last executing test programs: 3.720148919s ago: executing program 0 (id=36594): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000480)="f4", 0x1}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}, 0x40041) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10, 0x4040844}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) 3.512596144s ago: executing program 4 (id=36601): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0xdef328489ce7b4c}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x482, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x6a49, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, 0x0, 0x200040d0}, 0x4004) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8004) 3.296797349s ago: executing program 4 (id=36604): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x85bb, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) 3.077281834s ago: executing program 1 (id=36605): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.919624099s ago: executing program 1 (id=36606): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 2.810693231s ago: executing program 4 (id=36609): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x244b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x1}, 0xc004, 0x7, 0x43a1bd73, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x12, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2.767073772s ago: executing program 0 (id=36610): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 2.678830395s ago: executing program 1 (id=36611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2.502430228s ago: executing program 3 (id=36623): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0xb156, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) socket$kcm(0x2c, 0x3, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.261166745s ago: executing program 1 (id=36613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d314f327e90"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000340)='%dO\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 2.230839486s ago: executing program 2 (id=36614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x4, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x4}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffab, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x0, 0x0, 0x54, 0x0, 0x0, 0x0) 1.869348804s ago: executing program 2 (id=36616): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 1.869208854s ago: executing program 3 (id=36617): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x28, 0x1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x2000c090) 1.736518928s ago: executing program 3 (id=36618): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 1.556914122s ago: executing program 0 (id=36619): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.555933462s ago: executing program 3 (id=36630): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x85bb, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) 1.529802023s ago: executing program 2 (id=36620): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x66ae41ce}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x386, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x800000000001, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1ef, 0x0, 0x4, 0x0, 0x2, 0x0, 0xa8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.528441623s ago: executing program 1 (id=36632): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x100) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8000000, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.478560893s ago: executing program 4 (id=36621): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000480)="f4", 0x1}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}, 0x40041) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10, 0x4040844}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) 1.318133998s ago: executing program 0 (id=36622): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.187725781s ago: executing program 0 (id=36624): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) 1.187551581s ago: executing program 2 (id=36625): socket$kcm(0x2, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x5, 0x5, &(0x7f0000001900)=ANY=[], &(0x7f0000001940)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x80, 0x0}, 0x200ca8c5) write$cgroup_subtree(r1, 0x0, 0xfe33) 930.513427ms ago: executing program 2 (id=36626): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000140080410000258", 0x56}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) 529.842207ms ago: executing program 4 (id=36627): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0xb156, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) socket$kcm(0x2c, 0x3, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 528.947477ms ago: executing program 2 (id=36639): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x24004041) 528.492957ms ago: executing program 3 (id=36628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x4, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x4}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffab, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x0, 0x0, 0x54, 0x0, 0x0, 0x0) 250.331874ms ago: executing program 1 (id=36629): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x22, 0x2, 0x21) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 10.45097ms ago: executing program 4 (id=36631): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 825.74µs ago: executing program 0 (id=36643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000180)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/182, 0xb6}], 0x1}, 0x100b6) close(r2) 0s ago: executing program 3 (id=36644): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x11, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003b) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) kernel console output (not intermixed with test programs): 284.698292][ T3764] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.30558'. [ 1285.121231][ T3780] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.30565'. [ 1285.445604][ T3798] bridge0: port 3(dummy0) entered disabled state [ 1285.453699][ T3798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.466258][ T3798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.516018][ T3800] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.30575'. [ 1285.581264][ T3805] bridge0: port 3(dummy0) entered blocking state [ 1285.587858][ T3805] bridge0: port 3(dummy0) entered forwarding state [ 1285.594630][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.602063][ T3805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.610509][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.617878][ T3805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.729798][ T3805] device bridge0 entered promiscuous mode [ 1285.857640][ T3810] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.30580'. [ 1286.453406][ T3829] rxe_eth0 speed is unknown, defaulting to 1000 [ 1286.636861][ T3846] validate_nla: 13 callbacks suppressed [ 1286.636885][ T3846] netlink: 'syz.4.30596': attribute type 21 has an invalid length. [ 1286.795184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1287.851435][ T3893] netlink: 'syz.3.30612': attribute type 21 has an invalid length. [ 1288.036395][ T3902] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.30617'. [ 1288.396124][ T3916] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.30635'. [ 1288.458319][ T3916] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.30635'. [ 1288.776091][ T3932] netlink: 'syz.1.30641': attribute type 10 has an invalid length. [ 1288.823512][ T3932] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.30641'. [ 1289.306634][ T3952] netlink: 177048 bytes leftover after parsing attributes in process `syz.1.30639'. [ 1289.687223][ T3968] netlink: 10 bytes leftover after parsing attributes in process `syz.0.30645'. [ 1289.890717][ T3974] netlink: 'syz.2.30647': attribute type 10 has an invalid length. [ 1289.938311][ T3974] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.30647'. [ 1290.058407][ T3979] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.30652'. [ 1290.119287][ T3979] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.30652'. [ 1290.438167][ T4005] netlink: 10 bytes leftover after parsing attributes in process `syz.3.30663'. [ 1295.782371][ T4240] netlink: 'syz.1.30762': attribute type 2 has an invalid length. [ 1295.795546][ T4240] netlink: 'syz.1.30762': attribute type 1 has an invalid length. [ 1295.805839][ T4240] netlink: 'syz.1.30762': attribute type 8 has an invalid length. [ 1295.838274][ T4240] __nla_validate_parse: 5 callbacks suppressed [ 1295.838291][ T4240] netlink: 44 bytes leftover after parsing attributes in process `syz.1.30762'. [ 1297.039364][ T4257] rxe_eth0 speed is unknown, defaulting to 1000 [ 1297.268138][ T4293] netlink: 'syz.0.30785': attribute type 3 has an invalid length. [ 1297.301408][ T4293] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.30785'. [ 1297.492862][ T4298] rxe_eth0 speed is unknown, defaulting to 1000 [ 1298.095952][ T4331] netlink: 'syz.3.30802': attribute type 2 has an invalid length. [ 1298.132739][ T4331] netlink: 'syz.3.30802': attribute type 1 has an invalid length. [ 1298.140650][ T4331] netlink: 'syz.3.30802': attribute type 8 has an invalid length. [ 1298.202280][ T4331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.30802'. [ 1298.516261][ T4348] netlink: 'syz.0.30809': attribute type 10 has an invalid length. [ 1298.561608][ T4348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.30809'. [ 1298.607274][ T4348] device team0 entered promiscuous mode [ 1298.627031][ T4348] device team_slave_0 entered promiscuous mode [ 1298.717726][ T4348] bond0: (slave team0): Releasing backup interface [ 1298.794472][ T4348] bridge0: port 3(team0) entered blocking state [ 1298.809649][ T4348] bridge0: port 3(team0) entered disabled state [ 1299.027198][ T4335] rxe_eth0 speed is unknown, defaulting to 1000 [ 1299.055453][ T4357] netlink: 'syz.2.30821': attribute type 3 has an invalid length. [ 1299.129382][ T4357] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.30821'. [ 1300.191339][ T4391] netlink: 'syz.4.30824': attribute type 10 has an invalid length. [ 1300.231466][ T4391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.30824'. [ 1300.280048][ T4391] device team0 entered promiscuous mode [ 1300.311183][ T4391] device team_slave_0 entered promiscuous mode [ 1300.337404][ T4391] device team_slave_1 entered promiscuous mode [ 1300.347971][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.348078][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.486784][ T4391] bridge0: port 3(team0) entered blocking state [ 1300.497307][ T4391] bridge0: port 3(team0) entered disabled state [ 1300.511456][ T4391] bridge0: port 3(team0) entered blocking state [ 1300.518122][ T4391] bridge0: port 3(team0) entered forwarding state [ 1302.083680][ T4437] netlink: 'syz.1.30846': attribute type 10 has an invalid length. [ 1302.131406][ T4437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.30846'. [ 1302.163413][ T4437] device team0 entered promiscuous mode [ 1302.201707][ T4437] device team_slave_0 entered promiscuous mode [ 1302.215522][ T4437] device team_slave_1 entered promiscuous mode [ 1302.262635][ T4437] bridge0: port 4(team0) entered blocking state [ 1302.334592][ T4437] bridge0: port 4(team0) entered disabled state [ 1302.349901][ T4437] bridge0: port 4(team0) entered blocking state [ 1302.356442][ T4437] bridge0: port 4(team0) entered forwarding state [ 1302.924704][ T4462] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.30867'. [ 1304.616756][ T4521] netlink: 16374 bytes leftover after parsing attributes in process `syz.3.30884'. [ 1304.880667][ T4529] netlink: 168 bytes leftover after parsing attributes in process `syz.3.30889'. [ 1305.869145][ T4559] netlink: 'syz.1.30902': attribute type 21 has an invalid length. [ 1305.898202][ T4559] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.30902'. [ 1306.957623][ T4576] netlink: 'syz.2.30908': attribute type 2 has an invalid length. [ 1307.004765][ T4576] netlink: 'syz.2.30908': attribute type 1 has an invalid length. [ 1307.068192][ T4576] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.30908'. [ 1307.746191][ T4579] rxe_eth0 speed is unknown, defaulting to 1000 [ 1308.241274][ T4587] netlink: 16374 bytes leftover after parsing attributes in process `syz.4.30922'. [ 1308.735665][ T4607] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.30921'. [ 1308.947334][ T4618] netlink: 168 bytes leftover after parsing attributes in process `syz.2.30926'. [ 1309.491576][ T4623] netlink: 16374 bytes leftover after parsing attributes in process `syz.2.30928'. [ 1309.837336][ T4616] rxe_eth0 speed is unknown, defaulting to 1000 [ 1309.932350][ T4632] netlink: 'syz.2.30932': attribute type 21 has an invalid length. [ 1309.960982][ T4632] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.30932'. [ 1311.296643][ T4667] netlink: 'syz.4.30946': attribute type 21 has an invalid length. [ 1311.334019][ T4667] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.30946'. [ 1311.450405][ T4673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30951'. [ 1312.363446][ T4694] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1314.657784][ T4752] netlink: 'syz.4.30989': attribute type 1 has an invalid length. [ 1314.701341][ T4752] netlink: 'syz.4.30989': attribute type 4 has an invalid length. [ 1314.729009][ T4752] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.30989'. [ 1314.869970][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 1319.373576][ T4806] netlink: 176 bytes leftover after parsing attributes in process `syz.0.31012'. [ 1320.840515][ T4841] netlink: 176 bytes leftover after parsing attributes in process `syz.2.31029'. [ 1321.479058][ T4861] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.31036'. [ 1321.509240][ T4861] netlink: 'syz.2.31036': attribute type 1 has an invalid length. [ 1321.519363][ T4861] netlink: 'syz.2.31036': attribute type 2 has an invalid length. [ 1321.550071][ T4861] netlink: 'syz.2.31036': attribute type 3 has an invalid length. [ 1321.591383][ T4861] netlink: 'syz.2.31036': attribute type 4 has an invalid length. [ 1322.040723][ T4871] netlink: 176 bytes leftover after parsing attributes in process `syz.3.31042'. [ 1324.346695][ T4918] netlink: 176 bytes leftover after parsing attributes in process `syz.1.31071'. [ 1324.669406][ T4922] rxe_eth0 speed is unknown, defaulting to 1000 [ 1325.708982][ T4961] netlink: 176 bytes leftover after parsing attributes in process `syz.4.31076'. [ 1327.784469][ T5004] netlink: 176 bytes leftover after parsing attributes in process `syz.1.31094'. [ 1327.809840][ T4998] rxe_eth0 speed is unknown, defaulting to 1000 [ 1330.326084][ T5098] rxe_eth0 speed is unknown, defaulting to 1000 [ 1330.987083][ T5117] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.31147'. [ 1331.110808][ T5122] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.31161'. [ 1331.801218][ T5136] rxe_eth0 speed is unknown, defaulting to 1000 [ 1331.979231][ T5150] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.31164'. [ 1332.045900][ T5152] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.31165'. [ 1332.335051][ T5163] netlink: 143108 bytes leftover after parsing attributes in process `syz.4.31169'. [ 1333.921585][ T5213] rxe_eth0 speed is unknown, defaulting to 1000 [ 1336.584075][ T5275] rxe_eth0 speed is unknown, defaulting to 1000 [ 1337.205153][ T5297] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.31225'. [ 1338.118905][ T5341] sock: sock_timestamping_bind_phc: sock not bind to device [ 1338.695948][ T5336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.235728][ T5372] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.31256'. [ 1339.298315][ T5376] sock: sock_timestamping_bind_phc: sock not bind to device [ 1339.818421][ T5398] sock: sock_timestamping_bind_phc: sock not bind to device [ 1339.819743][ T5396] tap0: tun_chr_ioctl cmd 1074025675 [ 1339.882472][ T5396] tap0: persist enabled [ 1341.386346][ T5416] netlink: 'syz.0.31278': attribute type 12 has an invalid length. [ 1341.402651][ T5416] netlink: 'syz.0.31278': attribute type 11 has an invalid length. [ 1341.431345][ T5416] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.31278'. [ 1341.541404][ T5428] netlink: 14 bytes leftover after parsing attributes in process `syz.1.31286'. [ 1341.562950][ T5428] device bond_slave_0 left promiscuous mode [ 1341.569683][ T5428] device bond_slave_1 left promiscuous mode [ 1341.641925][ T5428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.697668][ T5428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.752229][ T5428] bond0 (unregistering): Released all slaves [ 1341.888668][ T5429] rxe_eth0 speed is unknown, defaulting to 1000 [ 1342.886028][ T5463] netlink: 48 bytes leftover after parsing attributes in process `syz.4.31300'. [ 1343.365982][ T5463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.708132][ T5487] netlink: 'syz.2.31312': attribute type 12 has an invalid length. [ 1343.731245][ T5487] netlink: 'syz.2.31312': attribute type 11 has an invalid length. [ 1343.739662][ T5487] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.31312'. [ 1344.175622][ T5503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.265231][ T5494] rxe_eth0 speed is unknown, defaulting to 1000 [ 1344.466730][ T5518] tap1: tun_chr_ioctl cmd 1074025675 [ 1344.519540][ T5518] tap1: persist enabled [ 1344.722102][ T5533] netlink: 'syz.3.31332': attribute type 29 has an invalid length. [ 1344.767494][ T5533] netlink: 'syz.3.31332': attribute type 29 has an invalid length. [ 1344.815029][ T5533] netlink: 'syz.3.31332': attribute type 29 has an invalid length. [ 1345.572843][ T5555] tap0: tun_chr_ioctl cmd 1074025675 [ 1345.609722][ T5555] tap0: persist enabled [ 1345.868882][ T5538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.220309][ T5572] rxe_eth0 speed is unknown, defaulting to 1000 [ 1346.566155][ T5585] netlink: 'syz.1.31358': attribute type 1 has an invalid length. [ 1346.613965][ T5585] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.31358'. [ 1346.903507][ T5594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.31372'. [ 1348.045192][ T5622] device syzkaller0 entered promiscuous mode [ 1348.073237][ T5623] netlink: 14 bytes leftover after parsing attributes in process `syz.0.31370'. [ 1348.100224][ T5623] device bond_slave_0 left promiscuous mode [ 1348.124108][ T5623] device bond_slave_1 left promiscuous mode [ 1348.217727][ T5623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.250973][ T5623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.290898][ T5623] bond0 (unregistering): Released all slaves [ 1349.073629][ T5641] rxe_eth0 speed is unknown, defaulting to 1000 [ 1349.077794][ T5649] netlink: 'syz.0.31383': attribute type 29 has an invalid length. [ 1349.124336][ T5649] netlink: 'syz.0.31383': attribute type 29 has an invalid length. [ 1349.184014][ T5651] netlink: 'syz.0.31383': attribute type 29 has an invalid length. [ 1349.705602][ T5665] netlink: 14 bytes leftover after parsing attributes in process `syz.2.31390'. [ 1349.940614][ T5665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.964404][ T5665] device bond_slave_0 left promiscuous mode [ 1349.989856][ T5665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.998990][ T5665] device bond_slave_1 left promiscuous mode [ 1350.017808][ T5665] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1350.027335][ T5665] device netdevsim0 left promiscuous mode [ 1350.035387][ T5665] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1350.057183][ T5665] bond0 (unregistering): Released all slaves [ 1350.084818][ T5669] netlink: 'syz.3.31392': attribute type 22 has an invalid length. [ 1350.384800][ T5680] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.31397'. [ 1350.544657][ T5686] netlink: 'syz.3.31400': attribute type 1 has an invalid length. [ 1350.732966][ T5692] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.31413'. [ 1350.917560][ T5698] netlink: 'syz.2.31405': attribute type 22 has an invalid length. [ 1351.879217][ T5719] netlink: 'syz.0.31414': attribute type 1 has an invalid length. [ 1352.007659][ T5725] netlink: 'syz.0.31417': attribute type 22 has an invalid length. [ 1352.622406][ T5752] netlink: 'syz.1.31428': attribute type 1 has an invalid length. [ 1352.904208][ T2102] tipc: Subscription rejected, illegal request [ 1353.038041][ T5764] netlink: 'syz.0.31434': attribute type 25 has an invalid length. [ 1353.074515][ T5764] netlink: 'syz.0.31434': attribute type 28 has an invalid length. [ 1353.197177][ T5769] netlink: 'syz.1.31437': attribute type 29 has an invalid length. [ 1353.317546][ T5769] netlink: 'syz.1.31437': attribute type 29 has an invalid length. [ 1353.350488][ T5773] netlink: 'syz.1.31437': attribute type 29 has an invalid length. [ 1353.754732][T21738] tipc: Subscription rejected, illegal request [ 1354.000718][ T5797] device syzkaller0 entered promiscuous mode [ 1354.047820][ T5798] netlink: 'syz.1.31450': attribute type 25 has an invalid length. [ 1354.076893][ T5798] netlink: 'syz.1.31450': attribute type 28 has an invalid length. [ 1355.499085][ T5821] sctp: [Deprecated]: syz.2.31461 (pid 5821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1355.499085][ T5821] Use struct sctp_sack_info instead [ 1355.676857][ T5832] device netdevsim0 entered promiscuous mode [ 1356.107102][ T5846] rxe_eth0 speed is unknown, defaulting to 1000 [ 1356.970249][ T5877] validate_nla: 6 callbacks suppressed [ 1356.970286][ T5877] netlink: 'syz.0.31483': attribute type 10 has an invalid length. [ 1357.001326][ T5877] device netdevsim0 entered promiscuous mode [ 1357.362060][ T5884] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.31488'. [ 1359.834001][ T5948] netlink: 3554 bytes leftover after parsing attributes in process `syz.0.31517'. [ 1359.996494][ T5953] device syzkaller0 entered promiscuous mode [ 1361.773517][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.780222][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.833534][ T5992] netlink: 'syz.4.31533': attribute type 8 has an invalid length. [ 1361.871224][ T5992] netlink: 'syz.4.31533': attribute type 1 has an invalid length. [ 1361.971713][ T5992] netlink: 'syz.4.31533': attribute type 2 has an invalid length. [ 1362.001051][ T5992] netlink: 'syz.4.31533': attribute type 8 has an invalid length. [ 1362.009190][ T5992] netlink: 'syz.4.31533': attribute type 10 has an invalid length. [ 1362.099996][ T6006] netlink: 14 bytes leftover after parsing attributes in process `syz.1.31538'. [ 1362.111113][ T5992] netlink: 'syz.4.31533': attribute type 11 has an invalid length. [ 1362.119361][ T5992] netlink: 198812 bytes leftover after parsing attributes in process `syz.4.31533'. [ 1362.121476][ T6006] netlink: get zone limit has 4 unknown bytes [ 1362.659240][ T6024] netlink: 3554 bytes leftover after parsing attributes in process `syz.3.31546'. [ 1363.851514][T10257] Bluetooth: hci0: command 0x0406 tx timeout [ 1363.985667][ T6046] netlink: 14 bytes leftover after parsing attributes in process `syz.2.31555'. [ 1364.010933][ T6048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.31565'. [ 1364.015895][ T6046] netlink: get zone limit has 4 unknown bytes [ 1364.389534][ T6065] netlink: 3554 bytes leftover after parsing attributes in process `syz.4.31562'. [ 1364.728444][ T6081] netlink: 'syz.2.31572': attribute type 8 has an invalid length. [ 1364.755239][ T6081] netlink: 'syz.2.31572': attribute type 1 has an invalid length. [ 1364.784322][ T6081] netlink: 'syz.2.31572': attribute type 2 has an invalid length. [ 1364.806883][ T6081] netlink: 'syz.2.31572': attribute type 8 has an invalid length. [ 1364.823755][ T6084] netlink: 14 bytes leftover after parsing attributes in process `syz.0.31571'. [ 1364.841860][ T6081] netlink: 'syz.2.31572': attribute type 10 has an invalid length. [ 1364.857340][ T6084] netlink: get zone limit has 4 unknown bytes [ 1364.870399][ T6081] netlink: 'syz.2.31572': attribute type 11 has an invalid length. [ 1364.900845][ T6081] netlink: 198812 bytes leftover after parsing attributes in process `syz.2.31572'. [ 1365.910123][ T6113] device syzkaller0 entered promiscuous mode [ 1367.216967][ T6135] netlink: 14 bytes leftover after parsing attributes in process `syz.4.31591'. [ 1367.250812][ T6135] netlink: get zone limit has 4 unknown bytes [ 1367.867550][ T6156] netlink: 'syz.4.31600': attribute type 10 has an invalid length. [ 1367.881985][ T6156] device netdevsim0 entered promiscuous mode [ 1369.093839][ T6172] netlink: 14 bytes leftover after parsing attributes in process `syz.3.31610'. [ 1369.119416][ T6172] netlink: get zone limit has 4 unknown bytes [ 1370.742122][ T6213] netlink: 'syz.1.31624': attribute type 10 has an invalid length. [ 1370.773562][ T6213] device netdevsim0 entered promiscuous mode [ 1371.275689][ T6227] netlink: 'syz.3.31628': attribute type 10 has an invalid length. [ 1371.292666][ T6227] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.305322][ T6227] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.315610][ T6227] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.334154][ T6227] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.541698][ T6241] netlink: 'syz.3.31636': attribute type 10 has an invalid length. [ 1372.702786][ T6253] netlink: 'syz.3.31640': attribute type 10 has an invalid length. [ 1372.727460][ T6253] device netdevsim0 entered promiscuous mode [ 1372.745404][ T6253] bond0: (slave netdevsim0): Releasing backup interface [ 1373.095680][ T6282] netlink: 'syz.4.31654': attribute type 10 has an invalid length. [ 1373.474396][ T6287] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.31657'. [ 1374.019085][ T6282] device vxcan1 entered promiscuous mode [ 1374.064192][ T6282] team0: Device vxcan1 is of different type [ 1374.392537][ T6310] netlink: 'syz.2.31671': attribute type 33 has an invalid length. [ 1374.403464][ T6310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.31671'. [ 1374.537133][ T6323] netlink: 'syz.2.31675': attribute type 3 has an invalid length. [ 1374.561231][ T6323] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.31675'. [ 1374.804962][ T6333] netlink: 'syz.0.31678': attribute type 10 has an invalid length. [ 1375.537826][ T6333] device vxcan1 entered promiscuous mode [ 1375.561245][ T6333] team0: Device vxcan1 is of different type [ 1376.826703][ T6369] netlink: 'syz.0.31691': attribute type 3 has an invalid length. [ 1376.894607][ T6369] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.31691'. [ 1377.896866][T21738] tipc: Subscription rejected, illegal request [ 1380.703312][ T144] tipc: Subscription rejected, illegal request [ 1382.015436][ T6592] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.31800'. [ 1382.372822][ T6614] tap1: tun_chr_ioctl cmd 2148553947 [ 1382.406009][ T6614] tap1: tun_chr_ioctl cmd 1074025681 [ 1382.655310][ T6632] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.31816'. [ 1383.482623][ T6649] netlink: 'syz.4.31825': attribute type 10 has an invalid length. [ 1383.932542][ T6649] device wg1 entered promiscuous mode [ 1383.954101][ T6649] team0: Device wg1 is of different type [ 1384.854277][ T6681] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.31839'. [ 1384.978537][ T6686] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.31841'. [ 1385.486424][ T6697] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.31845'. [ 1386.618441][ T6741] netlink: 143108 bytes leftover after parsing attributes in process `syz.4.31865'. [ 1386.752183][ T6745] netlink: 'syz.0.31868': attribute type 10 has an invalid length. [ 1386.789190][ T6745] device veth0_macvtap left promiscuous mode [ 1386.814562][ T6747] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.31867'. [ 1387.260078][ T6774] netlink: 'syz.2.31879': attribute type 10 has an invalid length. [ 1387.551864][ T6789] netlink: 'syz.1.31885': attribute type 10 has an invalid length. [ 1387.808049][ T6789] device veth0_macvtap left promiscuous mode [ 1388.006882][ T6801] netlink: 143108 bytes leftover after parsing attributes in process `syz.2.31891'. [ 1388.016869][ T6802] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.31892'. [ 1388.484505][ T6836] netlink: 'syz.2.31905': attribute type 10 has an invalid length. [ 1390.565280][ T6875] netlink: 'syz.2.31924': attribute type 3 has an invalid length. [ 1390.574778][ T6875] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.31924'. [ 1394.571156][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 1394.798513][ T6919] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.31943'. [ 1395.382373][ T6962] netlink: 'syz.3.31962': attribute type 29 has an invalid length. [ 1396.030414][ T6962] netlink: 'syz.3.31962': attribute type 29 has an invalid length. [ 1396.062199][ T6965] netlink: 'syz.3.31962': attribute type 29 has an invalid length. [ 1396.101489][ T6966] netlink: 'syz.3.31962': attribute type 29 has an invalid length. [ 1396.147432][ T6967] netlink: 'syz.3.31962': attribute type 29 has an invalid length. [ 1396.218097][ T6977] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.31968'. [ 1396.280773][ T1901] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1396.455985][ T6993] netlink: 'syz.2.31976': attribute type 10 has an invalid length. [ 1396.481226][ T6993] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.31976'. [ 1396.501700][ T6993] openvswitch: netlink: Message has 4 unknown bytes. [ 1396.685116][ T7010] netlink: 198364 bytes leftover after parsing attributes in process `syz.4.31984'. [ 1396.837176][ T1901] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1396.953926][ T7028] netlink: 'syz.1.31992': attribute type 10 has an invalid length. [ 1396.970000][ T7028] netlink: 209860 bytes leftover after parsing attributes in process `syz.1.31992'. [ 1397.042453][ T7028] openvswitch: netlink: Message has 4 unknown bytes. [ 1397.199155][ T7050] netlink: 198364 bytes leftover after parsing attributes in process `syz.1.32002'. [ 1397.397807][ T1901] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1397.418146][ T7066] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.32010'. [ 1397.455722][ T7069] netlink: 'syz.2.32023': attribute type 29 has an invalid length. [ 1397.465210][ T7069] netlink: 'syz.2.32023': attribute type 29 has an invalid length. [ 1397.476056][ T7069] netlink: 'syz.2.32023': attribute type 29 has an invalid length. [ 1397.485307][ T7069] netlink: 'syz.2.32023': attribute type 29 has an invalid length. [ 1397.579685][ T7075] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.32026'. [ 1397.607742][ T7079] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.32015'. [ 1397.638729][ T7079] openvswitch: netlink: Message has 4 unknown bytes. [ 1397.740446][ T7088] netlink: 198364 bytes leftover after parsing attributes in process `syz.3.32020'. [ 1398.228557][ T7113] openvswitch: netlink: Message has 4 unknown bytes. [ 1400.996509][ T7201] __nla_validate_parse: 1 callbacks suppressed [ 1400.996532][ T7201] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.32072'. [ 1401.729227][ T7236] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.32090'. [ 1402.065677][ T7261] bridge0: port 4(ip6gretap0) entered blocking state [ 1402.083151][ T7261] bridge0: port 4(ip6gretap0) entered disabled state [ 1402.098514][ T7261] device ip6gretap0 entered promiscuous mode [ 1402.115279][ T7261] bridge0: port 4(ip6gretap0) entered blocking state [ 1402.123101][ T7261] bridge0: port 4(ip6gretap0) entered forwarding state [ 1402.421110][ T7280] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.32105'. [ 1402.601505][ T7284] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.32108'. [ 1402.999697][ T7298] bridge0: port 4(ip6gretap0) entered blocking state [ 1403.006797][ T7298] bridge0: port 4(ip6gretap0) entered disabled state [ 1403.015345][ T7298] device ip6gretap0 entered promiscuous mode [ 1403.024470][ T7298] bridge0: port 4(ip6gretap0) entered blocking state [ 1403.031338][ T7298] bridge0: port 4(ip6gretap0) entered forwarding state [ 1403.344687][ T7312] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.32121'. [ 1403.771747][ T7328] validate_nla: 13 callbacks suppressed [ 1403.771768][ T7328] netlink: 'syz.4.32127': attribute type 4 has an invalid length. [ 1403.821076][ T7328] netlink: 152 bytes leftover after parsing attributes in process `syz.4.32127'. [ 1403.871430][ T7328] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1403.900542][ T7330] bridge0: port 5(ip6gretap0) entered blocking state [ 1403.911278][ T7330] bridge0: port 5(ip6gretap0) entered disabled state [ 1403.923990][ T7330] device ip6gretap0 entered promiscuous mode [ 1403.930828][ T7330] bridge0: port 5(ip6gretap0) entered blocking state [ 1403.937822][ T7330] bridge0: port 5(ip6gretap0) entered forwarding state [ 1403.992781][ T7332] tap1: tun_chr_ioctl cmd 1074820166 [ 1404.118432][ T7343] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.32135'. [ 1408.859755][ T7534] netlink: 'syz.0.32219': attribute type 4 has an invalid length. [ 1408.881138][ T7534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.32219'. [ 1409.546642][ T7572] netlink: 'syz.3.32236': attribute type 4 has an invalid length. [ 1409.555869][ T7572] netlink: 152 bytes leftover after parsing attributes in process `syz.3.32236'. [ 1409.568678][ T7572] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1410.996165][ T7619] netlink: 132 bytes leftover after parsing attributes in process `syz.2.32267'. [ 1411.809234][ T7656] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.32277'. [ 1412.338048][ T7678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.32284'. [ 1413.862242][ T7741] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.32312'. [ 1413.922205][ T7741] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.32312'. [ 