last executing test programs: 26m2.522146293s ago: executing program 4 (id=8702): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 26m2.22334241s ago: executing program 4 (id=8706): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1a41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) 26m0.390036435s ago: executing program 4 (id=8710): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 26m0.095206912s ago: executing program 4 (id=8711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 25m59.697624362s ago: executing program 4 (id=8715): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 25m59.212213103s ago: executing program 4 (id=8718): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 25m44.02320074s ago: executing program 32 (id=8718): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 20m33.607665759s ago: executing program 0 (id=10231): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)='.\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 20m33.369994215s ago: executing program 0 (id=10224): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 20m33.15888441s ago: executing program 0 (id=10226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 20m33.002684653s ago: executing program 0 (id=10229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x2000000000000052, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)="14", 0x1}], 0x1}, 0x0) 20m32.777929219s ago: executing program 0 (id=10232): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x0, 0xfffffffa, 0x2}, {0x200002, 0x3}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x20) 20m32.567071914s ago: executing program 0 (id=10243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9b00cb5d07022575f37538e46558"], 0xca) 20m17.445725699s ago: executing program 33 (id=10243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9b00cb5d07022575f37538e46558"], 0xca) 20.793404597s ago: executing program 1 (id=16182): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb2001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x4869, 0x6, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xe872}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000100)="de19f496ca4908ffcc8049bc7dae9c6a1d", 0x11}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) 20.370808017s ago: executing program 1 (id=16185): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, 0x7f, 0x0, 0x0, 0x10, &(0x7f0000000500), &(0x7f0000000ac0), 0x8, 0x800080, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffed968ef4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 17.199082253s ago: executing program 1 (id=16202): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@multicast]}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe", 0x6}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 16.969434629s ago: executing program 1 (id=16194): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 16.619016978s ago: executing program 1 (id=16199): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x83, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7910109800f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.189234068s ago: executing program 1 (id=16203): perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0xf, 0x9, 0xb, 0x4, 0x0, 0x2, 0x4, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x59, 0x100000001}, 0x1, 0x4, 0x8, 0x6, 0xfe, 0x9, 0x3ff, 0x0, 0x7edf, 0x0, 0x100000001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x61) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 11.094275211s ago: executing program 5 (id=16212): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r1, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 10.654339812s ago: executing program 5 (id=16215): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0xfffffffc, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000001001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 8.442425205s ago: executing program 6 (id=16217): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) 8.442092635s ago: executing program 5 (id=16218): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x7fff}, 0x14100, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="81fefff4c8"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 8.051533495s ago: executing program 6 (id=16219): r0 = perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000005c0)=""/217, 0x35, 0xd9, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000004000000001800000000000001000000", @ANYRES32, @ANYBLOB="0200000000000000000003000000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"], 0x50) 8.050785905s ago: executing program 5 (id=16230): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) 7.993260016s ago: executing program 2 (id=16220): socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 7.820296691s ago: executing program 6 (id=16222): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x16, 0x0, 0x0) 7.44856691s ago: executing program 3 (id=16223): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x3}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffee4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 7.081164429s ago: executing program 3 (id=16224): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='&\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x2f, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b70600000000", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.080025849s ago: executing program 2 (id=16236): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 3.846445417s ago: executing program 3 (id=16225): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, 0x7f, 0x0, 0x0, 0x10, &(0x7f0000000500), &(0x7f0000000ac0), 0x8, 0x800080, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffed968ef4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.841266827s ago: executing program 6 (id=16238): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f91124fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.829432777s ago: executing program 2 (id=16226): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.480607736s ago: executing program 2 (id=16228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3.259561241s ago: executing program 3 (id=16229): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r2) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 811.562201ms ago: executing program 34 (id=16203): perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0xf, 0x9, 0xb, 0x4, 0x0, 0x2, 0x4, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x59, 0x100000001}, 0x1, 0x4, 0x8, 0x6, 0xfe, 0x9, 0x3ff, 0x0, 0x7edf, 0x0, 0x100000001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x61) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 711.382843ms ago: executing program 6 (id=16232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) close(0x3) close(0x4) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 591.684086ms ago: executing program 5 (id=16233): perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x8916, 0xffffffffffffffff) 587.558946ms ago: executing program 3 (id=16244): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x430, 0x2, 0xfffffffe, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2c}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20a1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x0, 0xff}, 0x10018c, 0x1, 0x1002, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 555.268167ms ago: executing program 2 (id=16234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) 405.7949ms ago: executing program 3 (id=16235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10002) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f000000089090000000283fcf91a82963d2bd4b836954268e611", 0x2c}, {&(0x7f0000000240)="7cdb015fbb1990080000006a837b6487d32d2fb46cbd1523147f0741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b4a6efb03d0a69ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe98ba01cb61fdd3c53bdba305901d7103513c9c2b71ea428a38f832416f3ca22ccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68ddff0edf9f2d21b53644c04dee00e429612b41cd862603e9abc6533e101497f9c870000ccc84a51ff1f965d390a4d51d9353d0d2717fa6ff8ee2132fa71c2cfc5db5e8cdf2f", 0xf0}, {&(0x7f0000001b40)="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", 0xe2e}], 0x3}, 0x2004408d) 481.36µs ago: executing program 6 (id=16237): socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 252.96µs ago: executing program 2 (id=16239): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x60, 0x0, 0x0, 0x8, 0xf, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x140, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 0s ago: executing program 5 (id=16240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x0, 0x86, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1b, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x82a7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) kernel console output (not intermixed with test programs): params data found [ 1424.232119][T28622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.239337][T28622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.247757][T28622] device bridge_slave_0 entered promiscuous mode [ 1424.263663][T28622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.271079][T28622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.279613][T28622] device bridge_slave_1 entered promiscuous mode [ 1424.304585][T28622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.316421][T28622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.346270][T28622] team0: Port device team_slave_0 added [ 1424.354843][T28622] team0: Port device team_slave_1 added [ 1424.376582][T28622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.383740][T28622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.410147][T28622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.449630][T20293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.466195][T28622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.473876][T28622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.505610][T28622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.551919][T20293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.576986][T28622] device hsr_slave_0 entered promiscuous mode [ 1424.584420][T28622] device hsr_slave_1 entered promiscuous mode [ 1424.628492][T20293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.687911][T20293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.794094][T28622] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1424.839448][T28622] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1424.864936][T28622] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1424.904683][T28622] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1424.976557][T28622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.983795][T28622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.991332][T28622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.998492][T28622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.095343][T20288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.113182][T20288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.256449][T28622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.315332][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1425.333005][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1425.349291][T28622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.412471][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1425.422026][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1425.432702][T20271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.439859][T20271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.448180][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1425.451297][T25595] Bluetooth: hci2: command 0x041b tx timeout [ 1425.462344][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1425.463754][T20271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.477525][T20271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.486085][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1425.525182][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1425.540930][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1425.562438][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1425.607634][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1425.620614][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1425.629785][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1425.648498][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1425.669338][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1425.683064][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1425.698299][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1425.738384][T28622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1426.249709][T20293] device hsr_slave_0 left promiscuous mode [ 1426.259619][T20293] device hsr_slave_1 left promiscuous mode [ 1426.274318][T20293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.286268][T20293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1426.298183][T20293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1426.309104][T20293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.322155][T20293] device bridge_slave_1 left promiscuous mode [ 1426.328495][T20293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.355429][T20293] device bridge_slave_0 left promiscuous mode [ 1426.364498][T20293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.409873][T20293] device veth1_macvtap left promiscuous mode [ 1426.426962][T20293] device veth0_macvtap left promiscuous mode [ 1426.434808][T20293] device veth1_vlan left promiscuous mode [ 1426.448304][T20293] device veth0_vlan left promiscuous mode [ 1427.174229][T20293] team0 (unregistering): Port device team_slave_1 removed [ 1427.220392][T20293] team0 (unregistering): Port device team_slave_0 removed [ 1427.264721][T20293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.314787][T20293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.530206][T25595] Bluetooth: hci2: command 0x040f tx timeout [ 1427.662450][T20293] bond0 (unregistering): Released all slaves [ 1427.791993][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1427.799566][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1427.825607][T28622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.439357][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1428.448671][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1428.476581][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1428.492053][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1428.515141][T28622] device veth0_vlan entered promiscuous mode [ 1428.524119][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1428.533811][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1428.548970][T28622] device veth1_vlan entered promiscuous mode [ 1428.586691][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1428.596082][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1428.605076][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1428.615266][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1428.627693][T28622] device veth0_macvtap entered promiscuous mode [ 1428.641101][T28622] device veth1_macvtap entered promiscuous mode [ 1428.659696][T28622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.676659][T28622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.687372][T28622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.703405][T28622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.717477][T28622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.732054][T27050] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1428.751216][T27050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1428.764778][T27050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1428.776689][T27050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1428.791400][T28622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.806342][T28622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.818666][T28622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.830644][T28622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.841298][T28622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.853759][T28622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.865727][T28622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1428.876662][T28622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.888909][T28622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.899425][T27050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1428.909548][T27050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1428.923321][T28622] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.933289][T28622] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.943687][T28622] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.953149][T28622] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.062580][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.085256][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.094173][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1429.124647][T20293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.134582][T20293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.143434][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1429.610226][T25595] Bluetooth: hci2: command 0x0419 tx timeout [ 1430.190683][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.197237][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.648809][T28720] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1430.826589][T28721] device syzkaller0 entered promiscuous mode [ 1436.760267][T28767] delete_channel: no stack [ 1447.255883][T28827] netlink: 'syz.6.10311': attribute type 1 has an invalid length. [ 1447.264201][T28827] netlink: 'syz.6.10311': attribute type 4 has an invalid length. [ 1447.273018][T28827] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.10311'. [ 1449.798193][T28897] device syzkaller0 entered promiscuous mode [ 1452.799153][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1455.334759][T28981] netlink: 16083 bytes leftover after parsing attributes in process `syz.6.10349'. [ 1459.223930][T29056] netlink: 'syz.3.10376': attribute type 3 has an invalid length. [ 1459.246654][T29056] netlink: 'syz.3.10376': attribute type 1 has an invalid length. [ 1459.270148][T29056] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.10376'. [ 1460.730046][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1462.726378][T29131] netlink: 'syz.1.10401': attribute type 2 has an invalid length. [ 1462.797229][T29131] netlink: 'syz.1.10401': attribute type 1 has an invalid length. [ 1462.811016][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1462.868501][T29131] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.10401'. [ 1464.891063][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1466.970165][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1469.050123][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1469.227520][ T4287] Bluetooth: hci5: Malformed LE Event: 0x1d [ 1471.130427][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1471.540706][ T4287] Bluetooth: hci4: ISO packet too small [ 1472.544067][T29321] netlink: 143932 bytes leftover after parsing attributes in process `syz.5.10458'. [ 1472.597867][T29321] netlink: zone id is out of range [ 1472.643373][T29321] netlink: zone id is out of range [ 1472.701326][T29321] netlink: zone id is out of range [ 1472.772101][T29321] netlink: zone id is out of range [ 1472.844211][T29321] netlink: zone id is out of range [ 1472.921566][T29321] netlink: zone id is out of range [ 1472.976433][T29321] netlink: zone id is out of range [ 1473.021502][T29321] netlink: zone id is out of range [ 1473.026993][T29321] netlink: zone id is out of range [ 1473.134836][T29321] netlink: zone id is out of range [ 1473.210471][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1473.677612][T29346] netlink: 194236 bytes leftover after parsing attributes in process `syz.5.10464'. [ 1475.290041][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1475.950351][T29390] netlink: 'syz.3.10475': attribute type 10 has an invalid length. [ 1475.958373][T29390] netlink: 'syz.3.10475': attribute type 11 has an invalid length. [ 1476.064897][T29390] netlink: 5145 bytes leftover after parsing attributes in process `syz.3.10475'. [ 1477.370606][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1479.450167][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1481.348283][T29487] netlink: 'syz.6.10503': attribute type 11 has an invalid length. [ 1481.376988][T29487] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.10503'. [ 1481.443998][T29486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.494230][ T4287] Bluetooth: hci1: Malformed HCI Event [ 1481.530149][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1482.573719][T29512] netlink: 'syz.5.10514': attribute type 1 has an invalid length. [ 1482.639392][T29512] netlink: 'syz.5.10514': attribute type 4 has an invalid length. [ 1482.711267][T29512] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.10514'. [ 1482.800210][T29513] netlink: 'syz.5.10514': attribute type 1 has an invalid length. [ 1482.808853][T29513] netlink: 'syz.5.10514': attribute type 4 has an invalid length. [ 1482.820637][T29513] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.10514'. [ 1483.184432][T29525] netlink: 'syz.5.10520': attribute type 29 has an invalid length. [ 1483.252370][T29525] netlink: 'syz.5.10520': attribute type 29 has an invalid length. [ 1483.281340][T29530] netlink: 'syz.5.10520': attribute type 29 has an invalid length. [ 1483.342736][T29531] netlink: 'syz.5.10520': attribute type 29 has an invalid length. [ 1483.458328][T29525] netlink: 'syz.5.10520': attribute type 29 has an invalid length. [ 1483.610081][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1483.730364][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1485.027727][ T4287] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 1485.690299][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1487.050116][ T4287] Bluetooth: hci3: command 0x2021 tx timeout [ 1487.458799][T29574] syz.3.10542[29574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1487.458975][T29574] syz.3.10542[29574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1487.472686][T29575] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.10539'. [ 1487.550565][T25595] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 1487.769979][T25595] Bluetooth: hci5: command 0x206e tx timeout [ 1487.874394][T29589] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10548'. [ 1488.204177][T29591] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.10550'. [ 1488.280358][T25595] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 1489.148028][T29589] device hsr_slave_0 left promiscuous mode [ 1489.189402][T29589] device hsr_slave_1 left promiscuous mode [ 1489.711365][T29616] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10561'. [ 1489.860048][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1490.337380][ T4287] Bluetooth: hci2: command 0x2021 tx timeout [ 1491.615448][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.622126][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.930148][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1494.010031][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1496.090640][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1496.196002][T29691] device syzkaller0 entered promiscuous mode [ 1497.329836][ T4287] Bluetooth: hci4: unexpected subevent 0x06 length: 150 > 10 [ 1497.940975][T29728] netlink: 126324 bytes leftover after parsing attributes in process `syz.5.10605'. [ 1498.170371][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1499.374816][ T4287] Bluetooth: hci4: command 0x2021 tx timeout [ 1500.250622][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1500.625463][T29756] sctp: [Deprecated]: syz.1.10613 (pid 29756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1500.625463][T29756] Use struct sctp_sack_info instead [ 1502.330089][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1504.420410][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1506.490309][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1508.570017][ T4287] Bluetooth: hci5: command 0x206e tx timeout [ 1509.983746][T29901] netlink: 'syz.5.10678': attribute type 4 has an invalid length. [ 1509.992090][T29901] netlink: 'syz.5.10678': attribute type 7 has an invalid length. [ 1510.001753][T29901] netlink: 194740 bytes leftover after parsing attributes in process `syz.5.10678'. [ 1513.874224][T29948] netlink: 'syz.3.10694': attribute type 4 has an invalid length. [ 1513.882771][T29948] netlink: 'syz.3.10694': attribute type 7 has an invalid length. [ 1513.891768][T29948] netlink: 194740 bytes leftover after parsing attributes in process `syz.3.10694'. [ 1514.853462][T27050] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1516.684110][T29970] netlink: 'syz.2.10705': attribute type 8 has an invalid length. [ 1516.710229][T29970] netlink: 'syz.2.10705': attribute type 9 has an invalid length. [ 1516.718307][T29970] netlink: 'syz.2.10705': attribute type 10 has an invalid length. [ 1516.790287][T29970] netlink: 'syz.2.10705': attribute type 11 has an invalid length. [ 1516.798315][T29970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10705'. [ 1517.311826][T29981] netlink: 'syz.6.10710': attribute type 4 has an invalid length. [ 1517.319834][T29981] netlink: 'syz.6.10710': attribute type 7 has an invalid length. [ 1517.327958][T29981] netlink: 194740 bytes leftover after parsing attributes in process `syz.6.10710'. [ 1517.847857][T30000] netlink: 15119 bytes leftover after parsing attributes in process `syz.6.10718'. [ 1519.118714][T30017] netlink: 'syz.1.10721': attribute type 4 has an invalid length. [ 1519.191588][T30017] netlink: 'syz.1.10721': attribute type 7 has an invalid length. [ 1519.220958][T30017] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.10721'. [ 1519.429096][T30021] netlink: 'syz.5.10723': attribute type 8 has an invalid length. [ 1519.437327][T30021] netlink: 'syz.5.10723': attribute type 9 has an invalid length. [ 1519.453152][T30021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10723'. [ 1520.096010][T30035] netlink: 15119 bytes leftover after parsing attributes in process `syz.5.10732'. [ 1522.724689][T30077] device syzkaller0 entered promiscuous mode [ 1522.761101][T30079] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.10751'. [ 1524.701146][T30110] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10778'. [ 1524.745557][T30114] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.10768'. [ 1524.837530][T30117] device syzkaller0 entered promiscuous mode [ 1528.083740][T30166] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.10784'. [ 1528.596003][T30172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1531.304448][T30202] net_ratelimit: 3663 callbacks suppressed [ 1531.304487][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.379437][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.388902][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.398351][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.408017][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.417489][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.426855][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.436355][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.445878][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.455366][T30202] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.796362][T30206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.986674][T30246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.480000][ T4287] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 1537.286246][T30289] net_ratelimit: 6522 callbacks suppressed [ 1537.286308][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.382167][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.392259][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.401865][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.411510][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.421048][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.430783][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.440425][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.449933][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.459391][T30289] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1537.532543][T25595] Bluetooth: hci3: command 0x201b tx timeout [ 1539.461871][ T4287] Bluetooth: hci4: unexpected subevent 0x05 length: 150 > 12 [ 1540.966375][T30312] validate_nla: 2 callbacks suppressed [ 1540.966458][T30312] netlink: 'syz.2.10849': attribute type 29 has an invalid length. [ 1540.981427][T30312] netlink: 'syz.2.10849': attribute type 29 has an invalid length. [ 1541.529953][ T4287] Bluetooth: hci4: command 0x201b tx timeout [ 1542.299966][T30322] net_ratelimit: 4345 callbacks suppressed [ 1542.300005][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.315849][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.325416][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.335077][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.344574][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.354164][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.363778][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.373417][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.383107][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.392644][T30322] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1542.706714][T30331] device veth1_macvtap left promiscuous mode [ 1542.734704][T30331] device macsec0 entered promiscuous mode [ 1542.800250][T30337] device veth1_macvtap entered promiscuous mode [ 1544.613966][T30361] netlink: 'syz.1.10870': attribute type 29 has an invalid length. [ 1544.627675][T30361] netlink: 'syz.1.10870': attribute type 29 has an invalid length. [ 1544.980091][T25595] Bluetooth: hci2: command 0x0406 tx timeout [ 1545.985726][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1546.404696][T30376] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 1546.429301][T30376] netlink: 'syz.1.10889': attribute type 8 has an invalid length. [ 1546.437963][T30376] netlink: 'syz.1.10889': attribute type 7 has an invalid length. [ 1546.446394][T30376] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.10889'. [ 1546.659103][T30388] device veth1_macvtap left promiscuous mode [ 1546.668360][T30388] device macsec0 entered promiscuous mode [ 1546.756396][T30389] device veth1_macvtap entered promiscuous mode [ 1546.793013][T20288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1548.836165][T30419] netlink: 'syz.6.10894': attribute type 3 has an invalid length. [ 1548.930781][T30419] netlink: 'syz.6.10894': attribute type 8 has an invalid length. [ 1548.979012][T30419] netlink: 'syz.6.10894': attribute type 7 has an invalid length. [ 1548.987548][T30419] netlink: 194740 bytes leftover after parsing attributes in process `syz.6.10894'. [ 1550.406368][T30433] device veth1_macvtap left promiscuous mode [ 1550.446338][T30433] device macsec0 entered promiscuous mode [ 1550.483865][T30437] device veth1_macvtap entered promiscuous mode [ 1551.633189][T30449] device veth1_macvtap left promiscuous mode [ 1551.746738][T30449] device veth1_macvtap entered promiscuous mode [ 1551.782579][T27050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1553.033879][T30463] device syzkaller0 entered promiscuous mode [ 1553.060308][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1553.066687][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.192479][T30467] netlink: 'syz.3.10913': attribute type 9 has an invalid length. [ 1553.209291][T30467] netlink: 'syz.3.10913': attribute type 10 has an invalid length. [ 1553.230050][T30467] netlink: 'syz.3.10913': attribute type 11 has an invalid length. [ 1554.480899][T30480] netlink: 'syz.6.10931': attribute type 9 has an invalid length. [ 1554.500119][T30480] netlink: 'syz.6.10931': attribute type 10 has an invalid length. [ 1554.527405][T30480] netlink: 'syz.6.10931': attribute type 11 has an invalid length. [ 1556.180359][T30508] device syzkaller0 entered promiscuous mode [ 1556.658862][T30520] device syzkaller0 entered promiscuous mode [ 1558.207390][T30559] device syzkaller0 entered promiscuous mode [ 1558.610354][T30562] device syzkaller0 entered promiscuous mode [ 1564.159683][T30679] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.11006'. [ 1564.212361][T30681] netlink: 'syz.3.11010': attribute type 10 has an invalid length. [ 1564.232771][T30681] device geneve0 entered promiscuous mode [ 1564.314171][T30681] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1564.726663][T30695] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.11014'. [ 1565.601103][T30719] netlink: 56843 bytes leftover after parsing attributes in process `syz.6.11023'. [ 1565.901384][T30723] netlink: 'syz.1.11026': attribute type 10 has an invalid length. [ 1565.993552][T30723] device geneve0 entered promiscuous mode [ 1566.187241][T30723] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1566.676064][T30732] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.11030'. [ 1567.113423][T30742] netlink: 'syz.5.11034': attribute type 11 has an invalid length. [ 1567.123503][T30742] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.11034'. [ 1567.173679][T30742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1567.443541][T25595] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 1567.945696][T30767] netlink: 'syz.5.11044': attribute type 10 has an invalid length. [ 1568.002296][T30767] device geneve0 entered promiscuous mode [ 1568.080705][T30767] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1568.127142][T30769] netlink: 134056 bytes leftover after parsing attributes in process `syz.6.11048'. [ 1568.452918][T30781] netlink: 'syz.5.11052': attribute type 3 has an invalid length. [ 1568.518515][T30784] netlink: 'syz.6.11054': attribute type 11 has an invalid length. [ 1568.545476][T30781] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.11052'. [ 1568.570351][T30784] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.11054'. [ 1569.413164][T30787] netlink: 'syz.1.11057': attribute type 11 has an invalid length. [ 1569.458256][T30787] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11057'. [ 1569.507207][T30783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.614601][T30787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.821030][T25595] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1570.447269][T25595] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 1571.095941][T30818] netlink: 'syz.6.11065': attribute type 10 has an invalid length. [ 1571.786163][T30818] device geneve0 entered promiscuous mode [ 1571.825751][T30818] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1571.991444][T30820] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.11068'. [ 1572.262597][T30830] netlink: 'syz.5.11088': attribute type 10 has an invalid length. [ 1572.490059][ T4287] Bluetooth: hci5: command 0x206c tx timeout [ 1572.496448][T25595] Bluetooth: hci5: Opcode 0x206c failed: -110 [ 1572.549533][T30836] netlink: 'syz.1.11071': attribute type 3 has an invalid length. [ 1572.616197][T30836] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.11071'. [ 1572.893307][T30841] netlink: 'syz.5.11075': attribute type 11 has an invalid length. [ 1572.962662][T30841] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.11075'. [ 1573.011543][T30843] netlink: 'syz.1.11092': attribute type 10 has an invalid length. [ 1573.074397][T30838] netlink: 'syz.3.11073': attribute type 11 has an invalid length. [ 1573.105373][T30838] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11073'. [ 1573.188928][T30838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1573.829046][T30840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1574.187448][T30806] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 1574.569959][T25595] Bluetooth: hci5: Opcode 0x2046 failed: -110 [ 1574.570010][T30806] Bluetooth: hci5: command 0x2046 tx timeout [ 1574.932260][T30873] netlink: 'syz.1.11094': attribute type 29 has an invalid length. [ 1574.968876][T30873] netlink: 'syz.1.11094': attribute type 29 has an invalid length. [ 1577.010597][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1577.444515][T30885] netlink: 'syz.3.11096': attribute type 11 has an invalid length. [ 1577.473145][T30885] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11096'. [ 1577.781434][T30883] netlink: 'syz.6.11095': attribute type 11 has an invalid length. [ 1577.820505][T30883] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.11095'. [ 1577.881172][T30883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1578.369741][T30884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1578.581288][T30893] netlink: 'syz.6.11112': attribute type 11 has an invalid length. [ 1578.597209][T30893] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.11112'. [ 1578.626443][T30893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1580.878641][T30914] netlink: 'syz.5.11111': attribute type 29 has an invalid length. [ 1580.887667][T30914] netlink: 'syz.5.11111': attribute type 29 has an invalid length. [ 1585.253674][T30951] netlink: 'syz.3.11125': attribute type 29 has an invalid length. [ 1585.334502][T30951] netlink: 'syz.3.11125': attribute type 29 has an invalid length. [ 1589.789309][T30996] delete_channel: no stack [ 1593.968418][T31037] delete_channel: no stack [ 1600.023447][T31160] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.11212'. [ 1601.108223][T31180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1601.115657][T31180] IPv6: NLM_F_CREATE should be set when creating new route [ 1601.123059][T31180] IPv6: NLM_F_CREATE should be set when