last executing test programs: 5.559872217s ago: executing program 3 (id=2863): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="3c00000033000b12d25a80648c2594f90124fc60100c034004000000002000119215a2281cf6b809f2db60490d20a735b16b6a4479b406db26a57b35", 0x3c}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_open_procfs$namespace(0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'netpci0\x00', 0x100}) write$cgroup_subtree(r2, 0x0, 0xfe33) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) 5.297785604s ago: executing program 3 (id=2866): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@fwd={0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f, 0x4f]}}, &(0x7f0000000080)=""/252, 0x54, 0xfc, 0x1}, 0x28) sendmsg$inet(r1, 0x0, 0x840) recvmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40010042) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.756765004s ago: executing program 3 (id=2875): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x24, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x40440c4) recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0) close(r4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875"], 0xfdef) 2.664303177s ago: executing program 2 (id=2876): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000001280)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.470261101s ago: executing program 1 (id=2877): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2.428799142s ago: executing program 0 (id=2878): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.371296464s ago: executing program 4 (id=2879): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xc, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008100000b70400000200000085000000820000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 2.272463866s ago: executing program 2 (id=2880): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xe, 0xb6, 0x6, 0x5, 0x0, 0xd, 0x140, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd, 0x4, @perf_config_ext={0x1000, 0x3}, 0x2000, 0x9, 0x9, 0x5, 0xb22b, 0x5, 0x1, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x20000000000, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r2) socket$kcm(0x10, 0x2, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0xb) 2.191287278s ago: executing program 1 (id=2881): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x82041, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$sock(0xffffffffffffffff, 0x0, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.190985898s ago: executing program 3 (id=2882): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.123393469s ago: executing program 0 (id=2883): socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[], 0xee8a) 1.997049082s ago: executing program 4 (id=2884): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0xe5b1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x7, 0x0, 0x2, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.859853396s ago: executing program 2 (id=2885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0x1], 0x0, 0x10, 0xffff}, 0x94) socketpair(0x1f, 0x1, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x9, 0x9, 0xfffff010}]}) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x87, 0x100000001}, 0x113041, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.781943147s ago: executing program 3 (id=2886): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@fwd={0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f, 0x4f]}}, &(0x7f0000000080)=""/252, 0x54, 0xfc, 0x1}, 0x28) sendmsg$inet(r1, 0x0, 0x840) recvmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40010042) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 1.741330518s ago: executing program 0 (id=2887): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600140000000012080004004317fd8a7a000000a80040000a0001", 0x3b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014ef030000120800040043000000a8001600a4000140", 0x38}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.722845459s ago: executing program 4 (id=2888): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20000000800}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x41) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) r4 = socket$kcm(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1.303637049s ago: executing program 2 (id=2889): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000e100000000b708000ff06900400000007b8af8ff6c4814b7736621814a46ab8e501ceb00000000bfa200000000000007020000f8ff000008000008b70400000000000085000000030000009500000000"], 0x0, 0x876, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.299223579s ago: executing program 1 (id=2899): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000ebffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r3}, 0x8) socket$kcm(0x10, 0x2, 0x0) 1.130478683s ago: executing program 0 (id=2890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x101040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xf8f1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x10, &(0x7f0000000040)=r3, 0x4) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 949.221987ms ago: executing program 1 (id=2891): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x24, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x40440c4) recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0) close(r4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875"], 0xfdef) 890.591499ms ago: executing program 4 (id=2892): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000001280)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 716.670503ms ago: executing program 2 (id=2893): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 393.343331ms ago: executing program 1 (id=2894): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000800), 0x0}, 0x20) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0xfffffffffffffe77) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r2], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0x22, 0x0, &(0x7f0000000940)='GPL\x00', 0xfffffff6, 0xde, &(0x7f0000000980)=""/222, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x2, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000e80), &(0x7f0000000ec0)=[{0x2, 0x3, 0x6, 0x8}, {0x1, 0x1, 0x10, 0x8}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xe}, {0x5, 0x4, 0x3}], 0x10, 0xf2db}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001840)="ad86a145498148c6d24a4b31a13ab223e49d32e20ea07f46ef06c9cfeaa442c41dfd76717df583363a6476a2d5ff653e7ac5bce54179dfda47afbe8cda4723db2504bbe33d417678405a7d2ca37f0b77a8c5962aa92f76d2d524debc4874e60bd1b13601450caded33", &(0x7f0000001900)="39ee1d0430207fcc52f59a93c35d94678d11249600b9f43509ae93aa19c81715675f7528489d448b564855b87c31eac37053c27ae338fb6f552e823f97cedf", 0x1ff, r0, 0x4}, 0x38) 392.170051ms ago: executing program 0 (id=2895): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xe, 0xb6, 0x6, 0x5, 0x0, 0xd, 0x140, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd, 0x4, @perf_config_ext={0x1000, 0x3}, 0x2000, 0x9, 0x9, 0x5, 0xb22b, 0x5, 0x1, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x20000000000, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r2) socket$kcm(0x10, 0x2, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0xb) 357.408481ms ago: executing program 4 (id=2896): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 310.165493ms ago: executing program 3 (id=2897): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8040) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000000c0)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000500000095000000000000009504a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) 241.892694ms ago: executing program 2 (id=2898): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 152.208977ms ago: executing program 0 (id=2900): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0xe5b1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x7, 0x0, 0x2, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 150.996097ms ago: executing program 1 (id=2910): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000001d00)={'wlan1\x00', @random='\x00\x00\b\x00'}) 0s ago: executing program 4 (id=2901): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) kernel console output (not intermixed with test programs): CHANGE): vlan1: link becomes ready [ 88.241638][ T4284] device veth0_vlan entered promiscuous mode [ 88.277453][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.302761][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.325003][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.334565][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.370002][ T4284] device veth1_vlan entered promiscuous mode [ 88.385623][ T4275] device veth1_vlan entered promiscuous mode [ 88.408543][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.438870][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.474813][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.482548][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.545745][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.560947][ T4275] device veth0_macvtap entered promiscuous mode [ 88.596996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.617641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.635650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.655017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.676102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.714740][ T4275] device veth1_macvtap entered promiscuous mode [ 88.762334][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.780205][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.812265][ T4284] device veth0_macvtap entered promiscuous mode [ 88.830323][ T4284] device veth1_macvtap entered promiscuous mode [ 88.846826][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.856022][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.868663][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.878397][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.888091][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.900768][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.921813][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.948258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.958959][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.988815][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.012769][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.030904][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.051728][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.079846][ T4281] device veth0_vlan entered promiscuous mode [ 89.101737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.118943][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.130009][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.150596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.175663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.193465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.211255][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.227538][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.241292][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.257031][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.270335][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.290167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.300833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.310692][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.329913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.343394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.353492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.367140][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.377587][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.387595][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.397847][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.414773][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.427604][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.438683][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.449230][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.462723][ T4281] device veth1_vlan entered promiscuous mode [ 89.530917][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.556511][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.574287][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.690924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.729893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.739889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.756404][ T4274] device veth0_vlan entered promiscuous mode [ 89.798491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.816286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.831122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.840603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.851954][ T4281] device veth0_macvtap entered promiscuous mode [ 89.897501][ T4281] device veth1_macvtap entered promiscuous mode [ 89.918477][ T4274] device veth1_vlan entered promiscuous mode [ 89.945993][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.984942][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.012340][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.029435][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.042785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.059965][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.080614][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.095197][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.115474][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.132333][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.170749][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.182368][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.195151][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 90.195169][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 90.195247][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 90.202214][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 90.220867][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 90.239972][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.252724][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.267229][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.284280][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.305018][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.316382][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.328109][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.341826][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.351596][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.377441][ T4274] device veth0_macvtap entered promiscuous mode [ 90.385739][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.398495][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.418861][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.427887][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.438369][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.449896][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.463819][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.479949][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.493818][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.509551][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.519935][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.540986][ T4274] device veth1_macvtap entered promiscuous mode [ 