1414.155387][ T7750] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.32315'. [ 1414.695238][ T7777] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.32328'. [ 1414.705726][ T7777] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.32328'. [ 1414.778508][ T7783] netlink: 'syz.1.32332': attribute type 2 has an invalid length. [ 1414.789786][ T7783] netlink: 'syz.1.32332': attribute type 4 has an invalid length. [ 1414.801990][ T7783] netlink: 'syz.1.32332': attribute type 8 has an invalid length. [ 1414.810077][ T7783] netlink: 'syz.1.32332': attribute type 9 has an invalid length. [ 1414.820762][ T7783] netlink: 'syz.1.32332': attribute type 10 has an invalid length. [ 1414.830609][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32332'. [ 1416.226304][ T7804] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.32341'. [ 1416.254077][ T7804] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.32341'. [ 1417.223647][ T7839] netlink: 'syz.4.32358': attribute type 2 has an invalid length. [ 1417.313814][ T7839] netlink: 'syz.4.32358': attribute type 4 has an invalid length. [ 1417.362996][ T7839] netlink: 'syz.4.32358': attribute type 8 has an invalid length. [ 1417.411889][ T7839] netlink: 'syz.4.32358': attribute type 9 has an invalid length. [ 1417.471306][ T7839] netlink: 'syz.4.32358': attribute type 10 has an invalid length. [ 1417.551127][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32358'. [ 1418.163161][ T7851] netlink: 60 bytes leftover after parsing attributes in process `syz.1.32362'. [ 1418.963069][ T7885] netlink: 60 bytes leftover after parsing attributes in process `syz.4.32378'. [ 1419.174962][ T7898] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.32385'. [ 1420.358868][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32392'. [ 1420.519495][ T7933] validate_nla: 2 callbacks suppressed [ 1420.519518][ T7933] netlink: 'syz.0.32400': attribute type 2 has an invalid length. [ 1420.556061][ T7933] netlink: 'syz.0.32400': attribute type 1 has an invalid length. [ 1420.564735][ T7933] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.32400'. [ 1420.688749][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32404'. [ 1421.283253][ T7978] netlink: 'syz.1.32421': attribute type 2 has an invalid length. [ 1421.322328][ T7978] netlink: 'syz.1.32421': attribute type 1 has an invalid length. [ 1421.342879][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32425'. [ 1421.359472][ T7978] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.32421'. [ 1422.598663][ T8016] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.32448'. [ 1422.676222][ T8020] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.32442'. [ 1422.938669][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32450'. [ 1423.223002][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.229711][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.450041][ T8041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.688111][ T8073] syz.2.32466[8073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1423.688263][ T8073] syz.2.32466[8073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1424.179036][ T8099] syz.4.32482[8099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1424.246711][ T8099] syz.4.32482[8099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1424.731453][ T8086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.952560][ T8177] syz.3.32518[8177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1425.952740][ T8177] syz.3.32518[8177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1426.006414][ T8156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.306749][ T8202] netlink: 'syz.1.32526': attribute type 25 has an invalid length. [ 1426.331623][ T8202] netlink: 'syz.1.32526': attribute type 29 has an invalid length. [ 1426.840430][ T8242] netlink: 'syz.4.32546': attribute type 25 has an invalid length. [ 1426.873204][ T8242] netlink: 'syz.4.32546': attribute type 29 has an invalid length. [ 1426.898217][ T8244] __nla_validate_parse: 2 callbacks suppressed [ 1426.898259][ T8244] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.32548'. [ 1426.933195][ T8244] netlink: 21648 bytes leftover after parsing attributes in process `syz.0.32548'. [ 1426.948568][ T8244] tipc: Started in network mode [ 1426.956256][ T8244] tipc: Node identity e, cluster identity 4711 [ 1426.966205][ T8244] tipc: Node number set to 14 [ 1427.514772][ T8267] Q6\bY4: renamed from lo [ 1427.800769][ T8289] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.32571'. [ 1428.360644][ T8323] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.32594'. [ 1428.701101][ T8337] device lo left promiscuous mode [ 1428.750844][ T8337] Q6\bY4: renamed from lo [ 1430.153801][ T8425] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.32629'. [ 1430.803997][ T8454] device syzkaller0 entered promiscuous mode [ 1431.037339][ T8463] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.32645'. [ 1431.061339][ T8467] sock: sock_timestamping_bind_phc: sock not bind to device [ 1432.400571][ T8513] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.32670'. [ 1432.414081][ T8513] netlink: 21648 bytes leftover after parsing attributes in process `syz.3.32670'. [ 1432.440012][ T8513] tipc: Started in network mode [ 1432.454286][ T8513] tipc: Node identity e, cluster identity 4711 [ 1432.466084][ T8513] tipc: Node number set to 14 [ 1432.482874][ T8512] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.32680'. [ 1432.496375][ T8515] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.32669'. [ 1432.522653][ T8512] netlink: zone id is out of range [ 1432.549824][ T8512] netlink: zone id is out of range [ 1432.569044][ T8512] netlink: zone id is out of range [ 1432.594038][ T8512] netlink: zone id is out of range [ 1432.600843][ T8512] netlink: zone id is out of range [ 1432.608654][ T8512] netlink: zone id is out of range [ 1432.637652][ T8512] netlink: zone id is out of range [ 1432.658641][ T8512] netlink: zone id is out of range [ 1432.675642][ T8512] netlink: zone id is out of range [ 1432.696646][ T8512] netlink: zone id is out of range [ 1433.096615][ T8541] netlink: 'syz.0.32681': attribute type 28 has an invalid length. [ 1433.895877][ T8584] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.32706'. [ 1433.949846][ T8584] netlink: 21648 bytes leftover after parsing attributes in process `syz.1.32706'. [ 1433.962899][ T8584] tipc: Started in network mode [ 1434.001346][ T8584] tipc: Node identity e, cluster identity 4711 [ 1434.008079][ T8584] tipc: Node number set to 14 [ 1434.127779][ T8599] netlink: 'syz.3.32711': attribute type 28 has an invalid length. [ 1434.385819][ T8604] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.32714'. [ 1434.397947][ T8610] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.32718'. [ 1434.596169][ T8619] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.32722'. [ 1434.633114][ T8619] netlink: 21648 bytes leftover after parsing attributes in process `syz.2.32722'. [ 1434.651364][ T8619] tipc: Started in network mode [ 1434.656866][ T8619] tipc: Node identity e, cluster identity 3 [ 1434.675638][ T8619] tipc: Node number set to 14 [ 1434.687474][ T8627] netlink: 'syz.1.32726': attribute type 28 has an invalid length. [ 1434.948471][ T8634] netlink: 'syz.4.32730': attribute type 49 has an invalid length. [ 1435.026795][ T8634] netlink: 'syz.4.32730': attribute type 49 has an invalid length. [ 1435.150072][ T8641] device syzkaller0 entered promiscuous mode [ 1435.537528][ T8673] netlink: 'syz.2.32745': attribute type 49 has an invalid length. [ 1435.572387][ T8673] netlink: 'syz.2.32745': attribute type 49 has an invalid length. [ 1436.789708][ T8697] device syzkaller0 entered promiscuous mode [ 1436.872847][ T8704] netlink: 'syz.3.32761': attribute type 49 has an invalid length. [ 1436.956359][ T8704] netlink: 'syz.3.32761': attribute type 49 has an invalid length. [ 1437.396679][ T8741] netlink: 'syz.1.32779': attribute type 49 has an invalid length. [ 1437.641426][ T8760] __nla_validate_parse: 5 callbacks suppressed [ 1437.641448][ T8760] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.32787'. [ 1438.151263][ T8778] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.32797'. [ 1438.225762][ T8781] validate_nla: 1 callbacks suppressed [ 1438.225857][ T8781] netlink: 'syz.0.32794': attribute type 49 has an invalid length. [ 1438.352171][ T8781] netlink: 'syz.0.32794': attribute type 49 has an invalid length. [ 1439.206918][ T8813] netlink: 'syz.2.32811': attribute type 49 has an invalid length. [ 1439.258775][ T8812] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.32812'. [ 1439.273161][ T8813] netlink: 'syz.2.32811': attribute type 49 has an invalid length. [ 1439.450138][ T8820] netlink: 'syz.0.32825': attribute type 49 has an invalid length. [ 1439.549688][ T8820] netlink: 'syz.0.32825': attribute type 49 has an invalid length. [ 1441.175226][ T8858] netlink: 'syz.3.32829': attribute type 49 has an invalid length. [ 1441.204761][ T8858] netlink: 'syz.3.32829': attribute type 49 has an invalid length. [ 1441.224556][ T8855] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.32828'. [ 1441.441645][ T8870] netlink: 'syz.4.32836': attribute type 10 has an invalid length. [ 1441.479704][ T8870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.32836'. [ 1441.500117][ T8870] device dummy0 entered promiscuous mode [ 1441.534489][ T8870] bridge0: port 5(dummy0) entered blocking state [ 1441.555017][ T8870] bridge0: port 5(dummy0) entered disabled state [ 1441.607825][ T8870] bridge0: port 5(dummy0) entered blocking state [ 1441.615190][ T8870] bridge0: port 5(dummy0) entered forwarding state [ 1442.449834][ T8892] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.32849'. [ 1442.839157][ T8915] netlink: 'syz.2.32858': attribute type 3 has an invalid length. [ 1442.862582][ T8915] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.32858'. [ 1443.046349][ T8925] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.32863'. [ 1443.427036][ T8946] validate_nla: 1 callbacks suppressed [ 1443.427059][ T8946] netlink: 'syz.1.32873': attribute type 3 has an invalid length. [ 1443.493713][ T8946] netlink: 'syz.1.32873': attribute type 6 has an invalid length. [ 1443.517959][ T8946] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.32873'. [ 1443.542256][ T8951] netlink: 'syz.2.32872': attribute type 10 has an invalid length. [ 1443.569946][ T8951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32872'. [ 1443.733227][ T8958] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.32878'. [ 1443.775897][ T8963] netlink: 'syz.1.32890': attribute type 10 has an invalid length. [ 1443.809102][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.32890'. [ 1444.104452][ T8989] netlink: 'syz.4.32891': attribute type 3 has an invalid length. [ 1444.113530][ T8989] netlink: 'syz.4.32891': attribute type 6 has an invalid length. [ 1444.125327][ T8989] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.32891'. [ 1444.376200][ T9003] netlink: 'syz.0.32899': attribute type 10 has an invalid length. [ 1444.393714][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.0.32899'. [ 1444.407053][ T9003] device dummy0 entered promiscuous mode [ 1444.443294][ T9007] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.32900'. [ 1444.450829][ T9003] bridge0: port 5(dummy0) entered blocking state [ 1444.464472][ T9003] bridge0: port 5(dummy0) entered disabled state [ 1444.500007][ T9003] bridge0: port 5(dummy0) entered blocking state [ 1444.507069][ T9003] bridge0: port 5(dummy0) entered forwarding state [ 1444.759249][ T9023] device syzkaller0 entered promiscuous mode [ 1444.787851][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32911'. [ 1445.163246][ T9059] netlink: 'syz.3.32917': attribute type 10 has an invalid length. [ 1445.204994][ T9059] net_ratelimit: 8 callbacks suppressed [ 1445.205036][ T9059] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1445.506872][ T9074] netlink: 'syz.4.32939': attribute type 10 has an invalid length. [ 1446.746274][ T9146] netlink: 'syz.4.32960': attribute type 3 has an invalid length. [ 1446.776793][ T9147] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1447.878474][ T9228] __nla_validate_parse: 11 callbacks suppressed [ 1447.878492][ T9228] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.33002'. [ 1448.384319][ T9263] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.33018'. [ 1448.476942][ T9271] validate_nla: 8 callbacks suppressed [ 1448.476962][ T9271] netlink: 'syz.0.33031': attribute type 3 has an invalid length. [ 1448.513105][ T9271] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.33031'. [ 1448.543583][ T9271] netlink: 'syz.0.33031': attribute type 3 has an invalid length. [ 1448.566532][ T9277] netlink: 'syz.2.33023': attribute type 21 has an invalid length. [ 1448.595812][ T9271] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.33031'. [ 1448.605245][ T9277] netlink: 'syz.2.33023': attribute type 6 has an invalid length. [ 1448.628197][ T9277] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33023'. [ 1448.841741][ T9282] netlink: 'syz.2.33024': attribute type 39 has an invalid length. [ 1449.145382][ T9301] netlink: 176 bytes leftover after parsing attributes in process `syz.3.33036'. [ 1449.202385][ T9307] netlink: 'syz.1.33038': attribute type 21 has an invalid length. [ 1449.229597][ T9307] netlink: 'syz.1.33038': attribute type 6 has an invalid length. [ 1449.248754][ T9307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33038'. [ 1449.489610][ T9318] device syzkaller0 entered promiscuous mode [ 1449.913724][ T9341] netlink: 'syz.3.33053': attribute type 21 has an invalid length. [ 1449.930883][ T9341] netlink: 'syz.3.33053': attribute type 6 has an invalid length. [ 1449.964798][ T9341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33053'. [ 1450.067276][ T9345] netlink: 209860 bytes leftover after parsing attributes in process `syz.0.33056'. [ 1450.101309][ T9345] openvswitch: netlink: Message has 4 unknown bytes. [ 1450.399565][ T9369] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.33066'. [ 1450.976972][ T9394] netlink: 'syz.0.33077': attribute type 10 has an invalid length. [ 1451.107290][ T9397] device syzkaller0 entered promiscuous mode [ 1451.618145][ T9411] openvswitch: netlink: Message has 4 unknown bytes. [ 1452.485831][ T9464] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1453.230257][ T9498] __nla_validate_parse: 11 callbacks suppressed [ 1453.230279][ T9498] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.33124'. [ 1453.279810][ T9502] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.33125'. [ 1453.305756][ T9502] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.33125'. [ 1453.556908][ T9507] validate_nla: 6 callbacks suppressed [ 1453.556950][ T9507] netlink: 'syz.0.33127': attribute type 39 has an invalid length. [ 1454.023681][ T9528] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.33134'. [ 1455.035619][ T9558] netlink: 'syz.4.33150': attribute type 39 has an invalid length. [ 1455.382608][ T9571] device syzkaller0 entered promiscuous mode [ 1455.864966][ T9608] netlink: 'syz.1.33171': attribute type 39 has an invalid length. [ 1456.046383][ T9610] netlink: 'syz.4.33175': attribute type 10 has an invalid length. [ 1456.058365][ T9610] bridge0: port 5(dummy0) entered disabled state [ 1456.065266][ T9610] bridge0: port 4(ip6gretap0) entered disabled state [ 1456.072374][ T9610] bridge0: port 3(team0) entered disabled state [ 1456.079091][ T9610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.114041][ T9610] bridge0: port 5(dummy0) entered blocking state [ 1456.120819][ T9610] bridge0: port 5(dummy0) entered forwarding state [ 1456.127691][ T9610] bridge0: port 4(ip6gretap0) entered blocking state [ 1456.134568][ T9610] bridge0: port 4(ip6gretap0) entered forwarding state [ 1456.141756][ T9610] bridge0: port 3(team0) entered blocking state [ 1456.148288][ T9610] bridge0: port 3(team0) entered forwarding state [ 1456.155010][ T9610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.162207][ T9610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.182133][ T9610] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1456.278733][ T9619] netlink: 'syz.2.33189': attribute type 39 has an invalid length. [ 1456.375997][ T9629] netlink: 'syz.3.33182': attribute type 4 has an invalid length. [ 1456.403193][ T9629] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.33182'. [ 1456.452588][ T9623] device syzkaller0 entered promiscuous mode [ 1456.868363][ T9657] netlink: 'syz.0.33195': attribute type 39 has an invalid length. [ 1457.084186][ T9669] netlink: 'syz.3.33212': attribute type 39 has an invalid length. [ 1457.101581][ T9674] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.33200'. [ 1458.008761][ T9727] netlink: 'syz.1.33227': attribute type 4 has an invalid length. [ 1458.049951][ T9727] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.33227'. [ 