last executing test programs: 4.616301059s ago: executing program 1 (id=2272): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) 4.608858649s ago: executing program 1 (id=2273): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x4000000007fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x101, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/17, 0x11}, 0x2062) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 4.475795901s ago: executing program 1 (id=2276): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x4000000007fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x101, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/17, 0x11}, 0x2062) 3.519614356s ago: executing program 1 (id=2293): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07290006007c09e8fc55a10a0015000600142603600e12080002008100040104000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 3.417302447s ago: executing program 1 (id=2294): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000003980)=""/4059, 0xfdb}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000940)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000700)=""/108, 0x6c}], 0xb}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 3.184835941s ago: executing program 1 (id=2300): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x1, 0xfefffffffffffffe, 0x2, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) 2.118695097s ago: executing program 2 (id=2308): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002, 0x0, 0x0, 0x3}], 0x10, 0x0, @void, @value}, 0x94) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) 1.96607215s ago: executing program 3 (id=2309): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x1, 0xfefffffffffffffe, 0x2, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) 1.876279981s ago: executing program 2 (id=2310): socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)='2', 0x1}], 0x1}, 0x4040810) close(r1) 1.798553252s ago: executing program 3 (id=2312): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f0000000200), 0x6}, 0xc010, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410400, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.707840804s ago: executing program 2 (id=2313): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000500), 0x4) 1.160917212s ago: executing program 0 (id=2317): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x4000000007fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x101, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 989.029415ms ago: executing program 0 (id=2318): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 840.211007ms ago: executing program 3 (id=2319): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002, 0x0, 0x0, 0x3}], 0x10, 0x0, @void, @value}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) 833.183907ms ago: executing program 0 (id=2320): socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)='2', 0x1}], 0x1}, 0x4040810) close(r1) 778.254948ms ago: executing program 3 (id=2321): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 656.1834ms ago: executing program 2 (id=2322): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xc610, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x20002, 0x0, 0x1}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x4, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r3, 0x4, r3}, 0x10) 645.90732ms ago: executing program 0 (id=2323): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000003980)=""/4059, 0xfdb}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000940)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000700)=""/108, 0x6c}], 0xb}, 0x40012100) 640.35673ms ago: executing program 3 (id=2324): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) 385.272044ms ago: executing program 2 (id=2325): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x4000000007fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x101, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 384.250124ms ago: executing program 3 (id=2326): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f0000000200), 0x6}, 0xc010, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410400, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 281.265625ms ago: executing program 0 (id=2327): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 131.470888ms ago: executing program 2 (id=2328): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002, 0x0, 0x0, 0x3}], 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) 0s ago: executing program 0 (id=2329): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000500), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 75.388567][ T5758] cgroup: Unknown subsys name 'net' [ 75.535175][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.181911][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.754510][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.765270][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.776325][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.796045][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.803614][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.812452][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.817042][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.822191][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.828812][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.833960][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.841475][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.849897][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.854969][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.862262][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.876208][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.876675][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.892388][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.901269][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.908767][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.919249][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.926493][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.926826][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.934505][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.948065][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.467718][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 79.514805][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 79.606356][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 79.671543][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 79.730016][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.737528][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.744836][ T5771] bridge_slave_0: entered allmulticast mode [ 79.752423][ T5771] bridge_slave_0: entered promiscuous mode [ 79.760739][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.768128][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.775297][ T5770] bridge_slave_0: entered allmulticast mode [ 79.782939][ T5770] bridge_slave_0: entered promiscuous mode [ 79.813235][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.820426][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.827770][ T5771] bridge_slave_1: entered allmulticast mode [ 79.834676][ T5771] bridge_slave_1: entered promiscuous mode [ 79.842218][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.849403][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.856634][ T5770] bridge_slave_1: entered allmulticast mode [ 79.863569][ T5770] bridge_slave_1: entered promiscuous mode [ 79.961870][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.973466][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.986907][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.996511][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.003733][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.013044][ T5769] bridge_slave_0: entered allmulticast mode [ 80.020557][ T5769] bridge_slave_0: entered promiscuous mode [ 