90.577665][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.595004][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.651761][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.667068][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.681065][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.692301][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.703310][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.714592][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.726982][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.735674][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.746329][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.754997][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.764380][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.773686][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.784952][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.817402][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.857564][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.884715][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.904400][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.922809][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.934094][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.949669][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.962775][ T4283] device veth0_vlan entered promiscuous mode [ 90.971931][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.986504][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.998040][ C1] hrtimer: interrupt took 66346 ns [ 91.003327][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.027572][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.071359][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.098234][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.111500][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.123635][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.208621][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.224664][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.415038][ T4283] device veth1_vlan entered promiscuous mode [ 91.444777][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.464951][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.522493][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.556133][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.609291][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.721801][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.752038][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.790091][ T4283] device veth0_macvtap entered promiscuous mode [ 91.839461][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.881887][ T4283] device veth1_macvtap entered promiscuous mode [ 91.897758][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.932079][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.962948][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.010480][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.042298][ T7] cfg80211: failed to load regulatory.db [ 92.051548][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.080037][ T4290] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 92.120145][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.148946][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.171810][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.190363][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.211119][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.225741][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.240348][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.251963][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.263391][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.279430][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.311810][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.333725][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.358957][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.377604][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.435560][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.484506][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.495839][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.514950][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.554203][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.572769][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.601014][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.654455][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.665364][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.685962][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.694904][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.705854][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.746098][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.770921][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.800755][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.869916][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.034922][ T4377] can: request_module (can-proto-0) failed. [ 93.279970][ T4382] device syzkaller0 entered promiscuous mode [ 93.484780][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.493238][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.026293][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.056134][ T4396] IPv6: pim6reg1: Disabled Multicast RS [ 96.155634][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.172388][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.189243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.748827][ T4290] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 100.351281][ T4461] device syzkaller0 entered promiscuous mode [ 104.859491][ T4513] device veth1_macvtap left promiscuous mode [ 105.440236][ T4523] netlink: 'syz.3.58': attribute type 21 has an invalid length. [ 105.484843][ T4523] netlink: 156 bytes leftover after parsing attributes in process `syz.3.58'. [ 105.820717][ T4578] netlink: 'syz.3.61': attribute type 21 has an invalid length. [ 106.111341][ T4573] netlink: 'syz.2.59': attribute type 39 has an invalid length. [ 108.712857][ T4644] bridge0: port 3(ip6gretap0) entered blocking state [ 108.722681][ T4644] bridge0: port 3(ip6gretap0) entered disabled state [ 108.743655][ T4644] device ip6gretap0 entered promiscuous mode [ 108.763022][ T4644] bridge0: port 3(ip6gretap0) entered blocking state [ 108.771740][ T4644] bridge0: port 3(ip6gretap0) entered forwarding state [ 108.803193][ T4646] netlink: 'syz.3.74': attribute type 39 has an invalid length. [ 111.078126][ T4689] device syzkaller0 entered promiscuous mode [ 111.135781][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 114.042201][ T4718] netlink: 'syz.0.99': attribute type 2 has an invalid length. [ 114.657309][ T4732] netlink: 'syz.4.104': attribute type 2 has an invalid length. [ 114.858070][ T4738] syz.2.105 uses obsolete (PF_INET,SOCK_PACKET) [ 115.024920][ T4736] delete_channel: no stack [ 115.569214][ T4290] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 115.829372][ T4757] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.110'. [ 115.871419][ T4758] device wlan1 entered promiscuous mode [ 120.540643][ T4290] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 122.239860][ T4841] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 122.258239][ T4841] netlink: 152 bytes leftover after parsing attributes in process `syz.1.144'. [ 122.278206][ T4841] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 123.848832][ T4876] netlink: 'syz.0.155': attribute type 4 has an invalid length. [ 123.891349][ T4876] netlink: 'syz.0.155': attribute type 26 has an invalid length. [ 123.957483][ T4876] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.155'. [ 124.187904][ T4881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.157'. [ 124.253035][ T4878] netlink: 'syz.1.156': attribute type 10 has an invalid length. [ 124.266805][ T4878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.156'. [ 124.314463][ T4878] device ipvlan1 entered promiscuous mode [ 124.569698][ T4878] bridge0: port 3(ipvlan1) entered blocking state [ 124.611309][ T4878] bridge0: port 3(ipvlan1) entered disabled state [ 124.821979][ T4878] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 126.510412][ T4878] syz.1.156 (4878) used greatest stack depth: 19232 bytes left [ 130.236889][ T4920] netlink: 132 bytes leftover after parsing attributes in process `syz.0.170'. [ 133.548404][ T4943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'. [ 133.728699][ T4290] Bluetooth: hci2: Malformed LE Event: 0x0d [ 133.819983][ T4945] device syzkaller0 entered promiscuous mode [ 134.936295][ T4971] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.190'. [ 136.617795][ T27] audit: type=1800 audit(1786647706.313:2): pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.190" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 136.618602][ T4971] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 136.729767][ T4971] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 136.754424][ T4971] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 137.424093][ T4290] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 138.118381][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.134262][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.779933][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 140.800762][ T4290] Bluetooth: hci3: Unknown advertising packet type: 0x8100 [ 140.800831][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d [ 140.821960][ T5042] netlink: 'syz.1.217': attribute type 2 has an invalid length. [ 140.830373][ T5042] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.217'. [ 140.852023][ T5042] tipc: Started in network mode [ 140.858308][ T5042] tipc: Node identity 9215a268, cluster identity 4711 [ 140.866665][ T5042] tipc: Node number set to 2450891368 [ 142.176061][ T5070] device veth1_macvtap left promiscuous mode [ 142.286435][ T5071] netlink: 'syz.2.227': attribute type 4 has an invalid length. [ 142.295710][ T5072] device veth1_macvtap entered promiscuous mode [ 142.339343][ T5072] device macsec0 entered promiscuous mode [ 142.346336][ T5071] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.227'. [ 142.560812][ T5069] device syzkaller0 entered promiscuous mode [ 142.733109][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.931628][ T5066] syz.2.227 (5066) used greatest stack depth: 15552 bytes left [ 143.365089][ T4290] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 147.048273][ T5085] netlink: 'syz.4.232': attribute type 9 has an invalid length. [ 147.064827][ T5085] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.232'. [ 147.094063][ T5098] ¥: port 1(syz_tun) entered blocking state [ 147.100653][ T5098] ¥: port 1(syz_tun) entered disabled state [ 147.136512][ T5098] device syz_tun entered promiscuous mode [ 147.418865][ T4290] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 147.477823][ T5113] Zero length message leads to an empty skb [ 147.517438][ T5114] netlink: 6 bytes leftover after parsing attributes in process `syz.3.239'. [ 147.854074][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 147.900356][ T5114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.965262][ T4290] Bluetooth: hci4: unexpected event 0x48 length: 15 > 3 [ 147.965302][ T4290] Bluetooth: hci4: wrong event for mode 0 [ 148.001784][ T5120] netlink: 'syz.1.244': attribute type 15 has an invalid length. [ 148.309972][ T5130] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.247'. [ 148.795039][ T4290] Bluetooth: hci3: Unknown advertising packet type: 0x80 [ 148.795076][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d [ 149.298605][ T5133] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 149.331740][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.344670][ T5133] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.426844][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.435164][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.444485][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.452211][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.493689][ T5133] team0: Port device bridge0 added [ 153.317501][ T5203] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 153.344332][ T5203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.270'. [ 153.546444][ T5203] batman_adv: batadv0: Adding interface: veth0_vlan [ 153.650928][ T5203] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.846485][ T5203] batman_adv: batadv0: Interface activated: veth0_vlan [ 154.229043][ T5214] nr0: port 1(hsr0) entered blocking state [ 154.271224][ T5214] nr0: port 1(hsr0) entered disabled state [ 154.290929][ T5214] device hsr0 entered promiscuous mode [ 154.517526][ T5220] netlink: 'syz.4.276': attribute type 3 has an invalid length. [ 154.556116][ T5220] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.276'. [ 154.806970][ T5224] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 155.164074][ T5233] netlink: 'syz.2.280': attribute type 6 has an invalid length. [ 155.427414][ T5235] ¥: port 1(team0) entered blocking state [ 155.447388][ T5235] ¥: port 1(team0) entered disabled state [ 155.492288][ T5235] device team0 entered promiscuous mode [ 155.575492][ T5235] device team_slave_0 entered promiscuous mode [ 155.582483][ T5235] device team_slave_1 entered promiscuous mode [ 155.658437][ T5237] device team0 left promiscuous mode [ 155.691849][ T5237] device team_slave_0 left promiscuous mode [ 155.741449][ T5237] device team_slave_1 left promiscuous mode [ 155.856756][ T5237] ¥: port 1(team0) entered disabled state [ 155.882815][ T5240] delete_channel: no stack [ 158.559371][ T5270] netlink: 'syz.4.295': attribute type 3 has an invalid length. [ 158.569528][ T5270] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.295'. [ 158.965904][ T4290] Bluetooth: hci1: unknown advertising packet type: 0x63 [ 159.135656][ T4290] Bluetooth: hci2: unexpected event 0x48 length: 15 > 3 [ 159.143642][ T4290] Bluetooth: hci2: Malformed Event: 0x48 [ 159.549346][ T5295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.305'. [ 159.620468][ T5295] device caif0 entered promiscuous mode [ 159.651784][ T5295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.151499][ T5304] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.308'. [ 161.982070][ T5339] device syzkaller0 entered promiscuous mode [ 162.059894][ T5344] netlink: 'syz.0.321': attribute type 9 has an invalid length. [ 162.110959][ T5344] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.321'. [ 166.109539][ T5398] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.339'. [ 168.128348][ T5407] bridge0: port 3(ip6gretap0) entered disabled state [ 168.135621][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.143177][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.170350][ T5408] bridge0: port 3(ip6gretap0) entered blocking state [ 168.177636][ T5408] bridge0: port 3(ip6gretap0) entered forwarding state [ 168.184932][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.192448][ T5408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.200003][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.207577][ T5408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.268160][ T5408] device bridge0 entered promiscuous mode [ 168.707752][ T5423] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.349'. [ 170.775474][ T5466] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.364'. [ 174.177255][ T4292] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 174.185076][ T4292] Bluetooth: hci4: Invalid handle: 0x6c6c > 0x0eff [ 176.250483][ T4292] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 176.250520][ T4292] Bluetooth: unknown link type 47 [ 177.898360][ T4292] Bluetooth: hci4: Malformed LE Event: 0x0b [ 178.274241][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 186.691676][ T5612] device syzkaller0 entered promiscuous mode [ 186.863655][ T4292] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 187.610416][ T4292] Bluetooth: hci3: unknown advertising packet type: 0xaa [ 190.105466][ T5649] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.429'. [ 190.279910][ T4292] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 190.438940][ T5669] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.436'. [ 190.454861][ T5669] netlink: zone id is out of range [ 190.560952][ T5672] device syzkaller0 entered promiscuous mode [ 192.354317][ T4292] Bluetooth: hci1: command 0x2016 tx timeout [ 192.709354][ T4292] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 197.597906][ T5772] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 199.560453][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.567127][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.035610][ T5799] netlink: 'syz.0.492': attribute type 13 has an invalid length. [ 201.053205][ T5799] netlink: 148 bytes leftover after parsing attributes in process `syz.0.492'. [ 203.246210][ T5838] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.756772][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 206.763307][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 206.769915][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 206.772131][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 206.776635][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 212.004634][ T5948] device syzkaller0 entered promiscuous mode [ 213.733756][ T5987] netlink: 'syz.0.563': attribute type 2 has an invalid length. [ 216.223258][ T5987] device 0 entered promiscuous mode [ 216.506767][ T4290] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 218.519979][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 219.725327][ T6043] netlink: 'syz.2.588': attribute type 2 has an invalid length. [ 219.848597][ T6043] device 0 entered promiscuous mode [ 220.279224][ T6061] tipc: Started in network mode [ 220.305401][ T6061] tipc: Node identity 9215a268, cluster identity 4711 [ 220.358262][ T6061] tipc: Node number set to 2450891368 [ 221.634110][ T6076] Driver unsupported XDP return value 0 on prog (id 413) dev N/A, expect packet loss! [ 223.721281][ T6101] tipc: Started in network mode [ 223.742894][ T6101] tipc: Node identity 9215a268, cluster identity 4711 [ 223.773164][ T6101] tipc: Node number set to 2450891368 [ 223.822881][ T6107] pimreg: tun_chr_ioctl cmd 2147767511 [ 226.869980][ T6151] pimreg: tun_chr_ioctl cmd 2147767511 [ 229.669144][ T6197] pimreg: tun_chr_ioctl cmd 2147767511 [ 233.067399][ T6238] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.105815][ T6244] pimreg: tun_chr_ioctl cmd 2147767511 [ 234.553698][ T6278] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.952299][ T6287] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.295328][ T6299] pimreg: tun_chr_ioctl cmd 2147767511 [ 239.994772][ T6338] netlink: 'syz.3.702': attribute type 12 has an invalid length. [ 240.003480][ T6338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.702'. [ 241.672011][ T6354] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.766068][ T6403] netlink: 'syz.4.725': attribute type 13 has an invalid length. [ 245.791072][ T6403] netlink: 148 bytes leftover after parsing attributes in process `syz.4.725'. [ 256.065351][ T6528] device syzkaller0 entered promiscuous mode [ 256.521009][ T6544] pimreg: tun_chr_ioctl cmd 2147767511 [ 260.997300][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.004395][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.537867][ T6593] netlink: 'syz.4.802': attribute type 2 has an invalid length. [ 264.584372][ T6593] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 264.610608][ T6593] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.802'. [ 265.619837][ T6609] device syzkaller0 entered promiscuous mode [ 265.730963][ T6615] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.809'. [ 267.174504][ T6640] netlink: 'syz.1.827': attribute type 13 has an invalid length. [ 267.190425][ T6640] netlink: 148 bytes leftover after parsing attributes in process `syz.1.827'. [ 270.328803][ T6647] netlink: 'syz.3.822': attribute type 2 has an invalid length. [ 270.398008][ T6647] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 270.430081][ T6647] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.822'. [ 271.426777][ T6668] device lo entered promiscuous mode [ 271.505332][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 271.686266][ T6674] netlink: 'syz.2.831': attribute type 13 has an invalid length. [ 271.734492][ T6674] netlink: 148 bytes leftover after parsing attributes in process `syz.2.831'. [ 272.258853][ T6679] netlink: 'syz.3.845': attribute type 13 has an invalid length. [ 272.315494][ T6679] netlink: 148 bytes leftover after parsing attributes in process `syz.3.845'. [ 273.562273][ T6693] netlink: 'syz.0.837': attribute type 2 has an invalid length. [ 273.580339][ T6693] netlink: 'syz.0.837': attribute type 1 has an invalid length. [ 273.588832][ T6693] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.837'. [ 274.833637][ T6712] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 274.890450][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.906877][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.117437][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.126355][ T6712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.139456][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.148660][ T6712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.253715][ T6712] team0: Port device bridge0 added [ 276.926219][ T6752] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.874'. [ 276.937947][ T6752] netlink: zone id is out of range [ 277.420111][ T6765] netlink: 'syz.3.868': attribute type 10 has an invalid length. [ 277.450477][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.463007][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.682741][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.692106][ T6765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.703339][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.712028][ T6765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.868094][ T6765] team0: Port device bridge0 added [ 278.341504][ T6785] netlink: 'syz.3.877': attribute type 12 has an invalid length. [ 278.404114][ T6785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.877'. [ 279.167854][ T6800] sctp: [Deprecated]: syz.4.892 (pid 6800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.167854][ T6800] Use struct sctp_sack_info instead [ 279.561783][ T4292] Bluetooth: hci1: unknown advertising packet type: 0xaa [ 280.983598][ T6838] netlink: 'syz.1.891': attribute type 10 has an invalid length. [ 281.064767][ T6838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.891'. [ 281.116785][ T6838] batman_adv: batadv0: Adding interface: virt_wifi0 [ 281.123481][ T6838] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.267934][ T6838] batman_adv: batadv0: Interface activated: virt_wifi0 [ 284.323263][ T4292] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 284.570791][ T6856] netlink: 'syz.1.905': attribute type 2 has an invalid length. [ 284.593146][ T6856] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 284.602218][ T6856] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.905'. [ 284.845169][ T6866] device syzkaller0 entered promiscuous mode [ 285.746117][ T6882] netlink: 'syz.2.915': attribute type 4 has an invalid length. [ 285.761515][ T6882] netlink: 'syz.2.915': attribute type 26 has an invalid length. [ 285.770233][ T6882] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.915'. [ 286.071770][ T6889] netlink: 'syz.2.919': attribute type 2 has an invalid length. [ 286.086026][ T6889] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 286.100161][ T6889] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.919'. [ 288.696698][ T6896] device syzkaller0 entered promiscuous mode [ 289.174082][ T4292] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 289.909032][ T6934] netlink: 128 bytes leftover after parsing attributes in process `syz.3.935'. [ 289.938440][ T6934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.623358][ T6993] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.939'. [ 294.372352][ T7007] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.944'. [ 295.777353][ T7030] netlink: 'syz.3.951': attribute type 11 has an invalid length. [ 295.816394][ T7030] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.951'. [ 296.679772][ T7029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.848124][ T7098] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.963'. [ 302.874006][ T7093] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.962'. [ 303.478604][ T7113] device syzkaller0 left promiscuous mode [ 303.682019][ T7115] netlink: 14 bytes leftover after parsing attributes in process `syz.0.969'. [ 303.719945][ T7115] device hsr_slave_0 left promiscuous mode [ 303.735923][ T7115] device hsr_slave_1 left promiscuous mode [ 303.908077][ T7115] device hsr0 left promiscuous mode [ 303.921989][ T7115] nr0: port 1(hsr0) entered disabled state [ 303.932503][ T7120] netlink: 'syz.2.970': attribute type 9 has an invalid length. [ 303.955698][ T7120] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.970'. [ 304.061008][ T7117] netlink: 10 bytes leftover after parsing attributes in process `syz.0.969'. [ 304.521404][ T7125] sctp: [Deprecated]: syz.4.973 (pid 7125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.521404][ T7125] Use struct sctp_sack_info instead [ 305.078769][ T4292] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 307.153949][ T4292] Bluetooth: hci3: command 0x2016 tx timeout [ 308.254287][ T7157] netlink: 'syz.3.984': attribute type 9 has an invalid length. [ 308.299384][ T7157] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.984'. [ 309.068195][ T7170] netlink: 14 bytes leftover after parsing attributes in process `syz.3.987'. [ 309.171397][ T7170] device hsr_slave_0 left promiscuous mode [ 309.185517][ T7176] sctp: [Deprecated]: syz.2.988 (pid 7176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.185517][ T7176] Use struct sctp_sack_info instead [ 309.278328][ T7170] device hsr_slave_1 left promiscuous mode [ 309.686764][ T4292] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 309.686809][ T4292] Bluetooth: unknown link type 47 [ 309.825140][ T7175] netlink: 10 bytes leftover after parsing attributes in process `syz.3.987'. [ 309.838674][ T7183] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.989'. [ 311.714669][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 313.600459][ T7213] netlink: 'syz.1.1003': attribute type 9 has an invalid length. [ 313.634038][ T7213] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1003'. [ 314.243557][ T7227] sctp: [Deprecated]: syz.1.1005 (pid 7227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.243557][ T7227] Use struct sctp_sack_info instead [ 315.310524][ T7246] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1012'. [ 315.384289][ T7246] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 320.648669][ T7277] sctp: [Deprecated]: syz.3.1021 (pid 7277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.648669][ T7277] Use struct sctp_sack_info instead [ 322.470483][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.477439][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.457143][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.464798][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.880699][ T7319] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1035'. [ 325.222178][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.231982][ T7315] bridge0: port 2(bridge_slave_1) entered listening state [ 325.243929][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.254098][ T7315] bridge0: port 1(bridge_slave_0) entered listening state [ 325.267843][ T7315] device bridge0 entered promiscuous mode [ 327.124297][ T7350] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1043'. [ 327.314402][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 327.324678][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 328.521718][ T7350] device hsr_slave_0 left promiscuous mode [ 328.562898][ T7350] device hsr_slave_1 left promiscuous mode [ 328.730880][ T7352] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1043'. [ 329.395343][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.403685][ C0] bridge0: topology change detected, propagating [ 329.411370][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.418815][ C0] bridge0: topology change detected, propagating [ 329.546002][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.452486][ T7417] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1060'. [ 331.518305][ T7417] device hsr_slave_0 left promiscuous mode [ 331.716214][ T7417] device hsr_slave_1 left promiscuous mode [ 332.023903][ T7420] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1060'. [ 332.542793][ T7439] netlink: 2639 bytes leftover after parsing attributes in process `syz.2.1076'. [ 335.809536][ T7504] netlink: 'syz.3.1081': attribute type 9 has an invalid length. [ 335.845869][ T7504] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1081'. [ 336.036607][ T7506] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1079'. [ 336.124961][ T7506] device hsr_slave_0 left promiscuous mode [ 336.401075][ T7506] device hsr_slave_1 left promiscuous mode [ 337.288072][ T7509] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1079'. [ 337.353195][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.360673][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.502937][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.511813][ T7527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.522505][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.530587][ T7527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.644635][ T7527] device bridge0 entered promiscuous mode [ 338.960252][ T7553] netlink: 'syz.4.1095': attribute type 9 has an invalid length. [ 339.003164][ T7553] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1095'. [ 339.969727][ T7564] delete_channel: no stack [ 340.089689][ T7567] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1101'. [ 340.166558][ T7567] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1101'. [ 340.520571][ T7569] delete_channel: no stack [ 340.620837][ T7576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1105'. [ 340.725629][ T7576] device caif0 entered promiscuous mode [ 340.732227][ T7576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.881853][ T4290] Bluetooth: hci0: unknown advertising packet type: 0x63 [ 343.509170][ T7619] delete_channel: no stack [ 343.604089][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1120'. [ 343.650758][ T7624] device caif0 entered promiscuous mode [ 343.661720][ T7624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.524527][ T7639] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1134'. [ 345.597477][ T7639] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 345.659560][ T7639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.095391][ T7647] netlink: 'syz.4.1126': attribute type 10 has an invalid length. [ 346.192466][ T7647] bridge0: port 3(ip6gretap0) entered disabled state [ 346.201363][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.210835][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.402415][ T7647] device bridge0 left promiscuous mode [ 346.599552][ T7647] bridge0: port 3(ip6gretap0) entered blocking state [ 346.607777][ T7647] bridge0: port 3(ip6gretap0) entered listening state [ 346.617773][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.626120][ T7647] bridge0: port 2(bridge_slave_1) entered listening state [ 346.635734][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.644014][ T7647] bridge0: port 1(bridge_slave_0) entered listening state [ 346.812173][ T7647] team0: Port device bridge0 added [ 347.495307][ T7666] netlink: 'syz.1.1140': attribute type 4 has an invalid length. [ 347.579020][ T7666] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1140'. [ 348.542687][ T7671] ¥: port 1(syz_tun) entered blocking state [ 348.636369][ T7671] ¥: port 1(syz_tun) entered disabled state [ 348.787826][ T7671] device syz_tun entered promiscuous mode [ 348.801003][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.809061][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.833276][ T7682] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.841145][ T7682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.850308][ T7682] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.859395][ T7682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.934928][ T7682] device bridge0 entered promiscuous mode [ 349.071350][ T7687] ¥: port 1(team0) entered blocking state [ 349.113680][ T7686] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1137'. [ 349.134174][ T7687] ¥: port 1(team0) entered disabled state [ 349.150976][ T7687] device team0 entered promiscuous mode [ 349.171233][ T7687] device team_slave_0 entered promiscuous mode [ 349.189534][ T7687] device team_slave_1 entered promiscuous mode [ 349.209058][ T7687] device bridge0 entered promiscuous mode [ 349.237901][ T7688] device team0 left promiscuous mode [ 349.260134][ T7688] device team_slave_0 left promiscuous mode [ 349.268464][ T7688] device team_slave_1 left promiscuous mode [ 349.283024][ T7688] device bridge0 left promiscuous mode [ 349.289739][ T7688] ¥: port 1(team0) entered disabled state [ 349.381347][ T7686] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 349.446864][ T7693] netlink: 'syz.2.1141': attribute type 10 has an invalid length. [ 349.490856][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.501217][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.540339][ T7693] device bridge0 left promiscuous mode [ 349.715944][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.726466][ T7693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.739062][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.748915][ T7693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.892730][ T7693] team0: Port device bridge0 added [ 349.969276][ T7699] netlink: 'syz.0.1153': attribute type 3 has an invalid length. [ 350.047023][ T7699] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1153'. [ 350.579131][ T7701] device syzkaller0 entered promiscuous mode [ 351.072293][ T7720] netlink: 'syz.0.1148': attribute type 4 has an invalid length. [ 351.117400][ T7720] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1148'. [ 353.348708][ T7718] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 353.374507][ T7718] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 353.389827][ T7718] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 354.271453][ T7743] netlink: 'syz.0.1156': attribute type 10 has an invalid length. [ 354.303072][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.312933][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.387722][ T7743] device bridge0 left promiscuous mode [ 357.199205][ T7786] netlink: 'syz.2.1172': attribute type 3 has an invalid length. [ 357.209228][ T7786] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1172'. [ 357.460783][ T7793] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 357.490885][ T7793] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1173'. [ 357.929717][ T7801] netlink: 'syz.3.1175': attribute type 10 has an invalid length. [ 357.952907][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.965684][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.635473][ T7825] delete_channel: no stack [ 362.113839][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 362.121181][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 362.128669][ C1] bridge0: port 3(ip6gretap0) entered learning state [ 363.061611][ T7845] netlink: 'syz.2.1194': attribute type 10 has an invalid length. [ 363.086901][ T7845] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.095669][ T7845] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.140817][ T7848] netlink: 'syz.4.1191': attribute type 4 has an invalid length. [ 363.259530][ T7848] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1191'. [ 364.523233][ T7877] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 364.563712][ T7877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1207'. [ 364.620697][ T7877] device ipvlan1 entered promiscuous mode [ 364.744889][ T7877] bridge0: port 4(ipvlan1) entered blocking state [ 364.773235][ T7877] bridge0: port 4(ipvlan1) entered disabled state [ 364.873500][ T7877] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 367.791432][ T7893] netlink: 'syz.0.1214': attribute type 10 has an invalid length. [ 367.972218][ T7900] netlink: 'syz.4.1215': attribute type 4 has an invalid length. [ 368.054103][ T7900] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1215'. [ 371.878798][ T7931] netlink: 'syz.2.1226': attribute type 10 has an invalid length. [ 371.900724][ T7931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1226'. [ 371.912901][ T7931] device ipvlan1 entered promiscuous mode [ 371.922748][ T7931] bridge0: port 3(ipvlan1) entered blocking state [ 371.984167][ T7931] bridge0: port 3(ipvlan1) entered disabled state [ 372.010839][ T7931] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 372.238303][ T7944] netlink: 'syz.1.1229': attribute type 10 has an invalid length. [ 372.631837][ T7953] netlink: 'syz.0.1232': attribute type 4 has an invalid length. [ 372.645398][ T7953] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1232'. [ 375.008308][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.015775][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.037313][ T7944] device bridge0 left promiscuous mode [ 375.122372][ T7952] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 375.144107][ T7952] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 375.187512][ T7952] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 376.934613][ T7987] netlink: 'syz.3.1244': attribute type 10 has an invalid length. [ 377.032035][ T7987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1244'. [ 377.046370][ T7987] device ipvlan1 entered promiscuous mode [ 377.127427][ T7987] bridge0: port 3(ipvlan1) entered blocking state [ 377.142846][ T7987] bridge0: port 3(ipvlan1) entered disabled state [ 377.285328][ T7987] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 377.392888][ T7996] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 377.483861][ C1] bridge0: port 3(ip6gretap0) entered forwarding state [ 377.491370][ C1] bridge0: topology change detected, propagating [ 377.499342][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.500126][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.506637][ C1] bridge0: topology change detected, propagating [ 377.520826][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.528248][ C1] bridge0: topology change detected, propagating [ 378.090019][ T8002] netlink: 'syz.0.1262': attribute type 10 has an invalid length. [ 378.164520][ T8002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1262'. [ 378.248409][ T8002] device ipvlan1 entered promiscuous mode [ 378.621502][ T8002] bridge0: port 3(ipvlan1) entered blocking state [ 378.642294][ T8002] bridge0: port 3(ipvlan1) entered disabled state [ 378.835971][ T8002] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 382.596726][ T8051] netlink: 'syz.1.1264': attribute type 10 has an invalid length. [ 383.180105][ T8060] netlink: 'syz.3.1269': attribute type 10 has an invalid length. [ 383.224009][ T8060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1269'. [ 383.349430][ T8060] bridge0: port 3(ipvlan1) entered blocking state [ 383.398469][ T8060] bridge0: port 3(ipvlan1) entered disabled state [ 383.449016][ T8060] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 383.900156][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.906618][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.908061][ T8072] netlink: 'syz.3.1274': attribute type 2 has an invalid length. [ 387.372438][ T8107] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 387.406138][ T8102] device wlan1 entered promiscuous mode [ 388.436495][ T8136] device syzkaller0 entered promiscuous mode [ 388.456663][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 391.615403][ T8149] netlink: 'syz.4.1299': attribute type 39 has an invalid length. [ 392.027971][ T8159] device wlan1 entered promiscuous mode [ 393.299561][ T8184] netlink: 'syz.4.1310': attribute type 2 has an invalid length. [ 394.330231][ T8188] device syzkaller0 entered promiscuous mode [ 394.398653][ T8191] netlink: 'syz.1.1312': attribute type 21 has an invalid length. [ 396.573557][ T8200] device wlan1 entered promiscuous mode [ 396.723316][ T8205] netlink: 'syz.1.1320': attribute type 39 has an invalid length. [ 398.327459][ T8242] netlink: 'syz.2.1334': attribute type 21 has an invalid length. [ 399.596857][ T8259] netlink: 'syz.0.1337': attribute type 21 has an invalid length. [ 399.652398][ T8259] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1337'. [ 401.356436][ T8269] netlink: 'syz.2.1340': attribute type 10 has an invalid length. [ 401.399309][ T8269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1340'. [ 401.472692][ T8269] bridge0: port 3(ipvlan1) entered blocking state [ 401.495270][ T8269] bridge0: port 3(ipvlan1) entered disabled state [ 401.551565][ T8269] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 402.098516][ T8281] netlink: 'syz.2.1356': attribute type 10 has an invalid length. [ 402.134476][ T8281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1356'. [ 402.189299][ T8281] bridge0: port 3(ipvlan1) entered blocking state [ 402.250601][ T8281] bridge0: port 3(ipvlan1) entered disabled state [ 402.307960][ T8281] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 402.336885][ T8283] device veth1_macvtap left promiscuous mode [ 402.848769][ T8297] netlink: 'syz.0.1351': attribute type 21 has an invalid length. [ 406.566032][ T8335] device veth1_macvtap left promiscuous mode [ 406.935837][ T8343] netlink: 'syz.4.1370': attribute type 21 has an invalid length. [ 407.202992][ T8353] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 407.314442][ T8353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1382'. [ 407.351470][ T8353] bridge0: port 3(ipvlan1) entered blocking state [ 407.372007][ T8353] bridge0: port 3(ipvlan1) entered disabled state [ 407.385460][ T8353] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 408.601910][ T8378] device veth1_macvtap left promiscuous mode [ 408.609156][ T8378] device macsec0 left promiscuous mode [ 414.242843][ T8453] device syzkaller0 entered promiscuous mode [ 421.141467][ T4290] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 421.540294][ T8564] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1454'. [ 421.589901][ T8564] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1454'. [ 424.419708][ T8578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1458'. [ 424.986021][ T4290] Bluetooth: hci0: Malformed LE Event: 0x0d [ 426.362577][ T8611] device syzkaller0 left promiscuous mode [ 426.895807][ T8618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1473'. [ 427.139168][ T4290] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 427.734717][ T4290] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 427.957749][ T8636] netlink: 'syz.0.1479': attribute type 10 has an invalid length. [ 427.978572][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1479'. [ 428.044941][ T8636] device bond0 entered promiscuous mode [ 428.099936][ T8636] device bond_slave_0 entered promiscuous mode [ 428.200686][ T8636] device bond_slave_1 entered promiscuous mode [ 428.240080][ T8636] bridge0: port 3(bond0) entered blocking state [ 428.294262][ T8636] bridge0: port 3(bond0) entered disabled state [ 429.219436][ T8652] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1486'. [ 429.451371][ T8658] IPv6: pim6reg1: Disabled Multicast RS [ 429.530391][ T8661] netlink: 'syz.2.1489': attribute type 21 has an invalid length. [ 429.555790][ T8661] netlink: 'syz.2.1489': attribute type 6 has an invalid length. [ 429.565524][ T4290] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 429.606760][ T8661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1489'. [ 429.932413][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 430.307353][ T8673] netlink: 'syz.0.1495': attribute type 153 has an invalid length. [ 430.406355][ T8673] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.1495'. [ 431.052454][ T8693] device veth1_macvtap entered promiscuous mode [ 431.098451][ T8693] device macsec0 entered promiscuous mode [ 431.112719][ T4290] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 431.135055][ T8689] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1501'. [ 431.226042][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.368033][ T8692] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1504'. [ 431.427918][ T8692] netlink: zone id is out of range [ 431.468796][ T8692] netlink: zone id is out of range [ 431.527272][ T8692] netlink: zone id is out of range [ 431.595127][ T8692] netlink: zone id is out of range [ 431.600505][ T8692] netlink: zone id is out of range [ 431.672600][ T8692] netlink: zone id is out of range [ 431.689508][ T8692] netlink: zone id is out of range [ 431.708730][ T8711] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1521'. [ 431.740032][ T8692] netlink: zone id is out of range [ 431.753697][ T8692] netlink: zone id is out of range [ 431.814346][ T8692] netlink: zone id is out of range [ 431.930499][ T8710] device syzkaller0 entered promiscuous mode [ 432.581568][ T8718] netlink: 'syz.2.1512': attribute type 153 has an invalid length. [ 432.619835][ T8718] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.1512'. [ 435.544964][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d [ 436.825108][ T4290] Bluetooth: hci4: Malformed LE Event: 0x0d [ 437.069669][ T4290] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 437.788843][ T8771] netlink: 'syz.1.1542': attribute type 10 has an invalid length. [ 437.876006][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1542'. [ 437.925454][ T8775] netlink: 'syz.3.1530': attribute type 153 has an invalid length. [ 437.935249][ T8771] device bond0 entered promiscuous mode [ 437.942031][ T8771] device bond_slave_0 entered promiscuous mode [ 437.949561][ T8775] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.1530'. [ 437.988801][ T8771] device bond_slave_1 entered promiscuous mode [ 438.015181][ T8771] bridge0: port 3(bond0) entered blocking state [ 438.043399][ T8771] bridge0: port 3(bond0) entered disabled state [ 439.769145][ T8795] device veth1_macvtap left promiscuous mode [ 439.815403][ T8797] device veth1_macvtap entered promiscuous mode [ 439.850877][ T8797] device macsec0 entered promiscuous mode [ 439.909627][ T8806] netlink: 'syz.1.1544': attribute type 9 has an invalid length. [ 439.948536][ T8806] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1544'. [ 