1458.180285][ T9735] netlink: 'syz.0.33229': attribute type 10 has an invalid length. [ 1458.198820][ T9735] bridge0: port 5(dummy0) entered disabled state [ 1458.205452][ T9735] bridge0: port 4(ip6gretap0) entered disabled state [ 1458.212362][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.219860][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.849026][ T9770] validate_nla: 1 callbacks suppressed [ 1458.849049][ T9770] netlink: 'syz.4.33244': attribute type 4 has an invalid length. [ 1458.875743][ T9770] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.33244'. [ 1459.027059][ T9781] netlink: 'syz.3.33251': attribute type 10 has an invalid length. [ 1459.700558][ T9817] netlink: 'syz.0.33267': attribute type 4 has an invalid length. [ 1459.740593][ T9824] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.33272'. [ 1460.195520][ T9851] netlink: 'syz.4.33286': attribute type 4 has an invalid length. [ 1462.559136][ T9917] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.33314'. [ 1463.594907][ T9986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.33346'. [ 1463.892778][T10010] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33356'. [ 1463.994806][T10018] netlink: 60 bytes leftover after parsing attributes in process `syz.4.33360'. [ 1464.415722][T10047] netlink: 'syz.0.33373': attribute type 22 has an invalid length. [ 1464.492403][T10052] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33374'. [ 1464.949383][T10080] netlink: 'syz.0.33386': attribute type 9 has an invalid length. [ 1464.961132][T10080] netlink: 'syz.0.33386': attribute type 23 has an invalid length. [ 1464.969472][T10080] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.33386'. [ 1465.029537][T10083] netlink: 'syz.3.33389': attribute type 3 has an invalid length. [ 1465.053698][T10083] netlink: 'syz.3.33389': attribute type 1 has an invalid length. [ 1465.071488][T10083] netlink: 128 bytes leftover after parsing attributes in process `syz.3.33389'. [ 1465.505828][T10115] netlink: 'syz.2.33405': attribute type 9 has an invalid length. [ 1465.518747][T10115] netlink: 'syz.2.33405': attribute type 23 has an invalid length. [ 1465.531392][T10115] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.33405'. [ 1465.746028][T10130] netlink: 'syz.1.33411': attribute type 25 has an invalid length. [ 1465.767306][T10130] netlink: 'syz.1.33411': attribute type 9 has an invalid length. [ 1465.800519][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33411'. [ 1465.914447][T10142] netlink: 'syz.3.33420': attribute type 22 has an invalid length. [ 1465.957025][T10147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33416'. [ 1466.151874][T10156] netlink: 128 bytes leftover after parsing attributes in process `syz.2.33424'. [ 1466.607678][T10190] netlink: 128 bytes leftover after parsing attributes in process `syz.1.33442'. [ 1469.031933][T10282] __nla_validate_parse: 5 callbacks suppressed [ 1469.031955][T10282] netlink: 128 bytes leftover after parsing attributes in process `syz.4.33483'. [ 1469.132279][T10291] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.33487'. [ 1469.171131][T10282] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1469.224134][T10282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1469.477310][T10308] validate_nla: 11 callbacks suppressed [ 1469.477334][T10308] netlink: 'syz.2.33497': attribute type 19 has an invalid length. [ 1469.570632][T10308] netlink: 156 bytes leftover after parsing attributes in process `syz.2.33497'. [ 1470.226684][T10330] netlink: 830 bytes leftover after parsing attributes in process `syz.2.33518'. [ 1470.393853][T10334] netlink: 'syz.2.33508': attribute type 2 has an invalid length. [ 1470.471105][T10334] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.33508'. [ 1470.905275][T10349] netlink: 'syz.2.33515': attribute type 21 has an invalid length. [ 1470.961557][T10349] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.33515'. [ 1471.058832][T10356] sctp: [Deprecated]: syz.0.33517 (pid 10356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1471.058832][T10356] Use struct sctp_sack_info instead [ 1471.222132][T10363] netlink: 830 bytes leftover after parsing attributes in process `syz.3.33520'. [ 1471.506586][T10376] netlink: 'syz.0.33528': attribute type 2 has an invalid length. [ 1471.531276][T10376] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.33528'. [ 1471.993634][T10398] netlink: 830 bytes leftover after parsing attributes in process `syz.4.33536'. [ 1472.032447][T10400] netlink: 140 bytes leftover after parsing attributes in process `syz.2.33540'. [ 1472.383824][T10424] sctp: [Deprecated]: syz.2.33551 (pid 10424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1472.383824][T10424] Use struct sctp_sack_info instead [ 1474.120055][T10507] device syzkaller0 entered promiscuous mode [ 1474.407522][T10522] __nla_validate_parse: 1 callbacks suppressed [ 1474.407543][T10522] netlink: 72 bytes leftover after parsing attributes in process `syz.3.33591'. [ 1475.646915][T10583] netlink: 72 bytes leftover after parsing attributes in process `syz.0.33620'. [ 1475.881791][T10591] device syzkaller0 entered promiscuous mode [ 1476.215138][T10618] netlink: 72 bytes leftover after parsing attributes in process `syz.1.33638'. [ 1476.848647][T10641] device syzkaller0 entered promiscuous mode [ 1477.176253][T10667] netlink: 'syz.3.33658': attribute type 10 has an invalid length. [ 1477.197472][T10667] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33658'. [ 1478.048485][T10693] syz.2.33669[10693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1478.048627][T10693] syz.2.33669[10693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1478.569051][T10722] device syzkaller0 entered promiscuous mode [ 1479.082548][T10750] device syzkaller0 entered promiscuous mode [ 1479.112141][ T3230] syzkaller0: tun_net_xmit 48 [ 1479.122133][T10744] rxe_eth0 speed is unknown, defaulting to 1000 [ 1479.154170][T10755] netlink: 'syz.2.33696': attribute type 39 has an invalid length. [ 1479.207002][T10750] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1479.230796][T10750] syzkaller0: Linktype set failed because interface is up [ 1479.767000][T10765] device syzkaller0 entered promiscuous mode [ 1480.033082][T10781] rxe_eth0 speed is unknown, defaulting to 1000 [ 1480.259065][T10789] device syzkaller0 entered promiscuous mode [ 1480.281256][ T3228] syzkaller0: tun_net_xmit 48 [ 1480.297869][T10795] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1480.308035][T10795] syzkaller0: Linktype set failed because interface is up [ 1481.356419][T10826] syz.1.33726[10826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1481.356563][T10826] syz.1.33726[10826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1482.051481][T10845] rxe_eth0 speed is unknown, defaulting to 1000 [ 1482.946323][T10870] rxe_eth0 speed is unknown, defaulting to 1000 [ 1483.036876][T10883] netlink: 'syz.1.33747': attribute type 39 has an invalid length. [ 1484.359514][T10923] netlink: 'syz.4.33771': attribute type 39 has an invalid length. [ 1484.663151][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.683058][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.966157][T10950] rxe_eth0 speed is unknown, defaulting to 1000 [ 1485.149789][T10959] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.33786'. [ 1485.200190][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33786'. [ 1487.049281][T11013] rxe_eth0 speed is unknown, defaulting to 1000 [ 1487.464774][T11016] rxe_eth0 speed is unknown, defaulting to 1000 [ 1487.579828][T11025] netlink: 'syz.0.33824': attribute type 3 has an invalid length. [ 1487.621304][T11025] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.33824'. [ 1488.199373][T11048] netlink: 'syz.0.33834': attribute type 39 has an invalid length. [ 1488.809012][T11063] rxe_eth0 speed is unknown, defaulting to 1000 [ 1489.622384][T11096] netlink: 'syz.2.33846': attribute type 3 has an invalid length. [ 1489.723602][T11096] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.33846'. [ 1489.798158][T11092] device syzkaller0 entered promiscuous mode [ 1490.278077][T11123] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.33857'. [ 1490.317653][T11123] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1490.603307][T11134] netlink: 'syz.4.33861': attribute type 3 has an invalid length. [ 1490.647177][T11134] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.33861'. [ 1490.840296][T11140] device syzkaller0 entered promiscuous mode [ 1491.595537][T11152] netlink: 'syz.4.33870': attribute type 3 has an invalid length. [ 1491.615885][T11158] netlink: 'syz.3.33869': attribute type 3 has an invalid length. [ 1491.648738][T11152] netlink: 'syz.4.33870': attribute type 1 has an invalid length. [ 1491.657620][T11152] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.33870'. [ 1491.687996][T11158] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.33869'. [ 1491.716799][T11163] netlink: 'syz.1.33873': attribute type 10 has an invalid length. [ 1491.836845][T11163] device gre0 entered promiscuous mode [ 1491.845500][T11163] team0: Device gre0 is of different type [ 1492.028885][T11164] device syzkaller0 entered promiscuous mode [ 1492.334327][T11191] sctp: [Deprecated]: syz.3.33882 (pid 11191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1492.334327][T11191] Use struct sctp_sack_info instead [ 1492.523897][T11192] device syzkaller0 entered promiscuous mode [ 1492.693453][T11209] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.33891'. [ 1492.706849][T11209] netlink: 'syz.1.33891': attribute type 1 has an invalid length. [ 1492.763067][T11209] netlink: 'syz.1.33891': attribute type 2 has an invalid length. [ 1492.798252][T11209] netlink: 96 bytes leftover after parsing attributes in process `syz.1.33891'. [ 1493.000578][T11223] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.33897'. [ 1493.568131][T11240] device syzkaller0 entered promiscuous mode [ 1493.974432][T11252] netlink: 'syz.0.33908': attribute type 10 has an invalid length. [ 1494.304046][T11252] device veth0_vlan left promiscuous mode [ 1494.335817][T11252] device veth0_vlan entered promiscuous mode [ 1494.367478][T11252] team0: Device veth0_vlan failed to register rx_handler [ 1494.544712][T11267] netlink: 'syz.3.33917': attribute type 1 has an invalid length. [ 1494.555333][T11267] netlink: 'syz.3.33917': attribute type 4 has an invalid length. [ 1494.595192][T11267] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.33917'. [ 1494.688887][T11277] netlink: 'syz.1.33921': attribute type 3 has an invalid length. [ 1494.748749][T11277] netlink: 'syz.1.33921': attribute type 1 has an invalid length. [ 1494.767155][T11277] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.33921'. [ 1495.111510][T11291] netlink: 'syz.3.33925': attribute type 10 has an invalid length. [ 1495.586794][T11300] device syzkaller0 entered promiscuous mode [ 1495.738043][T11303] device syzkaller0 entered promiscuous mode [ 1495.867167][T11296] rxe_eth0 speed is unknown, defaulting to 1000 [ 1496.067474][T11319] netlink: 'syz.3.33937': attribute type 3 has an invalid length. [ 1496.097495][T11319] netlink: 'syz.3.33937': attribute type 1 has an invalid length. [ 1496.126440][T11319] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.33937'. [ 1496.144855][T11315] device syzkaller0 entered promiscuous mode [ 1496.278377][T11324] netlink: 'syz.0.33950': attribute type 3 has an invalid length. [ 1496.313679][T11324] netlink: 'syz.0.33950': attribute type 5 has an invalid length. [ 1496.348662][T11324] netlink: 197960 bytes leftover after parsing attributes in process `syz.0.33950'. [ 1496.603587][T11339] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.33945'. [ 1496.655983][T11339] netlink: 96 bytes leftover after parsing attributes in process `syz.0.33945'. [ 1496.719502][T11345] netlink: 3554 bytes leftover after parsing attributes in process `syz.0.33951'. [ 1496.866436][T11351] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.33952'. [ 1497.114413][T11362] device syzkaller0 entered promiscuous mode [ 1497.387607][T11370] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.33960'. [ 1497.457637][T11370] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1497.517995][T11370] CPU: 1 PID: 11370 Comm: syz.2.33960 Not tainted syzkaller #0 [ 1497.525637][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1497.535846][T11370] Call Trace: [ 1497.539208][T11370] [ 1497.542382][T11370] dump_stack_lvl+0x188/0x250 [ 1497.547159][T11370] ? show_regs_print_info+0x20/0x20 [ 1497.552422][T11370] ? load_image+0x410/0x410 [ 1497.557017][T11370] sysfs_warn_dup+0x8a/0xa0 [ 1497.561590][T11370] sysfs_do_create_link_sd+0xc0/0x110 [ 1497.567035][T11370] device_add+0x83b/0x1050 [ 1497.572049][T11370] wiphy_register+0x1e74/0x2c40 [ 1497.577008][T11370] ? cfg80211_event_work+0x40/0x40 [ 1497.582222][T11370] ? minstrel_ht_alloc+0x807/0x980 [ 1497.587459][T11370] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1497.593695][T11370] ieee80211_register_hw+0x2a03/0x3a60 [ 1497.599374][T11370] ? ieee80211_register_hw+0xa91/0x3a60 [ 1497.605035][T11370] ? ieee80211_tasklet_handler+0x20/0x20 [ 1497.610755][T11370] ? rcu_is_watching+0x11/0xa0 [ 1497.615589][T11370] ? hrtimer_init+0x10c/0x220 [ 1497.620330][T11370] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1497.626136][T11370] hwsim_new_radio_nl+0xa7d/0xc50 [ 1497.631278][T11370] genl_rcv_msg+0xd0b/0xfa0 [ 1497.635860][T11370] ? genl_bind+0x370/0x370 [ 1497.640345][T11370] ? perf_trace_lock+0xe4/0x390 [ 1497.645255][T11370] ? verify_lock_unused+0x140/0x140 [ 1497.650537][T11370] ? verify_lock_unused+0x140/0x140 [ 1497.655908][T11370] ? perf_trace_lock+0xe4/0x390 [ 1497.660930][T11370] ? perf_trace_lock+0xe4/0x390 [ 1497.665848][T11370] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1497.672242][T11370] netlink_rcv_skb+0x1e9/0x430 [ 1497.677071][T11370] ? genl_bind+0x370/0x370 [ 1497.681548][T11370] ? netlink_ack+0xb10/0xb10 [ 1497.686202][T11370] ? down_read+0x1aa/0x2e0 [ 1497.690656][T11370] genl_rcv+0x24/0x40 [ 1497.694675][T11370] netlink_unicast+0x78f/0x940 [ 1497.699496][T11370] netlink_sendmsg+0x8ba/0xbe0 [ 1497.704347][T11370] ? netlink_getsockopt+0x570/0x570 [ 1497.709608][T11370] ? aa_sock_msg_perm+0x94/0x150 [ 1497.714587][T11370] ? apparmor_socket_sendmsg+0x88/0x230 [ 1497.720194][T11370] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1497.725523][T11370] ? security_socket_sendmsg+0x7c/0xa0 [ 1497.731021][T11370] ? netlink_getsockopt+0x570/0x570 [ 1497.736380][T11370] ____sys_sendmsg+0x5be/0x8f0 [ 1497.741195][T11370] ? __sys_sendmsg_sock+0x30/0x30 [ 1497.746271][T11370] ? import_iovec+0x6f/0xa0 [ 1497.750831][T11370] ___sys_sendmsg+0x236/0x2e0 [ 1497.755565][T11370] ? __sys_sendmsg+0x290/0x290 [ 1497.760383][T11370] ? trace_event_raw_event_lock+0x250/0x250 [ 1497.766524][T11370] __se_sys_sendmsg+0x1b7/0x2a0 [ 1497.771425][T11370] ? __x64_sys_sendmsg+0x80/0x80 [ 1497.776425][T11370] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1497.782493][T11370] ? lockdep_hardirqs_on+0x94/0x140 [ 1497.787832][T11370] do_syscall_64+0x4c/0xa0 [ 1497.792288][T11370] ? clear_bhb_loop+0x30/0x80 [ 1497.797113][T11370] ? clear_bhb_loop+0x30/0x80 [ 1497.801843][T11370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1497.807934][T11370] RIP: 0033:0x7fcdf4574559 [ 1497.812648][T11370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.832490][T11370] RSP: 002b:00007fcdf27cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1497.841190][T11370] RAX: ffffffffffffffda RBX: 00007fcdf47fafa0 RCX: 00007fcdf4574559 [ 1497.849221][T11370] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1497.857351][T11370] RBP: 00007fcdf460bb20 R08: 0000000000000000 R09: 0000000000000000 [ 1497.865562][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.873923][T11370] R13: 00007fcdf47fb038 R14: 00007fcdf47fafa0 R15: 00007fff0d061068 [ 1497.882317][T11370] [ 1498.414608][T11390] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.33966'. [ 1499.522754][T11413] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.33976'. [ 1499.653682][T11416] device syzkaller0 entered promiscuous mode [ 1499.861052][T11431] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.33990'. [ 1500.531506][T11437] rxe_eth0 speed is unknown, defaulting to 1000 [ 1500.587323][T11452] validate_nla: 7 callbacks suppressed [ 1500.587348][T11452] netlink: 'syz.3.33998': attribute type 2 has an invalid length. [ 1500.817795][T11462] delete_channel: no stack [ 1501.053015][T11469] device syzkaller0 entered promiscuous mode [ 1501.283859][T11479] netlink: 'syz.2.34007': attribute type 10 has an invalid length. [ 1501.638484][T11494] netlink: 'syz.0.34011': attribute type 10 has an invalid length. [ 1501.856029][T11494] device gre0 entered promiscuous mode [ 1501.881212][T11494] team0: Device gre0 is of different type [ 1502.656574][T11522] netlink: 'syz.0.34028': attribute type 2 has an invalid length. [ 