creating new route [ 1601.130387][T31180] IPv6: NLM_F_CREATE should be set when creating new route [ 1602.129239][T31198] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.11228'. [ 1603.265283][T31217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1603.273134][T31217] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.281173][T31217] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.288903][T31217] IPv6: NLM_F_CREATE should be set when creating new route [ 1603.953964][T31229] net_ratelimit: 5496 callbacks suppressed [ 1603.953984][T31229] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1604.165843][T31233] netlink: 'syz.5.11242': attribute type 2 has an invalid length. [ 1604.211264][T31233] netlink: 10 bytes leftover after parsing attributes in process `syz.5.11242'. [ 1604.268227][T31237] netlink: 'syz.6.11245': attribute type 3 has an invalid length. [ 1604.287338][T31237] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.11245'. [ 1605.829850][T31253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1605.837706][T31253] IPv6: NLM_F_CREATE should be set when creating new route [ 1605.845311][T31253] IPv6: NLM_F_CREATE should be set when creating new route [ 1605.852922][T31253] IPv6: NLM_F_CREATE should be set when creating new route [ 1606.045325][T31259] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1606.640389][T31268] netlink: 'syz.5.11261': attribute type 3 has an invalid length. [ 1606.663765][T31268] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11261'. [ 1606.810858][T31274] netlink: 'syz.6.11265': attribute type 2 has an invalid length. [ 1606.840315][T31274] netlink: 10 bytes leftover after parsing attributes in process `syz.6.11265'. [ 1608.141862][T31298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1608.506307][T20288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1608.556202][T31302] netlink: 'syz.1.11276': attribute type 3 has an invalid length. [ 1608.580242][T31302] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11276'. [ 1608.728531][T31309] netlink: 'syz.6.11278': attribute type 3 has an invalid length. [ 1608.776479][T31309] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.11278'. [ 1610.485839][T31340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1611.183144][T31345] netlink: 'syz.3.11291': attribute type 3 has an invalid length. [ 1611.222383][T31345] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11291'. [ 1612.493037][T31364] netlink: 'syz.3.11310': attribute type 3 has an invalid length. [ 1612.511092][T31364] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11310'. [ 1613.825876][T31376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1614.150741][T31384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1614.495169][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.503207][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.664065][T31394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1615.638529][T31408] netlink: 'syz.5.11312': attribute type 3 has an invalid length. [ 1615.670911][T31408] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11312'. [ 1615.825644][T31416] netlink: 'syz.6.11316': attribute type 3 has an invalid length. [ 1615.874737][T31416] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.11316'. [ 1617.689168][T31454] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11336'. [ 1617.758929][T31457] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11336'. [ 1618.609661][T25595] Bluetooth: hci5: Dropping invalid advertising data [ 1618.616578][T25595] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1618.632663][T31455] netlink: 'syz.2.11337': attribute type 3 has an invalid length. [ 1618.660427][T31458] netlink: 'syz.6.11338': attribute type 3 has an invalid length. [ 1618.681201][T31455] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11337'. [ 1618.699462][T31458] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.11338'. [ 1620.122041][T31496] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11352'. [ 1620.168123][T31496] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11352'. [ 1620.236608][T25595] Bluetooth: hci4: Dropping invalid advertising data [ 1620.243734][T25595] Bluetooth: hci4: unknown advertising packet type: 0xff [ 1620.243765][T25595] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1620.288217][T31498] netlink: 'syz.2.11354': attribute type 3 has an invalid length. [ 1620.297083][T31498] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11354'. [ 1620.679040][T31507] netlink: 'syz.1.11368': attribute type 3 has an invalid length. [ 1620.710892][T31507] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11368'. [ 1621.427408][T31519] netlink: 'syz.6.11373': attribute type 3 has an invalid length. [ 1621.447482][T31519] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.11373'. [ 1622.653599][T25595] Bluetooth: hci2: Dropping invalid advertising data [ 1622.660966][T25595] Bluetooth: hci2: unknown advertising packet type: 0xff [ 1622.660996][T25595] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1624.037071][T25595] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1624.044839][T25595] Bluetooth: hci3: Invalid handle: 0xffff > 0x0eff [ 1625.392594][T31571] netlink: 'syz.3.11381': attribute type 3 has an invalid length. [ 1625.440700][T31571] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11381'. [ 1625.858529][T31587] netlink: 'syz.3.11389': attribute type 25 has an invalid length. [ 1625.928668][T31587] netlink: 'syz.3.11389': attribute type 28 has an invalid length. [ 1626.610262][T30806] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1626.617906][T30806] Bluetooth: hci2: Invalid handle: 0xffff > 0x0eff [ 1626.911108][T31610] netlink: 'syz.6.11397': attribute type 1 has an invalid length. [ 1626.940216][T31610] netlink: 'syz.6.11397': attribute type 4 has an invalid length. [ 1626.988711][T31610] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.11397'. [ 1626.999656][T31612] netlink: 'syz.6.11397': attribute type 1 has an invalid length. [ 1627.022756][T31612] netlink: 'syz.6.11397': attribute type 4 has an invalid length. [ 1627.043019][T31612] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.11397'. [ 1627.278215][T31615] netlink: 'syz.3.11401': attribute type 3 has an invalid length. [ 1627.310329][T31615] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11401'. [ 1627.477960][T31629] netlink: 'syz.2.11405': attribute type 25 has an invalid length. [ 1627.497041][T31629] netlink: 'syz.2.11405': attribute type 28 has an invalid length. [ 1628.135802][T31635] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.11417'. [ 1628.564083][T31655] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11413'. [ 1628.596558][T31655] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11413'. [ 1630.449608][T31685] validate_nla: 5 callbacks suppressed [ 1630.449651][T31685] netlink: 'syz.6.11425': attribute type 3 has an invalid length. [ 1630.473964][T31685] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.11425'. [ 1631.045787][T31688] netlink: 'syz.5.11429': attribute type 2 has an invalid length. [ 1631.110318][T31688] netlink: 'syz.5.11429': attribute type 1 has an invalid length. [ 1631.137333][T31688] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.11429'. [ 1631.925364][T31713] netlink: 'syz.6.11448': attribute type 2 has an invalid length. [ 1631.996708][T31713] netlink: 'syz.6.11448': attribute type 1 has an invalid length. [ 1632.082428][T31713] netlink: 170140 bytes leftover after parsing attributes in process `syz.6.11448'. [ 1633.607279][T31728] netlink: 'syz.3.11442': attribute type 3 has an invalid length. [ 1633.688867][T31728] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11442'. [ 1635.079618][T31743] netlink: 'syz.2.11461': attribute type 3 has an invalid length. [ 1635.088473][T31743] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11461'. [ 1635.358514][T31748] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.11464'. [ 1635.412505][T31748] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1635.662101][T31753] netlink: 'syz.3.11466': attribute type 3 has an invalid length. [ 1635.691983][T31753] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11466'. [ 1636.275983][T31766] device syzkaller0 entered promiscuous mode [ 1638.838880][T31792] netlink: 'syz.5.11473': attribute type 3 has an invalid length. [ 1638.869120][T31792] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11473'. [ 1639.076285][T31794] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.11472'. [ 1639.685533][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1641.339488][T31783] ¥: port 1(team0) entered blocking state [ 1641.348697][T31783] ¥: port 1(team0) entered disabled state [ 1641.356679][T31783] device team0 entered promiscuous mode [ 1641.362643][T31783] device team_slave_0 entered promiscuous mode [ 1641.369007][T31783] device team_slave_1 entered promiscuous mode [ 1641.390030][T31784] device team0 left promiscuous mode [ 1641.395379][T31784] device team_slave_0 left promiscuous mode [ 1641.402706][T31784] device team_slave_1 left promiscuous mode [ 1641.408922][T31784] ¥: port 1(team0) entered disabled state [ 1641.486050][T31794] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1641.724020][T31802] netlink: 'syz.3.11487': attribute type 3 has an invalid length. [ 1641.739662][T31802] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11487'. [ 1641.990568][T31807] ¥: port 1(team0) entered blocking state [ 1641.998218][T31807] ¥: port 1(team0) entered disabled state [ 1642.017313][T31807] device team0 entered promiscuous mode [ 1642.038797][T31808] netlink: 'syz.1.11491': attribute type 3 has an invalid length. [ 1642.044087][T31807] device team_slave_0 entered promiscuous mode [ 1642.068674][T31808] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11491'. [ 1642.108991][T31807] device team_slave_1 entered promiscuous mode [ 1642.143243][T31813] device team0 left promiscuous mode [ 1642.156721][T31813] device team_slave_0 left promiscuous mode [ 1642.193945][T31813] device team_slave_1 left promiscuous mode [ 1642.229411][T31813] ¥: port 1(team0) entered disabled state [ 1643.313646][T31823] ¥: port 1(team0) entered blocking state [ 1643.338252][T31821] netlink: 'syz.6.11497': attribute type 3 has an invalid length. [ 1643.347354][T31823] ¥: port 1(team0) entered disabled state [ 1643.358727][T31821] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.11497'. [ 1643.380779][T31823] device team0 entered promiscuous mode [ 1643.386418][T31823] device team_slave_0 entered promiscuous mode [ 1643.405099][T31823] device team_slave_1 entered promiscuous mode [ 1643.424473][T31828] device team0 left promiscuous mode [ 1643.440177][T31828] device team_slave_0 left promiscuous mode [ 1643.446452][T31828] device team_slave_1 left promiscuous mode [ 1643.490579][T31828] ¥: port 1(team0) entered disabled state [ 1644.060404][T31836] device syzkaller0 entered promiscuous mode [ 1649.074963][T31863] ¥: port 1(team0) entered blocking state [ 1649.084998][T31863] ¥: port 1(team0) entered disabled state [ 1649.096285][T31863] device team0 entered promiscuous mode [ 1649.105559][T31863] device team_slave_0 entered promiscuous mode [ 1649.115415][T31863] device team_slave_1 entered promiscuous mode [ 1649.135354][T31864] device team0 left promiscuous mode [ 1649.143090][T31864] device team_slave_0 left promiscuous mode [ 1649.149197][T31864] device team_slave_1 left promiscuous mode [ 1649.162594][T31864] ¥: port 1(team0) entered disabled state [ 1649.347249][T31876] netlink: 'syz.2.11509': attribute type 25 has an invalid length. [ 1649.369948][T31876] netlink: 'syz.2.11509': attribute type 25 has an invalid length. [ 1649.598439][T31885] netlink: 'syz.1.11513': attribute type 1 has an invalid length. [ 1649.638983][T31885] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.11513'. [ 1652.879745][T31904] netlink: 'syz.5.11522': attribute type 2 has an invalid length. [ 1652.916584][T31904] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.11522'. [ 1653.234622][T31913] netlink: 'syz.1.11526': attribute type 25 has an invalid length. [ 1653.242964][T31913] netlink: 'syz.1.11526': attribute type 25 has an invalid length. [ 1654.251818][T31921] netlink: 'syz.5.11531': attribute type 1 has an invalid length. [ 1654.259729][T31921] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.11531'. [ 1656.120589][T31944] netlink: 'syz.6.11538': attribute type 2 has an invalid length. [ 1656.128502][T31944] netlink: 199848 bytes leftover after parsing attributes in process `syz.6.11538'. [ 1656.353407][T31952] netlink: 'syz.6.11541': attribute type 25 has an invalid length. [ 1656.389750][T31952] netlink: 'syz.6.11541': attribute type 25 has an invalid length. [ 1662.652473][T30806] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1664.635701][T30806] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1664.888682][T30806] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1668.038486][T30806] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1670.706362][T20288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1675.172735][T32272] netlink: 'syz.5.11678': attribute type 3 has an invalid length. [ 1675.233970][T32272] netlink: 'syz.5.11678': attribute type 1 has an invalid length. [ 1675.270122][T32272] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.11678'. [ 1675.932645][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.939160][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.742232][T32318] netlink: 'syz.2.11698': attribute type 3 has an invalid length. [ 1679.769906][T32318] netlink: 'syz.2.11698': attribute type 1 has an invalid length. [ 1679.792337][T32318] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.11698'. [ 1682.139385][T32357] netlink: 'syz.6.11715': attribute type 2 has an invalid length. [ 1682.161610][T32357] netlink: 'syz.6.11715': attribute type 2 has an invalid length. [ 1682.169517][T32357] netlink: 194740 bytes leftover after parsing attributes in process `syz.6.11715'. [ 1682.539751][T32369] netlink: 'syz.5.11722': attribute type 3 has an invalid length. [ 1682.548015][T32369] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11722'. [ 1682.905917][T32383] device syzkaller0 entered promiscuous mode [ 1682.948811][T32383] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 1684.115419][T32403] netlink: 'syz.3.11737': attribute type 2 has an invalid length. [ 1684.149607][T32403] netlink: 'syz.3.11737': attribute type 1 has an invalid length. [ 1684.158442][T32403] netlink: 'syz.3.11737': attribute type 8 has an invalid length. [ 1684.179949][T32403] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11737'. [ 1685.709675][T32432] netlink: 'syz.1.11753': attribute type 27 has an invalid length. [ 1685.917881][T30806] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 1687.059429][T32481] netlink: 'syz.6.11774': attribute type 2 has an invalid length. [ 1687.154108][T32481] netlink: 199848 bytes leftover after parsing attributes in process `syz.6.11774'. [ 1687.725436][T32487] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.11776'. [ 1688.351847][T30806] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 1688.665167][T25595] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 1690.014683][T25595] Bluetooth: hci3: command 0x0406 tx timeout [ 1691.434807][T32584] device syzkaller0 entered promiscuous mode [ 1691.490865][T32589] netlink: 'syz.6.11818': attribute type 27 has an invalid length. [ 1692.490132][T30806] Bluetooth: hci4: command 0x0406 tx timeout [ 1695.033508][T32635] netlink: 'syz.3.11837': attribute type 27 has an invalid length. [ 1695.417246][T32651] netlink: 'syz.5.11843': attribute type 2 has an invalid length. [ 1695.440313][T32651] netlink: 'syz.5.11843': attribute type 2 has an invalid length. [ 1695.470212][T32651] netlink: 194740 bytes leftover after parsing attributes in process `syz.5.11843'. [ 1695.762585][T32660] device syzkaller0 entered promiscuous mode [ 1698.561320][T32688] netlink: 'syz.1.11855': attribute type 3 has an invalid length. [ 1698.580077][T32688] netlink: 'syz.1.11855': attribute type 1 has an invalid length. [ 1698.588006][T32688] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.11855'. [ 1698.807802][T32694] netlink: 'syz.2.11862': attribute type 2 has an invalid length. [ 1698.858857][T32696] netlink: 'syz.3.11865': attribute type 3 has an invalid length. [ 1698.870098][T32694] netlink: 'syz.2.11862': attribute type 2 has an invalid length. [ 1698.885839][T32696] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11865'. [ 1698.896660][T32694] netlink: 194740 bytes leftover after parsing attributes in process `syz.2.11862'. [ 1699.886687][T32716] device syzkaller0 entered promiscuous mode [ 1703.684441][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1707.627409][ T319] device syzkaller0 entered promiscuous mode [ 1711.802516][ T361] netlink: 126324 bytes leftover after parsing attributes in process `syz.2.11922'. [ 1712.957422][ T376] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.11941'. [ 1715.956295][ T410] device syzkaller0 entered promiscuous mode [ 1719.188906][ T436] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.11954'. [ 1719.761695][T30806] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1719.923264][ T480] syz.6.11972[480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1719.930887][ T480] syz.6.11972[480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1720.265370][ T491] netlink: 'syz.2.11979': attribute type 1 has an invalid length. [ 1720.316181][ T491] netlink: 'syz.2.11979': attribute type 4 has an invalid length. [ 1720.336463][ T491] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11979'. [ 1720.353719][ T494] netlink: 'syz.3.11980': attribute type 29 has an invalid length. [ 1720.381596][ T495] netlink: 'syz.2.11979': attribute type 1 has an invalid length. [ 1720.400065][ T495] netlink: 'syz.2.11979': attribute type 4 has an invalid length. [ 1720.429974][ T495] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11979'. [ 1720.444420][ T494] netlink: 'syz.3.11980': attribute type 29 has an invalid length. [ 1720.453960][ T496] netlink: 'syz.3.11980': attribute type 29 has an invalid length. [ 1720.502572][ T497] netlink: 'syz.3.11980': attribute type 29 has an invalid length. [ 1720.552977][ T494] netlink: 'syz.3.11980': attribute type 29 has an invalid length. [ 1721.833632][T30806] Bluetooth: hci3: Malformed HCI Event [ 1722.290760][ T541] netlink: 'syz.3.11998': attribute type 11 has an invalid length. [ 1722.298777][ T541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11998'. [ 1722.452011][ T540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.519397][ T551] netlink: 'syz.2.12005': attribute type 29 has an invalid length. [ 1723.098105][ T571] netlink: 5145 bytes leftover after parsing attributes in process `syz.6.12014'. [ 1723.697109][ T584] netlink: 194236 bytes leftover after parsing attributes in