440.166492][ T8810] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1546'. [ 440.189610][ T8810] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1546'. [ 440.487402][ T8817] device veth1_macvtap entered promiscuous mode [ 440.531754][ T8817] device macsec0 entered promiscuous mode [ 440.574000][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 440.758977][ T8821] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1561'. [ 440.777777][ T8821] net_ratelimit: 3 callbacks suppressed [ 440.777977][ T8821] netlink: zone id is out of range [ 440.793230][ T8821] netlink: zone id is out of range [ 440.804663][ T8821] netlink: zone id is out of range [ 440.821111][ T8821] netlink: zone id is out of range [ 440.835337][ T8821] netlink: zone id is out of range [ 440.854381][ T8821] netlink: zone id is out of range [ 440.871446][ T8821] netlink: zone id is out of range [ 440.901136][ T8821] netlink: zone id is out of range [ 441.003089][ T8826] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1563'. [ 441.077493][ T8826] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1563'. [ 441.105552][ T8821] netlink: zone id is out of range [ 441.171227][ T8821] netlink: zone id is out of range [ 443.983248][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 444.037382][ T8872] device syzkaller0 entered promiscuous mode [ 444.131986][ T8875] netlink: 'syz.3.1568': attribute type 10 has an invalid length. [ 444.148594][ T8875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1568'. [ 444.159297][ T8875] device bond0 entered promiscuous mode [ 444.179978][ T8875] device bond_slave_0 entered promiscuous mode [ 444.188159][ T8875] device bond_slave_1 entered promiscuous mode [ 444.237218][ T8875] bridge0: port 3(bond0) entered blocking state [ 444.254925][ T8875] bridge0: port 3(bond0) entered disabled state [ 444.657909][ T8888] IPv6: pim6reg1: Disabled Multicast RS [ 444.658443][ T8877] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1569'. [ 444.878244][ T8891] netlink: 'syz.0.1574': attribute type 9 has an invalid length. [ 444.918400][ T8891] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1574'. [ 445.346868][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.353311][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.519395][ T8896] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1577'. [ 445.687579][ T8907] netlink: 'syz.3.1580': attribute type 10 has an invalid length. [ 448.110601][ T8907] team0: Port device bridge0 removed [ 448.164480][ T8907] bridge0: port 3(bond0) entered blocking state [ 448.171027][ T8907] bridge0: port 3(bond0) entered forwarding state [ 448.177843][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.185263][ T8907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.192739][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.200152][ T8907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.303055][ T8907] bridge0: port 3(bond0) entered disabled state [ 448.309907][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.317515][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.945823][ T8922] netlink: 'syz.4.1585': attribute type 10 has an invalid length. [ 448.988349][ T8922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1585'. [ 449.040367][ T8922] device bond0 entered promiscuous mode [ 449.064135][ T8922] device bond_slave_0 entered promiscuous mode [ 449.102904][ T8922] device bond_slave_1 entered promiscuous mode [ 449.173105][ T8922] bridge0: port 4(bond0) entered blocking state [ 449.227133][ T8922] bridge0: port 4(bond0) entered disabled state [ 449.401888][ T8922] bridge0: port 4(bond0) entered blocking state [ 449.409380][ T8922] bridge0: port 4(bond0) entered listening state [ 450.110508][ T8936] netlink: 'syz.3.1590': attribute type 9 has an invalid length. [ 450.210317][ T8936] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1590'. [ 450.710620][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 451.654427][ T8964] netlink: 'syz.2.1598': attribute type 10 has an invalid length. [ 451.737722][ T8964] team0: Port device bridge0 removed [ 451.766955][ T8964] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.774465][ T8964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.782243][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.789699][ T8964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.908779][ T8964] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 453.022077][ T8986] netlink: 'syz.2.1605': attribute type 9 has an invalid length. [ 453.059173][ T8986] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1605'. [ 455.068563][ T8990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1607'. [ 456.243077][ T9016] netlink: 'syz.2.1618': attribute type 10 has an invalid length. [ 456.284213][ T9016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1618'. [ 456.334504][ T9016] device bond0 entered promiscuous mode [ 456.354320][ T9016] device bond_slave_0 entered promiscuous mode [ 456.384958][ T9016] device bond_slave_1 entered promiscuous mode [ 456.393457][ T9016] device bridge0 entered promiscuous mode [ 456.424235][ T9016] bridge0: port 3(bond0) entered blocking state [ 456.462207][ T9016] bridge0: port 3(bond0) entered disabled state [ 458.110248][ T9016] net_ratelimit: 16 callbacks suppressed [ 458.110264][ T9016] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 458.426751][ T9026] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1623'. [ 458.887524][ T9030] netlink: 'syz.4.1620': attribute type 9 has an invalid length. [ 458.994657][ T9030] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1620'. [ 459.243122][ T4292] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 459.252162][ T4292] Bluetooth: hci2: Injecting HCI hardware error event [ 459.261681][ T4290] Bluetooth: hci2: hardware error 0x00 [ 460.028079][ T9054] netlink: 'syz.0.1633': attribute type 29 has an invalid length. [ 460.068448][ T9054] netlink: 'syz.0.1633': attribute type 29 has an invalid length. [ 461.477476][ T4290] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 462.675550][ T9078] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1648'. [ 463.022370][ T9085] netlink: 'syz.2.1641': attribute type 9 has an invalid length. [ 463.040828][ T9085] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1641'. [ 463.063663][ T9088] device syzkaller0 entered promiscuous mode [ 463.648754][ T9098] netlink: 'syz.2.1646': attribute type 29 has an invalid length. [ 464.013391][ T9098] netlink: 'syz.2.1646': attribute type 29 has an invalid length. [ 464.513884][ C0] bridge0: port 4(bond0) entered learning state [ 465.322437][ T9122] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1655'. [ 465.625102][ T9136] device syzkaller0 left promiscuous mode [ 466.136092][ T9144] netlink: 'syz.1.1663': attribute type 10 has an invalid length. [ 466.180954][ T9144] device vlan0 entered promiscuous mode [ 466.280963][ T9144] team0: Port device vlan0 added [ 471.421305][ T9204] netlink: 'syz.2.1679': attribute type 10 has an invalid length. [ 471.437617][ T9204] device vlan0 entered promiscuous mode [ 471.479157][ T9204] team0: Port device vlan0 added [ 473.158447][ T9239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1694'. [ 473.532655][ T9251] netlink: 'syz.3.1697': attribute type 10 has an invalid length. [ 473.579895][ T9251] device vlan0 entered promiscuous mode [ 473.630237][ T9251] team0: Port device vlan0 added [ 474.242618][ T4290] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 476.863374][ T9269] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1714'. [ 476.915795][ T9272] netlink: 'syz.3.1701': attribute type 153 has an invalid length. [ 476.967247][ T9272] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.1701'. [ 477.579099][ T9285] netlink: 'syz.3.1710': attribute type 9 has an invalid length. [ 477.592296][ T9285] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1710'. [ 478.052772][ T9298] netlink: 'syz.1.1715': attribute type 15 has an invalid length. [ 478.063856][ T9298] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.1715'. [ 478.265582][ T4290] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 478.501312][ T9311] device wlan1 left promiscuous mode [ 478.594202][ T9311] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1720'. [ 479.874268][ C0] bridge0: port 4(bond0) entered forwarding state [ 479.880898][ C0] bridge0: topology change detected, propagating [ 480.372688][ T9339] netlink: 'syz.0.1731': attribute type 15 has an invalid length. [ 480.429932][ T9339] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.1731'. [ 480.583033][ T4606] tipc: Subscription rejected, illegal request [ 480.639545][ T9348] netlink: 'syz.1.1735': attribute type 2 has an invalid length. [ 480.648400][ T9348] netlink: 'syz.1.1735': attribute type 8 has an invalid length. [ 480.657277][ T9348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1735'. [ 481.076000][ T9359] netlink: 'syz.1.1740': attribute type 4 has an invalid length. [ 481.099504][ T9359] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1740'. [ 481.327142][ T9365] netlink: 'syz.2.1741': attribute type 29 has an invalid length. [ 481.385785][ T9365] netlink: 'syz.2.1741': attribute type 29 has an invalid length. [ 481.574463][ T9365] netlink: 'syz.2.1741': attribute type 29 has an invalid length. [ 484.109171][ T4290] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 484.167538][ T9385] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1744'. [ 484.528746][ T9399] netlink: 'syz.2.1750': attribute type 15 has an invalid length. [ 484.553305][ T9399] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.1750'. [ 484.662064][ T4558] tipc: Subscription rejected, illegal request [ 484.727898][ T9403] netlink: 'syz.4.1751': attribute type 2 has an invalid length. [ 484.764042][ T9403] netlink: 'syz.4.1751': attribute type 8 has an invalid length. [ 484.783846][ T9403] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1751'. [ 484.991477][ T9407] netlink: 'syz.1.1754': attribute type 29 has an invalid length. [ 485.039083][ T9407] netlink: 'syz.1.1754': attribute type 29 has an invalid length. [ 489.952475][ T9448] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1776'. [ 490.220610][ T9461] netlink: 'syz.2.1766': attribute type 4 has an invalid length. [ 490.282264][ T9461] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1766'. [ 490.564562][ T4606] tipc: Subscription rejected, illegal request [ 490.667129][ T9465] netlink: 'syz.3.1769': attribute type 2 has an invalid length. [ 490.736155][ T9465] netlink: 'syz.3.1769': attribute type 8 has an invalid length. [ 490.784597][ T9465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1769'. [ 490.835199][ T9463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1768'. [ 491.187989][ T4585] tipc: Subscription rejected, illegal request [ 491.244293][ T9474] netlink: 'syz.2.1784': attribute type 2 has an invalid length. [ 491.300803][ T9474] netlink: 'syz.2.1784': attribute type 8 has an invalid length. [ 491.382948][ T9474] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1784'. [ 492.215698][ T9492] netlink: 'syz.4.1779': attribute type 29 has an invalid length. [ 492.242793][ T9492] netlink: 'syz.4.1779': attribute type 29 has an invalid length. [ 494.761232][ T9503] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1781'. [ 494.774852][ T9505] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1781'. [ 494.962948][ T9512] netlink: 'syz.3.1785': attribute type 4 has an invalid length. [ 494.971520][ T9512] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1785'. [ 495.111989][ T9519] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1787'. [ 498.259563][ T9533] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1789'. [ 498.305702][ T9530] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1790'. [ 499.007966][ T9541] netlink: 'syz.3.1792': attribute type 29 has an invalid length. [ 499.019756][ T9538] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 499.034133][ T9538] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1803'. [ 499.065536][ T9541] netlink: 'syz.3.1792': attribute type 29 has an invalid length. [ 499.508641][ T9559] device syzkaller0 left promiscuous mode [ 499.648412][ T9562] netlink: 'syz.4.1801': attribute type 29 has an invalid length. [ 499.705307][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 499.761499][ T9562] netlink: 'syz.4.1801': attribute type 29 has an invalid length. [ 499.791915][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 500.393556][ T9573] delete_channel: no stack [ 500.954955][ T4290] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 501.327647][ T9595] netlink: 'syz.0.1812': attribute type 29 has an invalid length. [ 502.046697][ T9595] netlink: 'syz.0.1812': attribute type 29 has an invalid length. [ 502.340166][ T4290] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 502.681971][ T9614] delete_channel: no stack [ 504.281164][ T4290] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 504.510723][ T9648] delete_channel: no stack [ 506.758220][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.764752][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.547070][ T9714] delete_channel: no stack [ 520.711041][ T9807] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1892'. [ 521.391068][ T9827] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1901'. [ 521.689398][ T9830] netlink: 'syz.1.1901': attribute type 25 has an invalid length. [ 521.708662][ T9830] netlink: 'syz.1.1901': attribute type 6 has an invalid length. [ 522.333110][ T4290] Bluetooth: hci0: Unknown advertising packet type: 0x3030 [ 522.333151][ T4290] Bluetooth: hci0: Malformed LE Event: 0x0d [ 524.071123][ T9878] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1922'. [ 524.155552][ T9881] netlink: 'syz.2.1922': attribute type 25 has an invalid length. [ 524.163481][ T9881] netlink: 'syz.2.1922': attribute type 6 has an invalid length. [ 526.288200][ T4290] Bluetooth: hci4: adv larger than maximum supported [ 526.288265][ T4290] Bluetooth: hci4: Malformed LE Event: 0x0d [ 526.436223][ T9911] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1935'. [ 526.565459][ T9911] bridge0: port 4(bond0) entered disabled state [ 526.757271][ T9911] bridge0: port 4(bond0) entered disabled state [ 526.801426][ T9911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.841954][ T9911] device bond_slave_0 left promiscuous mode [ 526.904381][ T9911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.915438][ T9911] device bond_slave_1 left promiscuous mode [ 526.945788][ T9911] bond0 (unregistering): Released all slaves [ 526.973610][ T9914] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1937'. [ 531.343590][ T4290] Bluetooth: hci1: adv larger than maximum supported [ 531.343631][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d [ 532.008208][ T9958] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1953'. [ 532.744449][ T4276] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 534.023255][ T9995] netlink: 'syz.0.1967': attribute type 10 has an invalid length. [ 536.025036][T10011] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1970'. [ 536.727877][ T4290] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10 [ 537.008788][T10035] netlink: 'syz.2.1985': attribute type 10 has an invalid length. [ 537.054047][ T4290] Bluetooth: hci3: Unknown advertising packet type: 0x3030 [ 537.054088][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d [ 537.905442][T10048] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1989'. [ 538.514207][ T4290] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 