80.034068][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.079445][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.087561][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.094739][ T5769] bridge_slave_1: entered allmulticast mode [ 80.102885][ T5769] bridge_slave_1: entered promiscuous mode [ 80.137721][ T5771] team0: Port device team_slave_0 added [ 80.147131][ T5770] team0: Port device team_slave_0 added [ 80.178560][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.185889][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.193240][ T5768] bridge_slave_0: entered allmulticast mode [ 80.200758][ T5768] bridge_slave_0: entered promiscuous mode [ 80.210347][ T5771] team0: Port device team_slave_1 added [ 80.230606][ T5770] team0: Port device team_slave_1 added [ 80.261823][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.269412][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.277171][ T5768] bridge_slave_1: entered allmulticast mode [ 80.284117][ T5768] bridge_slave_1: entered promiscuous mode [ 80.316269][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.340581][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.347695][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.373985][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.387911][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.394880][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.421124][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.432995][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.440076][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.466385][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.479275][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.486342][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.512874][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.526224][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.578049][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.590382][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.681064][ T5769] team0: Port device team_slave_0 added [ 80.689839][ T5769] team0: Port device team_slave_1 added [ 80.710487][ T5768] team0: Port device team_slave_0 added [ 80.733464][ T5771] hsr_slave_0: entered promiscuous mode [ 80.740419][ T5771] hsr_slave_1: entered promiscuous mode [ 80.761817][ T5768] team0: Port device team_slave_1 added [ 80.785247][ T5770] hsr_slave_0: entered promiscuous mode [ 80.791739][ T5770] hsr_slave_1: entered promiscuous mode [ 80.800873][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.809170][ T5770] Cannot create hsr debugfs directory [ 80.869451][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.876746][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.903151][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.915199][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.922343][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.948494][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.961783][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.968882][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.995931][ T5779] Bluetooth: hci3: command tx timeout [ 81.001681][ T5779] Bluetooth: hci2: command tx timeout [ 81.007437][ T50] Bluetooth: hci0: command tx timeout [ 81.007464][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.013075][ T50] Bluetooth: hci1: command tx timeout [ 81.046607][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.053591][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.079659][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.200035][ T5768] hsr_slave_0: entered promiscuous mode [ 81.206508][ T5768] hsr_slave_1: entered promiscuous mode [ 81.212719][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.220404][ T5768] Cannot create hsr debugfs directory [ 81.254129][ T5769] hsr_slave_0: entered promiscuous mode [ 81.261133][ T5769] hsr_slave_1: entered promiscuous mode [ 81.267477][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.275040][ T5769] Cannot create hsr debugfs directory [ 81.612010][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.624744][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.637815][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.648674][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.717438][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.732676][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.744255][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.772977][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.821701][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.839331][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.850749][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.863578][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.064175][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.099932][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.117199][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.150015][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.173092][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.220397][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.265077][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.272411][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.308437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.315653][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.352710][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.374594][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.454341][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.478898][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.516430][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.523606][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.560201][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.567487][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.578287][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.585665][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.648380][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.655634][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.725197][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.739639][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.824166][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.884238][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.891486][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.967588][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.974781][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.997550][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.061062][ T5784] Bluetooth: hci2: command tx timeout [ 83.067695][ T5779] Bluetooth: hci0: command tx timeout [ 83.068591][ T5776] Bluetooth: hci3: command tx timeout [ 83.073267][ T50] Bluetooth: hci1: command tx timeout [ 83.093122][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.230735][ T5770] veth0_vlan: entered promiscuous mode [ 83.282306][ T5770] veth1_vlan: entered promiscuous mode [ 83.363362][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.396078][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.413813][ T5770] veth0_macvtap: entered promiscuous mode [ 83.424705][ T5770] veth1_macvtap: entered promiscuous mode [ 83.450690][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.488847][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.502721][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.549615][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.559116][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.570800][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.580185][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.609238][ T5771] veth0_vlan: entered promiscuous mode [ 83.674995][ T5771] veth1_vlan: entered promiscuous mode [ 83.702488][ T5769] veth0_vlan: entered promiscuous mode [ 83.724543][ T5768] veth0_vlan: entered promiscuous mode [ 83.739527][ T5769] veth1_vlan: entered promiscuous mode [ 83.787838][ T5768] veth1_vlan: entered promiscuous mode [ 