': attribute type 4 has an invalid length. [ 2209.888566][T19694] netlink: 'syz.0.37707': attribute type 6 has an invalid length. [ 2209.924525][T19694] netlink: 'syz.0.37707': attribute type 15 has an invalid length. [ 2209.932485][T19694] netlink: 'syz.0.37707': attribute type 16 has an invalid length. [ 2209.966730][T19694] netlink: 'syz.0.37707': attribute type 20 has an invalid length. [ 2209.988445][T19694] netlink: 'syz.0.37707': attribute type 21 has an invalid length. [ 2210.011143][T19694] netlink: 13226 bytes leftover after parsing attributes in process `syz.0.37707'. [ 2210.068368][T19703] netlink: 'syz.4.37712': attribute type 11 has an invalid length. [ 2210.134312][T19703] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.37712'. [ 2210.177511][T19701] device syzkaller0 entered promiscuous mode [ 2210.205347][T19707] netlink: 'syz.4.37712': attribute type 11 has an invalid length. [ 2210.250400][T19707] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.37712'. [ 2214.662495][T19752] validate_nla: 5 callbacks suppressed [ 2214.662512][T19752] netlink: 'syz.4.37731': attribute type 21 has an invalid length. [ 2214.677998][T19752] netlink: 'syz.4.37731': attribute type 22 has an invalid length. [ 2214.686055][T19752] netlink: 'syz.4.37731': attribute type 13 has an invalid length. [ 2214.694922][T19752] netlink: 6188 bytes leftover after parsing attributes in process `syz.4.37731'. [ 2216.334122][T19781] netlink: 'syz.2.37743': attribute type 2 has an invalid length. [ 2216.342905][T19781] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.37743'. [ 2216.493653][T19788] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.37747'. [ 2216.625378][T29969] Bluetooth: hci0: unknown advertising packet type: 0x14 [ 2216.625416][T29969] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2217.151359][T19819] device syzkaller0 entered promiscuous mode [ 2219.872368][T19886] sctp: [Deprecated]: syz.4.37789 (pid 19886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2219.872368][T19886] Use struct sctp_sack_info instead [ 2220.349093][T19901] netlink: 'syz.3.37795': attribute type 2 has an invalid length. [ 2220.358199][T19901] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.37795'. [ 2221.796298][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.802697][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.800926][T19904] ¥: port 1(team0) entered blocking state [ 2223.809068][T19904] ¥: port 1(team0) entered disabled state [ 2223.833398][T19904] device team0 entered promiscuous mode [ 2223.845725][T19904] device team_slave_0 entered promiscuous mode [ 2223.895163][T19904] device team_slave_1 entered promiscuous mode [ 2223.921092][T19905] device team0 left promiscuous mode [ 2223.932324][T19905] device team_slave_0 left promiscuous mode [ 2223.943524][T19905] device team_slave_1 left promiscuous mode [ 2223.960714][T19905] ¥: port 1(team0) entered disabled state [ 2227.969586][T29969] Bluetooth: hci3: Dropping invalid advertising data [ 2227.976418][T29969] Bluetooth: hci3: unknown advertising packet type: 0xff [ 2227.976443][T29969] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2230.212607][T20009] sctp: [Deprecated]: syz.3.37839 (pid 20009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2230.212607][T20009] Use struct sctp_sack_info instead [ 2233.605950][T20109] device syzkaller0 entered promiscuous mode [ 2234.550812][T29969] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 2237.866172][T20191] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.37921'. [ 2238.663825][T29969] Bluetooth: hci2: command 0x0406 tx timeout [ 2239.007349][T20214] device syzkaller0 entered promiscuous mode [ 2239.325474][T20229] netlink: 'syz.4.37938': attribute type 1 has an invalid length. [ 2239.338432][T20229] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.37938'. [ 2240.137916][T20244] netlink: 'syz.2.37944': attribute type 1 has an invalid length. [ 