process `syz.6.12021'. [ 1723.740119][ T584] netlink: zone id is out of range [ 1723.745429][ T584] netlink: zone id is out of range [ 1723.774392][ T584] netlink: get zone limit has 8 unknown bytes [ 1725.017924][ T610] netlink: 5145 bytes leftover after parsing attributes in process `syz.5.12031'. [ 1726.296788][ T628] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.12041'. [ 1726.312942][T30806] Bluetooth: hci5: ISO packet too small [ 1726.322731][ T628] netlink: zone id is out of range [ 1726.335574][ T628] netlink: zone id is out of range [ 1726.347465][ T628] netlink: zone id is out of range [ 1726.358106][ T628] netlink: zone id is out of range [ 1726.367556][ T628] netlink: zone id is out of range [ 1726.410308][ T628] netlink: zone id is out of range [ 1726.470274][ T628] netlink: zone id is out of range [ 1727.705227][T30806] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1731.022144][ T721] validate_nla: 8 callbacks suppressed [ 1731.022169][ T721] netlink: 'syz.1.12072': attribute type 10 has an invalid length. [ 1731.117406][ T721] netlink: 'syz.1.12072': attribute type 11 has an invalid length. [ 1731.242179][ T721] netlink: 5145 bytes leftover after parsing attributes in process `syz.1.12072'. [ 1734.228676][ T765] netlink: 'syz.6.12110': attribute type 3 has an invalid length. [ 1734.264944][ T765] netlink: 'syz.6.12110': attribute type 1 has an invalid length. [ 1734.278259][ T765] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.12110'. [ 1734.603839][T20288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1737.377324][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1737.383821][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.930084][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1738.668195][ T841] netlink: 16083 bytes leftover after parsing attributes in process `syz.5.12130'. [ 1740.009939][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1742.177267][T30806] Bluetooth: hci1: command 0x206e tx timeout [ 1744.250939][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1746.329954][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1748.409996][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1750.324463][ T980] netlink: 'syz.2.12191': attribute type 1 has an invalid length. [ 1750.401529][ T980] netlink: 'syz.2.12191': attribute type 4 has an invalid length. [ 1750.409545][ T980] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.12191'. [ 1750.503349][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1752.570038][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1753.747558][ T1000] device syzkaller0 entered promiscuous mode [ 1754.650042][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1756.234912][ T1013] device syzkaller0 entered promiscuous mode [ 1756.739930][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1758.820131][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1760.545012][ T1060] device syzkaller0 entered promiscuous mode [ 1761.286025][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1761.955548][ T1084] netlink: 'syz.3.12218': attribute type 2 has an invalid length. [ 1762.061104][ T1084] netlink: 'syz.3.12218': attribute type 1 has an invalid length. [ 1762.144665][ T1084] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.12218'. [ 1763.370153][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1765.451720][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1765.639416][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1767.540578][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1769.611327][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1771.694438][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1773.781955][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1775.860092][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1776.330156][T25595] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1777.936823][T30806] Bluetooth: hci1: command 0x206e tx timeout [ 1778.890058][T25595] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 1778.923679][T30806] Bluetooth: hci2: command 0x206c tx timeout [ 1778.931361][T25595] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 1780.010004][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1781.020444][T25595] Bluetooth: hci2: command 0x2046 tx timeout [ 1782.100295][T30806] Bluetooth: hci1: command 0x206e tx timeout [ 1782.240746][T30806] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 1784.189927][T30806] Bluetooth: hci1: command 0x206e tx timeout [ 1786.251072][T25595] Bluetooth: hci1: command 0x206e tx timeout [ 1786.653595][ T1276] netlink: 'syz.6.12289': attribute type 29 has an invalid length. [ 1786.704842][ T1276] netlink: 'syz.6.12289': attribute type 29 has an invalid length. [ 1786.787900][ T1281] netlink: 'syz.6.12289': attribute type 29 has an invalid length. [ 1786.858253][ T1280] netlink: 'syz.6.12289': attribute type 29 has an invalid length. [ 1786.968536][ T1281] netlink: 'syz.6.12289': attribute type 29 has an invalid length. [ 1796.868000][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1798.833270][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1798.840203][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.793982][ T1433] netlink: 'syz.2.12354': attribute type 3 has an invalid length. [ 1802.849017][ T1433] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12354'. [ 1805.800554][ T1463] netlink: 'syz.1.12371': attribute type 3 has an invalid length. [ 1805.839927][ T1463] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12371'. [ 1806.073032][ T1468] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12373'. [ 1806.461494][ T1468] device hsr_slave_0 left promiscuous mode [ 1807.045220][ T1468] device hsr_slave_1 left promiscuous mode [ 1807.396212][ T1489] netlink: 'syz.6.12382': attribute type 2 has an invalid length. [ 1807.404763][ T1489] netlink: 'syz.6.12382': attribute type 1 has an invalid length. [ 1807.415859][ T1489] netlink: 'syz.6.12382': attribute type 8 has an invalid length. [ 1807.448987][ T1489] netlink: 88 bytes leftover after parsing attributes in process `syz.6.12382'. [ 1807.667568][ T1500] netlink: 'syz.6.12384': attribute type 3 has an invalid length. [ 1807.675688][ T1500] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.12384'. [ 1808.618330][ T1526] netlink: 14 bytes leftover after parsing attributes in process `syz.5.12392'. [ 1809.194075][ T1526] device hsr_slave_0 left promiscuous mode [ 1809.224617][ T1526] device hsr_slave_1 left promiscuous mode [ 1809.425206][ T1534] netlink: 'syz.1.12397': attribute type 2 has an invalid length. [ 1809.449940][ T1534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12397'. [ 1809.652939][ T1540] netlink: 'syz.2.12402': attribute type 27 has an invalid length. [ 1810.116651][ T1555] netlink: 'syz.2.12407': attribute type 2 has an invalid length. [ 1810.181451][ T1555] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.12407'. [ 1811.042399][ T1576] netlink: 14 bytes leftover after parsing attributes in process `syz.6.12416'. [ 1811.070276][ T1576] device hsr_slave_0 left promiscuous mode [ 1811.101790][ T1576] device hsr_slave_1 left promiscuous mode [ 1812.653865][ T1584] netlink: 'syz.5.12421': attribute type 27 has an invalid length. [ 1812.694151][ T1587] netlink: 'syz.3.12431': attribute type 7 has an invalid length. [ 1812.702481][ T1587] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.12431'. [ 1813.152772][ T1602] netlink: 'syz.3.12426': attribute type 2 has an invalid length. [ 1813.221576][ T1602] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.12426'. [ 1816.705509][ T1619] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12435'. [ 1816.914411][ T1635] device syzkaller0 entered promiscuous mode [ 1818.798505][ T1653] device syzkaller0 entered promiscuous mode [ 1819.910316][ T1685] netlink: 'syz.5.12457': attribute type 7 has an invalid length. [ 1819.922300][ T1685] netlink: 191184 bytes leftover after parsing attributes in process `syz.5.12457'. [ 1824.541704][ T1758] netlink: 'syz.3.12482': attribute type 16 has an invalid length. [ 1824.572293][ T1758] netlink: 'syz.3.12482': attribute type 3 has an invalid length. [ 1824.581638][ T1758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12482'. [ 1826.500263][ T1798] netlink: 'syz.1.12499': attribute type 16 has an invalid length. [ 1826.515146][ T1798] netlink: 'syz.1.12499': attribute type 3 has an invalid length. [ 1826.525019][ T1798] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12499'. [ 1828.654346][ T1838] netlink: 'syz.6.12514': attribute type 16 has an invalid length. [ 1828.688746][ T1838] netlink: 'syz.6.12514': attribute type 3 has an invalid length. [ 1828.715431][ T1838] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12514'. [ 1829.166792][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1830.179198][ T1857] netlink: 'syz.2.12532': attribute type 16 has an invalid length. [ 1830.264896][ T1857] netlink: 'syz.2.12532': attribute type 3 has an invalid length. [ 1830.355597][ T1857] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12532'. [ 1830.531950][ T1856] device syzkaller0 entered promiscuous mode [ 1835.318114][ T1908] netlink: 'syz.5.12541': attribute type 16 has an invalid length. [ 1835.336215][ T1908] netlink: 'syz.5.12541': attribute type 3 has an invalid length. [ 1835.348654][ T1908] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12541'. [ 1836.281940][T25595] Bluetooth: Frame is too long (len 149, expected len 4) [ 1842.270824][ T2008] device syzkaller0 entered promiscuous mode [ 1844.433147][ T2045] device syzkaller0 entered promiscuous mode [ 1848.336413][ T2078] device syzkaller0 entered promiscuous mode [ 1852.181969][ T2154] netlink: 'syz.2.12642': attribute type 1 has an invalid length. [ 1852.190408][ T2154] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.12642'. [ 1856.259405][ T2200] device syzkaller0 entered promiscuous mode [ 1856.749213][ T2207] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.12663'. [ 1857.014355][ T2211] netlink: 'syz.5.12665': attribute type 16 has an invalid length. [ 1857.024260][ T2211] netlink: 'syz.5.12665': attribute type 3 has an invalid length. [ 1857.034293][ T2211] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12665'. [ 1859.200418][ T2252] netlink: 'syz.5.12680': attribute type 16 has an invalid length. [ 1859.220413][ T2252] netlink: 'syz.5.12680': attribute type 3 has an invalid length. [ 1859.259231][ T2252] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12680'. [ 1860.214411][ T2261] netlink: 'syz.1.12685': attribute type 1 has an invalid length. [ 1860.253595][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1860.260355][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.288095][ T2261] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.12685'. [ 1860.570283][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1863.232578][ T2304] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.12706'. [ 1867.720741][ T2340] device syzkaller0 entered promiscuous mode [ 1870.754149][ T2425] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12749'. [ 1873.732716][ T2450] device syzkaller0 entered promiscuous mode [ 1875.928314][ T2472] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.12764'. [ 1881.336621][ T2479] device syzkaller0 entered promiscuous mode [ 1884.348025][T25595] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1885.135312][ T2547] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.12786'. [ 1885.390464][ T2547] net_ratelimit: 3663 callbacks suppressed [ 1885.390878][ T2547] netlink: zone id is out of range [ 1885.463168][ T2547] netlink: zone id is out of range [ 1885.499205][ T2547] netlink: zone id is out of range [ 1886.092459][ T2547] netlink: del zone limit has 4 unknown bytes [ 1886.984154][T25595] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 1887.720673][T25595] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1887.874536][ T2583] netlink: 'syz.2.12798': attribute type 1 has an invalid length. [ 1887.889871][ T2583] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.12798'. [ 1889.252059][ T2615] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.12804'. [ 1889.325591][ T2615] netlink: zone id is out of range [ 1889.548294][ T2615] netlink: zone id is out of range [ 1889.555399][ T2615] netlink: zone id is out of range [ 1889.728218][ T2615] netlink: del zone limit has 4 unknown bytes [ 1891.995848][T27050] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1892.837661][ T2640] netlink: 'syz.3.12817': attribute type 1 has an invalid length. [ 1892.852845][ T2640] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.12817'. [ 1893.285624][ T2647] device syzkaller0 entered promiscuous mode [ 1894.496676][ T2672] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.12823'. [ 1894.527353][ T2672] netlink: zone id is out of range [ 1894.573317][ T2672] netlink: zone id is out of range [ 1894.579317][ T2672] netlink: zone id is out of range [ 1894.744116][ T2672] netlink: del zone limit has 4 unknown bytes [ 1900.590297][ T2696] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12830'. [ 1900.817401][ T2715] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.12841'. [ 1900.849769][ T2715] netlink: zone id is out of range [ 1900.867230][ T2715] netlink: zone id is out of range [ 1900.875607][ T2715] netlink: zone id is out of range [ 1901.042155][ T2715] netlink: del zone limit has 4 unknown bytes [ 1901.698235][ T2739] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.12860'. [ 1901.768439][ T2739] netlink: zone id is out of range [ 1901.810729][ T2739] netlink: zone id is out of range [ 1901.817293][ T2739] netlink: zone id is out of range [ 1902.008492][ T2739] netlink: del zone limit has 4 unknown bytes [ 1902.293651][ T2750] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12852'. [ 1902.358694][ T2749] device syzkaller0 entered promiscuous mode [ 1907.608905][ T2812] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.12870'. [ 1907.714376][ T2812] netlink: zone id is out of range [ 1907.750865][ T2812] netlink: zone id is out of range [ 1907.757275][ T2812] netlink: zone id is out of range [ 1908.129135][ T2812] netlink: del zone limit has 4 unknown bytes [ 1908.288489][ T2824] device syzkaller0 entered promiscuous mode [ 1908.322979][ T2824] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 1910.266311][ T2859] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.12889'. [ 1910.300549][ T2859] netlink: zone id is out of range [ 1910.307016][ T2859] netlink: zone id is out of range [ 1910.314981][ T2859] netlink: zone id is out of range [ 1910.410179][ T2859] netlink: del zone limit has 4 unknown bytes [ 1913.745402][ T2877] netlink: 'syz.2.12898': attribute type 17 has an invalid length. [ 1913.756911][ T2877] netlink: 148 bytes leftover after parsing attributes in process `syz.2.12898'. [ 1919.982325][ T2975] sctp: [Deprecated]: syz.3.12937 (pid 2975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1919.982325][ T2975] Use struct sctp_sack_info instead [ 1921.693015][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1921.699587][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1922.632588][ T2998] netlink: 2639 bytes leftover after parsing attributes in process `syz.5.12947'. [ 1923.023201][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1923.776500][ T3016] sctp: [Deprecated]: syz.6.12954 (pid 3016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1923.776500][ T3016] Use struct sctp_sack_info instead [ 1927.932881][ T3054] sctp: [Deprecated]: syz.5.12970 (pid 3054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1927.932881][ T3054] Use struct sctp_sack_info instead [ 1928.718276][ T3071] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.12987'. [ 1930.173345][ T3108] netlink: 2639 bytes leftover after parsing attributes in process `syz.6.13002'. [ 1932.483594][ T3162] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.13016'. [ 1934.355496][ T3174] netlink: 'syz.2.13021': attribute type 3 has an invalid length. [ 1934.395162][ T3174] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13021'. [ 1937.638722][ T3207] netlink: 'syz.3.13037': attribute type 3 has an invalid length. [ 1937.700181][ T3207] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13037'. [ 1938.674568][T25595] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 1938.674609][T25595] Bluetooth: unknown link type 129 [ 1940.407524][T25595] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 1940.407582][T25595] Bluetooth: unknown link type 129 [ 1940.729947][T25595] Bluetooth: hci1: command 0x0409 tx timeout [ 1942.337420][T25595] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 1942.337465][T25595] Bluetooth: unknown link type 129 [ 1942.501071][T25595] Bluetooth: hci5: command 0x0409 tx timeout [ 1944.417837][T25595] Bluetooth: hci4: command 0x0409 tx timeout [ 1947.913315][ T3335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1947.920651][ T3335] IPv6: NLM_F_CREATE should be set when creating new route [ 1953.758289][ T3458] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.13140'. [ 1953.787546][ T3458] netlink: zone id is out of range [ 1954.149629][T20288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1960.785680][ T3491] device syzkaller0 entered promiscuous mode [ 1968.365517][ T3545] netlink: 'syz.3.13172': attribute type 1 has an invalid length. [ 1968.373530][ T3545] netlink: 'syz.3.13172': attribute type 4 has an invalid length. [ 1968.381458][ T3545] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.13172'. [ 1968.507035][ T3582] netlink: 'syz.1.13200': attribute type 1 has an invalid length. [ 1968.545258][ T3582] netlink: 'syz.1.13200': attribute type 4 has an invalid length. [ 1968.558346][ T3582] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.13200'. [ 1970.295755][ T3622] sock: sock_timestamping_bind_phc: sock not bind to device [ 1974.764247][ T3663] device syzkaller0 entered promiscuous mode [ 1976.423442][ T3689] sock: sock_timestamping_bind_phc: sock not bind to device [ 1978.549243][ T3730] sock: sock_timestamping_bind_phc: sock not bind to device [ 1983.256006][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1983.262451][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1985.176511][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1989.745870][ T3862] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.13296'. [ 1991.966782][ T3928] netlink: 'syz.5.13324': attribute type 1 has an invalid length. [ 1991.993524][ T3928] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.13324'. [ 1992.026700][ T3937] device syzkaller0 entered promiscuous mode [ 1992.114218][ T3930] mac80211_hwsim hwsim57 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1994.823539][T20293] wlan1: Trigger new scan to find an IBSS to join [ 1995.269174][ T3978] device syzkaller0 entered promiscuous mode [ 1997.964496][ T4024] device syzkaller0 entered promiscuous mode [ 1998.890193][T27028] wlan1: Trigger new