1502.670695][T11522] __nla_validate_parse: 2 callbacks suppressed [ 1502.670718][T11522] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.34028'. [ 1502.713719][T11524] netlink: 143108 bytes leftover after parsing attributes in process `syz.3.34029'. [ 1502.726503][T11505] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.34019'. [ 1502.761068][T11513] netlink: 'syz.4.34024': attribute type 10 has an invalid length. [ 1502.792860][T11513] team0: Device bond0 is already an upper device of the team interface [ 1502.873136][T11530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34032'. [ 1502.920762][T11536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34032'. [ 1503.304476][T11553] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.34042'. [ 1503.872574][T11566] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.34049'. [ 1504.352159][T11585] netlink: 'syz.1.34056': attribute type 4 has an invalid length. [ 1504.367088][T11586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34055'. [ 1504.382878][T11585] netlink: 203252 bytes leftover after parsing attributes in process `syz.1.34056'. [ 1504.418011][T11586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34055'. [ 1504.461464][T11588] netlink: 'syz.3.34059': attribute type 10 has an invalid length. [ 1505.053851][T11590] device syzkaller0 entered promiscuous mode [ 1506.352740][T11636] syz.2.34077[11636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1506.353958][T11636] syz.2.34077[11636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1508.260072][T11679] __nla_validate_parse: 2 callbacks suppressed [ 1508.260114][T11679] netlink: 164 bytes leftover after parsing attributes in process `syz.1.34098'. [ 1508.858035][T11704] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.34109'. [ 1509.406711][T11734] netlink: 'syz.4.34122': attribute type 10 has an invalid length. [ 1509.943763][T11740] netlink: 144 bytes leftover after parsing attributes in process `syz.2.34123'. [ 1510.145070][T11753] syz.1.34126[11753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1510.145690][T11753] syz.1.34126[11753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1510.318285][T11760] netlink: 'syz.4.34131': attribute type 10 has an invalid length. [ 1510.480020][T11760] device gre0 entered promiscuous mode [ 1510.502669][T11760] team0: Device gre0 is of different type [ 1511.085295][T11780] netlink: 'syz.3.34139': attribute type 10 has an invalid length. [ 1511.291951][T11770] rxe_eth0 speed is unknown, defaulting to 1000 [ 1511.822257][T11799] netlink: 164 bytes leftover after parsing attributes in process `syz.0.34145'. [ 1511.834832][T11797] netlink: 'syz.4.34144': attribute type 1 has an invalid length. [ 1511.889746][T11797] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.34144'. [ 1515.000022][T11846] netlink: 'syz.3.34162': attribute type 1 has an invalid length. [ 1515.027306][T11846] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.34162'. [ 1515.305125][T11867] netlink: 'syz.3.34181': attribute type 2 has an invalid length. [ 1515.321026][T11867] netlink: 'syz.3.34181': attribute type 9 has an invalid length. [ 1515.339595][T11867] netlink: 'syz.3.34181': attribute type 10 has an invalid length. [ 1515.357301][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34181'. [ 1516.055104][T11908] netlink: 'syz.0.34192': attribute type 2 has an invalid length. [ 1516.087223][T11908] netlink: 'syz.0.34192': attribute type 9 has an invalid length. [ 1516.132015][T11908] netlink: 'syz.0.34192': attribute type 10 has an invalid length. [ 1516.159713][T11908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34192'. [ 1516.939110][T11944] netlink: 'syz.4.34210': attribute type 2 has an invalid length. [ 1516.991028][T11944] netlink: 'syz.4.34210': attribute type 9 has an invalid length. [ 1517.058370][T11944] netlink: 'syz.4.34210': attribute type 10 has an invalid length. [ 1517.088143][T11944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.34210'. [ 1518.495772][T11996] syz.0.34233[11996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1518.496321][T11996] syz.0.34233[11996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1520.867003][T12064] netlink: 'syz.1.34273': attribute type 1 has an invalid length. [ 1520.913374][T12070] syz.3.34263[12070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1520.914019][T12070] syz.3.34263[12070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1520.988602][T12064] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.34273'. [ 1521.503523][T12093] device syzkaller0 entered promiscuous mode [ 1522.659028][T12148] syz.4.34297[12148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1522.660415][T12148] syz.4.34297[12148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1523.840023][T12170] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.34305'. [ 1523.994269][T12177] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.34321'. [ 1525.248737][T12207] rxe_eth0 speed is unknown, defaulting to 1000 [ 1526.569778][T12240] netlink: 'syz.0.34338': attribute type 1 has an invalid length. [ 1526.632482][T12240] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.34338'. [ 1527.170733][T12250] rxe_eth0 speed is unknown, defaulting to 1000 [ 1530.038285][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34354'. [ 1530.084013][T12283] netlink: 152 bytes leftover after parsing attributes in process `syz.3.34354'. [ 1530.576317][T12290] netlink: 'syz.3.34357': attribute type 1 has an invalid length. [ 1530.588853][T12290] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.34357'. [ 1530.766009][T12295] netlink: 'syz.2.34370': attribute type 1 has an invalid length. [ 1530.801423][T12295] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.34370'. [ 1534.044251][T12316] device syzkaller0 entered promiscuous mode [ 1534.354196][T12332] netlink: 'syz.4.34375': attribute type 1 has an invalid length. [ 1534.371508][T12332] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.34375'. [ 1534.816895][T12356] netlink: 763 bytes leftover after parsing attributes in process `syz.1.34388'. [ 1535.410424][T12375] netlink: 'syz.3.34394': attribute type 1 has an invalid length. [ 1535.433938][T12364] rxe_eth0 speed is unknown, defaulting to 1000 [ 1535.440776][T12375] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.34394'. [ 1536.887720][T12415] rxe_eth0 speed is unknown, defaulting to 1000 [ 1537.146589][T12435] netlink: 763 bytes leftover after parsing attributes in process `syz.3.34416'. [ 1538.381915][T12478] netlink: 143108 bytes leftover after parsing attributes in process `syz.3.34434'. [ 1538.825720][T12480] device syzkaller0 entered promiscuous mode [ 1540.920367][T12536] device syzkaller0 entered promiscuous mode [ 1540.969161][T12544] device syzkaller0 entered promiscuous mode [ 1541.116239][T12546] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.34471'. [ 1541.126590][T12546] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.34471'. [ 1541.468193][T12565] netlink: 'syz.1.34468': attribute type 10 has an invalid length. [ 1541.514467][T12565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.34468'. [ 1542.093518][T12586] netlink: 'syz.0.34476': attribute type 4 has an invalid length. [ 1542.141178][T12586] netlink: 'syz.0.34476': attribute type 7 has an invalid length. [ 1543.544086][T12622] netlink: 'syz.4.34489': attribute type 10 has an invalid length. [ 1543.555537][T12622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.34489'. [ 1543.606869][T12625] device syzkaller0 entered promiscuous mode [ 1544.033652][T12634] device syzkaller0 entered promiscuous mode [ 1545.038551][T12659] netlink: 'syz.2.34502': attribute type 10 has an invalid length. [ 1545.047140][T12659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.34502'. [ 1545.207446][T12667] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.34507'. [ 1545.238050][T12667] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.34507'. [ 1545.752275][T12675] netlink: 'syz.3.34509': attribute type 4 has an invalid length. [ 1545.760541][T12675] netlink: 'syz.3.34509': attribute type 7 has an invalid length. [ 1546.092829][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.099482][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.265577][T12699] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.34521'. [ 1546.285876][T12699] netlink: 'syz.2.34521': attribute type 1 has an invalid length. [ 1546.296755][T12699] netlink: 'syz.2.34521': attribute type 2 has an invalid length. [ 1546.305616][T12699] netlink: 96 bytes leftover after parsing attributes in process `syz.2.34521'. [ 1546.569562][T12716] device syzkaller0 entered promiscuous mode [ 1546.588525][T12716] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1546.622974][T12717] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.34528'. [ 1546.651124][T12717] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1546.848995][T12731] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.34535'. [ 1546.956571][T12734] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.34536'. [ 1547.026817][T12734] netlink: 'syz.4.34536': attribute type 1 has an invalid length. [ 1547.062675][T12734] netlink: 'syz.4.34536': attribute type 2 has an invalid length. [ 1547.109569][T12734] netlink: 96 bytes leftover after parsing attributes in process `syz.4.34536'. [ 1547.199223][T12741] rxe_eth0 speed is unknown, defaulting to 1000 [ 1547.896748][T12770] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.34551'. [ 1547.907655][T12770] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1548.007432][T12774] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.34553'. [ 1548.033690][T12774] netlink: 'syz.1.34553': attribute type 1 has an invalid length. [ 1548.043559][T12774] netlink: 'syz.1.34553': attribute type 2 has an invalid length. [ 1548.059802][T12776] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.34554'. [ 1548.069981][T12774] netlink: 96 bytes leftover after parsing attributes in process `syz.1.34553'. [ 1548.083736][T12776] bridge_slave_1: default FDB implementation only supports local addresses [ 1548.412918][T12786] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1550.865899][T12861] rxe_eth0 speed is unknown, defaulting to 1000 [ 1551.589173][T12883] netlink: 'syz.0.34604': attribute type 1 has an invalid length. [ 1551.617751][T12883] netlink: 'syz.0.34604': attribute type 4 has an invalid length. [ 1551.638093][T12883] __nla_validate_parse: 2 callbacks suppressed [ 1551.638114][T12883] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.34604'. [ 1551.816599][T12894] netlink: 'syz.2.34600': attribute type 21 has an invalid length. [ 1551.841451][T12894] netlink: 128 bytes leftover after parsing attributes in process `syz.2.34600'. [ 1551.850889][T12894] netlink: 3 bytes leftover after parsing attributes in process `syz.2.34600'. [ 1552.796207][T12907] rxe_eth0 speed is unknown, defaulting to 1000 [ 1553.074132][T12928] netlink: 'syz.4.34614': attribute type 1 has an invalid length. [ 1553.111619][T12928] netlink: 'syz.4.34614': attribute type 4 has an invalid length. [ 1553.121786][T12928] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.34614'. [ 1553.927739][T12951] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.34624'. [ 1553.946148][T12951] bridge_slave_1: default FDB implementation only supports local addresses [ 1554.194036][T12968] device syzkaller0 entered promiscuous mode [ 1554.648767][T12977] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.34637'. [ 1554.792763][T12977] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1555.431517][T12988] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.34640'. [ 1555.451646][T12988] bridge_slave_1: default FDB implementation only supports local addresses [ 1556.672183][T13017] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.34650'. [ 1556.705948][T13017] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1558.269686][T13059] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.34667'. [ 1558.319491][T13059] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1561.542679][T13087] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.34686'. [ 1562.894881][T13132] netlink: 'syz.1.34698': attribute type 2 has an invalid length. [ 1562.932703][T13135] netlink: 'syz.4.34699': attribute type 17 has an invalid length. [ 1562.956609][T13132] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.34698'. [ 1562.972556][T13135] netlink: 'syz.4.34699': attribute type 16 has an invalid length. [ 1563.030615][T13135] netlink: 152 bytes leftover after parsing attributes in process `syz.4.34699'. [ 1563.204894][T13147] netlink: 'syz.1.34703': attribute type 3 has an invalid length. [ 1563.253017][T13147] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.34703'. [ 1563.876944][T13185] netlink: 'syz.3.34717': attribute type 17 has an invalid length. [ 1563.907656][T13185] netlink: 'syz.3.34717': attribute type 16 has an invalid length. [ 1563.940720][T13185] netlink: 152 bytes leftover after parsing attributes in process `syz.3.34717'. [ 1564.793216][T13199] netlink: 'syz.4.34721': attribute type 3 has an invalid length. [ 1564.823524][T13199] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.34721'. [ 1564.931664][T13203] netlink: 'syz.3.34722': attribute type 2 has an invalid length. [ 1564.985740][T13203] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.34722'. [ 1566.284259][T13244] netlink: 'syz.0.34739': attribute type 3 has an invalid length. [ 1566.330585][T13245] netlink: 'syz.4.34741': attribute type 2 has an invalid length. [ 1566.341074][T13244] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.34739'. [ 1566.384213][T13245] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.34741'. [ 1566.435464][T13250] netlink: 152 bytes leftover after parsing attributes in process `syz.2.34742'. [ 1568.586697][T13282] validate_nla: 2 callbacks suppressed [ 1568.586739][T13282] netlink: 'syz.0.34753': attribute type 17 has an invalid length. [ 1568.685251][T13282] netlink: 'syz.0.34753': attribute type 16 has an invalid length. [ 1568.740344][T13282] netlink: 152 bytes leftover after parsing attributes in process `syz.0.34753'. [ 1568.850199][T13287] netlink: 'syz.4.34767': attribute type 10 has an invalid length. [ 1568.926123][T13287] netlink: 143 bytes leftover after parsing attributes in process `syz.4.34767'. [ 1569.386862][T13298] netlink: 'syz.2.34757': attribute type 3 has an invalid length. [ 1569.437461][T13298] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.34757'. [ 1570.237718][T13329] netlink: 'syz.2.34774': attribute type 1 has an invalid length. [ 1570.293929][T13329] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.34774'. [ 1571.549119][T13366] netlink: 'syz.0.34793': attribute type 1 has an invalid length. [ 1571.576954][T13366] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.34793'. [ 1573.891992][T13408] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.34811'. [ 1575.032703][T13434] netlink: 'syz.4.34822': attribute type 21 has an invalid length. [ 1575.056424][T13434] netlink: 'syz.4.34822': attribute type 22 has an invalid length. [ 1575.081741][T13434] netlink: 'syz.4.34822': attribute type 13 has an invalid length. [ 1575.090241][T13434] netlink: 6188 bytes leftover after parsing attributes in process `syz.4.34822'. [ 1575.458513][T13439] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1575.465789][T13439] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1575.732674][T13451] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.34830'. [ 1577.463482][T13483] netlink: 'syz.4.34845': attribute type 10 has an invalid length. [ 1577.515249][T13483] netlink: 5385 bytes leftover after parsing attributes in process `syz.4.34845'. [ 1577.848514][T13489] device syzkaller0 entered promiscuous mode [ 1578.136667][T13493] netlink: 'syz.3.34850': attribute type 11 has an invalid length. [ 1578.159427][T13493] netlink: 140 bytes leftover after parsing attributes in process `syz.3.34850'. [ 1578.469697][T13514] device syzkaller0 entered promiscuous mode [ 1578.824716][T13524] netlink: 'syz.2.34862': attribute type 10 has an invalid length. [ 1578.858464][T13524] netlink: 5385 bytes leftover after parsing attributes in process `syz.2.34862'. [ 1579.119826][T13535] netlink: 'syz.1.34868': attribute type 11 has an invalid length. [ 1579.151290][T13535] netlink: 140 bytes leftover after parsing attributes in process `syz.1.34868'. [ 1579.244851][T13540] netlink: 'syz.0.34880': attribute type 10 has an invalid length. [ 1579.263127][T13540] netlink: 5385 bytes leftover after parsing attributes in process `syz.0.34880'. [ 1580.117827][T13569] netlink: 'syz.2.34884': attribute type 11 has an invalid length. [ 1580.131129][T13569] netlink: 140 bytes leftover after parsing attributes in process `syz.2.34884'. [ 1580.230829][T13571] device syzkaller0 entered promiscuous mode [ 1581.225635][T13614] device syzkaller0 entered promiscuous mode [ 1582.267181][T13649] netlink: 