2240.146527][T20244] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.37944'. [ 2241.926964][T20235] device lo left promiscuous mode [ 2241.937792][T20238] device lo entered promiscuous mode [ 2241.949472][T20238] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2241.965153][T20250] netlink: 'syz.3.37946': attribute type 2 has an invalid length. [ 2241.981981][T20250] netlink: 'syz.3.37946': attribute type 9 has an invalid length. [ 2241.993768][T20250] netlink: 'syz.3.37946': attribute type 10 has an invalid length. [ 2242.001713][T20250] netlink: 'syz.3.37946': attribute type 11 has an invalid length. [ 2242.018719][T20250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37946'. [ 2242.294166][T20260] device syzkaller0 entered promiscuous mode [ 2242.395461][T20265] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 2244.832912][T20277] netlink: 'syz.4.37956': attribute type 9 has an invalid length. [ 2244.844377][T20277] netlink: 'syz.4.37956': attribute type 10 has an invalid length. [ 2244.852538][T20277] netlink: 'syz.4.37956': attribute type 11 has an invalid length. [ 2244.967765][T20283] netlink: 'syz.3.37959': attribute type 3 has an invalid length. [ 2244.996144][T20283] netlink: 'syz.3.37959': attribute type 8 has an invalid length. [ 2245.036007][T20283] netlink: 'syz.3.37959': attribute type 7 has an invalid length. [ 2245.051205][T20283] netlink: 194740 bytes leftover after parsing attributes in process `syz.3.37959'. [ 2245.830306][T20330] netlink: 64 bytes leftover after parsing attributes in process `syz.1.37982'. [ 2246.385690][T29969] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 2249.297139][T20411] netlink: 'syz.1.38014': attribute type 2 has an invalid length. [ 2249.630446][T20422] device syzkaller0 entered promiscuous mode [ 2250.657377][T20452] netlink: 126324 bytes leftover after parsing attributes in process `syz.2.38032'. [ 2250.923967][T20458] netlink: 'syz.0.38034': attribute type 4 has an invalid length. [ 2250.936068][T20458] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.38034'. [ 2254.822400][T20489] device syzkaller0 entered promiscuous mode [ 2256.808402][T20546] netlink: 'syz.0.38072': attribute type 3 has an invalid length. [ 2256.825781][T20546] netlink: 'syz.0.38072': attribute type 1 has an invalid length. [ 2256.857250][T20546] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.38072'. [ 2257.160227][T20556] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.38077'. [ 2258.487324][T20556] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2258.495911][T20556] CPU: 1 PID: 20556 Comm: syz.4.38077 Not tainted syzkaller #0 [ 2258.503579][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2258.513651][T20556] Call Trace: [ 2258.516928][T20556] [ 2258.519852][T20556] dump_stack_lvl+0x188/0x24e [ 2258.524556][T20556] ? show_regs_print_info+0x12/0x12 [ 2258.529756][T20556] ? load_image+0x410/0x410 [ 2258.534281][T20556] sysfs_warn_dup+0x8a/0xa0 [ 2258.538796][T20556] sysfs_do_create_link_sd+0xc0/0x110 [ 2258.544170][T20556] device_add+0x83b/0x1050 [ 2258.548591][T20556] wiphy_register+0x1d8b/0x2aa0 [ 2258.553453][T20556] ? cfg80211_event_work+0x40/0x40 [ 2258.558566][T20556] ? minstrel_ht_alloc+0x894/0xa20 [ 2258.563678][T20556] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2258.569746][T20556] ieee80211_register_hw+0x2e33/0x3b00 [ 2258.575213][T20556] ? ieee80211_register_hw+0xf61/0x3b00 [ 2258.580750][T20556] ? ieee80211_register_hw+0xf61/0x3b00 [ 2258.586299][T20556] ? ieee80211_tasklet_handler+0x20/0x20 [ 2258.591926][T20556] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2258.597837][T20556] ? __debug_object_init+0xed/0x440 [ 2258.603034][T20556] ? memset+0x1e/0x40 [ 2258.607010][T20556] ? __hrtimer_init+0x189/0x270 [ 2258.611858][T20556] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2258.617676][T20556] ? memcpy+0x3c/0x60 [ 2258.621661][T20556] hwsim_new_radio_nl+0xab7/0xc90 [ 2258.626727][T20556] genl_family_rcv_msg_doit+0x22f/0x350 [ 2258.632296][T20556] ? end_current_label_crit_section+0x170/0x170 [ 2258.638554][T20556] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2258.644468][T20556] ? bpf_lsm_capable+0x5/0x10 [ 2258.649147][T20556] ? security_capable+0x85/0xb0 [ 2258.654177][T20556] genl_rcv_msg+0x601/0x790 [ 2258.658692][T20556] ? genl_bind+0x360/0x360 [ 2258.663111][T20556] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2258.669444][T20556] netlink_rcv_skb+0x1ef/0x440 [ 2258.674209][T20556] ? genl_bind+0x360/0x360 [ 2258.678621][T20556] ? netlink_ack+0x1160/0x1160 [ 2258.683384][T20556] ? down_read+0x1a8/0x2d0 [ 2258.687809][T20556] genl_rcv+0x24/0x40 [ 2258.691790][T20556] netlink_unicast+0x7ad/0x920 [ 2258.696647][T20556] netlink_sendmsg+0x8ad/0xbd0 [ 2258.701425][T20556] ? netlink_getsockopt+0x550/0x550 [ 2258.706622][T20556] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2258.712170][T20556] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2258.717477][T20556] ? security_socket_sendmsg+0x7c/0xa0 [ 2258.722944][T20556] ? netlink_getsockopt+0x550/0x550 [ 2258.728143][T20556] ____sys_sendmsg+0x5ed/0x9a0 [ 2258.732915][T20556] ? __sys_sendmsg_sock+0x30/0x30 [ 2258.737934][T20556] ? __import_iovec+0x306/0x510 [ 2258.742792][T20556] ? import_iovec+0x6f/0xa0 [ 2258.747295][T20556] ___sys_sendmsg+0x2a2/0x360 [ 2258.751974][T20556] ? __sys_sendmsg+0x2a0/0x2a0 [ 2258.756771][T20556] __se_sys_sendmsg+0x1c3/0x2b0 [ 2258.761633][T20556] ? __x64_sys_sendmsg+0x80/0x80 [ 2258.766584][T20556] ? lockdep_hardirqs_on+0x94/0x140 [ 2258.771812][T20556] do_syscall_64+0x4c/0xa0 [ 2258.776229][T20556] ? clear_bhb_loop+0x60/0xb0 [ 2258.780906][T20556] ? clear_bhb_loop+0x60/0xb0 [ 2258.785584][T20556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2258.791474][T20556] RIP: 0033:0x7fb5b639e199 [ 2258.795887][T20556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2258.815490][T20556] RSP: 002b:00007fb5b7225028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2258.823905][T20556] RAX: ffffffffffffffda RBX: 00007fb5b6625fa0 RCX: 00007fb5b639e199 [ 2258.831869][T20556] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2258.839832][T20556] RBP: 00007fb5b64358e0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.847813][T20556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2258.855780][T20556] R13: 00007fb5b6626038 R14: 00007fb5b6625fa0 R15: 00007ffd6af5c098 [ 2258.863757][T20556] [ 2269.461790][T20667] netlink: 35347 bytes leftover after parsing attributes in process `syz.4.38120'. [ 2272.537377][T20733] device syzkaller0 entered promiscuous mode [ 2275.875162][T20742] device syzkaller0 entered promiscuous mode [ 2276.621061][T29969] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2276.882642][T20770] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.38162'. [ 2276.893238][T20770] net_ratelimit: 3663 callbacks suppressed [ 2276.893271][T20770] netlink: zone id is out of range [ 2276.916853][T20770] netlink: zone id is out of range [ 2276.936407][T20770] netlink: zone id is out of range [ 2276.962423][T20770] netlink: del zone limit has 4 unknown bytes [ 2277.395003][T20780] netlink: 15007 bytes leftover after parsing attributes in process `syz.4.38167'. [ 2283.226059][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.232407][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2285.004214][T20834] netlink: 3529 bytes leftover after parsing attributes in process `syz.4.38189'. [ 2285.013521][T20834] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.38189'. [ 2285.025306][T20834] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.38189'. [ 2287.606940][T20920] netlink: 'syz.1.38224': attribute type 1 has an invalid length. [ 2287.653773][T20920] netlink: 'syz.1.38224': attribute type 4 has an invalid length. [ 2287.682673][T20920] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.38224'. [ 2288.662905][T20960] netlink: 'syz.0.38243': attribute type 1 has an invalid length. [ 2288.721945][T20960] netlink: 