scan to find an IBSS to join [ 2000.125017][T20271] wlan1: Creating new IBSS network, BSSID 3a:42:3f:d2:dd:32 [ 2000.492776][ T4036] netlink: 'syz.6.13363': attribute type 1 has an invalid length. [ 2000.525429][ T4036] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.13363'. [ 2004.986461][ T4066] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2005.549282][ T4094] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.13387'. [ 2008.870627][ T4133] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.13405'. [ 2008.891039][T27028] wlan1: Trigger new scan to find an IBSS to join [ 2012.193962][ T4149] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.13409'. [ 2012.537912][ T4180] netlink: 126288 bytes leftover after parsing attributes in process `syz.6.13420'. [ 2012.809872][T20288] wlan1: Trigger new scan to find an IBSS to join [ 2012.901710][T27028] wlan1: Creating new IBSS network, BSSID 9e:06:1f:e4:ca:ee [ 2013.007416][ T4190] syz.5.13427[4190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2013.007693][ T4190] syz.5.13427[4190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2013.067116][ T4192] delete_channel: no stack [ 2013.454460][T30806] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2013.464206][T30806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 2013.480043][T30806] CPU: 1 PID: 30806 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 2013.487769][T30806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2013.497888][T30806] Workqueue: hci4 hci_rx_work [ 2013.502777][T30806] Call Trace: [ 2013.506118][T30806] [ 2013.509173][T30806] dump_stack_lvl+0x188/0x24e [ 2013.514075][T30806] ? show_regs_print_info+0x12/0x12 [ 2013.519384][T30806] ? load_image+0x410/0x410 [ 2013.524006][T30806] sysfs_create_dir_ns+0x26a/0x290 [ 2013.529494][T30806] ? __lock_acquire+0x7c40/0x7c40 [ 2013.534757][T30806] ? sysfs_warn_dup+0xa0/0xa0 [ 2013.539526][T30806] ? do_raw_spin_unlock+0x11d/0x230 [ 2013.544809][T30806] kobject_add_internal+0x617/0xca0 [ 2013.550101][T30806] kobject_add+0x160/0x230 [ 2013.554613][T30806] ? kobject_init+0x1c0/0x1c0 [ 2013.559369][T30806] ? __raw_spin_lock_init+0x41/0x100 [ 2013.564799][T30806] ? klist_children_get+0x50/0x50 [ 2013.570049][T30806] ? get_device_parent+0x121/0x3e0 [ 2013.575766][T30806] device_add+0x470/0x1050 [ 2013.580281][T30806] hci_conn_add_sysfs+0xd1/0x1e0 [ 2013.585320][T30806] le_conn_complete_evt+0xfac/0x15c0 [ 2013.590717][T30806] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 2013.597067][T30806] ? bt_info+0x180/0x180 [ 2013.601526][T30806] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2013.607332][T30806] ? mutex_unlock+0x10/0x10 [ 2013.611931][T30806] ? skb_pull_data+0xec/0x1f0 [ 2013.616768][T30806] hci_le_conn_complete_evt+0x183/0x440 [ 2013.622421][T30806] ? hci_remote_host_features_evt+0x230/0x230 [ 2013.628611][T30806] hci_event_packet+0x7b3/0x1290 [ 2013.633663][T30806] ? __lock_acquire+0x7c40/0x7c40 [ 2013.638795][T30806] ? bis_list+0x280/0x280 [ 2013.643217][T30806] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2013.649207][T30806] ? kcov_remote_start+0x4b0/0x7e0 [ 2013.654487][T30806] ? do_machine_check+0x380/0x750 [ 2013.659608][T30806] ? hci_send_to_monitor+0x9c/0x4a0 [ 2013.664898][T30806] hci_rx_work+0x3eb/0xd40 [ 2013.669397][T30806] ? _raw_spin_unlock+0x40/0x40 [ 2013.674339][T30806] ? process_one_work+0x7b4/0x1160 [ 2013.679604][T30806] process_one_work+0x8ab/0x1160 [ 2013.684734][T30806] ? worker_detach_from_pool+0x240/0x240 [ 2013.690581][T30806] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2013.695704][T30806] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2013.701381][T30806] ? wq_worker_running+0x97/0x190 [ 2013.706530][T30806] worker_thread+0xaf5/0x12a0 [ 2013.711404][T30806] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2013.717404][T30806] kthread+0x29d/0x330 [ 2013.721541][T30806] ? worker_clr_flags+0x1a0/0x1a0 [ 2013.726638][T30806] ? kthread_blkcg+0xd0/0xd0 [ 2013.731302][T30806] ret_from_fork+0x1f/0x30 [ 2013.735844][T30806] [ 2013.743071][T30806] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2013.756724][T30806] Bluetooth: hci4: failed to register connection device [ 2014.137710][ T4208] device syzkaller0 entered promiscuous mode [ 2014.256985][ T4225] netlink: 'syz.1.13440': attribute type 3 has an invalid length. [ 2014.340727][ T4225] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13440'. [ 2014.401234][ T4231] netlink: 'syz.6.13452': attribute type 7 has an invalid length. [ 2014.409400][ T4231] netlink: 'syz.6.13452': attribute type 7 has an invalid length. [ 2014.428165][ T4231] netlink: 198580 bytes leftover after parsing attributes in process `syz.6.13452'. [ 2015.780078][T30806] Bluetooth: hci4: command 0x2016 tx timeout [ 2016.305995][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2017.043603][T25595] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 2019.019921][ T4278] device syzkaller0 entered promiscuous mode [ 2019.130163][T25595] Bluetooth: hci5: command 0x2016 tx timeout [ 2019.527799][ T4285] delete_channel: no stack [ 2020.207315][ T4300] netlink: 'syz.3.13468': attribute type 7 has an invalid length. [ 2020.243341][ T4300] netlink: 'syz.3.13468': attribute type 7 has an invalid length. [ 2020.267843][ T4300] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.13468'. [ 2021.066241][ T4307] netlink: 'syz.3.13472': attribute type 2 has an invalid length. [ 2021.085010][ T4307] netlink: 'syz.3.13472': attribute type 1 has an invalid length. [ 2021.103721][ T4307] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.13472'. [ 2021.438367][T30806] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2023.539950][T30806] Bluetooth: hci2: command 0x2016 tx timeout [ 2025.649619][ T4376] delete_channel: no stack [ 2026.038205][ T4378] device syzkaller0 entered promiscuous mode [ 2030.177544][T20291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2031.410472][ T4438] device syzkaller0 entered promiscuous mode [ 2035.765033][ T4444] device syzkaller0 entered promiscuous mode [ 2037.793638][T25595] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2044.572204][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2044.587442][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2045.362962][ T4597] netlink: 'syz.3.13584': attribute type 1 has an invalid length. [ 2045.385280][ T4597] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.13584'. [ 2045.893819][ T4605] netlink: 2739 bytes leftover after parsing attributes in process `syz.2.13589'. [ 2047.236902][T20291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2050.338324][ T4654] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.13611'. [ 2050.487261][ T4669] netlink: 2739 bytes leftover after parsing attributes in process `syz.1.13616'. [ 2051.960278][ T4697] netlink: 'syz.2.13629': attribute type 3 has an invalid length. [ 2051.999766][ T4697] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13629'. [ 2052.314006][ T4703] netlink: 2739 bytes leftover after parsing attributes in process `syz.6.13632'. [ 2056.705657][ T4784] netlink: 'syz.3.13665': attribute type 3 has an invalid length. [ 2056.759938][ T4784] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13665'. [ 2058.246958][ T4808] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.13671'. [ 2059.398589][ T4831] netlink: 'syz.5.13681': attribute type 3 has an invalid length. [ 2059.464071][ T4831] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.13681'. [ 2061.282701][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2063.553645][ T4876] netlink: 'syz.6.13697': attribute type 3 has an invalid length. [ 2063.630906][ T4876] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.13697'. [ 2078.156064][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2080.684605][ T5051] netlink: 'syz.1.13764': attribute type 10 has an invalid length. [ 2080.705998][ T5051] team0: Device nlmon0 is of different type [ 2086.658428][ T5119] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.13793'. [ 2088.197960][ T5160] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.13810'. [ 2089.652332][ T5174] device syzkaller0 entered promiscuous mode [ 2092.904327][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2093.164075][ T5195] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.13824'. [ 2099.519690][ T5286] netlink: 8161 bytes leftover after parsing attributes in process `syz.5.13861'. [ 2101.940164][ T5325] netlink: 8161 bytes leftover after parsing attributes in process `syz.3.13879'. [ 2106.013620][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2106.020171][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2109.490192][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2123.512068][ T5477] device syzkaller0 entered promiscuous mode [ 2123.541838][ T5510] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.13948'. [ 2124.646815][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2141.029730][ T2763] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2142.414041][ T5748] netlink: 'syz.5.14052': attribute type 1 has an invalid length. [ 2142.429865][ T5748] netlink: 126196 bytes leftover after parsing attributes in process `syz.5.14052'. [ 2142.459953][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14052'. [ 2145.373484][ T5779] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.14074'. [ 2146.025260][ T5792] netlink: 'syz.6.14069': attribute type 1 has an invalid length. [ 2146.059119][ T5792] netlink: 126196 bytes leftover after parsing attributes in process `syz.6.14069'. [ 2146.163884][ T5792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14069'. [ 2147.106126][ T5819] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.14082'. [ 2147.741562][ T5826] netlink: 'syz.2.14086': attribute type 1 has an invalid length. [ 2147.771808][ T5826] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.14086'. [ 2147.877718][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14086'. [ 2148.167850][T25595] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 2148.796464][ T5853] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.14097'. [ 2149.743226][ T5860] netlink: 'syz.5.14098': attribute type 4 has an invalid length. [ 2149.751196][ T5860] netlink: 'syz.5.14098': attribute type 1 has an invalid length. [ 2149.759054][ T5860] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.14098'. [ 2150.636726][ T5870] netlink: 'syz.3.14102': attribute type 1 has an invalid length. [ 2150.672025][ T5870] netlink: 126196 bytes leftover after parsing attributes in process `syz.3.14102'. [ 2150.700068][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14102'. [ 2152.943427][ T5901] netlink: 'syz.6.14111': attribute type 4 has an invalid length. [ 2152.958335][ T5901] netlink: 'syz.6.14111': attribute type 1 has an invalid length. [ 2152.969428][ T5901] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.14111'. [ 2153.622599][ T5918] netlink: 'syz.1.14118': attribute type 1 has an invalid length. [ 2153.669074][ T5918] netlink: 126196 bytes leftover after parsing attributes in process `syz.1.14118'. [ 2153.710595][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14118'. [ 2155.676456][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2155.984542][ T5950] netlink: 'syz.1.14132': attribute type 4 has an invalid length. [ 2156.004860][ T5950] netlink: 'syz.1.14132': attribute type 1 has an invalid length. [ 2156.063176][ T5950] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.14132'. [ 2156.113157][ T5956] netlink: 'syz.5.14135': attribute type 21 has an invalid length. [ 2156.149884][ T5956] netlink: 'syz.5.14135': attribute type 1 has an invalid length. [ 2156.179715][ T5956] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14135'. [ 2156.400455][ T5961] netlink: 'syz.2.14138': attribute type 1 has an invalid length. [ 2156.449893][ T5961] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.14138'. [ 2156.470083][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14138'. [ 2157.542526][ T5991] netlink: 'syz.2.14154': attribute type 21 has an invalid length. [ 2157.644784][ T5991] netlink: 'syz.2.14154': attribute type 1 has an invalid length. [ 2157.683909][ T5991] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14154'. [ 2157.877899][ T5998] device syzkaller0 entered promiscuous mode [ 2157.887897][T25595] Bluetooth: hci5: unexpected event 0x03 length: 15 > 11 [ 2160.376227][T25595] Bluetooth: hci1: Dropping invalid advertising data [ 2162.554378][ T6034] netlink: 'syz.1.14169': attribute type 21 has an invalid length. [ 2162.562597][ T6034] netlink: 'syz.1.14169': attribute type 1 has an invalid length. [ 2162.571865][ T6034] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14169'. [ 2162.939533][ T6063] netlink: 'syz.3.14181': attribute type 11 has an invalid length. [ 2162.958946][ T6063] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14181'. [ 2163.588041][ T6062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2163.676557][ T6082] netlink: 'syz.3.14190': attribute type 1 has an invalid length. [ 2163.712747][ T6082] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.14190'. [ 2164.155131][ T6095] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.14196'. [ 2164.569284][ T6111] netlink: 'syz.5.14202': attribute type 10 has an invalid length. [ 2164.877614][ T6111] device veth0_vlan left promiscuous mode [ 2164.966152][ T6111] device veth0_vlan entered promiscuous mode [ 2165.039442][ T6111] team0: Device veth0_vlan failed to register rx_handler [ 2165.246588][ T6119] netlink: 'syz.2.14206': attribute type 1 has an invalid length. [ 2165.256102][ T6119] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.14206'. [ 2166.357355][ T6160] netlink: 'syz.6.14223': attribute type 1 has an invalid length. [ 2166.385193][ T6160] netlink: 63743 bytes leftover after parsing attributes in process `syz.6.14223'. [ 2167.452260][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2167.458765][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2169.868647][ T6184] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.14241'. [ 2170.767461][T25595] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2170.777798][T25595] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 2170.787681][T25595] CPU: 1 PID: 25595 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2170.795400][T25595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2170.805515][T25595] Workqueue: hci2 hci_rx_work [ 2170.810267][T25595] Call Trace: [ 2170.813604][T25595] [ 2170.816596][T25595] dump_stack_lvl+0x188/0x24e [ 2170.821370][T25595] ? show_regs_print_info+0x12/0x12 [ 2170.826701][T25595] ? load_image+0x410/0x410 [ 2170.831306][T25595] sysfs_create_dir_ns+0x26a/0x290 [ 2170.836516][T25595] ? __lock_acquire+0x7c40/0x7c40 [ 2170.841645][T25595] ? sysfs_warn_dup+0xa0/0xa0 [ 2170.846422][T25595] ? do_raw_spin_unlock+0x11d/0x230 [ 2170.851696][T25595] kobject_add_internal+0x617/0xca0 [ 2170.856986][T25595] kobject_add+0x160/0x230 [ 2170.861477][T25595] ? kobject_init+0x1c0/0x1c0 [ 2170.866330][T25595] ? __raw_spin_lock_init+0x41/0x100 [ 2170.871671][T25595] ? klist_children_get+0x50/0x50 [ 2170.876752][T25595] ? get_device_parent+0x121/0x3e0 [ 2170.882018][T25595] device_add+0x470/0x1050 [ 2170.886479][T25595] hci_conn_add_sysfs+0xd1/0x1e0 [ 2170.891463][T25595] le_conn_complete_evt+0xfac/0x15c0 [ 2170.896802][T25595] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 2170.903105][T25595] ? bt_info+0x180/0x180 [ 2170.907398][T25595] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2170.913237][T25595] ? mutex_unlock+0x10/0x10 [ 2170.917857][T25595] ? skb_pull_data+0xec/0x1f0 [ 2170.922601][T25595] hci_le_conn_complete_evt+0x183/0x440 [ 2170.928231][T25595] ? hci_remote_host_features_evt+0x230/0x230 [ 2170.934448][T25595] hci_event_packet+0x7b3/0x1290 [ 2170.939504][T25595] ? __lock_acquire+0x7c40/0x7c40 [ 2170.944615][T25595] ? bis_list+0x280/0x280 [ 2170.949099][T25595] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2170.955042][T25595] ? kcov_remote_start+0x4b0/0x7e0 [ 2170.960196][T25595] ? do_machine_check+0x380/0x750 [ 2170.965440][T25595] ? hci_send_to_monitor+0x9c/0x4a0 [ 2170.970799][T25595] hci_rx_work+0x3eb/0xd40 [ 2170.975397][T25595] ? _raw_spin_unlock+0x40/0x40 [ 2170.980292][T25595] ? process_one_work+0x7b4/0x1160 [ 2170.985446][T25595] process_one_work+0x8ab/0x1160 [ 2170.990466][T25595] ? worker_detach_from_pool+0x240/0x240 [ 2170.996134][T25595] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2171.001193][T25595] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2171.006784][T25595] ? wq_worker_running+0x97/0x190 [ 2171.011982][T25595] worker_thread+0xaf5/0x12a0 [ 2171.016710][T25595] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2171.022664][T25595] kthread+0x29d/0x330 [ 2171.026795][T25595] ? worker_clr_flags+0x1a0/0x1a0 [ 2171.031887][T25595] ? kthread_blkcg+0xd0/0xd0 [ 2171.036595][T25595] ret_from_fork+0x1f/0x30 [ 2171.041085][T25595] [ 2171.049349][T25595] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2171.063475][T25595] Bluetooth: hci2: failed to register connection device [ 2171.891338][ T6219] netlink: 'syz.6.14243': attribute type 10 has an invalid length. [ 2172.060005][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2172.252636][ T6219] device veth0_vlan left promiscuous mode [ 2172.377794][ T6219] device veth0_vlan entered promiscuous mode [ 2172.533072][ T6219] team0: Device veth0_vlan failed to register rx_handler [ 2175.251517][ T6288] netlink: 'syz.1.14266': attribute type 10 has an invalid length. [ 2175.847726][ T6288] device veth0_vlan left promiscuous mode [ 2175.917222][ T6288] device veth0_vlan entered promiscuous mode [ 2176.052795][ T6288] team0: Device veth0_vlan failed to register rx_handler [ 2177.680401][ T6329] netlink: 'syz.3.14291': attribute type 10 has an invalid length. [ 2178.151385][ T6329] device veth0_vlan left promiscuous mode [ 2178.321592][ T6329] device veth0_vlan entered promiscuous mode [ 2178.600167][ T6329] team0: Device veth0_vlan failed to register rx_handler [ 2179.768003][ T6366] netlink: 'syz.1.14308': attribute type 3 has an invalid length. [ 2179.879489][ T6366] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.14308'. [ 2181.482344][ T6405] netlink: 'syz.6.14324': attribute type 3 has an invalid length. [ 2181.529810][ T6405] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.14324'. [ 2182.667136][ T6421] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.14331'. [ 2182.777180][ T6427] netlink: 'syz.2.14330': attribute type 10 has an invalid length. [ 2183.247038][ T6427] device veth0_vlan left promiscuous mode [ 2183.306331][ T6427] device veth0_vlan entered promiscuous mode [ 2183.424769][ T6427] team0: Device veth0_vlan failed to register rx_handler [ 2183.939077][ T6446] netlink: 'syz.5.14339': attribute type 3 has an invalid length. [ 2183.979695][ T6446] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.14339'. [ 2185.098417][ T6467] netlink: 65027 bytes leftover