83.854799][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.874590][ T5771] veth0_macvtap: entered promiscuous mode [ 83.884602][ T5771] veth1_macvtap: entered promiscuous mode [ 83.891181][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.944529][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.955826][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.969890][ T5769] veth0_macvtap: entered promiscuous mode [ 83.992353][ T5768] veth0_macvtap: entered promiscuous mode [ 84.020984][ T5769] veth1_macvtap: entered promiscuous mode [ 84.062078][ T5768] veth1_macvtap: entered promiscuous mode [ 84.069507][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.081183][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.094826][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.112495][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.123204][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.137994][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.189416][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.229825][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.239693][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.253687][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.284070][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.299427][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.311035][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.322494][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.344475][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.380797][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.394395][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.409863][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.442235][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.455391][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.481448][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.494694][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.507569][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.518399][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.528655][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.541581][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.553992][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.573670][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.593767][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.612470][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.621291][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.659952][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.671093][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.681800][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.692413][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.702434][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.715833][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.727520][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.782043][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.791154][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.800067][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.809177][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959105][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.978563][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.009046][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.021440][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.054426][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.067081][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.137089][ T5776] Bluetooth: hci1: command tx timeout [ 85.137106][ T5784] Bluetooth: hci2: command tx timeout [ 85.142532][ T5776] Bluetooth: hci0: command tx timeout [ 85.153535][ T50] Bluetooth: hci3: command tx timeout [ 85.160978][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.180898][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.212964][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.224890][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.276821][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.284699][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.339113][ T5850] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4'. [ 85.835410][ T5868] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15'. [ 86.623578][ T5887] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.24'. [ 87.148905][ T5908] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33'. [ 87.217197][ T5776] Bluetooth: hci0: command tx timeout [ 87.222705][ T5776] Bluetooth: hci2: command tx timeout [ 87.225165][ T5784] Bluetooth: hci1: command tx timeout [ 87.228155][ T50] Bluetooth: hci3: command tx timeout [ 88.001379][ T5931] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.42'. [ 88.141668][ C1] hrtimer: interrupt took 69629 ns [ 88.611616][ T5952] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.53'. [ 89.168991][ T5973] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.63'. [ 89.710179][ T5993] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.73'. [ 90.001297][ T6007] netlink: 'syz.1.79': attribute type 16 has an invalid length. [ 90.010005][ T6007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.79'. [ 91.762842][ T6082] Zero length message leads to an empty skb [ 92.002865][ T5784] Bluetooth: hci2: Malformed LE Event: 0x0b [ 92.120408][ T9] cfg80211: failed to load regulatory.db [ 92.276712][ T6101] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.123'. [ 92.504400][ T5784] Bluetooth: hci2: Malformed LE Event: 0x0b [ 93.249236][ T6139] netlink: 703 bytes leftover after parsing attributes in process `syz.0.141'. [ 93.312421][ T5784] Bluetooth: hci1: Malformed LE Event: 0x0b [ 93.847339][ T5784] Bluetooth: hci2: Malformed LE Event: 0x0b [ 94.540724][ T5784] Bluetooth: hci2: Malformed LE Event: 0x0b [ 98.858000][ T5784] Bluetooth: hci1: Malformed LE Event: 0x0b [ 99.307148][ T6364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.536372][ T5784] Bluetooth: hci1: Malformed LE Event: 0x0b [ 100.732000][ T6422] netlink: 'syz.2.277': attribute type 21 has an invalid length. [ 100.745944][ T6422] netlink: 164 bytes leftover after parsing attributes in process `syz.2.277'. [ 101.280876][ T6444] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 101.289491][ T6444] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 101.302040][ T6444] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 101.311022][ T6444] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 101.320583][ T6444] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 103.129109][ T5784] Bluetooth: hci0: Unknown advertising packet type: 0x70 [ 103.129207][ T5784] Bluetooth: hci0: adv larger than maximum supported [ 103.137168][ T5784] Bluetooth: hci0: Malformed LE Event: 0x0d [ 104.480698][ T6576] netlink: 'syz.0.354': attribute type 29 has an invalid length. [ 104.494258][ T6576] netlink: 'syz.0.354': attribute type 29 has an invalid length. [ 104.518570][ T6576] netlink: 'syz.0.354': attribute type 29 has an invalid length. [ 104.528183][ T6576] netlink: 'syz.0.354': attribute type 29 has an invalid length. [ 104.546673][ T6581] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.355'. [ 104.560502][ T6581] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.355'. [ 104.578912][ T6578] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.355'. [ 104.591572][ T6581] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.355'. [ 104.814820][ T5784] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 105.129414][ T6595] warning: `syz.1.363' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.862486][ T5784] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 106.292219][ T6626] validate_nla: 2 callbacks suppressed [ 106.292256][ T6626] netlink: 'syz.1.377': attribute type 21 has an invalid length. [ 106.381477][ T6626] netlink: 164 bytes leftover after parsing attributes in process `syz.1.377'. [ 106.470074][ T5784] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 106.916687][ T6641] netlink: 'syz.2.385': attribute