538.976493][T10069] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 539.497645][T10081] netlink: 'syz.3.1997': attribute type 21 has an invalid length. [ 540.023133][ T4290] Bluetooth: hci4: Unknown advertising packet type: 0x3030 [ 540.023172][ T4290] Bluetooth: hci4: Malformed LE Event: 0x0d [ 547.918762][T10186] device syzkaller0 entered promiscuous mode [ 550.863899][T10205] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2050'. [ 550.941969][T10205] bridge0: port 3(bond0) entered disabled state [ 550.952217][T10205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.962560][T10205] device bond_slave_0 left promiscuous mode [ 551.000936][T10205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.018049][T10205] device bond_slave_1 left promiscuous mode [ 551.049189][T10205] bond0 (unregistering): Released all slaves [ 555.569597][ T4290] Bluetooth: hci3: Unknown advertising packet type: 0x100 [ 556.769426][T10222] netlink: 'syz.2.2056': attribute type 10 has an invalid length. [ 556.788176][T10222] team0: Port device virt_wifi0 added [ 560.901914][ T4290] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4 [ 560.919094][T10278] netlink: 'syz.4.2079': attribute type 10 has an invalid length. [ 561.046898][T10278] team0: Port device virt_wifi0 added [ 565.909468][T10327] netlink: 'syz.0.2097': attribute type 10 has an invalid length. [ 565.988875][T10327] team0: Port device virt_wifi0 added [ 566.393283][T10341] device syzkaller0 entered promiscuous mode [ 567.410237][ T4290] Bluetooth: hci0: Unknown advertising packet type: 0x100 [ 568.197320][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.211123][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.065583][T10394] netlink: 'syz.0.2120': attribute type 39 has an invalid length. [ 570.225814][T10394] device macvlan0 entered promiscuous mode [ 571.935074][T10429] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2133'. [ 573.085026][T10453] netlink: 'syz.1.2142': attribute type 10 has an invalid length. [ 573.141329][T10453] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 573.387127][T10453] batman_adv: batadv0: Removing interface: virt_wifi0 [ 573.519077][T10453] team0: Port device virt_wifi0 added [ 574.168516][T10475] device syzkaller0 entered promiscuous mode [ 577.943145][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 577.962479][T10514] device syzkaller0 entered promiscuous mode [ 581.456330][T10557] device syzkaller0 entered promiscuous mode [ 587.266417][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 587.276153][T10642] device syzkaller0 entered promiscuous mode [ 587.536192][T10649] netlink: 'syz.3.2221': attribute type 11 has an invalid length. [ 587.562414][T10649] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2221'. [ 587.630885][T10649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.479484][T10657] netlink: 'syz.3.2222': attribute type 10 has an invalid length. [ 588.571662][T10657] team0: Port device virt_wifi0 added [ 589.457754][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 591.043086][T10694] netlink: 'syz.4.2242': attribute type 10 has an invalid length. [ 591.271224][T10701] device syzkaller0 entered promiscuous mode [ 592.190881][ T4290] Bluetooth: hci0: Malformed Event: 0x2f [ 592.784456][T10730] netlink: 'syz.3.2254': attribute type 3 has an invalid length. [ 592.799972][T10732] netlink: 'syz.4.2253': attribute type 11 has an invalid length. [ 592.814262][T10730] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 592.849764][T10732] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2253'. [ 592.858158][T10730] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2254'. [ 592.989232][T10732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.428263][T10742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2257'. [ 593.438834][T10740] netlink: 'syz.1.2256': attribute type 10 has an invalid length. [ 594.459863][ T4290] Bluetooth: hci4: Malformed Event: 0x2f [ 595.225722][T10778] netlink: 'syz.1.2268': attribute type 11 has an invalid length. [ 595.249807][T10778] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2268'. [ 595.280084][T10780] delete_channel: no stack [ 595.286198][T10780] delete_channel: no stack [ 595.346955][T10778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.442839][ T4290] Bluetooth: hci1: Malformed Event: 0x2f [ 597.802894][T10812] netlink: 'syz.0.2292': attribute type 3 has an invalid length. [ 597.855436][T10812] netlink: 'syz.0.2292': attribute type 1 has an invalid length. [ 597.889903][T10812] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2292'. [ 598.231680][T10826] netlink: 'syz.2.2284': attribute type 11 has an invalid length. [ 598.274651][T10826] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2284'. [ 598.365259][T10827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.797619][ T4290] Bluetooth: hci3: Malformed Event: 0x2f [ 599.113502][T10846] netlink: 'syz.2.2296': attribute type 2 has an invalid length. [ 599.132162][T10846] netlink: 'syz.2.2296': attribute type 8 has an invalid length. [ 599.168007][T10846] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2296'. [ 599.733457][T10861] netlink: 'syz.0.2303': attribute type 11 has an invalid length. [ 599.785463][T10861] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2303'. [ 599.852264][T10861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.317584][T10888] netlink: 'syz.1.2313': attribute type 3 has an invalid length. [ 601.364649][T10888] netlink: 'syz.1.2313': attribute type 1 has an invalid length. [ 601.383859][T10888] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2313'. [ 604.745642][T10950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2336'. [ 604.817304][T10950] netlink: 'syz.1.2336': attribute type 10 has an invalid length. [ 604.833063][T10950] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 605.187078][T10961] netlink: 'syz.1.2342': attribute type 2 has an invalid length. [ 605.209584][T10961] netlink: 'syz.1.2342': attribute type 8 has an invalid length. [ 605.218618][T10961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2342'. [ 605.618436][T10975] device bridge_slave_1 left promiscuous mode [ 605.644134][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.653426][T10975] device bridge_slave_0 left promiscuous mode [ 605.663955][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.064036][T10983] device syzkaller0 entered promiscuous mode [ 608.773410][T10991] netlink: 'syz.0.2355': attribute type 10 has an invalid length. [ 608.791396][T10991] batman_adv: batadv0: Adding interface: netdevsim0 [ 608.811465][T10991] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.840382][T10991] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 608.873716][T11001] netlink: 'syz.4.2359': attribute type 2 has an invalid length. [ 608.881775][T11001] netlink: 'syz.4.2359': attribute type 8 has an invalid length. [ 608.924602][T11001] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2359'. [ 609.372115][T11012] netlink: 'syz.4.2364': attribute type 3 has an invalid length. [ 609.414426][T11012] netlink: 'syz.4.2364': attribute type 1 has an invalid length. [ 609.477623][T11012] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2364'. [ 610.446304][T11024] bridge0: port 3(ip6gretap0) entered disabled state [ 610.453315][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.460724][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.660973][T11029] device ip6gretap0 left promiscuous mode [ 610.724495][T11029] bridge0: port 3(ip6gretap0) entered disabled state [ 610.883414][T11029] device bridge_slave_1 left promiscuous mode [ 610.912638][T11029] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.955510][T11029] device bridge_slave_0 left promiscuous mode [ 611.026730][T11029] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.213466][T11029] team0: Port device bridge0 removed [ 612.277521][T11046] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2374'. [ 612.300821][T11046] netlink: 'syz.3.2374': attribute type 10 has an invalid length. [ 612.343830][T11046] device lo left promiscuous mode [ 612.365519][T11046] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 612.445803][T11046] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 612.719233][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2377'. [ 612.740733][T11057] device caif0 entered promiscuous mode [ 612.784248][T11057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 613.348139][T11065] netlink: 'syz.3.2392': attribute type 2 has an invalid length. [ 613.390490][T11065] netlink: 'syz.3.2392': attribute type 8 has an invalid length. [ 613.421665][T11065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2392'. [ 615.037898][T11095] bridge0: port 3(bond0) entered disabled state [ 615.054752][T11095] device bridge_slave_1 left promiscuous mode [ 615.061296][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.098353][T11095] device bridge_slave_0 left promiscuous mode [ 615.113966][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.282184][T11095] team0: Port device bridge0 removed [ 615.940610][T11106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2397'. [ 616.065415][T11106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.092668][T11156] netlink: 'syz.0.2426': attribute type 2 has an invalid length. [ 619.108527][T11156] netlink: 'syz.0.2426': attribute type 8 has an invalid length. [ 619.129196][T11156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2426'. [ 619.820768][T11170] netlink: 'syz.0.2421': attribute type 27 has an invalid length. [ 620.312605][T11170] bond0: (slave bond_slave_0): Releasing backup interface [ 620.365386][T11170] device bond_slave_0 left promiscuous mode [ 621.811823][T11187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2429'. [ 621.928887][T11187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.003586][T11195] device syzkaller0 entered promiscuous mode [ 622.769606][T11205] device syzkaller0 entered promiscuous mode [ 623.513182][T11219] netlink: 'syz.3.2439': attribute type 2 has an invalid length. [ 623.609437][T11219] netlink: 'syz.3.2439': attribute type 8 has an invalid length. [ 623.691816][T11219] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2439'. [ 624.775170][T11227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2442'. [ 624.814711][T11227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.617341][T11246] device syzkaller0 entered promiscuous mode [ 626.265954][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2457'. [ 626.291808][T11267] device caif0 entered promiscuous mode [ 626.309157][T11267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.458381][T11333] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2485'. [ 629.508583][T11336] netlink: 'syz.4.2485': attribute type 10 has an invalid length. [ 629.573301][T11336] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 630.030388][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.037053][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.101210][T11335] netlink: 'syz.3.2487': attribute type 9 has an invalid length. [ 630.117024][T11335] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2487'. [ 630.593657][T11356] netlink: 'syz.3.2492': attribute type 27 has an invalid length. [ 630.700932][T11358] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2503'. [ 630.994199][T11358] netlink: 'syz.2.2503': attribute type 10 has an invalid length. [ 631.002735][T11358] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 632.750277][T11384] netlink: 'syz.2.2501': attribute type 21 has an invalid length. [ 632.760673][T11384] netlink: 'syz.2.2501': attribute type 6 has an invalid length. [ 632.789701][T11384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2501'. [ 633.388789][T11396] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2507'. [ 633.455737][T11399] netlink: 'syz.0.2507': attribute type 10 has an invalid length. [ 633.512295][T11399] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 633.571329][T11401] netlink: 'syz.4.2508': attribute type 27 has an invalid length. [ 635.100688][ T4290] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 635.148707][T11439] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2524'. [ 635.227029][T11440] netlink: 'syz.4.2524': attribute type 10 has an invalid length. [ 635.276232][T11440] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 636.146855][T11464] netlink: 'syz.1.2531': attribute type 21 has an invalid length. [ 636.165237][T11464] netlink: 'syz.1.2531': attribute type 6 has an invalid length. [ 636.199443][T11464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2531'. [ 637.531445][T11484] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2539'. [ 637.627255][T11484] netlink: 'syz.2.2539': attribute type 10 has an invalid length. [ 637.638343][T11484] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 638.197793][T11501] netlink: 'syz.4.2546': attribute type 21 has an invalid length. [ 638.215108][T11501] netlink: 'syz.4.2546': attribute type 6 has an invalid length. [ 638.247833][T11501] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2546'. [ 638.732064][T11512] netlink: 'syz.0.2562': attribute type 21 has an invalid length. [ 638.754504][T11512] netlink: 'syz.0.2562': attribute type 6 has an invalid length. [ 638.763067][T11512] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2562'. [ 639.248860][T11524] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2556'. [ 639.300648][T11527] netlink: 'syz.2.2556': attribute type 10 has an invalid length. [ 639.367489][T11527] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 639.720758][ T4290] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 640.761726][T11560] netlink: 'syz.2.2571': attribute type 2 has an invalid length. [ 641.602118][T11560] device 1 entered promiscuous mode [ 643.846245][T11606] delete_channel: no stack [ 644.664273][T11624] netlink: 'syz.3.2593': attribute type 29 has an invalid length. [ 644.760279][T11624] netlink: 'syz.3.2593': attribute type 29 has an invalid length. [ 645.276517][T11637] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2598'. [ 645.308580][T11637] netlink: 'syz.2.2598': attribute type 10 has an invalid length. [ 645.319528][T11637] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 647.044841][T11669] delete_channel: no stack [ 648.578157][T11708] bridge0: port 3(batadv0) entered blocking state [ 648.586428][T11708] bridge0: port 3(batadv0) entered disabled state [ 648.624393][T11708] device batadv0 entered promiscuous mode [ 648.656831][T11708] bridge0: port 3(batadv0) entered blocking state [ 648.664574][T11708] bridge0: port 3(batadv0) entered forwarding state [ 648.785980][T11709] delete_channel: no stack [ 648.831289][ T4606] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 648.841291][ T4606] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 649.071657][T11722] netlink: 'syz.2.2630': attribute type 29 has an invalid length. [ 649.282047][T11722] netlink: 'syz.2.2630': attribute type 29 has an invalid length. [ 649.317306][T11729] netlink: 'syz.4.2631': attribute type 11 has an invalid length. [ 649.389848][T11729] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2631'. [ 649.393195][T11727] netlink: 'syz.2.2630': attribute type 29 has an invalid length. [ 649.676396][T11728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.240002][T11741] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2635'. [ 650.295444][T11741] netlink: 'syz.0.2635': attribute type 10 has an invalid length. [ 650.330145][T11741] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 650.826767][T11752] bridge0: port 4(batadv0) entered blocking