after parsing attributes in process `syz.6.14349'. [ 2185.121396][ T6471] netlink: 'syz.2.14351': attribute type 10 has an invalid length. [ 2185.144271][ T6471] device veth0_vlan left promiscuous mode [ 2185.171009][ T6471] device veth0_vlan entered promiscuous mode [ 2185.235990][ T6471] team0: Device veth0_vlan failed to register rx_handler [ 2186.996430][ T6513] netlink: 'syz.3.14368': attribute type 10 has an invalid length. [ 2187.015403][ T6513] device veth0_vlan left promiscuous mode [ 2187.072504][ T6513] device veth0_vlan entered promiscuous mode [ 2187.162609][ T6513] team0: Device veth0_vlan failed to register rx_handler [ 2187.471118][ T6511] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.14367'. [ 2187.662498][ T6205] Bluetooth: hci5: ISO packet for unknown connection handle 3152 [ 2188.065941][ T6529] netlink: 'syz.5.14383': attribute type 10 has an invalid length. [ 2188.091329][ T6529] device veth0_vlan left promiscuous mode [ 2188.134782][ T6529] device veth0_vlan entered promiscuous mode [ 2188.222336][ T6529] team0: Device veth0_vlan failed to register rx_handler [ 2189.439647][ T6205] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2189.447636][ T6205] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2189.458453][ T6205] CPU: 1 PID: 6205 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2189.466162][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2189.476448][ T6205] Workqueue: hci3 hci_rx_work [ 2189.481204][ T6205] Call Trace: [ 2189.484534][ T6205] [ 2189.487501][ T6205] dump_stack_lvl+0x188/0x24e [ 2189.492255][ T6205] ? show_regs_print_info+0x12/0x12 [ 2189.497525][ T6205] ? load_image+0x410/0x410 [ 2189.502197][ T6205] sysfs_create_dir_ns+0x26a/0x290 [ 2189.507376][ T6205] ? __lock_acquire+0x7c40/0x7c40 [ 2189.512463][ T6205] ? sysfs_warn_dup+0xa0/0xa0 [ 2189.517226][ T6205] ? do_raw_spin_unlock+0x11d/0x230 [ 2189.522503][ T6205] kobject_add_internal+0x617/0xca0 [ 2189.527785][ T6205] kobject_add+0x160/0x230 [ 2189.532280][ T6205] ? kobject_init+0x1c0/0x1c0 [ 2189.537027][ T6205] ? __raw_spin_lock_init+0x41/0x100 [ 2189.542381][ T6205] ? klist_children_get+0x50/0x50 [ 2189.547482][ T6205] ? get_device_parent+0x121/0x3e0 [ 2189.552668][ T6205] device_add+0x470/0x1050 [ 2189.557152][ T6205] hci_conn_add_sysfs+0xd1/0x1e0 [ 2189.562161][ T6205] le_conn_complete_evt+0xfac/0x15c0 [ 2189.567521][ T6205] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 2189.573899][ T6205] ? bt_info+0x180/0x180 [ 2189.578209][ T6205] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2189.583919][ T6205] ? mutex_unlock+0x10/0x10 [ 2189.588485][ T6205] ? skb_pull_data+0xec/0x1f0 [ 2189.593222][ T6205] hci_le_conn_complete_evt+0x183/0x440 [ 2189.598843][ T6205] ? hci_remote_host_features_evt+0x230/0x230 [ 2189.604972][ T6205] hci_event_packet+0x7b3/0x1290 [ 2189.609990][ T6205] ? __lock_acquire+0x7c40/0x7c40 [ 2189.615090][ T6205] ? bis_list+0x280/0x280 [ 2189.619476][ T6205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2189.625433][ T6205] ? kcov_remote_start+0x4b0/0x7e0 [ 2189.630645][ T6205] ? do_machine_check+0x380/0x750 [ 2189.635742][ T6205] ? hci_send_to_monitor+0x9c/0x4a0 [ 2189.641074][ T6205] hci_rx_work+0x3eb/0xd40 [ 2189.645563][ T6205] ? _raw_spin_unlock+0x40/0x40 [ 2189.650487][ T6205] ? process_one_work+0x7b4/0x1160 [ 2189.655677][ T6205] process_one_work+0x8ab/0x1160 [ 2189.660710][ T6205] ? worker_detach_from_pool+0x240/0x240 [ 2189.666415][ T6205] ? _raw_spin_lock_irq+0x86/0xf0 [ 2189.671514][ T6205] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2189.676600][ T6205] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2189.682211][ T6205] ? wq_worker_running+0x97/0x190 [ 2189.687320][ T6205] worker_thread+0xaf5/0x12a0 [ 2189.692092][ T6205] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2189.698067][ T6205] kthread+0x29d/0x330 [ 2189.702192][ T6205] ? worker_clr_flags+0x1a0/0x1a0 [ 2189.707312][ T6205] ? kthread_blkcg+0xd0/0xd0 [ 2189.712069][ T6205] ret_from_fork+0x1f/0x30 [ 2189.716566][ T6205] [ 2189.739780][ T6205] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2189.753719][ T6205] Bluetooth: hci3: failed to register connection device [ 2190.681214][ T6574] netlink: 'syz.3.14393': attribute type 10 has an invalid length. [ 2190.746095][ T6574] device veth0_vlan left promiscuous mode [ 2190.776119][ T6574] device veth0_vlan entered promiscuous mode [ 2190.829462][ T6574] team0: Device veth0_vlan failed to register rx_handler [ 2191.034035][ T6205] Bluetooth: hci1: hcon ffff88803965a000 sent 0 < count 8 [ 2193.595022][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2194.739510][ T6630] netlink: 830 bytes leftover after parsing attributes in process `syz.5.14416'. [ 2198.566985][ T6692] netlink: 125520 bytes leftover after parsing attributes in process `syz.6.14439'. [ 2199.771463][ T6699] netlink: 830 bytes leftover after parsing attributes in process `syz.1.14442'. [ 2200.894908][ T6713] netlink: 'syz.6.14447': attribute type 10 has an invalid length. [ 2200.911585][ T6713] device veth0_vlan left promiscuous mode [ 2200.952849][ T6713] device veth0_vlan entered promiscuous mode [ 2201.013930][ T6713] team0: Device veth0_vlan failed to register rx_handler [ 2203.037293][ T6732] netlink: 830 bytes leftover after parsing attributes in process `syz.6.14457'. [ 2203.085941][T20288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2203.427058][ T6205] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2207.706108][ T6205] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2207.849793][T20271] wlan1: Trigger new scan to find an IBSS to join [ 2209.637389][ T6205] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 2209.849991][T20271] wlan1: Trigger new scan to find an IBSS to join [ 2210.890775][T20288] wlan1: Trigger new scan to find an IBSS to join [ 2211.414035][T20288] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2211.432399][T20288] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2211.674029][ T6882] netlink: 'syz.1.14519': attribute type 21 has an invalid length. [ 2211.718304][ T6882] netlink: 'syz.1.14519': attribute type 10 has an invalid length. [ 2211.737076][ T6882] netlink: 'syz.1.14519': attribute type 12 has an invalid length. [ 2211.769965][ T6882] netlink: 'syz.1.14519': attribute type 13 has an invalid length. [ 2211.806732][ T6882] netlink: 'syz.1.14519': attribute type 14 has an invalid length. [ 2211.824829][ T6882] netlink: 'syz.1.14519': attribute type 15 has an invalid length. [ 2211.872157][ T6882] netlink: 'syz.1.14519': attribute type 16 has an invalid length. [ 2211.886338][ T6205] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 2211.916109][ T6882] netlink: 'syz.1.14519': attribute type 19 has an invalid length. [ 2211.975107][ T6882] netlink: 'syz.1.14519': attribute type 21 has an invalid length. [ 2212.004575][ T6882] netlink: 'syz.1.14519': attribute type 22 has an invalid length. [ 2212.035052][ T6882] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.14519'. [ 2212.891940][T20291] wlan1: Trigger new scan to find an IBSS to join [ 2213.382289][T30806] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2213.673446][ T6929] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.14552'. [ 2213.770773][T30806] Bluetooth: hci4: command 0x0406 tx timeout [ 2213.859892][ T4776] wlan1: Trigger new scan to find an IBSS to join [ 2214.900969][T20271] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2215.133742][ T6953] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.14549'. [ 2215.849942][ T36] wlan1: Trigger new scan to find an IBSS to join [ 2216.010238][ T6205] Bluetooth: hci5: command 0x0406 tx timeout [ 2216.844419][ T2763] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2217.856538][ T6998] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.14566'. [ 2219.972580][ T7036] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.14583'. [ 2226.688347][ T7119] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.14613'. [ 2228.941736][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2228.948227][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2230.182164][ T7169] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.14629'. [ 2234.166193][ T7212] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.14647'. [ 2238.265047][ T7254] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.14663'. [ 2240.598327][ T7288] validate_nla: 1 callbacks suppressed [ 2240.598369][ T7288] netlink: 'syz.2.14677': attribute type 3 has an invalid length. [ 2240.627285][ T7288] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.14677'. [ 2240.943114][ T7296] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.14679'. [ 2243.057160][ T7325] netlink: 'syz.3.14693': attribute type 3 has an invalid length. [ 2243.107990][ T7325] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.14693'. [ 2243.288700][ T7329] device syzkaller0 entered promiscuous mode [ 2244.965645][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2246.918916][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2261.472171][ T7471] netlink: 15743 bytes leftover after parsing attributes in process `syz.6.14765'. [ 2262.429129][ T6205] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 2263.622432][ T7514] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.14773'. [ 2266.902173][ T6205] Bluetooth: hci3: unexpected event 0x01 length: 151 > 1 [ 2268.865691][ T7575] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.14798'. [ 2271.202903][ T7604] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.14812'. [ 2276.100036][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2276.398200][ T7664] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.14836'. [ 2277.836911][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2280.195998][ T7698] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.14850'. [ 2282.620223][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14852'. [ 2282.622415][ T7698] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2282.639199][ T7698] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2282.651816][ T7698] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2283.501629][ T7722] netlink: 'syz.3.14863': attribute type 33 has an invalid length. [ 2283.548656][ T7722] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14863'. [ 2284.250901][ T7734] netlink: 134056 bytes leftover after parsing attributes in process `syz.6.14867'. [ 2289.260019][ T7771] netlink: 'syz.1.14880': attribute type 33 has an invalid length. [ 2289.268068][ T7771] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14880'. [ 2290.309122][ T7784] netlink: 14 bytes leftover after parsing attributes in process `syz.6.14889'. [ 2290.363096][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2290.369690][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2290.578772][ T7784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2290.617062][ T7784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2290.922763][ T7784] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2290.968812][ T7784] bond0 (unregistering): Released all slaves [ 2299.069124][ T6205] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 2301.129813][T30806] Bluetooth: hci1: command 0x0409 tx timeout [ 2301.473534][T30806] Bluetooth: hci5: unexpected event 0x04 length: 151 > 10 [ 2303.529684][ T6205] Bluetooth: hci5: command 0x0409 tx timeout [ 2305.600393][ T6205] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2306.941152][ T6205] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2307.125544][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2308.863735][T20291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2313.050323][T30806] Bluetooth: hci3: command 0x0406 tx timeout [ 2314.257783][T30806] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2314.279120][T30806] Bluetooth: hci1: hcon ffff88803965a000 sent 0 < count 8 [ 2314.295527][T30806] Bluetooth: hci1: hcon ffff88802f82e000 sent 1 < count 44 [ 2320.410791][ T6205] Bluetooth: hci3: command 0x0406 tx timeout [ 2320.780247][ T8206] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.15056'. [ 2320.822393][ T8206] netlink: 116 bytes leftover after parsing attributes in process `syz.1.15056'. [ 2324.507679][ T8259] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.15074'. [ 2327.276367][ T8296] device syzkaller0 entered promiscuous mode [ 2327.865651][ T8306] netlink: 15231 bytes leftover after parsing attributes in process `syz.5.15092'. [ 2332.372389][ T8375] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.15123'. [ 2332.444807][ T8377] netlink: 144 bytes leftover after parsing attributes in process `syz.5.15123'. [ 2332.524371][ T8377] team0: Port device team_slave_0 removed [ 2332.552655][ T8377] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2332.886914][ T8386] device syzkaller0 entered promiscuous mode [ 2333.979400][ T8422] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.15141'. [ 2337.235378][ T8426] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15141'. [ 2337.249998][ T8426] team0: Port device team_slave_0 removed [ 2337.256443][ T8426] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2337.280511][ T8422] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2337.311432][ T8422] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2337.321447][ T8422] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2338.155798][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2338.579179][ T8485] device syzkaller0 entered promiscuous mode [ 2338.626890][ T14] syzkaller0: tun_net_xmit 48 [ 2338.742604][ T8485] syzkaller0: tun_net_xmit 1280 [ 2338.799392][ T8485] syzkaller0: create flow: hash 1971074072 index 1 [ 2339.200656][ T8483] syzkaller0: delete flow: hash 1971074072 index 1 [ 2340.819243][T27050] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2344.587887][ T8550] netlink: 15051 bytes leftover after parsing attributes in process `syz.3.15187'. [ 2345.175785][ T8571] device syzkaller0 entered promiscuous mode [ 2345.212900][ T8571] syzkaller0: tun_net_xmit 1280 [ 2345.219038][ T8571] syzkaller0: create flow: hash 1590775261 index 1 [ 2345.775064][ T8570] syzkaller0: delete flow: hash 1590775261 index 1 [ 2349.412105][ T8594] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.15204'. [ 2349.657152][ T8601] netlink: 'syz.2.15207': attribute type 21 has an invalid length. [ 2349.672746][ T8601] netlink: 'syz.2.15207': attribute type 12 has an invalid length. [ 2349.685819][ T8601] netlink: 'syz.2.15207': attribute type 13 has an invalid length. [ 2349.694523][ T8601] netlink: 'syz.2.15207': attribute type 14 has an invalid length. [ 2349.707327][ T8601] netlink: 'syz.2.15207': attribute type 15 has an invalid length. [ 2349.715724][ T8601] netlink: 'syz.2.15207': attribute type 16 has an invalid length. [ 2349.769703][ T8601] netlink: 12926 bytes leftover after parsing attributes in process `syz.2.15207'. [ 2351.821891][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2351.828565][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2352.564013][ T8633] device syzkaller0 entered promiscuous mode [ 2357.839435][ T8703] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.15241'. [ 2358.816306][ T8721] device syzkaller0 entered promiscuous mode [ 2360.342629][ T8751] netlink: 'syz.5.15262': attribute type 4 has an invalid length. [ 2360.362339][ T8751] netlink: 'syz.5.15262': attribute type 8 has an invalid length. [ 2360.383843][ T8751] netlink: 193092 bytes leftover after parsing attributes in process `syz.5.15262'. [ 2363.440452][ T8732] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2363.450534][ T8732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2363.460963][ T8732] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2363.777550][ T8765] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.15267'. [ 2363.837987][ T8767] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15267'. [ 2364.488144][ T8767] team0: Port device team_slave_0 removed [ 2364.532397][ T8767] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2366.096947][ T6205] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2366.105104][ T6205] Bluetooth: hci1: Invalid handle: 0x5393 > 0x0eff [ 2369.176354][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2369.332963][ T8810] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.15285'. [ 2369.377781][ T8813] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.15286'. [ 2369.434460][ T8814] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15286'. [ 2369.598763][ T8814] team0: Port device team_slave_0 removed [ 2369.662958][ T8814] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2370.507667][ T8835] device syzkaller0 entered promiscuous mode [ 2371.838748][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2376.606592][ T8874] netlink: 134056 bytes leftover after parsing attributes in process `syz.6.15306'. [ 2376.666701][ T8875] netlink: 144 bytes leftover after parsing attributes in process `syz.6.15306'. [ 2376.918797][ T8875] team0: Port device team_slave_0 removed [ 2376.949257][ T8875] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2377.931539][ T8898] device syzkaller0 entered promiscuous mode [ 2378.358479][ T8907] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.15325'. [ 2381.430684][ T8907] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2381.440391][ T8908] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15325'. [ 2381.479425][ T8908] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2381.498197][ T8907] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2381.508255][ T8907] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2385.488419][ T8969] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.15346'. [ 2390.220481][ T8969] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2390.234286][ T8969] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2390.242484][ T8970] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15346'. [ 2390.275427][ T8969] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2390.279872][ T8970] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2390.465151][ T8976] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.15348'. [ 2394.310597][ T9015] netlink: 'syz.5.15361': attribute type 2 has an invalid length. [ 2395.063123][ T9015] device 0 entered promiscuous mode [ 2396.087935][ T9067] netlink: 'syz.3.15386': attribute type 2 has an invalid length. [ 2396.096894][ T9067] netlink: 'syz.3.15386': attribute type 1 has an invalid length. [ 2396.112106][ T9067] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.15386'. [ 2399.418040][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15393'. [ 2399.450447][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15393'. [ 2399.469757][ T9089] netlink: 33 bytes leftover after parsing attributes in process `syz.6.15393'. [ 2399.499611][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15393'. [ 2399.508864][ T9089] netlink: 33 bytes leftover after parsing attributes in process `syz.6.15393'. [ 