'syz.3.34917': attribute type 1 has an invalid length. [ 1582.275448][T13649] netlink: 'syz.3.34917': attribute type 4 has an invalid length. [ 1582.291327][T13649] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.34917'. [ 1582.387290][T13650] device syzkaller0 entered promiscuous mode [ 1582.487604][T13658] netlink: 'syz.0.34929': attribute type 1 has an invalid length. [ 1582.501889][T13658] netlink: 'syz.0.34929': attribute type 4 has an invalid length. [ 1582.509802][T13658] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.34929'. [ 1583.337612][T13678] rxe_eth0 speed is unknown, defaulting to 1000 [ 1583.644447][T13692] netlink: 'syz.2.34933': attribute type 1 has an invalid length. [ 1583.662331][T13692] netlink: 'syz.2.34933': attribute type 4 has an invalid length. [ 1583.670590][T13692] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.34933'. [ 1583.708896][T13694] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1584.670949][T13731] device syzkaller0 entered promiscuous mode [ 1585.081302][T13741] rxe_eth0 speed is unknown, defaulting to 1000 [ 1585.125881][T13745] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1585.740224][T13743] rxe_eth0 speed is unknown, defaulting to 1000 [ 1586.324565][T13773] netlink: 'syz.3.34967': attribute type 10 has an invalid length. [ 1588.328860][T13812] device syzkaller0 entered promiscuous mode [ 1588.416180][T13808] rxe_eth0 speed is unknown, defaulting to 1000 [ 1589.660666][T13832] cgroup: fork rejected by pids controller in /syz3 [ 1590.168461][T13834] rxe_eth0 speed is unknown, defaulting to 1000 [ 1591.690437][T13866] rxe_eth0 speed is unknown, defaulting to 1000 [ 1592.400597][T13873] rxe_eth0 speed is unknown, defaulting to 1000 [ 1592.658396][T13888] cgroup: fork rejected by pids controller in /syz2 [ 1592.959485][T13873] chnl_net:caif_netlink_parms(): no params data found [ 1593.304749][T13902] rxe_eth0 speed is unknown, defaulting to 1000 [ 1593.445484][T13873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.465119][T13873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.479780][T13873] device bridge_slave_0 entered promiscuous mode [ 1593.524888][T13873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.563017][T13873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.602430][T13873] device bridge_slave_1 entered promiscuous mode [ 1593.634876][T13873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1593.648128][T13873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.685618][T13873] team0: Port device team_slave_0 added [ 1593.697324][T13873] team0: Port device team_slave_1 added [ 1593.729703][T13873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.737093][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.774418][T13873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.810106][T13873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.834736][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.921719][T13873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.994550][T13873] device hsr_slave_0 entered promiscuous mode [ 1594.009391][T13873] device hsr_slave_1 entered promiscuous mode [ 1594.019681][T13873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1594.045197][T13873] Cannot create hsr debugfs directory [ 1594.142976][T13920] rxe_eth0 speed is unknown, defaulting to 1000 [ 1594.412165][T17857] Bluetooth: hci3: command 0x0409 tx timeout [ 1594.556446][T13920] chnl_net:caif_netlink_parms(): no params data found [ 1594.617912][T13920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.625250][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.634245][T13920] device bridge_slave_0 entered promiscuous mode [ 1594.653437][T13920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.660712][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.674495][T13920] device bridge_slave_1 entered promiscuous mode [ 1594.714625][T13920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.728142][T13920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.768250][T13920] team0: Port device team_slave_0 added [ 1594.782849][T13920] team0: Port device team_slave_1 added [ 1594.819283][T13920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.835263][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1594.869018][T13920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.887673][T13920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.909106][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1594.940883][T13920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.019976][T13920] device hsr_slave_0 entered promiscuous mode [ 1595.033178][T13920] device hsr_slave_1 entered promiscuous mode [ 1595.040262][T13920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1595.054357][T13920] Cannot create hsr debugfs directory [ 1595.080978][T13873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1595.105936][T13873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1595.124241][T13873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1595.148677][T13873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1595.341656][T13873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1595.365454][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1595.380632][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1595.445595][T13873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.464177][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1595.479578][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1595.488663][T19033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.495862][T19033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.561031][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1595.581551][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1595.590744][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1595.605765][T19033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.613043][T19033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.621856][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1595.632616][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1595.651221][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1595.660610][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1595.682884][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1595.702205][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1595.769543][T13873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1595.786608][T13873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1595.800810][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1595.815590][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1595.826245][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1595.839957][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1595.850738][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1595.868439][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1595.984115][T13920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1596.031828][T13920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1596.047570][T13920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1596.080307][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1596.088555][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1596.097179][T29884] Bluetooth: hci2: command 0x0409 tx timeout [ 1596.111408][T13920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1596.132222][T13873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.195105][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1596.212203][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1596.258420][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1596.268174][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1596.277969][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1596.286745][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1596.299857][T13873] device veth0_vlan entered promiscuous mode [ 1596.344210][T13873] device veth1_vlan entered promiscuous mode [ 1596.395798][T13920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.427729][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1596.438810][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1596.453655][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1596.466468][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1596.480513][T13873] device veth0_macvtap entered promiscuous mode [ 1596.501026][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 1596.510836][T13920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.521515][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1596.530647][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1596.542780][T13873] device veth1_macvtap entered promiscuous mode [ 1596.562365][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1596.581545][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1596.592453][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1596.611672][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1596.623411][T21738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.630562][T21738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1596.647989][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1596.660208][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.671920][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1596.683017][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.695001][T13873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1596.708237][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1596.718065][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1596.727913][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1596.739967][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1596.750295][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1596.762689][T21738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.769781][T21738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1596.782807][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.795937][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.806120][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1596.816951][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.828812][T13873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.841527][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1596.851641][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1596.860504][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1596.872422][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1596.895641][T13873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.907776][T13873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.917756][T13873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.926919][T13873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.940311][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1596.955345][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1596.982184][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1596.997636][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1597.032535][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1597.046150][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1597.057536][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1597.070409][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1597.079363][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1597.095278][T13920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1597.223294][T19033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.242736][T19033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.255328][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1597.287440][T21722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.300376][T21722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.317069][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1597.347910][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1597.377343][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1597.414122][T13920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.505379][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1597.522615][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1597.626976][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1597.653141][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1597.715478][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1597.734607][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1597.787073][T13920] device veth0_vlan entered promiscuous mode [ 1597.868243][T13920] device veth1_vlan entered promiscuous mode [ 1597.947681][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1597.962522][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1597.972824][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1597.983164][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1598.002480][T13920] device veth0_macvtap entered promiscuous mode [ 1598.048059][T13963] netlink: 'syz.0.35035': attribute type 7 has an invalid length. [ 1598.066919][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1598.138788][T13967] netlink: 'syz.1.35038': attribute type 3 has an invalid length. [ 1598.147173][T13920] device veth1_macvtap entered promiscuous mode [ 1598.157318][T13966] netlink: 64 bytes leftover after parsing attributes in process `syz.3.35037'. [ 1598.181336][T29884] Bluetooth: hci2: command 0x041b tx timeout [ 1598.191135][T13967] netlink: 'syz.1.35038': attribute type 1 has an invalid length. [ 1598.199028][T13967] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.35038'. [ 1598.225882][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1598.244669][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.256880][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1598.274976][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.287904][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1598.304838][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.316939][T13971] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.35040'. [ 1598.337363][T13920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1598.358165][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1598.370740][T19033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1598.385861][T13971] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.35040'. [ 1598.400543][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.417867][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.429085][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.446954][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.459509][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.476555][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.504553][T13920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1598.553864][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1598.563106][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1598.581221][T29884] Bluetooth: hci3: command 0x040f tx timeout [ 1598.610550][T13920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.620844][T13920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.636205][T13920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.650545][T13920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.837430][T21722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.852041][T21722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.881086][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1598.929606][T21738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.962051][T21738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.013352][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1599.143247][T13988] device syzkaller0 entered promiscuous mode [ 1599.349998][T14001] netlink: 'syz.2.35050': attribute type 7 has an invalid length. [ 1599.515628][T14006] netlink: 'syz.1.35052': attribute type 10 has an invalid length. [ 1599.548287][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.580524][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.608763][T14016] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.35054'. [ 1599.620205][T14016] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.35054'. [ 1599.638584][T13999] rxe_eth0 speed is unknown, defaulting to 1000 [ 1599.722913][T14014] device syzkaller0 entered promiscuous mode [ 1599.883250][T14023] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.35070'. [ 1599.905520][T14023] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.35070'. [ 1600.177147][T14035] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.35064'. [ 1600.251886][T29884] Bluetooth: hci2: command 0x040f tx timeout [ 1600.415808][T14048] netlink: 'syz.3.35071': attribute type 3 has an invalid length. [ 1600.455757][T14048] netlink: 'syz.3.35071': attribute type 1 has an invalid length. [ 1600.480103][T14046] device syzkaller0 entered promiscuous mode [ 1600.487209][T14048] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.35071'. [ 1600.516386][T13999] chnl_net:caif_netlink_parms(): no params data found [ 