type 4 has an invalid length. [ 106.929639][ T6641] netlink: 112 bytes leftover after parsing attributes in process `syz.2.385'. [ 108.262075][ T6676] netlink: 'syz.3.401': attribute type 10 has an invalid length. [ 108.292134][ T6676] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 108.938233][ T6697] syz.2.411 uses obsolete (PF_INET,SOCK_PACKET) [ 110.714478][ T6753] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 110.724407][ T6753] netlink: 55 bytes leftover after parsing attributes in process `syz.2.438'. [ 111.126068][ T6764] netlink: 'syz.1.442': attribute type 10 has an invalid length. [ 111.143852][ T6764] team0: Device ipvlan1 failed to register rx_handler [ 111.289130][ T6769] netlink: 64 bytes leftover after parsing attributes in process `syz.3.445'. [ 111.408053][ T6773] netlink: 'syz.2.447': attribute type 29 has an invalid length. [ 111.452282][ T6773] netlink: 'syz.2.447': attribute type 29 has an invalid length. [ 111.922861][ T6797] netlink: 'syz.2.458': attribute type 29 has an invalid length. [ 111.954544][ T6797] netlink: 'syz.2.458': attribute type 29 has an invalid length. [ 112.080422][ T6802] netlink: 'syz.1.460': attribute type 29 has an invalid length. [ 112.108831][ T6802] netlink: 'syz.1.460': attribute type 29 has an invalid length. [ 112.341558][ T6804] syzkaller0: entered promiscuous mode [ 112.370696][ T6804] syzkaller0: entered allmulticast mode [ 112.992006][ T6825] netlink: 'syz.3.469': attribute type 29 has an invalid length. [ 113.325970][ T6835] netlink: 'syz.0.472': attribute type 29 has an invalid length. [ 114.253614][ T6825] netlink: 'syz.3.469': attribute type 29 has an invalid length. [ 114.262844][ T6828] netlink: 10 bytes leftover after parsing attributes in process `syz.1.470'. [ 114.286735][ T6835] netlink: 'syz.0.472': attribute type 29 has an invalid length. [ 114.586846][ T6846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.477'. [ 115.477074][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 116.338306][ T5784] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 116.910285][ T6932] validate_nla: 18 callbacks suppressed [ 116.910302][ T6932] netlink: 'syz.1.514': attribute type 29 has an invalid length. [ 116.935034][ T6932] netlink: 'syz.1.514': attribute type 29 has an invalid length. [ 116.945283][ T6932] netlink: 'syz.1.514': attribute type 29 has an invalid length. [ 118.647412][ T6961] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.654106][ T6961] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.388771][ T6988] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.540'. [ 119.419472][ T6988] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.540'. [ 119.446916][ T6988] tc_dump_action: action bad kind [ 120.142552][ T7019] netlink: 'syz.3.553': attribute type 12 has an invalid length. [ 120.151054][ T7019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.553'. [ 120.993977][ T7045] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.565'. [ 122.029393][ T7078] netlink: 'syz.0.580': attribute type 46 has an invalid length. [ 122.186920][ T7083] netlink: 539 bytes leftover after parsing attributes in process `syz.1.581'. [ 122.285037][ T7087] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 122.554646][ T7099] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.590'. [ 122.993125][ T7113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.595'. [ 127.594090][ T7191] netlink: 60 bytes leftover after parsing attributes in process `syz.2.627'. [ 127.618250][ T7191] netlink: 60 bytes leftover after parsing attributes in process `syz.2.627'. [ 127.649410][ T7187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.627'. [ 127.663480][ T7193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.627'. [ 128.266023][ T7208] sit0: entered allmulticast mode [ 128.335962][ T7213] sit0: entered promiscuous mode [ 128.657883][ T7227] netlink: 140 bytes leftover after parsing attributes in process `syz.0.644'. [ 128.893027][ T7236] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.646'. [ 129.660184][ T7272] netlink: 'syz.2.666': attribute type 2 has an invalid length. [ 129.670805][ T7272] netlink: 17259 bytes leftover after parsing attributes in process `syz.2.666'. [ 130.070183][ T5784] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 130.554884][ T7311] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 130.596514][ T7313] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.685'. [ 131.399167][ T5784] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 132.206765][ T7394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.723'. [ 132.235928][ T7394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.723'. [ 132.645504][ T7414] __nla_validate_parse: 1 callbacks suppressed [ 132.645520][ T7414] netlink: 703 bytes leftover after parsing attributes in process `syz.0.732'. [ 132.896277][ T7423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.735'. [ 132.974779][ T7425] netlink: 160 bytes leftover after parsing attributes in process `syz.0.736'. [ 133.076176][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.086067][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.107453][ T7431] netlink: 'syz.2.739': attribute type 4 has an invalid length. [ 133.137825][ T12] wlan1: Trigger new scan to find an IBSS to join [ 133.426344][ T7442] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 133.434188][ T7442] netlink: 152 bytes leftover after parsing attributes in process `syz.2.745'. [ 133.477352][ T7442] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 133.689472][ T7452] netlink: 'syz.3.749': attribute type 8 has an invalid length. [ 133.698551][ T7452] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.749'. [ 133.943307][ T7463] netlink: 'syz.2.755': attribute type 29 has an invalid length. [ 133.963085][ T7463] netlink: 'syz.2.755': attribute type 29 has an invalid length. [ 134.017130][ T7466] netlink: 'syz.2.755': attribute type 29 has an invalid length. [ 134.036334][ T7467] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.756'. [ 134.046668][ T7463] netlink: 'syz.2.755': attribute type 29 has an invalid length. [ 134.076015][ T7463] netlink: 'syz.2.755': attribute type 29 has an invalid length. [ 134.317603][ T7481] Illegal XDP return value 4294967294 on prog (id 232) dev N/A, expect packet loss! [ 134.617042][ T7494] netlink: 'syz.3.769': attribute type 33 has an invalid length. [ 134.625499][ T7494] netlink: 152 bytes leftover after parsing attributes in process `syz.3.769'. [ 135.975193][ T7563] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.801'. [ 136.022643][ T7563] netlink: 'syz.2.801': attribute type 10 has an invalid length. [ 136.112481][ T7563] team0: Port device wlan1 added [ 136.132754][ T7569] netlink: 'syz.1.805': attribute type 29 has an invalid length. [ 136.141315][ T7569] netlink: 'syz.1.805': attribute type 29 has an invalid length. [ 136.155313][ T7569] netlink: 'syz.1.805': attribute type 29 has an invalid length. [ 136.174120][ T7569] netlink: 'syz.1.805': attribute type 29 has an invalid length. [ 136.182065][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 136.197470][ T7569] netlink: 'syz.1.805': attribute type 29 has an invalid length. [ 138.064499][ T7641] syz.0.841[7641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.064656][ T7641] syz.0.841[7641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.105738][ T59] wlan1: Trigger new scan to find an IBSS to join [ 138.130107][ T7643] netlink: 'syz.1.840': attribute type 21 has an invalid length. [ 138.141091][ T7643] netlink: 164 bytes leftover after parsing attributes in process `syz.1.840'. [ 139.031189][ T7689] netlink: 'syz.1.864': attribute type 21 has an invalid length. [ 139.040898][ T7689] netlink: 156 bytes leftover after parsing attributes in process `syz.1.864'. [ 139.052654][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 139.081109][ T59] wlan1: Creating new IBSS network, BSSID b6:0d:8d:23:ad:22 [ 141.076692][ T7785] tun0: tun_chr_ioctl cmd 1074025677 [ 141.082181][ T7785] tun0: linktype