2399.593087][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15393'. [ 2399.614362][ T9089] netlink: 33 bytes leftover after parsing attributes in process `syz.6.15393'. [ 2399.972125][ T9102] netlink: 'syz.6.15399': attribute type 2 has an invalid length. [ 2400.032353][ T9102] netlink: 'syz.6.15399': attribute type 1 has an invalid length. [ 2400.062863][ T9102] netlink: 170140 bytes leftover after parsing attributes in process `syz.6.15399'. [ 2403.000129][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2403.096303][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2403.119414][ T9163] netlink: 'syz.2.15421': attribute type 2 has an invalid length. [ 2403.150575][ T9163] netlink: 'syz.2.15421': attribute type 1 has an invalid length. [ 2403.196104][ T9163] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.15421'. [ 2406.935033][ T9222] netlink: 'syz.5.15442': attribute type 11 has an invalid length. [ 2406.949359][ T9222] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.15442'. [ 2407.379006][ T9221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2407.397993][ T9227] netlink: 'syz.1.15444': attribute type 2 has an invalid length. [ 2408.472223][ T9240] netlink: 'syz.5.15449': attribute type 2 has an invalid length. [ 2408.482248][ T9240] netlink: 'syz.5.15449': attribute type 1 has an invalid length. [ 2408.491253][ T9240] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.15449'. [ 2413.233504][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2413.239998][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2413.612026][ T9227] device 0 entered promiscuous mode [ 2417.473595][ T9294] netlink: 'syz.5.15469': attribute type 29 has an invalid length. [ 2417.525262][ T9294] netlink: 'syz.5.15469': attribute type 29 has an invalid length. [ 2418.014823][ T9301] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.15472'. [ 2420.964626][ T9333] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.15484'. [ 2429.256649][ T9420] netlink: 'syz.5.15519': attribute type 2 has an invalid length. [ 2429.335694][ T9420] netlink: 10 bytes leftover after parsing attributes in process `syz.5.15519'. [ 2435.121826][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2435.351710][ T9464] mac80211_hwsim hwsim57 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2436.179083][ T9494] device syzkaller0 entered promiscuous mode [ 2436.825187][ T9518] netlink: 'syz.6.15552': attribute type 2 has an invalid length. [ 2436.838430][ T9518] netlink: 10 bytes leftover after parsing attributes in process `syz.6.15552'. [ 2437.850353][ T4776] wlan1: Trigger new scan to find an IBSS to join [ 2440.816790][T20291] wlan1: Trigger new scan to find an IBSS to join [ 2440.869845][ T9565] netlink: 'syz.1.15570': attribute type 2 has an invalid length. [ 2440.912890][ T9565] netlink: 10 bytes leftover after parsing attributes in process `syz.1.15570'. [ 2443.851593][ T2763] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2448.366935][ T9701] netlink: 'syz.2.15628': attribute type 5 has an invalid length. [ 2458.146973][ T9742] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.15645'. [ 2466.160798][T27050] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2471.986245][T20288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2474.681061][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2474.687490][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2474.879391][ T9912] device syzkaller0 entered promiscuous mode [ 2475.226554][ T9917] netlink: 'syz.3.15710': attribute type 3 has an invalid length. [ 2475.245036][ T9917] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15710'. [ 2480.863484][ T9933] device syzkaller0 entered promiscuous mode [ 2481.272338][ T9944] netlink: 'syz.1.15733': attribute type 3 has an invalid length. [ 2481.333734][ T9944] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15733'. [ 2485.024509][ T9939] netlink: 132 bytes leftover after parsing attributes in process `syz.6.15720'. [ 2485.035029][ T9945] tipc: Started in network mode [ 2485.040463][ T9945] tipc: Node identity 9215a268, cluster identity 4711 [ 2485.047334][ T9945] tipc: Node number set to 2450891368 [ 2486.066895][ T9965] device syzkaller0 entered promiscuous mode [ 2486.885926][ T6205] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 2487.336003][ T9991] netlink: 'syz.6.15741': attribute type 3 has an invalid length. [ 2487.387393][ T9991] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.15741'. [ 2491.279756][ T9997] netlink: 'syz.2.15744': attribute type 1 has an invalid length. [ 2491.564306][ T6205] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2491.866611][T10018] device syzkaller0 entered promiscuous mode [ 2492.165684][T10027] sock: sock_set_timeout: `syz.6.15755' (pid 10027) tries to set negative timeout [ 2495.952713][ T6205] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 2497.178053][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2501.903370][T10075] device syzkaller0 entered promiscuous mode [ 2503.383605][ T6205] Bluetooth: hci5: unexpected event 0x09 length: 15 > 3 [ 2503.731016][T27050] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2503.814622][ T6205] Bluetooth: hci4: Dropping invalid advertising data [ 2503.823220][ T6205] Bluetooth: hci4: unknown advertising packet type: 0xdc [ 2503.823251][ T6205] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2509.948979][ T6205] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 2510.043932][ T6205] Bluetooth: hci5: Dropping invalid advertising data [ 2510.058451][ T6205] Bluetooth: hci5: unknown advertising packet type: 0xdc [ 2510.058481][ T6205] Bluetooth: hci5: Malformed LE Event: 0x02 [ 2510.277210][ T6205] Bluetooth: hci3: Dropping invalid advertising data [ 2510.284665][ T6205] Bluetooth: hci3: unknown advertising packet type: 0xdc [ 2510.284692][ T6205] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2511.151444][T10166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15806'. [ 2511.168582][T10166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15806'. [ 2511.180248][T10166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15806'. [ 2511.263658][T10167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15806'. [ 2511.343407][T10166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15806'. [ 2512.651966][ T6205] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 2519.103788][T10245] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15838'. [ 2519.140458][T10245] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15838'. [ 2519.167911][T10246] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15838'. [ 2519.210981][T10245] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15838'. [ 2519.242031][T10245] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15838'. [ 2523.275081][T10284] device syzkaller0 entered promiscuous mode [ 2528.211336][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2531.363925][T10335] device syzkaller0 entered promiscuous mode [ 2534.757453][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2535.189257][T10371] device syzkaller0 entered promiscuous mode [ 2536.102219][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2536.108642][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2539.887655][T10424] device syzkaller0 entered promiscuous mode [ 2547.649938][T10495] device syzkaller0 entered promiscuous mode [ 2555.243364][T10565] device syzkaller0 entered promiscuous mode [ 2558.142089][ T6205] Bluetooth: hci3: unexpected subevent 0x0a length: 11 < 30 [ 2559.231535][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2560.243936][ T6205] Bluetooth: hci4: unexpected subevent 0x0a length: 11 < 30 [ 2562.182185][ T6205] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 2564.250061][T30806] Bluetooth: hci4: command 0x0406 tx timeout [ 2564.514465][T30806] Bluetooth: hci5: unexpected subevent 0x0a length: 11 < 30 [ 2565.682197][T27050] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2566.428106][T30806] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2566.547912][T10689] -1: renamed from syzkaller0 [ 2568.501185][ T6205] Bluetooth: hci1: command 0x0406 tx timeout [ 2571.514193][ T6205] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 2573.096440][T10772] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.16026'. [ 2573.529514][T30806] Bluetooth: hci5: command 0x0406 tx timeout [ 2575.489206][T10825] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.16045'. [ 2577.100439][T30806] Bluetooth: hci2: unknown advertising packet type: 0x80 [ 2577.100503][T30806] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2579.287394][T30806] Bluetooth: hci5: unknown advertising packet type: 0x80 [ 2579.287439][T30806] Bluetooth: hci5: Malformed LE Event: 0x02 [ 2582.225526][T10936] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.16086'. [ 2582.657058][T30806] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 2582.657099][T30806] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2585.966544][T10969] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.16098'. [ 2586.152546][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.187375][T10969] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2586.197219][T10969] CPU: 1 PID: 10969 Comm: syz.3.16098 Not tainted syzkaller #0 [ 2586.204958][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2586.215086][T10969] Call Trace: [ 2586.218423][T10969] [ 2586.221402][T10969] dump_stack_lvl+0x188/0x24e [ 2586.226218][T10969] ? show_regs_print_info+0x12/0x12 [ 2586.231485][T10969] ? load_image+0x410/0x410 [ 2586.236098][T10969] sysfs_warn_dup+0x8a/0xa0 [ 2586.240711][T10969] sysfs_do_create_link_sd+0xc0/0x110 [ 2586.246168][T10969] device_add+0x83b/0x1050 [ 2586.250697][T10969] wiphy_register+0x1d8b/0x2aa0 [ 2586.255719][T10969] ? cfg80211_event_work+0x40/0x40 [ 2586.260912][T10969] ? minstrel_ht_alloc+0x894/0xa20 [ 2586.266226][T10969] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2586.272438][T10969] ieee80211_register_hw+0x2d48/0x39f0 [ 2586.277984][T10969] ? ieee80211_register_hw+0xee1/0x39f0 [ 2586.283597][T10969] ? ieee80211_register_hw+0xee1/0x39f0 [ 2586.289223][T10969] ? ieee80211_tasklet_handler+0x20/0x20 [ 2586.294922][T10969] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2586.300969][T10969] ? __debug_object_init+0xed/0x440 [ 2586.306432][T10969] ? memset+0x1e/0x40 [ 2586.310493][T10969] ? __hrtimer_init+0x189/0x270 [ 2586.315432][T10969] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2586.321252][T10969] ? memcpy+0x3c/0x60 [ 2586.325292][T10969] hwsim_new_radio_nl+0xab7/0xc90 [ 2586.330379][T10969] genl_family_rcv_msg_doit+0x22f/0x350 [ 2586.336040][T10969] ? end_current_label_crit_section+0x170/0x170 [ 2586.342442][T10969] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2586.348382][T10969] ? bpf_lsm_capable+0x5/0x10 [ 2586.353154][T10969] ? security_capable+0x85/0xb0 [ 2586.358107][T10969] genl_rcv_msg+0x601/0x790 [ 2586.362651][T10969] ? genl_bind+0x360/0x360 [ 2586.367115][T10969] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2586.373513][T10969] netlink_rcv_skb+0x1ef/0x440 [ 2586.378655][T10969] ? genl_bind+0x360/0x360 [ 2586.383107][T10969] ? netlink_ack+0x1160/0x1160 [ 2586.387917][T10969] ? down_read+0x1a8/0x2d0 [ 2586.392368][T10969] genl_rcv+0x24/0x40 [ 2586.396406][T10969] netlink_unicast+0x7ad/0x920 [ 2586.401219][T10969] netlink_sendmsg+0x8ad/0xbd0 [ 2586.406034][T10969] ? netlink_getsockopt+0x550/0x550 [ 2586.411280][T10969] ? netlink_getsockopt+0x550/0x550 [ 2586.416592][T10969] ____sys_sendmsg+0x5ed/0x9a0 [ 2586.421428][T10969] ? __sys_sendmsg_sock+0x30/0x30 [ 2586.426487][T10969] ? __import_iovec+0x306/0x510 [ 2586.431468][T10969] ? import_iovec+0x6f/0xa0 [ 2586.436034][T10969] ___sys_sendmsg+0x2a2/0x360 [ 2586.440760][T10969] ? __sys_sendmsg+0x2a0/0x2a0 [ 2586.445597][T10969] ? lockdep_hardirqs_on+0x94/0x140 [ 2586.450863][T10969] __se_sys_sendmsg+0x1c3/0x2b0 [ 2586.455756][T10969] ? ct_nmi_exit+0x145/0x1c0 [ 2586.460384][T10969] ? __x64_sys_sendmsg+0x80/0x80 [ 2586.465397][T10969] ? lockdep_hardirqs_on+0x94/0x140 [ 2586.470674][T10969] do_syscall_64+0x4c/0xa0 [ 2586.475144][T10969] ? clear_bhb_loop+0x60/0xb0 [ 2586.479892][T10969] ? clear_bhb_loop+0x60/0xb0 [ 2586.484624][T10969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2586.490594][T10969] RIP: 0033:0x7fcce919e0d9 [ 2586.495107][T10969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2586.514949][T10969] RSP: 002b:00007fccea0e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2586.523433][T10969] RAX: ffffffffffffffda RBX: 00007fcce9425fa0 RCX: 00007fcce919e0d9 [ 2586.531465][T10969] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2586.539746][T10969] RBP: 00007fcce9235024 R08: 0000000000000000 R09: 0000000000000000 [ 2586.547770][T10969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2586.555789][T10969] R13: 00007fcce9426038 R14: 00007fcce9425fa0 R15: 00007fff45079488 [ 2586.563853][T10969] [ 2586.685746][T10973] bridge0: port 1(bridge_slave_0) entered blocking state [ 2586.693186][T10973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2587.093109][T10982] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.16101'. [ 2589.614845][T10992] device syzkaller0 entered promiscuous mode [ 2591.896475][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2596.709197][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2596.772679][T11036] device syzkaller0 entered promiscuous mode [ 2597.547493][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2597.553939][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2600.045153][T11057] device  entered promiscuous mode [ 2600.788519][T11072] device syzkaller0 entered promiscuous mode [ 2607.158704][T11107] device  entered promiscuous mode [ 2611.026620][T11156] device syzkaller0 entered promiscuous mode [ 2611.262207][T11163] device syzkaller0 entered promiscuous mode [ 2611.785719][T11176] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.16169'. [ 2611.810000][T11176] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2616.865520][T11170] device  entered promiscuous mode [ 2617.458612][T11212] netlink: 463 bytes leftover after parsing attributes in process `syz.1.16182'. [ 2617.559227][T30806] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2617.826810][T11223] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.16195'. [ 2617.904741][T11223] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2622.211036][T11267] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.16201'. [ 2622.291623][T11265] device syzkaller0 entered promiscuous mode [ 2622.337968][T11267] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2622.406763][T11267] CPU: 1 PID: 11267 Comm: syz.5.16201 Not tainted syzkaller #0 [ 2622.414434][T11267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2622.424568][T11267] Call Trace: [ 2622.427910][T11267] [ 2622.430899][T11267] dump_stack_lvl+0x188/0x24e [ 2622.435663][T11267] ? show_regs_print_info+0x12/0x12 [ 2622.440938][T11267] ? load_image+0x410/0x410 [ 2622.445512][T11267] ? memset_erms+0xe/0x10 [ 2622.449926][T11267] sysfs_warn_dup+0x8a/0xa0 [ 2622.454502][T11267] sysfs_do_create_link_sd+0xc0/0x110 [ 2622.459953][T11267] device_add+0x83b/0x1050 [ 2622.464454][T11267] wiphy_register+0x1d8b/0x2aa0 [ 2622.470029][T11267] ? cfg80211_event_work+0x40/0x40 [ 2622.475227][T11267] ? minstrel_ht_alloc+0x894/0xa20 [ 2622.480424][T11267] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2622.486571][T11267] ieee80211_register_hw+0x2d48/0x39f0 [ 2622.492114][T11267] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2622.498358][T11267] ? ieee80211_register_hw+0xee1/0x39f0 [ 2622.504080][T11267] ? ieee80211_register_hw+0xee1/0x39f0 [ 2622.510236][T11267] ? ieee80211_tasklet_handler+0x20/0x20 [ 2622.516020][T11267] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2622.521976][T11267] ? __debug_object_init+0xed/0x440 [ 2622.527489][T11267] ? memset+0x1e/0x40 [ 2622.531505][T11267] ? __hrtimer_init+0x189/0x270 [ 2622.536399][T11267] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2622.542192][T11267] ? memcpy+0x3c/0x60 [ 2622.546230][T11267] hwsim_new_radio_nl+0xab7/0xc90 [ 2622.551348][T11267] genl_family_rcv_msg_doit+0x22f/0x350 [ 2622.556996][T11267] ? end_current_label_crit_section+0x170/0x170 [ 2622.563313][T11267] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2622.569271][T11267] ? bpf_lsm_capable+0x5/0x10 [ 2622.574023][T11267] ? security_capable+0x85/0xb0 [ 2622.579038][T11267] genl_rcv_msg+0x601/0x790 [ 2622.583604][T11267] ? genl_bind+0x360/0x360 [ 2622.588051][T11267] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2622.594429][T11267] netlink_rcv_skb+0x1ef/0x440 [ 2622.599324][T11267] ? genl_bind+0x360/0x360 [ 2622.603776][T11267] ? netlink_ack+0x1160/0x1160 [ 2622.608587][T11267] ? down_read+0x1a8/0x2d0 [ 2622.613039][T11267] genl_rcv+0x24/0x40 [ 2622.617056][T11267] netlink_unicast+0x7ad/0x920 [ 2622.621894][T11267] netlink_sendmsg+0x8ad/0xbd0 [ 2622.626733][T11267] ? lockdep_hardirqs_on+0x94/0x140 [ 2622.631989][T11267] ? netlink_getsockopt+0x550/0x550 [ 2622.637432][T11267] ? bpf_lsm_socket_accept+0x10/0x10 [ 2622.642802][T11267] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2622.648155][T11267] ? security_socket_sendmsg+0x7c/0xa0 [ 2622.653753][T11267] ? netlink_getsockopt+0x550/0x550 [ 2622.659081][T11267] ____sys_sendmsg+0x5ed/0x9a0 [ 2622.663894][T11267] ? __sys_sendmsg_sock+0x30/0x30 [ 2622.668953][T11267] ? __import_iovec+0x306/0x510 [ 2622.673850][T11267] ? import_iovec+0x6f/0xa0 [ 2622.678417][T11267] ___sys_sendmsg+0x2a2/0x360 [ 2622.683158][T11267] ? __sys_sendmsg+0x2a0/0x2a0 [ 2622.688054][T11267] __se_sys_sendmsg+0x1c3/0x2b0 [ 2622.692969][T11267] ? __x64_sys_sendmsg+0x80/0x80 [ 2622.698079][T11267] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2622.704011][T11267] do_syscall_64+0x4c/0xa0 [ 2622.708492][T11267] ? clear_bhb_loop+0x60/0xb0 [ 2622.713241][T11267] ? clear_bhb_loop+0x60/0xb0 [ 2622.718016][T11267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2622.723965][T11267] RIP: 0033:0x7fba0319e0d9 [ 2622.728425][T11267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2622.748196][T11267] RSP: 002b:00007fba03fc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2622.756696][T11267] RAX: ffffffffffffffda RBX: 00007fba03425fa0 RCX: 00007fba0319e0d9 [ 2622.764712][T11267] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2622.772822][T11267] RBP: 00007fba03235024 R08: 0000000000000000 R09: 0000000000000000 [ 2622.780822][T11267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2622.788816][T11267] R13: 00007fba03426038 R14: 00007fba03425fa0 R15: 00007ffcf09838a8 [ 2622.796836][T11267] [ 2623.026035][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2623.755512][T11286] netlink: 463 bytes leftover after parsing attributes in process `syz.6.16210'. [ 2627.642468][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2629.428096][T11295] netlink: 64 bytes leftover after parsing attributes in process `syz.6.16214'. [ 2629.725097][ T6205] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 2630.118080][T11320] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.16220'. [ 2630.148850][T11314] device syzkaller0 entered promiscuous mode [ 2630.192534][T11320] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2630.219536][T11320] CPU: 0 PID: 11320 Comm: syz.2.16220 Not tainted syzkaller #0 [ 2630.227195][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2630.237350][T11320] Call Trace: [ 2630.240690][T11320] [ 2630.243676][T11320] dump_stack_lvl+0x188/0x24e [ 2630.248444][T11320] ? show_regs_print_info+0x12/0x12 [ 2630.253726][T11320] ? load_image+0x410/0x410 [ 2630.258313][T11320] sysfs_warn_dup+0x8a/0xa0 [ 2630.262903][T11320] sysfs_do_create_link_sd+0xc0/0x110 [ 2630.268381][T11320] device_add+0x83b/0x1050 [ 2630.272885][T11320] wiphy_register+0x1d8b/0x2aa0 [ 2630.277862][T11320] ? cfg80211_event_work+0x40/0x40 [ 2630.283218][T11320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2630.289455][T11320] ? rtnl_unlock+0x5/0x10 [ 2630.293986][T11320] ieee80211_register_hw+0x2d48/0x39f0 [ 2630.299532][T11320] ? ieee80211_register_hw+0xee1/0x39f0 [ 2630.305157][T11320] ? ieee80211_register_hw+0xee1/0x39f0 [ 2630.310779][T11320] ? ieee80211_tasklet_handler+0x20/0x20 [ 2630.316549][T11320] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2630.322487][T11320] ? __debug_object_init+0xed/0x440 [ 2630.327845][T11320] ? memset+0x1e/0x40 [ 2630.331888][T11320] ? __hrtimer_init+0x189/0x270 [ 2630.336815][T11320] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2630.342702][T11320] ? memcpy+0x3c/0x60 [ 2630.346833][T11320] hwsim_new_radio_nl+0xab7/0xc90 [ 2630.351976][T11320] genl_family_rcv_msg_doit+0x22f/0x350 [ 2630.357612][T11320] ? end_current_label_crit_section+0x170/0x170 [ 2630.363929][T11320] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2630.369904][T11320] ? bpf_lsm_capable+0x5/0x10 [ 2630.374660][T11320] ? security_capable+0x85/0xb0 [ 2630.379591][T11320] genl_rcv_msg+0x601/0x790 [ 2630.384165][T11320] ? genl_bind+0x360/0x360 [ 2630.388632][T11320] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2630.395054][T11320] netlink_rcv_skb+0x1ef/0x440 [ 2630.399988][T11320] ? genl_bind+0x360/0x360 [ 2630.404472][T11320] ? netlink_ack+0x1160/0x1160 [ 2630.409332][T11320] ? down_read+0x1a8/0x2d0 [ 2630.413810][T11320] genl_rcv+0x24/0x40 [ 2630.417839][T11320] netlink_unicast+0x7ad/0x920 [ 2630.422759][T11320] netlink_sendmsg+0x8ad/0xbd0 [ 2630.427599][T11320] ? netlink_getsockopt+0x550/0x550 [ 2630.432871][T11320] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2630.438509][T11320] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2630.443865][T11320] ? security_socket_sendmsg+0x7c/0xa0 [ 2630.449508][T11320] ? netlink_getsockopt+0x550/0x550 [ 2630.454787][T11320] ____sys_sendmsg+0x5ed/0x9a0 [ 2630.459747][T11320] ? __sys_sendmsg_sock+0x30/0x30 [ 2630.464939][T11320] ? __import_iovec+0x306/0x510 [ 2630.469892][T11320] ? import_iovec+0x6f/0xa0 [ 2630.474661][T11320] ___sys_sendmsg+0x2a2/0x360 [ 2630.479412][T11320] ? __sys_sendmsg+0x2a0/0x2a0 [ 2630.484329][T11320] __se_sys_sendmsg+0x1c3/0x2b0 [ 2630.489246][T11320] ? ct_nmi_exit+0x145/0x1c0 [ 2630.493905][T11320] ? __x64_sys_sendmsg+0x80/0x80 [ 2630.498947][T11320] ? lockdep_hardirqs_on+0x94/0x140 [ 2630.504242][T11320] do_syscall_64+0x4c/0xa0 [ 2630.508732][T11320] ? clear_bhb_loop+0x60/0xb0 [ 2630.513477][T11320] ? clear_bhb_loop+0x60/0xb0 [ 2630.518319][T11320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2630.524352][T11320] RIP: 0033:0x7fd1dbf9e0d9 [ 2630.529093][T11320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2630.548760][T11320] RSP: 002b:00007fd1dced6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2630.557351][T11320] RAX: ffffffffffffffda RBX: 00007fd1dc225fa0 RCX: 00007fd1dbf9e0d9 [ 2630.565386][T11320] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2630.573429][T11320] RBP: 00007fd1dc035024 R08: 0000000000000000 R09: 0000000000000000 [ 2630.581692][T11320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2630.589737][T11320] R13: 00007fd1dc226038 R14: 00007fd1dc225fa0 R15: 00007ffd4786b668 [ 2630.597794][T11320] [ 2634.285661][T11340] netlink: 125520 bytes leftover after parsing attributes in process `syz.6.16238'. [ 2637.204271][T11356] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16229'. [ 2637.858909][T11376] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2637.874518][T11376] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2637.890084][T11376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2637.899269][T11376] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2637.907370][T11376] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2637.916689][T11376] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2638.195105][T11381] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.16237'. [ 2638.282650][T11381] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2638.305881][T11381] CPU: 0 PID: 11381 Comm: syz.6.16237 Not tainted syzkaller #0 [ 2638.313548][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2638.323692][T11381] Call Trace: [ 2638.327060][T11381] [ 2638.330043][T11381] dump_stack_lvl+0x188/0x24e [ 2638.334795][T11381] ? show_regs_print_info+0x12/0x12 [ 2638.340081][T11381] ? load_image+0x410/0x410 [ 2638.344669][T11381] sysfs_warn_dup+0x8a/0xa0 [ 2638.349241][T11381] sysfs_do_create_link_sd+0xc0/0x110 [ 2638.354696][T11381] device_add+0x83b/0x1050 [ 2638.359200][T11381] wiphy_register+0x1d8b/0x2aa0 [ 2638.364158][T11381] ? cfg80211_event_work+0x40/0x40 [ 2638.369347][T11381] ? minstrel_ht_alloc+0x894/0xa20 [ 2638.374539][T11381] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2638.380691][T11381] ieee80211_register_hw+0x2d48/0x39f0 [ 2638.386248][T11381] ? ieee80211_register_hw+0xee1/0x39f0 [ 2638.391886][T11381] ? ieee80211_register_hw+0xee1/0x39f0 [ 2638.397529][T11381] ? ieee80211_tasklet_handler+0x20/0x20 [ 2638.403243][T11381] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2638.409492][T11381] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2638.415300][T11381] ? memcpy+0x3c/0x60 [ 2638.419324][T11381] hwsim_new_radio_nl+0xab7/0xc90 [ 2638.424494][T11381] genl_family_rcv_msg_doit+0x22f/0x350 [ 2638.430085][T11381] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2638.436040][T11381] ? lockdep_hardirqs_on+0x94/0x140 [ 2638.441330][T11381] ? genl_rcv_msg+0x5d9/0x790 [ 2638.446138][T11381] genl_rcv_msg+0x601/0x790 [ 2638.450705][T11381] ? genl_bind+0x360/0x360 [ 2638.455177][T11381] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2638.461771][T11381] netlink_rcv_skb+0x1ef/0x440 [ 2638.466598][T11381] ? genl_bind+0x360/0x360 [ 2638.471061][T11381] ? netlink_ack+0x1160/0x1160 [ 2638.475884][T11381] ? lockdep_hardirqs_on+0x94/0x140 [ 2638.481121][T11381] ? down_read+0x1a8/0x2d0 [ 2638.485644][T11381] genl_rcv+0x24/0x40 [ 2638.489671][T11381] netlink_unicast+0x7ad/0x920 [ 2638.494513][T11381] netlink_sendmsg+0x8ad/0xbd0 [ 2638.499359][T11381] ? lockdep_hardirqs_on+0x94/0x140 [ 2638.504626][T11381] ? netlink_getsockopt+0x550/0x550 [ 2638.509879][T11381] ? security_socket_sendmsg+0x6c/0xa0 [ 2638.515388][T11381] ? security_socket_sendmsg+0x7c/0xa0 [ 2638.520891][T11381] ? netlink_getsockopt+0x550/0x550 [ 2638.526133][T11381] ____sys_sendmsg+0x5ed/0x9a0 [ 2638.531387][T11381] ? __sys_sendmsg_sock+0x30/0x30 [ 2638.536448][T11381] ? __import_iovec+0x306/0x510 [ 2638.541344][T11381] ? import_iovec+0x6f/0xa0 [ 2638.545891][T11381] ___sys_sendmsg+0x2a2/0x360 [ 2638.550619][T11381] ? __sys_sendmsg+0x2a0/0x2a0 [ 2638.555492][T11381] __se_sys_sendmsg+0x1c3/0x2b0 [ 2638.560433][T11381] ? __x64_sys_sendmsg+0x80/0x80 [ 2638.565492][T11381] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2638.571578][T11381] do_syscall_64+0x4c/0xa0 [ 2638.576125][T11381] ? clear_bhb_loop+0x60/0xb0 [ 2638.580891][T11381] ? clear_bhb_loop+0x60/0xb0 [ 2638.585658][T11381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2638.591621][T11381] RIP: 0033:0x7fafbc79e0d9 [ 2638.596120][T11381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2638.615864][T11381] RSP: 002b:00007fafbd714028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2638.624411][T11381] RAX: ffffffffffffffda RBX: 00007fafbca25fa0 RCX: 00007fafbc79e0d9 [ 2638.632857][T11381] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2638.640869][T11381] RBP: 00007fafbc835024 R08: 0000000000000000 R09: 0000000000000000 [ 2638.648959][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2638.656961][T11381] R13: 00007fafbca26038 R14: 00007fafbca25fa0 R15: 00007fff6889aae8 [ 2638.665157][T11381] [ 2639.166357][T11374] chnl_net:caif_netlink_parms(): no params data found [ 2639.473763][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 2639.523269][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 2639.550563][T11374] device bridge_slave_0 entered promiscuous mode [ 2639.599201][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 2639.616845][T11374] bridge0: port 2(bridge_slave_1) entered disabled state [ 2639.664330][T11374] device bridge_slave_1 entered promiscuous mode [ 2639.758351][T11374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2639.771604][T11374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2639.833235][T11374] team0: Port device team_slave_0 added [ 2639.843151][T11374] team0: Port device team_slave_1 added [ 2639.887018][T11374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2639.894440][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2639.921730][T11374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2639.933716][T11376] Bluetooth: hci0: command 0x0409 tx timeout [ 2639.944834][T11374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2639.952498][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2639.978807][T11374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2640.026300][T11374] device hsr_slave_0 entered promiscuous mode [ 2640.035273][T11374] device hsr_slave_1 entered promiscuous mode [ 2640.171301][T11374] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2640.182279][T11374] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2640.192582][T11374] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2640.203608][T11374] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2640.272476][T11374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2640.288001][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2640.296474][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2640.308390][T11374] 8021q: adding VLAN 0 to HW filter on device team0 [ 2640.324091][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2640.334248][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2640.343318][T20291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2640.350525][T20291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2640.358826][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2640.371368][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2640.381239][T20291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2640.388351][T20291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2640.397051][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2640.413944][T20293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2640.427998][T20293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2640.442984][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2640.455276][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2640.476658][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2640.487872][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2640.497429][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2640.507524][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2640.517255][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2640.526630][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2640.536674][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2640.550223][T11374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2640.775606][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2640.788191][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2640.804276][T11374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2641.139011][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2641.154788][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2641.176603][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2641.190506][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2641.201156][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2641.209342][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2641.221467][T11374] device veth0_vlan entered promiscuous mode [ 2641.234542][T11374] device veth1_vlan entered promiscuous mode [ 2641.263600][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2641.275675][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2641.284476][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2641.296884][T20291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2641.310798][T11374] device veth0_macvtap entered promiscuous mode [ 2641.322790][T11374] device veth1_macvtap entered promiscuous mode [ 2641.342415][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2641.353991][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.364967][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2641.377083][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.387420][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2641.398275][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.415287][T11374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2641.424463][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2641.437105][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2641.445756][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2641.455597][T27028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2641.469900][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2641.482591][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.495893][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2641.506893][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.516899][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2641.527666][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.538277][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2641.548953][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.559077][T11374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2641.570603][T11374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2641.582450][T11374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2641.594186][T20293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2641.605093][T20293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2641.616962][T11374] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2641.626861][T11374] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2641.636866][T11374] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2641.647195][T11374] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2641.733933][T27028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2641.752256][T27028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2641.766407][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2641.789082][T20293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2641.797269][T20293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2641.805561][T20271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2642.009756][T11376] Bluetooth: hci0: command 0x041b tx timeout [ 2644.090088][T11376] Bluetooth: hci0: command 0x040f tx timeout [ 2646.179960][T11376] Bluetooth: hci0: command 0x0419 tx timeout [ 2656.613301][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2658.559065][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2658.971795][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2658.978176][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2687.538108][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2689.586151][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2718.463011][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2720.420687][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2720.427106][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2720.472881][T20271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2720.510717][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2720.554204][T20271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2720.625531][T20271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2720.690254][T20271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2720.886833][T20271] device 0 left promiscuous mode [ 2722.438786][T20271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2722.457468][T20271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2722.469037][T20271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2722.484246][T20271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2722.494970][T20271] bridge0: port 1(bridge_slave_0) entered disabled state [ 2722.534584][T20271] device veth1_vlan left promiscuous mode [ 2722.818578][T20271] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2723.341472][T20271] team0 (unregistering): Port device team_slave_1 removed [ 2723.444459][T20271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2723.503855][T20271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2723.563105][T20271] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2723.934262][T20271] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2723.943702][T20271] bond0 (unregistering): Released all slaves [ 2749.490485][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2751.537953][T27028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2763.449581][T11376] Bluetooth: hci0: command 0x0406 tx timeout [ 2780.517362][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2781.852475][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2781.858870][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2782.462948][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2811.441818][T20271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2813.387800][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2842.366836][T20291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2843.292667][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2843.299085][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2844.312374][ T2763] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2873.393923][ T4776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2875.340751][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2904.421125][T20291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2904.732798][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2904.739340][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2906.366947][T20293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2935.345931][ T2763] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2937.292848][T20291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)