state [ 650.849083][T11754] delete_channel: no stack [ 650.854506][T11752] bridge0: port 4(batadv0) entered disabled state [ 650.881514][T11752] device batadv0 entered promiscuous mode [ 650.919754][ T4558] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 650.929543][ T4558] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 651.044078][T11763] ÿÿÿÿÿÿ: renamed from vlan1 [ 651.371982][T11773] netlink: 'syz.3.2651': attribute type 3 has an invalid length. [ 651.453774][T11773] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2651'. [ 652.180491][T11789] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2657'. [ 653.943012][T11822] netlink: 'syz.1.2669': attribute type 29 has an invalid length. [ 653.961548][T11818] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.2667'. [ 653.961692][T11818] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.2667'. [ 653.961762][T11818] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.2667'. [ 654.041210][T11822] netlink: 'syz.1.2669': attribute type 29 has an invalid length. [ 654.052316][T11823] netlink: 'syz.1.2669': attribute type 29 has an invalid length. [ 654.193032][T11830] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2672'. [ 654.388259][T11830] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 654.654174][T11836] delete_channel: no stack [ 654.719393][T11839] netlink: 'syz.1.2676': attribute type 3 has an invalid length. [ 654.756990][T11839] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2676'. [ 655.028629][T11841] delete_channel: no stack [ 655.216246][T11851] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2680'. [ 656.245811][T11870] netlink: 'syz.4.2685': attribute type 29 has an invalid length. [ 656.718419][T11870] netlink: 'syz.4.2685': attribute type 29 has an invalid length. [ 656.794745][T11879] ÿÿÿÿÿÿ: renamed from vlan1 [ 656.809391][T11875] netlink: 'syz.4.2685': attribute type 29 has an invalid length. [ 657.024131][T11883] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2689'. [ 657.149458][T11883] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 657.469372][T11889] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.2690'. [ 657.555591][T11889] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.2690'. [ 657.602242][T11889] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.2690'. [ 657.998205][T11900] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2706'. [ 658.102014][T11900] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 658.233919][T11903] delete_channel: no stack [ 658.771615][T11914] ÿÿÿÿÿÿ: renamed from vlan1 [ 658.936737][T11916] netlink: 'syz.0.2703': attribute type 29 has an invalid length. [ 659.086988][T11916] netlink: 'syz.0.2703': attribute type 29 has an invalid length. [ 659.239586][T11921] netlink: 'syz.0.2703': attribute type 29 has an invalid length. [ 660.157078][T11930] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.2708'. [ 660.198232][T11930] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.2708'. [ 660.222128][T11930] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.2708'. [ 660.279412][T11934] netlink: 'syz.3.2710': attribute type 10 has an invalid length. [ 660.851170][T11940] delete_channel: no stack [ 661.738501][T11956] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2714'. [ 664.004984][T11953] netlink: 'syz.2.2718': attribute type 3 has an invalid length. [ 664.018684][T11953] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2718'. [ 664.056167][T11956] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 664.376546][T11966] netlink: 'syz.0.2720': attribute type 29 has an invalid length. [ 664.524893][T11966] netlink: 'syz.0.2720': attribute type 29 has an invalid length. [ 664.625095][T11972] netlink: 'syz.0.2720': attribute type 29 has an invalid length. [ 665.227517][T11981] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2726'. [ 665.613197][T11981] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 665.727966][T11988] netlink: 'syz.4.2728': attribute type 4 has an invalid length. [ 665.770065][T11988] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2728'. [ 666.706015][T12000] device ipvlan1 left promiscuous mode [ 666.759581][T12003] netlink: 'syz.1.2730': attribute type 10 has an invalid length. [ 667.586859][T12003] team0: Device nlmon0 is of different type [ 667.657518][T12004] delete_channel: no stack [ 669.938523][T12030] delete_channel: no stack [ 671.121037][T12037] netlink: 'syz.4.2750': attribute type 10 has an invalid length. [ 671.705683][T12049] device ipvlan1 left promiscuous mode [ 671.785462][T12048] netlink: 'syz.3.2751': attribute type 10 has an invalid length. [ 671.936045][T12048] team0: Device nlmon0 is of different type [ 672.441178][T12058] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2754'. [ 672.955221][T12063] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.2755'. [ 672.978472][T12063] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.2755'. [ 673.011063][T12063] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.2755'. [ 673.056204][T12058] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 673.084248][T12058] CPU: 0 PID: 12058 Comm: syz.4.2754 Not tainted syzkaller #0 [ 673.091807][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.101973][T12058] Call Trace: [ 673.105465][T12058] [ 673.108605][T12058] dump_stack_lvl+0x188/0x24e [ 673.113452][T12058] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 673.119741][T12058] ? show_regs_print_info+0x12/0x12 [ 673.125001][T12058] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 673.131506][T12058] sysfs_warn_dup+0x8a/0xa0 [ 673.136213][T12058] sysfs_do_create_link_sd+0xc0/0x110 [ 673.141673][T12058] device_add+0x83b/0x1050 [ 673.146299][T12058] wiphy_register+0x1d8b/0x2aa0 [ 673.151360][T12058] ? cfg80211_event_work+0x40/0x40 [ 673.156548][T12058] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 673.162781][T12058] ? ieee80211_register_hw+0x2981/0x39f0 [ 673.168603][T12058] ieee80211_register_hw+0x2d48/0x39f0 [ 673.174157][T12058] ? ieee80211_register_hw+0xee1/0x39f0 [ 673.179776][T12058] ? ieee80211_register_hw+0xee1/0x39f0 [ 673.185571][T12058] ? ieee80211_tasklet_handler+0x20/0x20 [ 673.191280][T12058] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 673.197424][T12058] ? __debug_object_init+0xed/0x440 [ 673.202811][T12058] ? memset+0x1e/0x40 [ 673.206993][T12058] ? __hrtimer_init+0x189/0x270 [ 673.212069][T12058] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 673.217971][T12058] ? memcpy+0x3c/0x60 [ 673.222287][T12058] hwsim_new_radio_nl+0xab7/0xc90 [ 673.227526][T12058] genl_family_rcv_msg_doit+0x22f/0x350 [ 673.233200][T12058] ? end_current_label_crit_section+0x170/0x170 [ 673.239605][T12058] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 673.245576][T12058] ? bpf_lsm_capable+0x5/0x10 [ 673.250411][T12058] ? security_capable+0x85/0xb0 [ 673.255495][T12058] genl_rcv_msg+0x601/0x790 [ 673.260067][T12058] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 673.266315][T12058] ? genl_bind+0x360/0x360 [ 673.270794][T12058] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 673.277201][T12058] ? lock_acquire+0x225/0x4a0 [ 673.281992][T12058] netlink_rcv_skb+0x1ef/0x440 [ 673.286986][T12058] ? genl_bind+0x360/0x360 [ 673.291560][T12058] ? netlink_ack+0x1160/0x1160 [ 673.296418][T12058] ? down_read+0x1a8/0x2d0 [ 673.300910][T12058] genl_rcv+0x24/0x40 [ 673.304961][T12058] netlink_unicast+0x7ad/0x920 [ 673.309829][T12058] netlink_sendmsg+0x8ad/0xbd0 [ 673.315215][T12058] ? netlink_getsockopt+0x550/0x550 [ 673.320514][T12058] ? apparmor_socket_sendmsg+0x8a/0x330 [ 673.326145][T12058] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 673.331509][T12058] ? security_socket_sendmsg+0x7c/0xa0 [ 673.337258][T12058] ? netlink_getsockopt+0x550/0x550 [ 673.342560][T12058] ____sys_sendmsg+0x5ed/0x9a0 [ 673.347605][T12058] ? __sys_sendmsg_sock+0x30/0x30 [ 673.352720][T12058] ? __import_iovec+0x306/0x510 [ 673.357726][T12058] ? import_iovec+0x6f/0xa0 [ 673.362309][T12058] ___sys_sendmsg+0x2a2/0x360 [ 673.367074][T12058] ? __sys_sendmsg+0x2a0/0x2a0 [ 673.371934][T12058] ? ktime_get+0x7b/0x270 [ 673.376364][T12058] __se_sys_sendmsg+0x1c3/0x2b0 [ 673.381333][T12058] ? __x64_sys_sendmsg+0x80/0x80 [ 673.386378][T12058] ? lockdep_hardirqs_on+0x94/0x140 [ 673.391653][T12058] do_syscall_64+0x4c/0xa0 [ 673.396280][T12058] ? clear_bhb_loop+0x60/0xb0 [ 673.401029][T12058] ? clear_bhb_loop+0x60/0xb0 [ 673.405803][T12058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.411790][T12058] RIP: 0033:0x7f8c0099e0d9 [ 673.416336][T12058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.436079][T12058] RSP: 002b:00007f8c0188b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.444723][T12058] RAX: ffffffffffffffda RBX: 00007f8c00c25fa0 RCX: 00007f8c0099e0d9 [ 673.452857][T12058] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 673.460986][T12058] RBP: 00007f8c00a35024 R08: 0000000000000000 R09: 0000000000000000 [ 673.469022][T12058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.477098][T12058] R13: 00007f8c00c26038 R14: 00007f8c00c25fa0 R15: 00007ffd807fe578 [ 673.485340][T12058] [ 676.568606][T12076] netlink: 'syz.4.2762': attribute type 3 has an invalid length. [ 676.588902][T12076] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2762'. [ 677.122655][T12093] netlink: 'syz.1.2766': attribute type 10 has an invalid length. [ 677.211260][T12092] device ipvlan1 left promiscuous mode [ 677.262604][T12092] netlink: 'syz.2.2767': attribute type 10 has an invalid length. [ 677.605555][T12092] team0: Device nlmon0 is of different type [ 678.123612][T12105] delete_channel: no stack [ 678.240341][T12108] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.2771'. [ 678.265696][T12108] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.2771'. [ 678.291364][T12108] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.2771'. [ 678.852607][T12120] netlink: 'syz.3.2775': attribute type 4 has an invalid length. [ 678.888044][T12120] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2775'. [ 682.409039][T12126] device syzkaller0 entered promiscuous mode [ 682.620737][T12142] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2785'. [ 684.933033][T12142] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 685.588773][T12152] delete_channel: no stack [ 685.941577][T12167] netlink: 'syz.2.2794': attribute type 4 has an invalid length. [ 685.978907][T12167] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2794'. [ 686.181760][T12172] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2796'. [ 686.244719][T12172] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 686.259965][T12172] CPU: 0 PID: 12172 Comm: syz.1.2796 Not tainted syzkaller #0 [ 686.267543][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.277919][T12172] Call Trace: [ 686.281271][T12172] [ 686.284344][T12172] dump_stack_lvl+0x188/0x24e [ 686.289186][T12172] ? show_regs_print_info+0x12/0x12 [ 686.294455][T12172] ? load_image+0x410/0x410 [ 686.299294][T12172] sysfs_warn_dup+0x8a/0xa0 [ 686.303868][T12172] sysfs_do_create_link_sd+0xc0/0x110 [ 686.309317][T12172] device_add+0x83b/0x1050 [ 686.313988][T12172] wiphy_register+0x1d8b/0x2aa0 [ 686.319332][T12172] ? cfg80211_event_work+0x40/0x40 [ 686.324511][T12172] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 686.330866][T12172] ieee80211_register_hw+0x2d48/0x39f0 [ 686.336416][T12172] ? ieee80211_register_hw+0xee1/0x39f0 [ 686.342029][T12172] ? ieee80211_register_hw+0xee1/0x39f0 [ 686.347651][T12172] ? ieee80211_tasklet_handler+0x20/0x20 [ 686.353373][T12172] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 686.359349][T12172] ? __debug_object_init+0xed/0x440 [ 686.364706][T12172] ? memset+0x1e/0x40 [ 686.368742][T12172] ? __hrtimer_init+0x189/0x270 [ 686.373912][T12172] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 686.379726][T12172] ? memcpy+0x3c/0x60 [ 686.383809][T12172] hwsim_new_radio_nl+0xab7/0xc90 [ 686.388949][T12172] genl_family_rcv_msg_doit+0x22f/0x350 [ 686.394813][T12172] ? end_current_label_crit_section+0x170/0x170 [ 686.401127][T12172] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 686.407125][T12172] ? bpf_lsm_capable+0x5/0x10 [ 686.412031][T12172] ? security_capable+0x85/0xb0 [ 686.416950][T12172] genl_rcv_msg+0x601/0x790 [ 686.421618][T12172] ? genl_bind+0x360/0x360 [ 686.426081][T12172] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 686.432498][T12172] netlink_rcv_skb+0x1ef/0x440 [ 686.437336][T12172] ? genl_bind+0x360/0x360 [ 686.441982][T12172] ? netlink_ack+0x1160/0x1160 [ 686.446827][T12172] ? down_read+0x1a8/0x2d0 [ 686.451352][T12172] genl_rcv+0x24/0x40 [ 686.455377][T12172] netlink_unicast+0x7ad/0x920 [ 686.460218][T12172] netlink_sendmsg+0x8ad/0xbd0 [ 686.465241][T12172] ? netlink_getsockopt+0x550/0x550 [ 686.470613][T12172] ? apparmor_socket_sendmsg+0x8a/0x330 [ 686.476401][T12172] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 686.481781][T12172] ? security_socket_sendmsg+0x7c/0xa0 [ 686.487389][T12172] ? netlink_getsockopt+0x550/0x550 [ 686.492831][T12172] ____sys_sendmsg+0x5ed/0x9a0 [ 686.497668][T12172] ? __sys_sendmsg_sock+0x30/0x30 [ 686.502745][T12172] ? __import_iovec+0x306/0x510 [ 686.507715][T12172] ? import_iovec+0x6f/0xa0 [ 686.512283][T12172] ___sys_sendmsg+0x2a2/0x360 [ 686.517032][T12172] ? __sys_sendmsg+0x2a0/0x2a0 [ 686.521895][T12172] ? bpf_prog_free_id+0x1d0/0x1d0 [ 686.527098][T12172] __se_sys_sendmsg+0x1c3/0x2b0 [ 686.532024][T12172] ? __x64_sys_sendmsg+0x80/0x80 [ 686.537219][T12172] ? lockdep_hardirqs_on+0x94/0x140 [ 686.542487][T12172] do_syscall_64+0x4c/0xa0 [ 686.546968][T12172] ? clear_bhb_loop+0x60/0xb0 [ 686.551699][T12172] ? clear_bhb_loop+0x60/0xb0 [ 686.556434][T12172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.562422][T12172] RIP: 0033:0x7fa749d9e0d9 [ 686.566894][T12172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.586557][T12172] RSP: 002b:00007fa747ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.595120][T12172] RAX: ffffffffffffffda RBX: 00007fa74a025fa0 RCX: 00007fa749d9e0d9 [ 686.603145][T12172] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 686.611165][T12172] RBP: 00007fa749e35024 R08: 0000000000000000 R09: 0000000000000000 [ 686.619279][T12172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.627299][T12172] R13: 00007fa74a026038 R14: 00007fa74a025fa0 R15: 00007ffdeb84f6a8 [ 686.635341][T12172] [ 689.489853][T12194] delete_channel: no stack [ 690.248473][T12209] netlink: 'syz.1.2810': attribute type 4 has an invalid length. [ 690.266979][T12209] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2810'. [ 691.063993][T12226] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2816'. [ 691.088656][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.088772][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.200926][T12226] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 691.968724][T12247] device ipvlan1 left promiscuous mode [ 691.991747][T12247] netlink: 'syz.4.2824': attribute type 10 has an invalid length. [ 692.078851][T12247] team0: Device nlmon0 is of different type [ 692.408155][T12257] netlink: 'syz.1.2836': attribute type 10 has an invalid length. [ 692.486089][T12257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2836'. [ 692.579202][T12257] device dummy0 entered promiscuous mode [ 692.646992][T12257] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 692.744501][T12256] netlink: 'syz.0.2825': attribute type 4 has an invalid length. [ 692.752847][T12256] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2825'. [ 693.823543][T12276] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2835'. [ 693.940060][T12276] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 