set to 5 [ 141.554748][ T5784] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 141.869752][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.0.927'. [ 142.103192][ T59] wlan1: Trigger new scan to find an IBSS to join [ 142.787378][ T7846] netlink: 'syz.1.940': attribute type 21 has an invalid length. [ 142.795266][ T7846] netlink: 128 bytes leftover after parsing attributes in process `syz.1.940'. [ 142.814326][ T7846] netlink: 'syz.1.940': attribute type 5 has an invalid length. [ 142.846801][ T7850] netlink: 'syz.1.940': attribute type 3 has an invalid length. [ 142.885617][ T7846] netlink: 'syz.1.940': attribute type 6 has an invalid length. [ 142.893667][ T7846] netlink: 3 bytes leftover after parsing attributes in process `syz.1.940'. [ 142.912268][ T7850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.940'. [ 143.097346][ T7856] pim6reg1: entered allmulticast mode [ 143.708142][ T7873] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 144.103785][ T7873] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 144.137807][ T7874] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 145.016389][ T7900] netlink: 152 bytes leftover after parsing attributes in process `syz.3.960'. [ 145.056688][ T7900] netlink: 6 bytes leftover after parsing attributes in process `syz.3.960'. [ 145.810352][ T7930] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 145.817395][ T7930] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.031999][ T7934] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.975'. [ 147.082144][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 147.138506][ T1081] wlan1: Trigger new scan to find an IBSS to join [ 148.096151][ T1081] wlan1: Creating new IBSS network, BSSID ca:09:62:de:8c:02 [ 148.352420][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 149.279754][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 149.793079][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 150.453401][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 151.224160][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 151.739669][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 152.852565][ T8189] netlink: 'syz.0.1096': attribute type 16 has an invalid length. [ 152.881625][ T8189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1096'. [ 153.655420][ T8225] netlink: 'syz.3.1113': attribute type 16 has an invalid length. [ 153.670524][ T8225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1113'. [ 154.683679][ T8275] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1141'. [ 155.228123][ T8301] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1153'. [ 155.698855][ T8316] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1158'. [ 156.063095][ T8334] netlink: 'syz.3.1168': attribute type 16 has an invalid length. [ 156.094952][ T8334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1168'. [ 156.266229][ T8341] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1171'. [ 156.611047][ T8351] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1173'. [ 157.155340][ T8375] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1184'. [ 157.392426][ T8386] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1189'. [ 158.086515][ T8414] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1203'. [ 158.247362][ T8421] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1207'. [ 158.913565][ T8452] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1219'. [ 159.429461][ T8471] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1229'. [ 160.986356][ T8552] __nla_validate_parse: 3 callbacks suppressed [ 160.986374][ T8552] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1268'. [ 161.697153][ T8585] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1284'. [ 162.057795][ T8599] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1290'. [ 162.103929][ T8604] netlink: 'syz.1.1294': attribute type 21 has an invalid length. [ 162.112463][ T8604] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1294'. [ 162.277816][ T8614] netlink: 'syz.2.1298': attribute type 29 has an invalid length. [ 162.286631][ T8614] netlink: 'syz.2.1298': attribute type 29 has an invalid length. [ 162.311784][ T8614] netlink: 'syz.2.1298': attribute type 29 has an invalid length. [ 162.342058][ T8614] netlink: 'syz.2.1298': attribute type 29 has an invalid length. [ 162.362067][ T8614] netlink: 'syz.2.1298': attribute type 29 has an invalid length. [ 162.392494][ T8616] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1299'. [ 162.590031][ T8625] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1303'. [ 162.964983][ T8643] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1312'. [ 162.990253][ T8646] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1314'. [ 163.240079][ T8659] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1318'. [ 163.621686][ T8673] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1325'. [ 164.187044][ T5784] Bluetooth: hci1: Unknown advertising packet type: 0x70 [ 164.187109][ T5784] Bluetooth: hci1: adv larger than maximum supported [ 164.194457][ T5784] Bluetooth: hci1: Malformed LE Event: 0x0d [ 165.642443][ T8766] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 165.654129][ T8766] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 165.675921][ T8766] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 165.689156][ T8766] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 166.024022][ T8789] __nla_validate_parse: 8 callbacks suppressed [ 166.024037][ T8789] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1379'. [ 166.169591][ T8794] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1382'. [ 166.560012][ T8816] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1391'. [ 166.711364][ T8824] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1396'. [ 166.849361][ T8830] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1397'. [ 167.239602][ T8848] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1408'. [ 167.471301][ T8857] validate_nla: 4 callbacks suppressed [ 167.471318][ T8857] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 167.511166][ T8857] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 167.663293][ T8865] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1415'. [ 167.881078][ T8877] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1420'. [ 168.097628][ T1328] wlan1: Trigger new scan to find an IBSS to join [ 168.608676][ T8908] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1436'. [ 168.933583][ T8924] netlink: 'syz.1.1452': attribute type 10 has an invalid length. [ 168.942346][ T8924] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1452'. [ 169.568866][ T8950] netlink: 'syz.2.1455': attribute type 10 has an invalid length. [ 169.597845][ T8950] team0: Device ipvlan1 failed to register rx_handler [ 171.138485][ T1081] wlan1: Trigger new scan to find an IBSS to join [ 171.364920][ T9021] __nla_validate_parse: 7 callbacks suppressed [ 171.364938][ T9021] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1486'. [ 171.445805][ T9016] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1483'. [ 171.746685][ T9032] netlink: 'syz.3.1491': attribute type 21 has an invalid length. [ 171.777425][ T9031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1490'. [ 171.972229][ T9045] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1498'. [ 172.116461][ T9050] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1500'. [ 172.491853][ T9069] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1510'. [ 172.987412][ T5784] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 173.038364][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 173.154994][ T9096] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1522'. [ 173.613823][ T9111] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1528'. [ 173.764791][ T9116] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1531'. [ 174.099801][ T1081] wlan1: Creating new IBSS network, BSSID 00:00:00:00:a8:6c [ 174.724370][ T9140] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 