'syz.0.38243': attribute type 4 has an invalid length. [ 2288.753621][T20960] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.38243'. [ 2289.783126][T20995] netlink: 'syz.2.38258': attribute type 1 has an invalid length. [ 2289.797059][T20995] netlink: 'syz.2.38258': attribute type 4 has an invalid length. [ 2289.833806][T20995] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.38258'. [ 2290.290682][T21016] netlink: 'syz.1.38270': attribute type 21 has an invalid length. [ 2290.350610][T21016] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.38270'. [ 2291.080283][T21030] sctp: [Deprecated]: syz.3.38278 (pid 21030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2291.080283][T21030] Use struct sctp_sack_info instead [ 2291.838539][T21039] netlink: 'syz.4.38279': attribute type 1 has an invalid length. [ 2291.907565][T21039] netlink: 'syz.4.38279': attribute type 4 has an invalid length. [ 2291.934002][T21039] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.38279'. [ 2295.896721][T21107] device syzkaller0 entered promiscuous mode [ 2298.921265][T21117] netlink: 44 bytes leftover after parsing attributes in process `syz.1.38315'. [ 2298.932242][T21126] netlink: 3 bytes leftover after parsing attributes in process `syz.4.38319'. [ 2303.475059][T21195] netlink: 'syz.0.38359': attribute type 3 has an invalid length. [ 2303.504725][T21195] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.38359'. [ 2306.001611][T21242] netlink: 95 bytes leftover after parsing attributes in process `syz.3.38371'. [ 2306.249217][T21251] netlink: 'syz.2.38373': attribute type 8 has an invalid length. [ 2306.276355][T21251] netlink: 156 bytes leftover after parsing attributes in process `syz.2.38373'. [ 2308.271594][T21276] netlink: 'syz.3.38396': attribute type 21 has an invalid length. [ 2308.284685][T21276] netlink: 'syz.3.38396': attribute type 13 has an invalid length. [ 2308.292847][T21276] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.38396'. [ 2309.492685][T21305] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.38397'. [ 2309.724132][T21318] netlink: 'syz.0.38414': attribute type 10 has an invalid length. [ 2309.748355][T21318] netlink: 'syz.0.38414': attribute type 11 has an invalid length. [ 2309.759416][T21318] netlink: 5145 bytes leftover after parsing attributes in process `syz.0.38414'. [ 2310.437703][T21340] netlink: 'syz.1.38413': attribute type 3 has an invalid length. [ 2310.485915][T21340] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.38413'. [ 2310.922578][T21356] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.38422'. [ 2311.149225][T21368] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.38427'. [ 2311.178027][T21368] netlink: zone id is out of range [ 2311.191552][T21368] netlink: zone id is out of range [ 2311.209420][T21368] netlink: zone id is out of range [ 2311.218159][T21368] netlink: zone id is out of range [ 2311.228975][T21368] netlink: zone id is out of range [ 2311.255288][T21368] netlink: zone id is out of range [ 2311.272659][T21368] netlink: zone id is out of range [ 2311.315137][T21368] netlink: zone id is out of range [ 2311.332376][T21368] netlink: zone id is out of range [ 2311.348720][T21368] netlink: zone id is out of range [ 2312.313511][T21394] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.38438'. [ 2321.375460][T21493] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.38482'. [ 2321.419467][T21495] netlink: 'syz.3.38483': attribute type 1 has an invalid length. [ 2321.461324][T21495] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.38483'. [ 2322.607453][T21543] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.38503'. [ 2322.641219][T21543] net_ratelimit: 3543 callbacks suppressed [ 2322.641258][T21543] netlink: zone id is out of range [ 2322.687894][T21543] netlink: zone id is out of range [ 2322.705057][T21543] netlink: zone id is out of range [ 2322.727280][T21543] netlink: get zone limit has 8 