695.030071][T12295] netlink: 'syz.0.2842': attribute type 4 has an invalid length. [ 695.040093][T12295] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2842'. [ 695.060213][T12296] netlink: 'syz.2.2841': attribute type 10 has an invalid length. [ 695.072462][T12296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2841'. [ 695.087991][T12296] device dummy0 entered promiscuous mode [ 695.099033][T12296] bridge0: port 4(dummy0) entered blocking state [ 695.106741][T12296] bridge0: port 4(dummy0) entered disabled state [ 695.126899][T12296] bridge0: port 4(dummy0) entered blocking state [ 695.134103][T12296] bridge0: port 4(dummy0) entered forwarding state [ 695.412206][T12303] device ipvlan1 left promiscuous mode [ 695.451188][T12303] netlink: 'syz.0.2843': attribute type 10 has an invalid length. [ 695.572149][T12303] team0: Device nlmon0 is of different type [ 698.840709][T12329] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2853'. [ 698.860337][T12329] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 698.875772][T12329] CPU: 1 PID: 12329 Comm: syz.0.2853 Not tainted syzkaller #0 [ 698.883507][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.893741][T12329] Call Trace: [ 698.897076][T12329] [ 698.900055][T12329] dump_stack_lvl+0x188/0x24e [ 698.904816][T12329] ? show_regs_print_info+0x12/0x12 [ 698.910099][T12329] ? load_image+0x410/0x410 [ 698.914680][T12329] sysfs_warn_dup+0x8a/0xa0 [ 698.919269][T12329] sysfs_do_create_link_sd+0xc0/0x110 [ 698.925022][T12329] device_add+0x83b/0x1050 [ 698.929504][T12329] wiphy_register+0x1d8b/0x2aa0 [ 698.934657][T12329] ? cfg80211_event_work+0x40/0x40 [ 698.939930][T12329] ? minstrel_ht_alloc+0x894/0xa20 [ 698.945117][T12329] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 698.951334][T12329] ieee80211_register_hw+0x2d48/0x39f0 [ 698.956883][T12329] ? ieee80211_register_hw+0xee1/0x39f0 [ 698.962793][T12329] ? ieee80211_register_hw+0xee1/0x39f0 [ 698.968424][T12329] ? ieee80211_tasklet_handler+0x20/0x20 [ 698.974205][T12329] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 698.980148][T12329] ? __debug_object_init+0xed/0x440 [ 698.985394][T12329] ? memset+0x1e/0x40 [ 698.989412][T12329] ? __hrtimer_init+0x189/0x270 [ 698.994390][T12329] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 699.000422][T12329] ? memcpy+0x3c/0x60 [ 699.004464][T12329] hwsim_new_radio_nl+0xab7/0xc90 [ 699.009650][T12329] genl_family_rcv_msg_doit+0x22f/0x350 [ 699.015368][T12329] ? end_current_label_crit_section+0x170/0x170 [ 699.021830][T12329] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 699.027763][T12329] ? bpf_lsm_capable+0x5/0x10 [ 699.032564][T12329] ? security_capable+0x85/0xb0 [ 699.037992][T12329] genl_rcv_msg+0x601/0x790 [ 699.042538][T12329] ? lock_chain_count+0x20/0x20 [ 699.047431][T12329] ? genl_bind+0x360/0x360 [ 699.052026][T12329] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 699.058436][T12329] netlink_rcv_skb+0x1ef/0x440 [ 699.063260][T12329] ? genl_bind+0x360/0x360 [ 699.067762][T12329] ? netlink_ack+0x1160/0x1160 [ 699.072683][T12329] ? down_read+0x1a8/0x2d0 [ 699.077477][T12329] genl_rcv+0x24/0x40 [ 699.081510][T12329] netlink_unicast+0x7ad/0x920 [ 699.086341][T12329] netlink_sendmsg+0x8ad/0xbd0 [ 699.091166][T12329] ? netlink_getsockopt+0x550/0x550 [ 699.096423][T12329] ? apparmor_socket_sendmsg+0x8a/0x330 [ 699.102192][T12329] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 699.107521][T12329] ? security_socket_sendmsg+0x7c/0xa0 [ 699.113025][T12329] ? netlink_getsockopt+0x550/0x550 [ 699.118286][T12329] ____sys_sendmsg+0x5ed/0x9a0 [ 699.123114][T12329] ? __sys_sendmsg_sock+0x30/0x30 [ 699.128195][T12329] ? __import_iovec+0x306/0x510 [ 699.133278][T12329] ? import_iovec+0x6f/0xa0 [ 699.137833][T12329] ___sys_sendmsg+0x2a2/0x360 [ 699.142659][T12329] ? __sys_sendmsg+0x2a0/0x2a0 [ 699.147532][T12329] __se_sys_sendmsg+0x1c3/0x2b0 [ 699.152567][T12329] ? __x64_sys_sendmsg+0x80/0x80 [ 699.157585][T12329] ? lockdep_hardirqs_on+0x94/0x140 [ 699.162836][T12329] do_syscall_64+0x4c/0xa0 [ 699.167312][T12329] ? clear_bhb_loop+0x60/0xb0 [ 699.172037][T12329] ? clear_bhb_loop+0x60/0xb0 [ 699.176802][T12329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.182753][T12329] RIP: 0033:0x7f4316f9e0d9 [ 699.187217][T12329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.206956][T12329] RSP: 002b:00007f43151d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.215519][T12329] RAX: ffffffffffffffda RBX: 00007f4317226090 RCX: 00007f4316f9e0d9 [ 699.223531][T12329] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 699.231696][T12329] RBP: 00007f4317035024 R08: 0000000000000000 R09: 0000000000000000 [ 699.239884][T12329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.247895][T12329] R13: 00007f4317226128 R14: 00007f4317226090 R15: 00007fffaf9b78b8 [ 699.256016][T12329] [ 699.690958][T12334] netlink: 'syz.3.2858': attribute type 10 has an invalid length. [ 699.702371][T12332] netlink: 'syz.1.2856': attribute type 4 has an invalid length. [ 699.714544][T12334] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2858'. [ 699.727154][T12332] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2856'. [ 699.745796][T12334] device dummy0 entered promiscuous mode [ 699.798767][T12334] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 700.121304][T12351] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2871'. [ 700.172584][T12351] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 700.248277][T12351] CPU: 1 PID: 12351 Comm: syz.1.2871 Not tainted syzkaller #0 [ 700.255927][T12351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.266360][T12351] Call Trace: [ 700.269863][T12351] [ 700.272838][T12351] dump_stack_lvl+0x188/0x24e [ 700.277590][T12351] ? show_regs_print_info+0x12/0x12 [ 700.282855][T12351] ? load_image+0x410/0x410 [ 700.287434][T12351] sysfs_warn_dup+0x8a/0xa0 [ 700.292007][T12351] sysfs_do_create_link_sd+0xc0/0x110 [ 700.297496][T12351] device_add+0x83b/0x1050 [ 700.302281][T12351] wiphy_register+0x1d8b/0x2aa0 [ 700.307231][T12351] ? cfg80211_event_work+0x40/0x40 [ 700.312406][T12351] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 700.318916][T12351] ? rtnl_unlock+0x5/0x10 [ 700.323416][T12351] ieee80211_register_hw+0x2d48/0x39f0 [ 700.329092][T12351] ? ieee80211_register_hw+0xee1/0x39f0 [ 700.334706][T12351] ? ieee80211_register_hw+0xee1/0x39f0 [ 700.340340][T12351] ? ieee80211_tasklet_handler+0x20/0x20 [ 700.346130][T12351] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 700.352177][T12351] ? __debug_object_init+0xed/0x440 [ 700.357461][T12351] ? memset+0x1e/0x40 [ 700.361498][T12351] ? __hrtimer_init+0x189/0x270 [ 700.366406][T12351] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 700.372202][T12351] ? memcpy+0x3c/0x60 [ 700.376243][T12351] hwsim_new_radio_nl+0xab7/0xc90 [ 700.381439][T12351] genl_family_rcv_msg_doit+0x22f/0x350 [ 700.387157][T12351] ? end_current_label_crit_section+0x170/0x170 [ 700.393478][T12351] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 700.399442][T12351] ? bpf_lsm_capable+0x5/0x10 [ 700.404176][T12351] ? security_capable+0x85/0xb0 [ 700.409099][T12351] genl_rcv_msg+0x601/0x790 [ 700.413660][T12351] ? lockdep_hardirqs_on+0x94/0x140 [ 700.419173][T12351] ? genl_bind+0x360/0x360 [ 700.423645][T12351] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 700.430280][T12351] netlink_rcv_skb+0x1ef/0x440 [ 700.435196][T12351] ? genl_bind+0x360/0x360 [ 700.439685][T12351] ? netlink_ack+0x1160/0x1160 [ 700.444537][T12351] ? down_read+0x1a8/0x2d0 [ 700.449100][T12351] genl_rcv+0x24/0x40 [ 700.453143][T12351] netlink_unicast+0x7ad/0x920 [ 700.458076][T12351] netlink_sendmsg+0x8ad/0xbd0 [ 700.463014][T12351] ? netlink_getsockopt+0x550/0x550 [ 700.468469][T12351] ? apparmor_socket_sendmsg+0x8a/0x330 [ 700.474107][T12351] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 700.479463][T12351] ? security_socket_sendmsg+0x7c/0xa0 [ 700.484987][T12351] ? netlink_getsockopt+0x550/0x550 [ 700.490259][T12351] ____sys_sendmsg+0x5ed/0x9a0 [ 700.495104][T12351] ? __sys_sendmsg_sock+0x30/0x30 [ 700.500192][T12351] ? __import_iovec+0x306/0x510 [ 700.505118][T12351] ? import_iovec+0x6f/0xa0 [ 700.509687][T12351] ___sys_sendmsg+0x2a2/0x360 [ 700.514471][T12351] ? __sys_sendmsg+0x2a0/0x2a0 [ 700.519329][T12351] ? ktime_get+0x7b/0x270 [ 700.523745][T12351] __se_sys_sendmsg+0x1c3/0x2b0 [ 700.528763][T12351] ? __x64_sys_sendmsg+0x80/0x80 [ 700.533798][T12351] ? lockdep_hardirqs_on+0x94/0x140 [ 700.539207][T12351] do_syscall_64+0x4c/0xa0 [ 700.543687][T12351] ? clear_bhb_loop+0x60/0xb0 [ 700.548513][T12351] ? clear_bhb_loop+0x60/0xb0 [ 700.553253][T12351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.559200][T12351] RIP: 0033:0x7fa749d9e0d9 [ 700.563666][T12351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.583415][T12351] RSP: 002b:00007fa747ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.591995][T12351] RAX: ffffffffffffffda RBX: 00007fa74a025fa0 RCX: 00007fa749d9e0d9 [ 700.600104][T12351] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 700.608137][T12351] RBP: 00007fa749e35024 R08: 0000000000000000 R09: 0000000000000000 [ 700.616165][T12351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.624201][T12351] R13: 00007fa74a026038 R14: 00007fa74a025fa0 R15: 00007ffdeb84f6a8 [ 700.632357][T12351] [ 702.103460][T12384] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2873'. [ 702.847661][T12384] bridge0: port 3(bond0) entered disabled state [ 702.896617][T12388] netlink: 'syz.4.2874': attribute type 4 has an invalid length. [ 702.908336][T12384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.922347][T12384] device bond_slave_1 left promiscuous mode [ 702.929020][T12388] netlink: 'syz.4.2874': attribute type 8 has an invalid length. [ 702.938136][T12388] netlink: 109560 bytes leftover after parsing attributes in process `syz.4.2874'. [ 702.958918][T12384] bond0 (unregistering): Released all slaves [ 705.405996][T12447] netlink: 'syz.3.2897': attribute type 10 has an invalid length. [ 705.452246][T12447] team0: Device nlmon0 is of different type [ 705.519939][T12449] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 705.527836][T12449] #PF: supervisor instruction fetch in kernel mode [ 705.534378][T12449] #PF: error_code(0x0010) - not-present page [ 705.540417][T12449] PGD 74472067 P4D 74472067 PUD 0 [ 705.545598][T12449] Oops: 0010 [#1] PREEMPT SMP KASAN [ 705.550999][T12449] CPU: 0 PID: 12449 Comm: syz.2.2898 Not tainted syzkaller #0 [ 705.558501][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 705.568809][T12449] RIP: 0010:0x0 [ 705.572343][T12449] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 705.579826][T12449] RSP: 0018:ffffc90004e473d8 EFLAGS: 00010246 [ 705.585946][T12449] RAX: 1ffffffff17347a7 RBX: 1ffff920009c8e8c RCX: 0000000000000000 [ 705.593958][T12449] RDX: ffffc90004e47480 RSI: 0000000000000001 RDI: ffff888057f4c000 [ 705.602057][T12449] RBP: ffffc90004e474f0 R08: ffff888057f4c03f R09: 1ffff1100afe9807 [ 705.610077][T12449] R10: dffffc0000000000 R11: ffffed100afe9808 R12: ffffe8ffffc46c48 [ 705.618271][T12449] R13: ffffffff8b9a3d38 R14: 0000000000000000 R15: ffff888057f4c000 [ 705.626276][T12449] FS: 00007f6e816506c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 705.635232][T12449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.641924][T12449] CR2: ffffffffffffffd6 CR3: 000000005aa7d000 CR4: 00000000003506f0 [ 705.649924][T12449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 705.657935][T12449] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 705.665930][T12449] Call Trace: [ 705.669233][T12449] [ 705.672181][T12449] bond_xdp_xmit+0x31e/0x550 [ 705.676896][T12449] ? bond_xdp_xmit+0x94/0x550 [ 705.681655][T12449] ? bond_xdp+0x8c0/0x8c0 [ 705.686126][T12449] bq_xmit_all+0xca9/0x1120 [ 705.690830][T12449] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 705.696622][T12449] ? perf_trace_preemptirq_template+0x268/0x320 [ 705.703110][T12449] ? irqentry_enter+0x33/0x50 [ 705.707814][T12449] ? __dev_flush+0x1b0/0x1b0 [ 705.712434][T12449] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 705.718440][T12449] ? lock_chain_count+0x20/0x20 [ 705.723325][T12449] ? rcu_is_watching+0x11/0xa0 [ 705.728202][T12449] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.734394][T12449] ? lockdep_hardirqs_on+0x94/0x140 [ 705.739626][T12449] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.745820][T12449] ? bq_enqueue+0x129/0x3d0 [ 705.750374][T12449] bq_enqueue+0x338/0x3d0 [ 705.754739][T12449] dev_map_enqueue+0x1b4/0x330 [ 705.759542][T12449] xdp_do_redirect_frame+0x30c/0x650 [ 705.764863][T12449] bpf_test_run_xdp_live+0xa8b/0x1a90 [ 705.770276][T12449] ? 0xffffffffa0003e80 [ 705.774454][T12449] ? text_poke_copy+0x7b/0x90 [ 705.779232][T12449] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 705.784824][T12449] ? xdp_convert_md_to_buff+0x330/0x330 [ 705.790467][T12449] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 705.796791][T12449] ? bpf_test_init+0x119/0x140 [ 705.801596][T12449] ? xdp_convert_md_to_buff+0x5b/0x330 [ 705.807097][T12449] bpf_prog_test_run_xdp+0x757/0xf80 [ 705.812510][T12449] ? __lock_acquire+0x7c40/0x7c40 [ 705.817627][T12449] ? dev_put+0x80/0x80 [ 705.821735][T12449] ? dev_put+0x80/0x80 [ 705.825846][T12449] bpf_prog_test_run+0x31c/0x390 [ 705.830949][T12449] __sys_bpf+0x62b/0x780 [ 705.835233][T12449] ? bpf_link_show_fdinfo+0x380/0x380 [ 705.840657][T12449] ? lock_chain_count+0x20/0x20 [ 705.845554][T12449] __x64_sys_bpf+0x78/0x90 [ 705.850012][T12449] do_syscall_64+0x4c/0xa0 [ 705.854493][T12449] ? clear_bhb_loop+0x60/0xb0 [ 705.859210][T12449] ? clear_bhb_loop+0x60/0xb0 [ 705.863926][T12449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.870053][T12449] RIP: 0033:0x7f6e8079e0d9 [ 705.874500][T12449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.894241][T12449] RSP: 002b:00007f6e81650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 705.902713][T12449] RAX: ffffffffffffffda RBX: 00007f6e80a25fa0 RCX: 00007f6e8079e0d9 [ 705.910741][T12449] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 705.918859][T12449] RBP: 00007f6e80835024 R08: 0000000000000000 R09: 0000000000000000 [ 705.927126][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.935224][T12449] R13: 00007f6e80a26038 R14: 00007f6e80a25fa0 R15: 00007ffe94694dd8 [ 705.943259][T12449] [ 705.946333][T12449] Modules linked in: [ 705.950393][T12449] CR2: 0000000000000000 [ 705.954580][T12449] ---[ end trace 0000000000000000 ]--- [ 705.960146][T12449] RIP: 0010:0x0 [ 705.963658][T12449] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 705.971072][T12449] RSP: 0018:ffffc90004e473d8 EFLAGS: 00010246 [ 705.977339][T12449] RAX: 1ffffffff17347a7 RBX: 1ffff920009c8e8c RCX: 0000000000000000 [ 705.985351][T12449] RDX: ffffc90004e47480 RSI: 0000000000000001 RDI: ffff888057f4c000 [ 705.993359][T12449] RBP: ffffc90004e474f0 R08: ffff888057f4c03f R09: 1ffff1100afe9807 [ 706.001449][T12449] R10: dffffc0000000000 R11: ffffed100afe9808 R12: ffffe8ffffc46c48 [ 706.009882][T12449] R13: ffffffff8b9a3d38 R14: 0000000000000000 R15: ffff888057f4c000 [ 706.018400][T12449] FS: 00007f6e816506c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 706.027529][T12449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.034145][T12449] CR2: ffffffffffffffd6 CR3: 000000005aa7d000 CR4: 00000000003506f0 [ 706.042246][T12449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 706.050239][T12449] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 706.058671][T12449] Kernel panic - not syncing: Fatal exception in interrupt [ 706.066475][T12449] Kernel Offset: disabled [ 706.070852][T12449] Rebooting in 86400 seconds..