174.730883][ T9140] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 175.056231][ T9158] tc_dump_action: action bad kind [ 175.695812][ T9187] netlink: 'syz.1.1563': attribute type 12 has an invalid length. [ 176.599740][ T9222] __nla_validate_parse: 10 callbacks suppressed [ 176.599758][ T9222] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1582'. [ 176.822584][ T9232] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1584'. [ 177.240047][ T9252] netlink: 'syz.2.1592': attribute type 46 has an invalid length. [ 177.262878][ T9254] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1593'. [ 177.508552][ T9261] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1597'. [ 177.563089][ T9264] netlink: 539 bytes leftover after parsing attributes in process `syz.2.1596'. [ 177.735176][ T9271] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1602'. [ 177.999088][ T9280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1606'. [ 178.409956][ T9293] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1611'. [ 178.456078][ T9294] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1613'. [ 178.603313][ T9302] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1616'. [ 181.757078][ T9393] __nla_validate_parse: 11 callbacks suppressed [ 181.757097][ T9393] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1654'. [ 181.837667][ T9394] sit0: entered allmulticast mode [ 181.901960][ T9396] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1655'. [ 181.952662][ T9394] sit0: entered promiscuous mode [ 182.197960][ T9405] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1657'. [ 182.227248][ T9409] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1662'. [ 182.516353][ T9420] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1667'. [ 182.603885][ T9426] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1671'. [ 183.129747][ T9447] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1680'. [ 183.331198][ T9455] netlink: 'syz.1.1684': attribute type 2 has an invalid length. [ 183.351014][ T9455] netlink: 17259 bytes leftover after parsing attributes in process `syz.1.1684'. [ 183.544125][ T5784] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 183.757892][ T9472] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1692'. [ 183.799881][ T9474] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1693'. [ 184.876029][ T9521] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 185.079721][ T5784] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 187.057075][ T1081] wlan1: Trigger new scan to find an IBSS to join [ 187.468498][ T9593] __nla_validate_parse: 8 callbacks suppressed [ 187.468515][ T9593] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1744'. [ 187.679368][ T9601] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1752'. [ 187.760279][ T9603] netlink: 'syz.1.1751': attribute type 4 has an invalid length. [ 187.889889][ T9608] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1754'. [ 188.015144][ T9614] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1757'. [ 188.153524][ T9616] netlink: 'syz.0.1758': attribute type 4 has an invalid length. [ 188.163047][ T9616] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1758'. [ 188.193880][ T9616] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 188.282252][ T9622] netlink: 'syz.1.1761': attribute type 8 has an invalid length. [ 188.285346][ T9624] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1762'. [ 188.290554][ T9622] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1761'. [ 188.435228][ T9630] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1765'. [ 188.570900][ T9632] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1766'. [ 188.616989][ T9638] netlink: 'syz.3.1767': attribute type 29 has an invalid length. [ 188.635452][ T9638] netlink: 'syz.3.1767': attribute type 29 has an invalid length. [ 188.670603][ T9638] netlink: 'syz.3.1767': attribute type 29 has an invalid length. [ 188.681317][ T9638] netlink: 'syz.3.1767': attribute type 29 has an invalid length. [ 188.694910][ T9638] netlink: 'syz.3.1767': attribute type 29 has an invalid length. [ 188.931873][ T9648] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1774'. [ 189.178471][ T9661] netlink: 'syz.2.1780': attribute type 33 has an invalid length. [ 189.697361][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 191.071591][ T9738] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 191.145457][ T9738] team0: Port device wlan1 added [ 191.325224][ T9746] netlink: 'syz.0.1818': attribute type 29 has an invalid length. [ 191.355910][ T9746] netlink: 'syz.0.1818': attribute type 29 has an invalid length. [ 191.384898][ T9753] netlink: 'syz.0.1818': attribute type 29 has an invalid length. [ 192.106163][ T1081] wlan1: Trigger new scan to find an IBSS to join [ 192.585046][ T9805] __nla_validate_parse: 18 callbacks suppressed [ 192.585064][ T9805] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1857'. [ 192.859555][ T9815] netlink: 735 bytes leftover after parsing attributes in process `syz.0.1853'. [ 192.968503][ T9818] syz.3.1854[9818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.968641][ T9818] syz.3.1854[9818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.077035][ T11] wlan1: Creating new IBSS network, BSSID 6e:ee:fe:12:c4:56 [ 193.228971][ T9831] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1862'. [ 193.478727][ T9841] netlink: 735 bytes leftover after parsing attributes in process `syz.1.1867'. [ 193.826102][ T9854] validate_nla: 2 callbacks suppressed [ 193.826118][ T9854] netlink: 'syz.3.1875': attribute type 21 has an invalid length. [ 193.874610][ T9854] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1875'. [ 193.887882][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 194.263877][ T9873] netlink: 735 bytes leftover after parsing attributes in process `syz.0.1883'. [ 194.515904][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.524056][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.942026][ T9895] netlink: 735 bytes leftover after parsing attributes in process `syz.3.1892'. [ 195.716994][ T9926] netlink: 735 bytes leftover after parsing attributes in process `syz.2.1906'. [ 196.346265][ T9958] netlink: 735 bytes leftover after parsing attributes in process `syz.0.1922'. [ 197.136710][ T1081] wlan1: Trigger new scan to find an IBSS to join [ 198.255006][T10010] __nla_validate_parse: 1 callbacks suppressed [ 198.255024][T10010] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1945'. [ 198.282575][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1941'. [ 198.999126][T10027] netlink: 'syz.0.1953': attribute type 21 has an invalid length. [ 199.020878][T10027] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1953'. [ 199.061046][T10027] netlink: 'syz.0.1953': attribute type 5 has an invalid length. [ 199.099092][T10030] netlink: 'syz.0.1953': attribute type 3 has an invalid length. [ 199.104091][T10027] netlink: 'syz.0.1953': attribute type 6 has an invalid length. [ 199.138724][T10030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1953'. [ 199.155280][T10027] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1953'. [ 199.209395][T10033] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1956'. [ 200.683264][T10077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1974'. [ 200.745810][T10077] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1974'. [ 200.776368][T10074] pim6reg1: entered allmulticast mode [ 201.055852][ T1081] wlan1: Trigger new scan to find an IBSS to join [ 201.507378][T10109] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.514685][T10109] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.696602][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 201.703041][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 201.842081][T10119] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1989'. [ 202.000677][ T1081] wlan1: Creating new IBSS network, BSSID a6:cd:2f:82:5a:0e [ 202.167279][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 