1600.546129][T14052] netlink: 'syz.0.35072': attribute type 10 has an invalid length. [ 1600.634494][T14052] device bridge_slave_1 left promiscuous mode [ 1600.641745][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.661972][T10257] Bluetooth: hci3: command 0x0419 tx timeout [ 1600.837654][T14058] device syzkaller0 entered promiscuous mode [ 1600.939521][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.953755][T13999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.969494][T13999] device bridge_slave_0 entered promiscuous mode [ 1600.984200][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.991978][T13999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.000753][T13999] device bridge_slave_1 entered promiscuous mode [ 1601.032832][T13999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.045636][T13999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.083490][T13999] team0: Port device team_slave_0 added [ 1601.093537][T13999] team0: Port device team_slave_1 added [ 1601.120127][T13999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.127695][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.166619][T13999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.180060][T13999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.188665][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.216093][T13999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.257081][T13999] device hsr_slave_0 entered promiscuous mode [ 1601.267228][T13999] device hsr_slave_1 entered promiscuous mode [ 1601.274682][T13999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1601.282682][T13999] Cannot create hsr debugfs directory [ 1601.402948][T13999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.451227][T22808] Bluetooth: hci4: command 0x0409 tx timeout [ 1601.493844][T13999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.604360][T13999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.685525][T13999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.874666][T13999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1601.891747][T13999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1601.912018][T13999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1601.928290][T13999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1602.050626][T13999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.078034][T13999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.091603][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1602.099977][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1602.131765][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1602.142944][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1602.152205][T21738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.159329][T21738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.168822][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1602.187465][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1602.198366][T21738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.205715][T21738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.217286][T21738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1602.235537][T21731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1602.248644][T21731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1602.273876][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1602.284406][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1602.293779][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1602.306427][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1602.316115][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1602.330376][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1602.339962][T22808] Bluetooth: hci2: command 0x0419 tx timeout [ 1602.350365][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1602.364255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1602.374964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1602.389697][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1602.508957][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1602.521978][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1602.538490][T13999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1602.705186][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1602.715196][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1602.741777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1602.751278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1602.760145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1602.770328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1602.782656][T13999] device veth0_vlan entered promiscuous mode [ 1602.798790][T13999] device veth1_vlan entered promiscuous mode [ 1602.827150][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1602.839762][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1602.848754][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1602.858633][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1602.871819][T13999] device veth0_macvtap entered promiscuous mode [ 1602.883765][T13999] device veth1_macvtap entered promiscuous mode [ 1602.905770][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.918111][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.929222][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.939840][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.950572][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.961280][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.971542][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.982394][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.994175][T13999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.005628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1603.017141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1603.027399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1603.040185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1603.053644][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.064216][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.074755][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.086406][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.096789][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.108694][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.118967][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.133673][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.145480][T13999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.155380][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1603.167825][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1603.180198][T13999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.189077][T13999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.198339][T13999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.207809][T13999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.288155][T21731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.311322][T21731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.319652][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1603.343321][ T2102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.355922][ T2102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.365252][T21722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1603.531787][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 1604.856979][T14134] rxe_eth0 speed is unknown, defaulting to 1000 [ 1605.611079][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 1605.707118][T14183] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.35122'. [ 1605.747857][T14183] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1605.770495][T14183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1606.307920][T14213] netlink: 'syz.2.35138': attribute type 3 has an invalid length. [ 1606.317057][T14213] netlink: 'syz.2.35138': attribute type 5 has an invalid length. [ 1606.361178][T14213] netlink: 'syz.2.35138': attribute type 6 has an invalid length. [ 1606.398676][T14213] netlink: 197960 bytes leftover after parsing attributes in process `syz.2.35138'. [ 1606.461886][T14219] netlink: 132 bytes leftover after parsing attributes in process `syz.4.35141'. [ 1607.215937][T14224] rxe_eth0 speed is unknown, defaulting to 1000 [ 1607.533232][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.539744][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.691455][ T3230] Bluetooth: hci4: command 0x0419 tx timeout [ 1608.011530][T21731] wlan1: Trigger new scan to find an IBSS to join [ 1608.886864][T14268] device syzkaller0 entered promiscuous mode [ 1609.100369][T14258] rxe_eth0 speed is unknown, defaulting to 1000 [ 1609.555756][T14273] rxe_eth0 speed is unknown, defaulting to 1000 [ 1610.011403][T21731] wlan1: Trigger new scan to find an IBSS to join [ 1610.021208][ T2102] wlan1: Trigger new scan to find an IBSS to join [ 1610.448745][T14295] netlink: 'syz.2.35166': attribute type 10 has an invalid length. [ 1610.501995][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.532248][T14295] device bridge_slave_1 left promiscuous mode [ 1610.557530][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.598545][T14300] netlink: 'syz.1.35170': attribute type 3 has an invalid length. [ 1610.623000][T14295] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1610.624992][T14300] netlink: 'syz.1.35170': attribute type 5 has an invalid length. [ 1610.682009][ C0] Illegal XDP return value 16128, expect packet loss! [ 1610.727682][T14300] netlink: 'syz.1.35170': attribute type 6 has an invalid length. [ 1610.781352][T14300] netlink: 197960 bytes leftover after parsing attributes in process `syz.1.35170'. [ 1611.052139][T14313] netlink: 'syz.0.35187': attribute type 3 has an invalid length. [ 1611.081064][T14313] netlink: 'syz.0.35187': attribute type 5 has an invalid length. [ 1611.102556][T14313] netlink: 'syz.0.35187': attribute type 6 has an invalid length. [ 1611.121218][T14313] netlink: 197960 bytes leftover after parsing attributes in process `syz.0.35187'. [ 1612.971241][T21722] wlan1: Trigger new scan to find an IBSS to join [ 1613.061357][T21738] wlan1: Trigger new scan to find an IBSS to join [ 1613.068620][T21738] wlan1: Trigger new scan to find an IBSS to join [ 1613.524243][T14346] netlink: 'syz.4.35185': attribute type 10 has an invalid length. [ 1613.589407][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.632430][T14346] device bridge_slave_1 left promiscuous mode [ 1613.653658][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.758841][T14346] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1613.932398][T21731] wlan1: Creating new IBSS network, BSSID 2e:5b:f5:3d:f4:08 [ 1614.005037][T14352] device syzkaller0 entered promiscuous mode [ 1614.033349][T21738] wlan1: Creating new IBSS network, BSSID c6:6e:ca:f2:07:19 [ 1614.041888][T14360] netlink: 'syz.1.35207': attribute type 10 has an invalid length. [ 1614.301657][T14375] netlink: 'syz.1.35213': attribute type 10 has an invalid length. [ 1614.567977][T14385] netlink: 144 bytes leftover after parsing attributes in process `syz.1.35206'. [ 1614.679187][T14379] rxe_eth0 speed is unknown, defaulting to 1000 [ 1615.770338][T14401] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.35214'. [ 1616.060377][ T2102] wlan1: Trigger new scan to find an IBSS to join [ 1617.020446][T14418] rxe_eth0 speed is unknown, defaulting to 1000 [ 1617.104271][T21731] wlan1: Creating new IBSS network, BSSID aa:56:65:47:9d:06 [ 1617.592620][T14439] netlink: 144 bytes leftover after parsing attributes in process `syz.3.35227'. [ 1618.372667][T14467] device syzkaller0 entered promiscuous mode [ 1618.890761][T14474] rxe_eth0 speed is unknown, defaulting to 1000 [ 1619.054028][T14486] netlink: 'syz.1.35251': attribute type 10 has an invalid length. [ 1619.885610][T14501] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.35268'. [ 1620.041071][T14501] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.35268'. [ 1620.106245][T14499] rxe_eth0 speed is unknown, defaulting to 1000 [ 1620.318104][T14507] netlink: 144 bytes leftover after parsing attributes in process `syz.0.35259'. [ 1620.356011][T14509] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.35260'. [ 1620.692298][T14517] netlink: 'syz.3.35265': attribute type 10 has an invalid length. [ 1620.873074][T14517] team0: Device nlmon0 is of different type [ 1621.767168][T14541] netlink: 144 bytes leftover after parsing attributes in process `syz.4.35275'. [ 1622.159689][T14557] netlink: 'syz.4.35282': attribute type 10 has an invalid length. [ 1622.353904][T14557] team0: Device nlmon0 is of different type [ 1624.596375][T14586] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.35303'. [ 1624.760213][T14589] netlink: 144 bytes leftover after parsing attributes in process `syz.2.35291'. [ 1624.930684][T14600] netlink: 'syz.2.35301': attribute type 10 has an invalid length. [ 1625.088556][T14600] team0: Device nlmon0 is of different type [ 1626.078503][T14609] rxe_eth0 speed is unknown, defaulting to 1000 [ 1626.294490][T14621] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.35308'. [ 1626.327225][T14621] openvswitch: netlink: Message has 4 unknown bytes. [ 1626.829910][T14632] netlink: 144 bytes leftover after parsing attributes in process `syz.4.35314'. [ 1627.088057][T14641] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.35317'. [ 1630.102405][T14645] netlink: 209860 bytes leftover after parsing attributes in process `syz.3.35321'. [ 1630.143329][T14645] openvswitch: netlink: Message has 4 unknown bytes. [ 1630.154657][T14650] netlink: 'syz.0.35318': attribute type 10 has an invalid length. [ 1630.238755][T14650] device nlmon0 entered promiscuous mode [ 1630.265139][T14650] team0: Device nlmon0 is of different type [ 1630.694726][T14657] rxe_eth0 speed is unknown, defaulting to 1000 [ 1630.748995][T14669] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.35331'. [ 1631.436708][T14678] netlink: 'syz.2.35334': attribute type 10 has an invalid length. [ 1631.466673][T14678] team0: Device nlmon0 is of different type [ 1631.493168][T14679] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.35335'. [ 1631.511227][T14679] openvswitch: netlink: Message has 4 unknown bytes. [ 1631.546037][T14680] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.35343'. [ 1632.121400][T14685] rxe_eth0 speed is unknown, defaulting to 1000 [ 1632.488599][T14711] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.35349'. [ 1632.862600][T14717] netlink: 'syz.4.35352': attribute type 10 has an invalid length. [ 1632.921687][T14717] team0: Device nlmon0 is of different type [ 1633.199062][T14707] rxe_eth0 speed is unknown, defaulting to 1000 [ 1633.429657][T14726] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.35355'. [ 1634.415789][T14745] device syzkaller0 entered promiscuous mode [ 1634.577908][T14750] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.35365'. [ 1635.069142][T14767] netlink: 144 bytes leftover after parsing attributes in process `syz.2.35372'. [ 1637.532413][T14785] device syzkaller0 entered promiscuous mode [ 1637.920955][T14803] device syzkaller0 entered promiscuous mode [ 1638.128548][T14811] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35390'. [ 1641.285701][T14846] netlink: 144 bytes leftover after parsing attributes in process `syz.4.35404'. [ 1641.298617][T14845] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.35405'. [ 1641.747521][T14870] device syzkaller0 entered promiscuous mode [ 1641.959171][T14885] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.35422'. [ 1641.970556][T14883] device syzkaller0 entered promiscuous mode [ 1642.820530][T14931] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.35445'. [ 1643.220380][T14927] rxe_eth0 speed is unknown, defaulting to 1000 [ 1643.335472][T14947] : port 1(team0) entered blocking state [ 1643.404784][T14947] : port 1(team0) entered disabled state [ 1643.473244][T14947] device team0 entered promiscuous mode [ 1643.520583][T14947] device team_slave_0 entered promiscuous mode [ 1643.575736][T14947] device team_slave_1 entered promiscuous mode [ 1643.649231][T14949] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.35453'. [ 1643.946795][T14944] rxe_eth0 speed is unknown, defaulting to 1000 [ 1643.994887][T21722] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1644.098461][ T2102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1645.016958][ T2102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1645.148006][T14991] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.35469'. [ 1645.977461][T15022] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.35482'. [ 1646.281258][T15033] : port 1(team0) entered blocking state [ 1646.287123][T15033] : port 1(team0) entered disabled state [ 1646.314274][T15033] device team0 entered promiscuous mode [ 1646.331519][T15033] device team_slave_0 entered promiscuous mode [ 1646.345916][T15033] device team_slave_1 entered promiscuous mode [ 