unknown bytes [ 2323.011172][T29969] Bluetooth: hci3: Dropping invalid advertising data [ 2323.018359][T29969] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2323.218129][T29969] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2323.227123][T29969] Bluetooth: hci4: Invalid handle: 0xffff > 0x0eff [ 2323.228908][T21559] device syzkaller0 entered promiscuous mode [ 2323.262310][T21568] netlink: 'syz.0.38515': attribute type 12 has an invalid length. [ 2323.304112][T21568] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38515'. [ 2325.359661][T21595] device syzkaller0 entered promiscuous mode [ 2328.824318][T21606] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.38533'. [ 2330.132260][T21645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.38552'. [ 2330.154519][T21645] : renamed from caif0 [ 2330.169097][T21645] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2330.389710][T21663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.38561'. [ 2330.423519][T21663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.38561'. [ 2330.432905][T21667] netlink: 184 bytes leftover after parsing attributes in process `syz.2.38563'. [ 2331.474996][T21718] netlink: 'syz.3.38585': attribute type 21 has an invalid length. [ 2331.493792][T21718] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.38585'. [ 2333.316405][T21775] netlink: 'syz.2.38616': attribute type 21 has an invalid length. [ 2333.343682][T21775] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.38616'. [ 2333.959822][T21793] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.38624'. [ 2333.998091][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38624'. [ 2335.980742][T21570] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 2337.020634][T21845] netlink: 'syz.1.38645': attribute type 1 has an invalid length. [ 2337.063724][T21845] netlink: 'syz.1.38645': attribute type 4 has an invalid length. [ 2337.071592][T21845] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.38645'. [ 2338.023693][T21570] Bluetooth: hci2: command 0x201b tx timeout [ 2340.039069][T21570] Bluetooth: hci2: Malformed HCI Event [ 2343.681690][T21903] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.38672'. [ 2343.697782][T21903] netlink: zone id is out of range [ 2343.704772][T21903] netlink: zone id is out of range [ 2343.710342][T21903] netlink: zone id is out of range [ 2343.718099][T21903] netlink: zone id is out of range [ 2343.726328][T21903] netlink: zone id is out of range [ 2343.755721][T21903] netlink: zone id is out of range [ 2343.761275][T21903] netlink: zone id is out of range [ 2343.780347][T21903] netlink: zone id is out of range [ 2343.816056][T21903] netlink: zone id is out of range [ 2343.827009][T21903] netlink: zone id is out of range [ 2344.095001][T21915] netlink: 'syz.3.38680': attribute type 2 has an invalid length. [ 2344.142814][T21915] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.38680'. [ 2344.308325][T21926] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.38685'. [ 2344.672256][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.678791][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2346.048015][T21931] sctp: [Deprecated]: syz.0.38687 (pid 21931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2346.048015][T21931] Use struct sctp_sack_info instead [ 2351.916045][T21989] sctp: [Deprecated]: syz.1.38708 (pid 21989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2351.916045][T21989] Use struct sctp_sack_info instead [ 2352.080017][T21995] netlink: 'syz.0.38721': attribute type 11 has an invalid length. [ 2352.091127][T21995] netlink: 'syz.0.38721': attribute type 2 has an invalid length. [ 2352.100634][T21995] netlink: 126196 bytes leftover after parsing attributes in process `syz.0.38721'. [ 2353.900220][T22001] netlink: 'syz.2.38725': attribute type 15 has an invalid length. [ 2353.922389][T22001] netlink: 'syz.2.38725': attribute type 16 has an invalid length. [ 2353.939973][T22001] netlink: 