203.955606][T10213] netlink: 'syz.3.2035': attribute type 12 has an invalid length. [ 204.018667][T10213] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2035'. [ 204.794682][T10248] netlink: 'syz.1.2050': attribute type 12 has an invalid length. [ 204.820784][T10248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2050'. [ 205.704169][T10273] netlink: 'syz.2.2063': attribute type 12 has an invalid length. [ 205.763228][T10273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2063'. [ 206.623872][T10302] netlink: 'syz.3.2076': attribute type 12 has an invalid length. [ 206.642100][T10302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2076'. [ 207.305635][T10322] netlink: 'syz.3.2086': attribute type 12 has an invalid length. [ 207.313654][T10322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2086'. [ 208.201777][T10348] netlink: 'syz.3.2098': attribute type 12 has an invalid length. [ 208.229365][T10348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2098'. [ 216.820273][T10680] netlink: 'syz.0.2248': attribute type 21 has an invalid length. [ 216.828806][T10680] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2248'. [ 219.668523][T10785] netlink: 'syz.1.2294': attribute type 29 has an invalid length. [ 219.685055][T10785] netlink: 'syz.1.2294': attribute type 29 has an invalid length. [ 219.700315][T10785] netlink: 'syz.1.2294': attribute type 29 has an invalid length. [ 219.711485][T10785] netlink: 'syz.1.2294': attribute type 29 has an invalid length. [ 219.721200][T10785] netlink: 'syz.1.2294': attribute type 29 has an invalid length. [ 220.359765][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.368678][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.377285][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.385749][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.394176][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.402806][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.625075][ T1328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.770250][ T1328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.858926][T10802] chnl_net:caif_netlink_parms(): no params data found [ 220.931309][ T1328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.023540][ T1328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.219871][T10802] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.234955][T10802] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.243264][T10802] bridge_slave_0: entered allmulticast mode [ 221.252526][T10802] bridge_slave_0: entered promiscuous mode [ 221.262303][T10802] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.269893][T10802] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.277836][T10802] bridge_slave_1: entered allmulticast mode [ 221.285312][T10802] bridge_slave_1: entered promiscuous mode [ 221.357536][T10802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.371777][T10802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.473249][T10802] team0: Port device team_slave_0 added [ 221.505000][T10837] netlink: 'syz.0.2315': attribute type 29 has an invalid length. [ 221.530963][T10802] team0: Port device team_slave_1 added [ 221.551151][T10837] netlink: 'syz.0.2315': attribute type 29 has an invalid length. [ 221.582817][T10838] netlink: 'syz.0.2315': attribute type 29 has an invalid length. [ 221.594226][T10802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.603085][T10802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.631199][T10802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.643218][T10837] netlink: 'syz.0.2315': attribute type 29 has an invalid length. [ 221.658155][T10802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.665401][T10802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.709837][T10802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.875870][T10802] hsr_slave_0: entered promiscuous mode [ 221.882796][T10802] hsr_slave_1: entered promiscuous mode [ 221.892858][T10802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.905170][T10802] Cannot create hsr debugfs directory [ 222.387634][T10855] netlink: 'syz.0.2323': attribute type 29 has an invalid length. [ 222.450026][T10855] netlink: 'syz.0.2323': attribute type 29 has an invalid length. [ 222.497423][T10859] netlink: 'syz.0.2323': attribute type 29 has an invalid length. [ 222.506261][ T5784] Bluetooth: hci1: command tx timeout [ 222.944050][ T1328] [ 222.946455][ T1328] ====================================================== [ 222.953502][ T1328] WARNING: possible circular locking dependency detected [ 222.960563][ T1328] 6.6.93-syzkaller #0 Not tainted [ 222.965620][ T1328] ------------------------------------------------------ [ 222.972663][ T1328] kworker/u4:8/1328 is trying to acquire lock: [ 222.978928][ T1328] ffff88805ee2cd00 (team->team_lock_key#4){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 222.988672][ T1328] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 222.988672][ T1328] but task is already holding lock: [ 222.996073][ T1328] ffff888022498768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 223.006480][ T1328] [ 223.006480][ T1328] which lock already depends on the new lock. [ 223.006480][ T1328] [ 223.017077][ T1328] [ 223.017077][ T1328] the existing dependency chain (in reverse order) is: [ 223.026113][ T1328] [ 223.026113][ T1328] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 223.033887][ T1328] __mutex_lock+0x129/0xcc0 [ 223.038950][ T1328] ieee80211_open+0x144/0x200 [ 223.044179][ T1328] __dev_open+0x2bc/0x430 [ 223.049068][ T1328] dev_open+0xab/0x170 [ 223.053698][ T1328] team_add_slave+0xae7/0x2660 [ 223.059017][ T1328] do_setlink+0xe14/0x3fb0 [ 223.064340][ T1328] rtnl_newlink+0x175b/0x2020 [ 223.069635][ T1328] rtnetlink_rcv_msg+0x7c7/0xf10 [ 223.075156][ T1328] netlink_rcv_skb+0x216/0x480 [ 223.080670][ T1328] netlink_unicast+0x750/0x8c0 [ 223.086003][ T1328] netlink_sendmsg+0x8c1/0xbe0 [ 223.091339][ T1328] ____sys_sendmsg+0x5bf/0x950 [ 223.096762][ T1328] ___sys_sendmsg+0x220/0x290 [ 223.101997][ T1328] __se_sys_sendmsg+0x1a5/0x270 [ 223.107490][ T1328] do_syscall_64+0x55/0xb0 [ 223.112473][ T1328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.119024][ T1328] [ 223.119024][ T1328] -> #0 (team->team_lock_key#4){+.+.}-{3:3}: [ 223.127237][ T1328] __lock_acquire+0x2ddb/0x7c80 [ 223.132653][ T1328] lock_acquire+0x197/0x410 [ 223.137712][ T1328] __mutex_lock+0x129/0xcc0 [ 223.142777][ T1328] team_del_slave+0x32/0x1c0 [ 223.147926][ T1328] team_device_event+0x28d/0xa20 [ 223.153419][ T1328] notifier_call_chain+0x197/0x390 [ 223.159091][ T1328] unregister_netdevice_many_notify+0xf36/0x1810 [ 223.165969][ T1328] unregister_netdevice_queue+0x324/0x360 [ 223.172228][ T1328] _cfg80211_unregister_wdev+0x16b/0x580 [ 223.178407][ T1328] ieee80211_remove_interfaces+0x496/0x680 [ 223.184930][ T1328] ieee80211_unregister_hw+0x5d/0x2a0 [ 223.190934][ T1328] mac80211_hwsim_del_radio+0x274/0x450 [ 223.197018][ T1328] hwsim_exit_net+0x585/0x640 [ 223.202236][ T1328] cleanup_net+0x6f4/0xb90 [ 223.207193][ T1328] process_scheduled_works+0xa45/0x15b0 [ 223.213270][ T1328] worker_thread+0xa55/0xfc0 [ 223.218393][ T1328] kthread+0x2fa/0x390 [ 223.222989][ T1328] ret_from_fork+0x48/0x80 [ 223.227952][ T1328] ret_from_fork_asm+0x11/0x20 [ 223.233269][ T1328] [ 223.233269][ T1328] other info that might help us debug this: [ 223.233269][ T1328] [ 223.243516][ T1328] Possible unsafe locking scenario: [ 223.243516][ T1328] [ 223.250977][ T1328] CPU0 CPU1 [ 223.256344][ T1328] ---- ---- [ 223.261708][ T1328] lock(&rdev->wiphy.mtx); [ 223.266219][ T1328] lock(team->team_lock_key#4); [ 223.273696][ T1328] lock(&rdev->wiphy.mtx); [ 223.280897][ T1328] lock(team->team_lock_key#4); [ 223.285843][ T1328] [ 223.285843][ T1328] *** DEADLOCK *** [ 223.285843][ T1328] [ 223.293986][ T1328] 5 locks held by kworker/u4:8/1328: [ 223.299279][ T1328] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 223.310170][ T1328] #1: ffffc900049f7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 223.320709][ T1328] #2: ffffffff8dfa1c90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 223.330121][ T1328] #3: ffffffff8dfaea88 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 223.339975][ T1328] #4: ffff888022498768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 223.350772][ T1328] [ 223.350772][ T1328] stack backtrace: [ 223.356674][ T1328] CPU: 0 PID: 1328 Comm: kworker/u4:8 Not tainted 6.6.93-syzkaller #0 [ 223.364828][ T1328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.374890][ T1328] Workqueue: netns cleanup_net [ 223.379681][ T1328] Call Trace: [ 223.382968][ T1328] [ 223.385912][ T1328] dump_stack_lvl+0x16c/0x230 [ 223.390602][ T1328] ? load_image+0x3b0/0x3b0 [ 223.395112][ T1328] ? show_regs_print_info+0x20/0x20 [ 223.400330][ T1328] ? print_circular_bug+0x12b/0x1a0 [ 223.405539][ T1328] check_noncircular+0x2bd/0x3c0 [ 223.410491][ T1328] ? print_deadlock_bug+0x5d0/0x5d0 [ 223.415700][ T1328] ? lockdep_lock+0xe0/0x220 [ 223.420300][ T1328] ? _find_first_zero_bit+0xd3/0x100 [ 223.425595][ T1328] __lock_acquire+0x2ddb/0x7c80 [ 223.430463][ T1328] ? verify_lock_unused+0x140/0x140 [ 223.435673][ T1328] ? verify_lock_unused+0x140/0x140 [ 223.440894][ T1328] lock_acquire+0x197/0x410 [ 223.445406][ T1328] ? team_del_slave+0x32/0x1c0 [ 223.450382][ T1328] ? __might_sleep+0xe0/0xe0 [ 223.454983][ T1328] ? read_lock_is_recursive+0x20/0x20 [ 223.460364][ T1328] __mutex_lock+0x129/0xcc0 [ 223.464879][ T1328] ? team_del_slave+0x32/0x1c0 [ 223.469650][ T1328] ? __lock_acquire+0x7c80/0x7c80 [ 223.474690][ T1328] ? rcu_is_watching+0x15/0xb0 [ 223.479463][ T1328] ? trace_contention_end+0x39/0xe0 [ 223.484666][ T1328] ? __mutex_lock+0x304/0xcc0 [ 223.489354][ T1328] ? team_del_slave+0x32/0x1c0 [ 223.494122][ T1328] ? mutex_lock_nested+0x20/0x20 [ 223.499074][ T1328] ? bond_netdev_event+0xe1/0xef0 [ 223.504108][ T1328] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 223.509755][ T1328] ? bond_ipsec_offload_ok+0x410/0x410 [ 223.515224][ T1328] team_del_slave+0x32/0x1c0 [ 223.519827][ T1328] team_device_event+0x28d/0xa20 [ 223.524775][ T1328] notifier_call_chain+0x197/0x390 [ 223.529903][ T1328] unregister_netdevice_many_notify+0xf36/0x1810 [ 223.536238][ T1328] ? lock_chain_count+0x20/0x20 [ 223.541105][ T1328] ? unregister_netdevice_many+0x20/0x20 [ 223.546745][ T1328] ? kernfs_remove_by_name_ns+0x117/0x150 [ 223.552467][ T1328] ? __lock_acquire+0x7c80/0x7c80 [ 223.557504][ T1328] unregister_netdevice_queue+0x324/0x360 [ 223.563230][ T1328] ? list_netdevice+0x730/0x730 [ 223.568094][ T1328] ? kernfs_remove_by_name_ns+0x117/0x150 [ 223.573823][ T1328] _cfg80211_unregister_wdev+0x16b/0x580 [ 223.579462][ T1328] ieee80211_remove_interfaces+0x496/0x680 [ 223.585284][ T1328] ? ieee80211_do_stop+0x1db0/0x1db0 [ 223.590576][ T1328] ? rcu_is_watching+0x15/0xb0 [ 223.595351][ T1328] ieee80211_unregister_hw+0x5d/0x2a0 [ 223.600743][ T1328] mac80211_hwsim_del_radio+0x274/0x450 [ 223.606306][ T1328] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 223.611889][ T1328] hwsim_exit_net+0x585/0x640 [ 223.616579][ T1328] ? hwsim_init_net+0x90/0x90 [ 223.621272][ T1328] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 223.627089][ T1328] cleanup_net+0x6f4/0xb90 [ 223.631521][ T1328] ? ops_free_list+0x3b0/0x3b0 [ 223.636302][ T1328] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.641518][ T1328] ? process_scheduled_works+0x957/0x15b0 [ 223.647252][ T1328] ? process_scheduled_works+0x957/0x15b0 [ 223.653067][ T1328] process_scheduled_works+0xa45/0x15b0 [ 223.658632][ T1328] ? assign_work+0x400/0x400 [ 223.663233][ T1328] ? assign_work+0x39e/0x400 [ 223.667855][ T1328] worker_thread+0xa55/0xfc0 [ 223.672462][ T1328] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 223.678372][ T1328] ? _raw_spin_unlock+0x40/0x40 [ 223.683232][ T1328] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 223.689152][ T1328] kthread+0x2fa/0x390 [ 223.693224][ T1328] ? pr_cont_work+0x560/0x560 [ 223.697932][ T1328] ? kthread_blkcg+0xd0/0xd0 [ 223.702524][ T1328] ret_from_fork+0x48/0x80 [ 223.706947][ T1328] ? kthread_blkcg+0xd0/0xd0 [ 223.711539][ T1328] ret_from_fork_asm+0x11/0x20 [ 223.716321][ T1328] [ 223.788051][ T1328] team0: Port device wlan1 removed [ 224.346015][ T1328] hsr_slave_0: left promiscuous mode [ 224.390654][ T1328] hsr_slave_1: left promiscuous mode [ 224.420937][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.437346][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.472801][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.491023][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.512007][ T1328] bridge_slave_1: left allmulticast mode [ 224.526682][ T1328] bridge_slave_1: left promiscuous mode [ 224.532461][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.549029][ T1328] bridge_slave_0: left allmulticast mode [ 224.554719][ T1328] bridge_slave_0: left promiscuous mode [ 224.561289][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.574249][ T1328] veth1_macvtap: left promiscuous mode [ 224.580267][ T1328] veth0_macvtap: left promiscuous mode [ 224.586228][ T1328] veth1_vlan: left promiscuous mode [ 224.592056][ T1328] veth0_vlan: left promiscuous mode [ 224.833001][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 224.859213][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 224.885408][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.902465][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.991018][ T1328] bond0 (unregistering): Released all slaves [ 226.059813][ T1328] hsr_slave_0: left promiscuous mode [ 226.065813][ T1328] hsr_slave_1: left promiscuous mode [ 226.071901][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.079568][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.087422][ T1328] bridge_slave_1: left allmulticast mode [ 226.093087][ T1328] bridge_slave_1: left promiscuous mode [ 226.099503][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.107895][ T1328] bridge_slave_0: left allmulticast mode [ 226.113547][ T1328] bridge_slave_0: left promiscuous mode [ 226.119572][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.238271][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 226.261372][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 226.284571][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.312401][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.370484][ T1328] bond0 (unregistering): Released all slaves [ 230.345278][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.403211][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.470793][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.536123][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 230.544331][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.357719][ T12] hsr_slave_0: left promiscuous mode [ 231.364125][ T12] hsr_slave_1: left promiscuous mode [ 231.373799][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.385301][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.393127][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.400564][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.408266][ T12] bridge_slave_1: left allmulticast mode [ 231.413903][ T12] bridge_slave_1: left promiscuous mode [ 231.419817][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.428565][ T12] bridge_slave_0: left allmulticast mode [ 231.434211][ T12] bridge_slave_0: left promiscuous mode [ 231.440494][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.452087][ T12] veth1_macvtap: left promiscuous mode [ 231.457747][ T12] veth0_macvtap: left promiscuous mode [ 231.463408][ T12] veth1_vlan: left promiscuous mode [ 231.469108][ T12] veth0_vlan: left promiscuous mode [ 231.652417][ T12] team0 (unregistering): Port device team_slave_1 removed [ 231.674191][ T12] team0 (unregistering): Port device team_slave_0 removed [ 231.695627][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.719034][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.857919][ T12] bond0 (unregistering): Released all slaves [ 232.066851][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)