1647.183293][T14347] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1647.287270][T15059] device syzkaller0 entered promiscuous mode [ 1648.255464][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1649.419067][T15111] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.35521'. [ 1650.267959][T15139] rxe_eth0 speed is unknown, defaulting to 1000 [ 1650.270696][T15150] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.35538'. [ 1651.794828][T15177] rxe_eth0 speed is unknown, defaulting to 1000 [ 1652.328912][T15197] IPv6: : Disabled Multicast RS [ 1653.134265][T15223] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.35570'. [ 1653.236281][T15228] IPv6: : Disabled Multicast RS [ 1653.635701][T15244] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.35579'. [ 1654.903822][T15288] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1655.086852][T15299] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.35600'. [ 1655.783903][T15329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1656.000905][T15339] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.35617'. [ 1656.079641][T15343] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.35619'. [ 1656.560789][T15363] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1656.849531][T15375] netlink: 192444 bytes leftover after parsing attributes in process `syz.3.35633'. [ 1657.584730][T15404] __sock_release: fasync list not empty! [ 1658.478623][T15442] device syzkaller0 entered promiscuous mode [ 1658.760459][T15455] netlink: 'syz.3.35669': attribute type 29 has an invalid length. [ 1658.801699][T15455] netlink: 'syz.3.35669': attribute type 29 has an invalid length. [ 1658.873222][T15459] netlink: 'syz.3.35669': attribute type 29 has an invalid length. [ 1658.890330][T15455] netlink: 'syz.3.35669': attribute type 29 has an invalid length. [ 1658.916277][T15455] netlink: 'syz.3.35669': attribute type 29 has an invalid length. [ 1658.925530][T15464] __sock_release: fasync list not empty! [ 1658.976783][T15455] netlink: 'syz.3.35669': attribute type 29 has an invalid length. [ 1659.686179][T15485] netlink: 'syz.2.35679': attribute type 1 has an invalid length. [ 1659.716834][T15485] netlink: 'syz.2.35679': attribute type 3 has an invalid length. [ 1659.745207][T15485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.35679'. [ 1661.356981][T15489] netlink: 8221 bytes leftover after parsing attributes in process `syz.0.35690'. [ 1661.529386][T15501] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1661.665347][T15509] __sock_release: fasync list not empty! [ 1661.738368][T15517] netlink: 'syz.4.35693': attribute type 29 has an invalid length. [ 1661.811466][T15517] netlink: 'syz.4.35693': attribute type 29 has an invalid length. [ 1661.948729][T15522] bridge0: port 3(team0) entered disabled state [ 1661.977934][T15522] device team_slave_0 left promiscuous mode [ 1661.995308][T15522] team0 (unregistering): Port device team_slave_0 removed [ 1662.022231][T15522] device team_slave_1 left promiscuous mode [ 1662.053572][T15522] team0 (unregistering): Port device team_slave_1 removed [ 1662.368664][T15544] netlink: 8221 bytes leftover after parsing attributes in process `syz.4.35703'. [ 1662.506680][T15546] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.35705'. [ 1662.548983][T15553] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.35706'. [ 1662.991336][T15572] netlink: 8221 bytes leftover after parsing attributes in process `syz.3.35715'. [ 1663.158130][T15581] netlink: 148 bytes leftover after parsing attributes in process `syz.3.35718'. [ 1663.336833][T15588] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.35721'. [ 1663.442173][T15591] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.35722'. [ 1663.639410][T15604] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.35729'. [ 1663.674271][T15604] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.35729'. [ 1665.247405][T15670] validate_nla: 28 callbacks suppressed [ 1665.247425][T15670] netlink: 'syz.1.35753': attribute type 1 has an invalid length. [ 1665.276162][T15670] netlink: 'syz.1.35753': attribute type 3 has an invalid length. [ 1666.290364][T15680] netlink: 'syz.2.35757': attribute type 1 has an invalid length. [ 1666.311370][T15680] netlink: 'syz.2.35757': attribute type 4 has an invalid length. [ 1666.343406][T15680] netlink: 'syz.2.35757': attribute type 1 has an invalid length. [ 1666.367575][T15680] netlink: 'syz.2.35757': attribute type 4 has an invalid length. [ 1666.381109][T15680] __nla_validate_parse: 5 callbacks suppressed [ 1666.381129][T15680] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.35757'. [ 1666.498577][T15676] device syzkaller0 entered promiscuous mode [ 1666.550621][T15689] rxe_eth0 speed is unknown, defaulting to 1000 [ 1668.973280][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.980010][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.126934][T15713] netlink: 'syz.4.35770': attribute type 17 has an invalid length. [ 1669.155788][T15713] netlink: 148 bytes leftover after parsing attributes in process `syz.4.35770'. [ 1669.177878][T15724] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.35773'. [ 1669.962628][T15758] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.35784'. [ 1671.162465][T15795] netlink: 'syz.0.35798': attribute type 1 has an invalid length. [ 1671.214953][T15795] netlink: 'syz.0.35798': attribute type 3 has an invalid length. [ 1671.245591][T15795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.35798'. [ 1671.283253][T15799] netlink: 'syz.1.35801': attribute type 29 has an invalid length. [ 1671.307675][T15799] netlink: 'syz.1.35801': attribute type 29 has an invalid length. [ 1671.377480][T15799] netlink: 'syz.1.35801': attribute type 29 has an invalid length. [ 1671.394124][T15799] netlink: 'syz.1.35801': attribute type 29 has an invalid length. [ 1671.424088][T15799] netlink: 'syz.1.35801': attribute type 29 has an invalid length. [ 1671.436360][T15804] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.35803'. [ 1671.481730][T15800] netlink: 'syz.1.35801': attribute type 10 has an invalid length. [ 1671.587059][T15800] bridge0: port 4(team0) entered disabled state [ 1672.323842][T15800] bridge0: port 4(team0) entered disabled state [ 1672.339709][T15800] device team_slave_0 left promiscuous mode [ 1672.357683][T15800] team0 (unregistering): Port device team_slave_0 removed [ 1672.419731][T15800] device team_slave_1 left promiscuous mode [ 1672.473907][T15800] team0 (unregistering): Port device team_slave_1 removed [ 1672.551102][T15820] netlink: 180 bytes leftover after parsing attributes in process `syz.2.35808'. [ 1672.593892][T15824] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.35811'. [ 1673.453305][T15865] netlink: 'syz.4.35826': attribute type 29 has an invalid length. [ 1673.476715][T15859] device syzkaller0 entered promiscuous mode [ 1673.512119][T15865] netlink: 'syz.4.35826': attribute type 29 has an invalid length. [ 1673.658084][T15873] netlink: 180 bytes leftover after parsing attributes in process `syz.1.35830'. [ 1673.737886][T15870] device team0 left promiscuous mode [ 1673.749980][T15870] device team_slave_0 left promiscuous mode [ 1673.757634][T15870] device team_slave_1 left promiscuous mode [ 1673.773567][T15870] : port 1(team0) entered disabled state [ 1673.818804][T15870] team0 (unregistering): Port device team_slave_0 removed [ 1673.861900][T15870] team0 (unregistering): Port device team_slave_1 removed [ 1674.874950][T15924] device team0 left promiscuous mode [ 1674.880604][T15924] device team_slave_0 left promiscuous mode [ 1674.887913][T15924] device team_slave_1 left promiscuous mode [ 1674.894708][T15924] : port 1(team0) entered disabled state [ 1674.942988][T15924] team0 (unregistering): Port device team_slave_0 removed [ 1674.982002][T15924] team0 (unregistering): Port device team_slave_1 removed [ 1675.121642][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1676.153129][T21722] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1676.156752][ T2102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1677.025035][T15989] netlink: 830 bytes leftover after parsing attributes in process `syz.2.35888'. [ 1677.054954][T15992] netlink: 180 bytes leftover after parsing attributes in process `syz.3.35875'. [ 1677.506316][T16004] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.35881'. [ 1679.319964][T14347] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1679.852279][T16048] validate_nla: 10 callbacks suppressed [ 1679.852302][T16048] netlink: 'syz.0.35914': attribute type 21 has an invalid length. [ 1679.910134][T16048] netlink: 'syz.0.35914': attribute type 10 has an invalid length. [ 1679.968127][T16048] netlink: 'syz.0.35914': attribute type 12 has an invalid length. [ 1679.987948][T16048] netlink: 'syz.0.35914': attribute type 13 has an invalid length. [ 1679.998620][T16048] netlink: 'syz.0.35914': attribute type 14 has an invalid length. [ 1680.024532][T16048] netlink: 'syz.0.35914': attribute type 15 has an invalid length. [ 1680.042697][T16048] netlink: 'syz.0.35914': attribute type 16 has an invalid length. [ 1680.058168][T16048] netlink: 'syz.0.35914': attribute type 19 has an invalid length. [ 1680.066721][T16048] netlink: 'syz.0.35914': attribute type 21 has an invalid length. [ 1680.080885][T16048] netlink: 'syz.0.35914': attribute type 22 has an invalid length. [ 1680.088944][T16048] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.35914'. [ 1680.258968][T16063] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.35911'. [ 1680.343693][T21738] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1680.538434][T16076] netlink: 830 bytes leftover after parsing attributes in process `syz.4.35917'. [ 1680.698887][T16077] device syzkaller0 entered promiscuous mode [ 1681.344892][T16094] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.35925'. [ 1681.877512][T16108] device syzkaller0 entered promiscuous mode [ 1682.199313][T16120] device syzkaller0 entered promiscuous mode [ 1682.210358][T16123] netlink: 12226 bytes leftover after parsing attributes in process `syz.4.35947'. [ 1682.639173][T16134] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.35940'. [ 1683.822554][T16158] device syzkaller0 entered promiscuous mode [ 1684.853747][T18951] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 1684.910691][T16167] device syzkaller0 entered promiscuous mode [ 1685.380825][T16192] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.35967'. [ 1685.489770][T16188] device syzkaller0 entered promiscuous mode [ 1686.308138][T16201] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.35980'. [ 1686.478174][T16210] device syzkaller0 entered promiscuous mode [ 1686.526442][T16211] device syzkaller0 entered promiscuous mode [ 1687.032280][T16244] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.35989'. [ 1687.075613][T16244] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.35989'. [ 1687.913008][T16260] validate_nla: 10 callbacks suppressed [ 1687.913058][T16260] netlink: 'syz.1.35997': attribute type 21 has an invalid length. [ 1687.942803][T16263] netlink: 208644 bytes leftover after parsing attributes in process `syz.4.35998'. [ 1687.970203][T16263] netlink: 'syz.4.35998': attribute type 1 has an invalid length. [ 1687.979585][T16260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35997'. [ 1688.084082][T16276] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.36004'. [ 1688.289473][T16278] device syzkaller0 entered promiscuous mode [ 1690.593674][T18951] Bluetooth: hci2: Received unexpected HCI Event 00000000 [ 1690.669433][T16333] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.36031'. [ 1690.679935][T16333] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.36031'. [ 1690.808981][T16335] device syzkaller0 entered promiscuous mode [ 1690.848933][T16340] netlink: 208644 bytes leftover after parsing attributes in process `syz.2.36033'. [ 1690.907358][T16340] netlink: 'syz.2.36033': attribute type 1 has an invalid length. [ 1691.998200][T18951] Bluetooth: hci4: Received unexpected HCI Event 00000000 [ 1692.065600][T16365] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.36043'. [ 1692.938944][T16375] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.36045'. [ 1693.001171][T16375] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.36045'. [ 1693.127958][T16387] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.36052'. [ 1693.150817][T16387] netlink: 'syz.3.36052': attribute type 1 has an invalid length. [ 1693.265720][T18951] Bluetooth: hci0: Received unexpected HCI Event 00000000 [ 1693.364684][T16393] device syzkaller0 entered promiscuous mode [ 1694.301873][T18951] Bluetooth: hci1: Received unexpected HCI Event 00000000 [ 1696.251734][T16466] device syzkaller0 entered promiscuous mode [ 1699.601612][T16562] 81: renamed from syzkaller0 [ 1701.178603][T16609] device syzkaller0 entered promiscuous mode [ 1701.512361][T16616] rxe_eth0 speed is unknown, defaulting to 1000 [ 1702.725926][T16634] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1704.093984][T16670] netlink: 'syz.1.36168': attribute type 39 has an invalid length. [ 1705.131757][T16706] netlink: 36 bytes leftover after parsing attributes in process `syz.1.36185'. [ 1705.168537][T16706] : renamed from caif0 [ 1705.195597][T16706] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1705.520392][T16718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36200'. [ 1705.546775][T16718] : renamed from caif0 [ 1705.577860][T16718] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1706.840440][T16749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.36203'. [ 1706.914836][T16749] : renamed from caif0 [ 1706.948211][T16749] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1707.376719][ T2102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1708.304683][T21738] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1710.956579][T16787] netlink: 64 bytes leftover after parsing attributes in process `syz.3.36217'. [ 1711.308801][T16796] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.36222'. [ 1711.549521][T16800] netlink: 'syz.0.36224': attribute type 39 has an invalid length. [ 1712.975057][T14347] wlan1: Trigger new scan to find an IBSS to join [ 1713.155411][T16824] rxe_eth0 speed is unknown, defaulting to 1000 [ 1715.555702][T16891] netlink: 64 bytes leftover after parsing attributes in process `syz.1.36257'. [ 1715.815598][T16892] rxe_eth0 speed is unknown, defaulting to 1000 [ 1716.021242][T21738] wlan1: Trigger new scan to find an IBSS to join [ 1716.266233][T16910] device syzkaller0 entered promiscuous mode [ 1717.054055][T14347] wlan1: Trigger new scan to find an IBSS to join [ 1717.131124][ T3228] Bluetooth: hci3: command 0x0406 tx timeout [ 1717.141007][ T3228] Bluetooth: hci2: command 0x0406 tx timeout [ 1717.433020][T16935] netlink: 64 bytes leftover after parsing attributes in process `syz.2.36271'. [ 1718.286702][T16954] netlink: 143108 bytes leftover after parsing attributes in process `syz.1.36283'. [ 1718.315623][T16951] device syzkaller0 entered promiscuous mode [ 1718.955288][T16961] rxe_eth0 speed is unknown, defaulting to 1000 [ 1719.062795][ T144] wlan1: Trigger new scan to find an IBSS to join [ 1719.419968][T16969] device syzkaller0 entered promiscuous mode [ 1720.153243][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1720.435879][T16982] netlink: 71 bytes leftover after parsing attributes in process `syz.1.36291'. [ 1721.463623][T16990] device syzkaller0 entered promiscuous mode [ 1722.051316][T14347] wlan1: Trigger new scan to find an IBSS to join [ 1722.251020][ T3228] Bluetooth: hci4: command 0x0406 tx timeout [ 1722.740419][T17022] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.36308'. [ 1723.049346][ T2102] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1724.727728][T17059] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36322'. [ 1725.101836][T17072] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.36329'. [ 1727.027448][T17103] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.36339'. [ 1727.085580][T17108] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.36353'. [ 1727.486688][T17119] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36344'. [ 1728.682983][T17153] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.36363'. [ 1729.125409][T17169] netlink: 'syz.2.36371': attribute type 21 has an invalid length. [ 1729.340180][T17182] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.36386'. [ 1729.868960][T17207] netlink: 668 bytes leftover after parsing attributes in process `syz.4.36387'. [ 1729.902663][T17207] openvswitch: netlink: Key type 15645 is out of range max 29 [ 1729.918463][T17209] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.36389'. [ 1730.428748][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.442450][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.507284][T17230] rxe_eth0 speed is unknown, defaulting to 1000 Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.