'syz.2.38725': attribute type 4 has an invalid length. [ 2353.969476][T22001] netlink: 'syz.2.38725': attribute type 6 has an invalid length. [ 2353.989352][T22001] netlink: 'syz.2.38725': attribute type 15 has an invalid length. [ 2354.012290][T22001] netlink: 'syz.2.38725': attribute type 16 has an invalid length. [ 2354.026588][T22001] netlink: 'syz.2.38725': attribute type 20 has an invalid length. [ 2354.042108][T22001] netlink: 'syz.2.38725': attribute type 21 has an invalid length. [ 2354.083907][T22001] netlink: 13226 bytes leftover after parsing attributes in process `syz.2.38725'. [ 2354.197497][T22004] sock: sock_timestamping_bind_phc: sock not bind to device [ 2355.456653][T22035] netlink: 'syz.0.38727': attribute type 11 has an invalid length. [ 2355.478475][T22035] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.38727'. [ 2355.552594][T22034] netlink: 'syz.0.38727': attribute type 11 has an invalid length. [ 2355.629597][T22034] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.38727'. [ 2360.389858][T22078] validate_nla: 5 callbacks suppressed [ 2360.389875][T22078] netlink: 'syz.3.38757': attribute type 2 has an invalid length. [ 2360.446432][T22078] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.38757'. [ 2362.512146][T21570] Bluetooth: hci3: unknown advertising packet type: 0x14 [ 2362.512184][T21570] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2363.646593][T22115] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.38762'. [ 2367.550863][T22205] sctp: [Deprecated]: syz.1.38803 (pid 22205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2367.550863][T22205] Use struct sctp_sack_info instead [ 2368.230420][T22217] netlink: 'syz.4.38807': attribute type 2 has an invalid length. [ 2368.306240][T22217] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.38807'. Stopping sshd: stopped /usr/sbin/sshd (pid 4030) OK Stopping crond: stopped /usr/sbin/crond (pid 4013) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3933) Stopping network: [ 2378.976476][T22253] ¥: port 1(team0) entered blocking state [ 2378.982325][T22253] ¥: port 1(team0) entered disabled state [ 2378.988822][T22253] device team0 entered promiscuous mode [ 2378.994450][T22253] device team_slave_0 entered promiscuous mode [ 2379.000673][T22253] device team_slave_1 entered promiscuous mode [ 2379.009863][T22254] device team0 left promiscuous mode [ 2379.015587][T22254] device team_slave_0 left promiscuous mode [ 2379.021569][T22254] device team_slave_1 left promiscuous mode [ 2379.041772][T22254] ¥: port 1(team0) entered disabled state OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3621) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 2384.361152][T21920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2384.488868][T21920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2384.594087][T21920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes [ 2384.642704][T21920] team0: Port device netdevsim0 removed [ 2384.650404][T21920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Requesting system poweroff [ 2385.638997][T21920] device hsr_slave_0 left promiscuous mode [ 2385.645581][T21920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2385.653003][T21920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2385.661921][T21920] device bridge_slave_1 left promiscuous mode [ 2385.668372][T21920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.669457][T22369] kvm: exiting hardware virtualization [ 2385.684910][T21920] device bridge_slave_0 left promiscuous mode [ 2385.691178][T21920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.717067][T22369] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2385.725615][T21920] device veth1_vlan left promiscuous mode [ 2385.731492][T21920] device veth0_vlan left promiscuous mode [ 2385.749006][T22369] ACPI: PM: Preparing to enter system sleep state S5 [ 2385.763857][T22369] reboot: Power down serialport: VM disconnected.