last executing test programs: 23.432370421s ago: executing program 2 (id=37425): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 20.490064484s ago: executing program 2 (id=37434): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0045878, 0x0) 19.28275786s ago: executing program 2 (id=37448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 19.043532994s ago: executing program 2 (id=37441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 15.764954594s ago: executing program 2 (id=37456): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a53f2719efb234644b972a5d2", 0x0, 0xf0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x5ef, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 15.279844745s ago: executing program 0 (id=37450): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 15.165594577s ago: executing program 0 (id=37451): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x2}}, 0x10, 0x0}, 0x4040000) 15.165416727s ago: executing program 2 (id=37453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 15.05440983s ago: executing program 0 (id=37457): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe80, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) 11.911747377s ago: executing program 3 (id=37462): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0xd6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0xc9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r1], 0xfe33) 11.839616518s ago: executing program 0 (id=37463): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 10.193860203s ago: executing program 3 (id=37465): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 10.193218633s ago: executing program 0 (id=37466): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x1f, 0x0, 0x19) 9.970845398s ago: executing program 4 (id=37469): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfe9e, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x10, 0x0, &(0x7f0000000500)="f0b9547ee7affa9daabd309a75ccb56c", 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9.962258718s ago: executing program 0 (id=37470): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x2}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 6.552603231s ago: executing program 1 (id=37472): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) close(0x3) 6.551820941s ago: executing program 3 (id=37482): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x6) 6.539828611s ago: executing program 4 (id=37483): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000084}, 0x43) 6.359550315s ago: executing program 1 (id=37473): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030040000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.13568079s ago: executing program 4 (id=37474): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe80, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) 2.979991127s ago: executing program 4 (id=37475): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 2.953587057s ago: executing program 1 (id=37476): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.953056748s ago: executing program 3 (id=37477): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004f0000001801000020686c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000690f0000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x6c, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.705285263s ago: executing program 1 (id=37478): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.632070884s ago: executing program 4 (id=37479): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0x17ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.670318165s ago: executing program 4 (id=37480): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) 1.459731709s ago: executing program 1 (id=37481): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1.459605089s ago: executing program 3 (id=37484): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 1.320608282s ago: executing program 1 (id=37485): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) 1.302861013s ago: executing program 3 (id=37495): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18006000, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 32 (id=37453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) kernel console output (not intermixed with test programs): _bhb_loop+0x60/0xb0 [ 2190.423232][ T8200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2190.429165][ T8200] RIP: 0033:0x7fda9659de99 [ 2190.433607][ T8200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2190.453241][ T8200] RSP: 002b:00007fda97398028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2190.461680][ T8200] RAX: ffffffffffffffda RBX: 00007fda96825fa0 RCX: 00007fda9659de99 [ 2190.469689][ T8200] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2190.477723][ T8200] RBP: 00007fda96633eaf R08: 0000000000000000 R09: 0000000000000000 [ 2190.485729][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2190.493734][ T8200] R13: 00007fda96826038 R14: 00007fda96825fa0 R15: 00007ffdeead57b8 [ 2190.501750][ T8200] [ 2190.626810][ T8207] netlink: 44 bytes leftover after parsing attributes in process `syz.2.32301'. [ 2192.953325][ T8260] netlink: 44 bytes leftover after parsing attributes in process `syz.0.32320'. [ 2197.632574][ T8343] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.32357'. [ 2197.723299][T20657] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 2198.969416][ T8377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2199.342042][T20657] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 2200.710043][T20657] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 2200.804174][ T8412] device syzkaller0 entered promiscuous mode [ 2200.900026][ T8417] device syzkaller0 entered promiscuous mode [ 2202.612137][ T8442] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.32399'. [ 2211.669173][ T8442] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2211.677443][ T8442] CPU: 0 PID: 8442 Comm: syz.2.32399 Not tainted syzkaller #0 [ 2211.684958][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2211.695050][ T8442] Call Trace: [ 2211.698370][ T8442] [ 2211.701382][ T8442] dump_stack_lvl+0x188/0x24e [ 2211.706133][ T8442] ? show_regs_print_info+0x12/0x12 [ 2211.711412][ T8442] ? load_image+0x410/0x410 [ 2211.715938][ T8442] sysfs_warn_dup+0x8a/0xa0 [ 2211.720470][ T8442] sysfs_do_create_link_sd+0xc0/0x110 [ 2211.725866][ T8442] device_add+0x83b/0x1050 [ 2211.730307][ T8442] wiphy_register+0x1d8b/0x2aa0 [ 2211.735193][ T8442] ? cfg80211_event_work+0x40/0x40 [ 2211.740322][ T8442] ? minstrel_ht_alloc+0x894/0xa20 [ 2211.745453][ T8442] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2211.751530][ T8442] ieee80211_register_hw+0x2d48/0x39f0 [ 2211.757011][ T8442] ? ieee80211_register_hw+0xf61/0x39f0 [ 2211.762569][ T8442] ? ieee80211_register_hw+0xf61/0x39f0 [ 2211.768164][ T8442] ? ieee80211_tasklet_handler+0x20/0x20 [ 2211.773813][ T8442] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2211.779742][ T8442] ? __debug_object_init+0xed/0x440 [ 2211.784986][ T8442] ? memset+0x1e/0x40 [ 2211.788973][ T8442] ? __hrtimer_init+0x189/0x270 [ 2211.793831][ T8442] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2211.799573][ T8442] ? memcpy+0x3c/0x60 [ 2211.803562][ T8442] hwsim_new_radio_nl+0xab7/0xc90 [ 2211.808610][ T8442] genl_family_rcv_msg_doit+0x22f/0x350 [ 2211.814179][ T8442] ? end_current_label_crit_section+0x170/0x170 [ 2211.820448][ T8442] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2211.826370][ T8442] ? bpf_lsm_capable+0x5/0x10 [ 2211.831066][ T8442] ? security_capable+0x85/0xb0 [ 2211.835938][ T8442] genl_rcv_msg+0x601/0x790 [ 2211.840457][ T8442] ? lock_chain_count+0x20/0x20 [ 2211.845355][ T8442] ? genl_bind+0x360/0x360 [ 2211.849781][ T8442] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2211.856145][ T8442] netlink_rcv_skb+0x1ef/0x440 [ 2211.860926][ T8442] ? genl_bind+0x360/0x360 [ 2211.865358][ T8442] ? netlink_ack+0x1160/0x1160 [ 2211.870171][ T8442] ? down_read+0x1a8/0x2d0 [ 2211.874595][ T8442] genl_rcv+0x24/0x40 [ 2211.878591][ T8442] netlink_unicast+0x7ad/0x920 [ 2211.883378][ T8442] netlink_sendmsg+0x8ad/0xbd0 [ 2211.888165][ T8442] ? netlink_getsockopt+0x550/0x550 [ 2211.893383][ T8442] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2211.898959][ T8442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2211.904298][ T8442] ? security_socket_sendmsg+0x7c/0xa0 [ 2211.909770][ T8442] ? netlink_getsockopt+0x550/0x550 [ 2211.915006][ T8442] ____sys_sendmsg+0x5ed/0x9a0 [ 2211.919791][ T8442] ? __sys_sendmsg_sock+0x30/0x30 [ 2211.924825][ T8442] ? __import_iovec+0x306/0x510 [ 2211.929733][ T8442] ? import_iovec+0x6f/0xa0 [ 2211.934296][ T8442] ___sys_sendmsg+0x2a2/0x360 [ 2211.938991][ T8442] ? __sys_sendmsg+0x2a0/0x2a0 [ 2211.943803][ T8442] __se_sys_sendmsg+0x1c3/0x2b0 [ 2211.948672][ T8442] ? __x64_sys_sendmsg+0x80/0x80 [ 2211.953635][ T8442] ? lockdep_hardirqs_on+0x94/0x140 [ 2211.958840][ T8442] do_syscall_64+0x4c/0xa0 [ 2211.963274][ T8442] ? clear_bhb_loop+0x60/0xb0 [ 2211.967963][ T8442] ? clear_bhb_loop+0x60/0xb0 [ 2211.972654][ T8442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2211.978573][ T8442] RIP: 0033:0x7f28b1d9de99 [ 2211.983022][ T8442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2212.002643][ T8442] RSP: 002b:00007f28b2c7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2212.011070][ T8442] RAX: ffffffffffffffda RBX: 00007f28b2025fa0 RCX: 00007f28b1d9de99 [ 2212.019050][ T8442] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2212.027024][ T8442] RBP: 00007f28b1e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 2212.035004][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2212.043071][ T8442] R13: 00007f28b2026038 R14: 00007f28b2025fa0 R15: 00007ffed5fba098 [ 2212.051067][ T8442] [ 2212.137980][ T8488] device syzkaller0 entered promiscuous mode [ 2216.358360][ T8532] netlink: 'syz.0.32434': attribute type 7 has an invalid length. [ 2216.375667][ T8532] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.32434'. [ 2218.225575][ T8509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2218.246800][ T8550] device syzkaller0 entered promiscuous mode [ 2219.933409][ T8599] netlink: 'syz.2.32463': attribute type 7 has an invalid length. [ 2219.943799][ T8599] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.32463'. [ 2220.129275][ T8604] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.32465'. [ 2220.154342][ T8605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2220.183790][ T8604] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2220.207497][ T8604] CPU: 1 PID: 8604 Comm: syz.0.32465 Not tainted syzkaller #0 [ 2220.215065][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2220.225183][ T8604] Call Trace: [ 2220.228509][ T8604] [ 2220.231489][ T8604] dump_stack_lvl+0x188/0x24e [ 2220.236244][ T8604] ? show_regs_print_info+0x12/0x12 [ 2220.241509][ T8604] ? load_image+0x410/0x410 [ 2220.246091][ T8604] sysfs_warn_dup+0x8a/0xa0 [ 2220.250664][ T8604] sysfs_do_create_link_sd+0xc0/0x110 [ 2220.256108][ T8604] device_add+0x83b/0x1050 [ 2220.260595][ T8604] wiphy_register+0x1d8b/0x2aa0 [ 2220.265527][ T8604] ? cfg80211_event_work+0x40/0x40 [ 2220.270691][ T8604] ? minstrel_ht_alloc+0x894/0xa20 [ 2220.275861][ T8604] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2220.281979][ T8604] ieee80211_register_hw+0x2d48/0x39f0 [ 2220.287513][ T8604] ? ieee80211_register_hw+0xf61/0x39f0 [ 2220.293128][ T8604] ? ieee80211_register_hw+0xf61/0x39f0 [ 2220.298748][ T8604] ? ieee80211_tasklet_handler+0x20/0x20 [ 2220.304441][ T8604] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2220.310390][ T8604] ? __debug_object_init+0xed/0x440 [ 2220.315652][ T8604] ? memset+0x1e/0x40 [ 2220.319675][ T8604] ? __hrtimer_init+0x189/0x270 [ 2220.324577][ T8604] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2220.330368][ T8604] ? memcpy+0x3c/0x60 [ 2220.334407][ T8604] hwsim_new_radio_nl+0xab7/0xc90 [ 2220.339499][ T8604] genl_family_rcv_msg_doit+0x22f/0x350 [ 2220.345107][ T8604] ? end_current_label_crit_section+0x170/0x170 [ 2220.351417][ T8604] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2220.357380][ T8604] ? bpf_lsm_capable+0x5/0x10 [ 2220.362122][ T8604] ? security_capable+0x85/0xb0 [ 2220.367043][ T8604] genl_rcv_msg+0x601/0x790 [ 2220.371619][ T8604] ? lock_chain_count+0x20/0x20 [ 2220.376537][ T8604] ? genl_bind+0x360/0x360 [ 2220.381008][ T8604] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2220.387421][ T8604] netlink_rcv_skb+0x1ef/0x440 [ 2220.392248][ T8604] ? genl_bind+0x360/0x360 [ 2220.396741][ T8604] ? netlink_ack+0x1160/0x1160 [ 2220.401576][ T8604] ? down_read+0x1a8/0x2d0 [ 2220.406046][ T8604] genl_rcv+0x24/0x40 [ 2220.410093][ T8604] netlink_unicast+0x7ad/0x920 [ 2220.414927][ T8604] netlink_sendmsg+0x8ad/0xbd0 [ 2220.419760][ T8604] ? netlink_getsockopt+0x550/0x550 [ 2220.425017][ T8604] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2220.430628][ T8604] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2220.435966][ T8604] ? security_socket_sendmsg+0x7c/0xa0 [ 2220.441483][ T8604] ? netlink_getsockopt+0x550/0x550 [ 2220.446741][ T8604] ____sys_sendmsg+0x5ed/0x9a0 [ 2220.451553][ T8604] ? __sys_sendmsg_sock+0x30/0x30 [ 2220.456618][ T8604] ? __import_iovec+0x306/0x510 [ 2220.461603][ T8604] ? import_iovec+0x6f/0xa0 [ 2220.466158][ T8604] ___sys_sendmsg+0x2a2/0x360 [ 2220.470885][ T8604] ? __sys_sendmsg+0x2a0/0x2a0 [ 2220.475779][ T8604] __se_sys_sendmsg+0x1c3/0x2b0 [ 2220.480676][ T8604] ? __x64_sys_sendmsg+0x80/0x80 [ 2220.485681][ T8604] ? lockdep_hardirqs_on+0x94/0x140 [ 2220.490929][ T8604] do_syscall_64+0x4c/0xa0 [ 2220.495389][ T8604] ? clear_bhb_loop+0x60/0xb0 [ 2220.500110][ T8604] ? clear_bhb_loop+0x60/0xb0 [ 2220.504828][ T8604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2220.510754][ T8604] RIP: 0033:0x7f9effd9de99 [ 2220.515196][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2220.534828][ T8604] RSP: 002b:00007f9efdff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2220.543281][ T8604] RAX: ffffffffffffffda RBX: 00007f9f00025fa0 RCX: 00007f9effd9de99 [ 2220.551294][ T8604] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2220.559299][ T8604] RBP: 00007f9effe33eaf R08: 0000000000000000 R09: 0000000000000000 [ 2220.567298][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2220.575384][ T8604] R13: 00007f9f00026038 R14: 00007f9f00025fa0 R15: 00007fff7cf249f8 [ 2220.583410][ T8604] [ 2220.695064][ T8615] netlink: 'syz.1.32481': attribute type 7 has an invalid length. [ 2220.705108][ T8615] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.32481'. [ 2220.834666][ T8621] device syzkaller0 entered promiscuous mode [ 2221.678989][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.685446][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.097461][ T8645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2222.243119][ T8649] netlink: 'syz.4.32486': attribute type 7 has an invalid length. [ 2222.251513][ T8649] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.32486'. [ 2222.622470][ T8659] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.32487'. [ 2222.631177][ T8657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2222.657529][ T8659] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2222.666896][ T8659] CPU: 1 PID: 8659 Comm: syz.1.32487 Not tainted syzkaller #0 [ 2222.674434][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2222.684548][ T8659] Call Trace: [ 2222.687870][ T8659] [ 2222.690848][ T8659] dump_stack_lvl+0x188/0x24e [ 2222.695637][ T8659] ? show_regs_print_info+0x12/0x12 [ 2222.700893][ T8659] ? load_image+0x410/0x410 [ 2222.705509][ T8659] sysfs_warn_dup+0x8a/0xa0 [ 2222.710067][ T8659] sysfs_do_create_link_sd+0xc0/0x110 [ 2222.715505][ T8659] device_add+0x83b/0x1050 [ 2222.719985][ T8659] wiphy_register+0x1d8b/0x2aa0 [ 2222.724909][ T8659] ? cfg80211_event_work+0x40/0x40 [ 2222.730078][ T8659] ? minstrel_ht_alloc+0x894/0xa20 [ 2222.735268][ T8659] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2222.741395][ T8659] ieee80211_register_hw+0x2d48/0x39f0 [ 2222.746923][ T8659] ? ieee80211_register_hw+0xf61/0x39f0 [ 2222.752519][ T8659] ? ieee80211_register_hw+0xf61/0x39f0 [ 2222.758108][ T8659] ? ieee80211_tasklet_handler+0x20/0x20 [ 2222.763786][ T8659] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2222.769714][ T8659] ? __debug_object_init+0xed/0x440 [ 2222.774962][ T8659] ? memset+0x1e/0x40 [ 2222.778975][ T8659] ? __hrtimer_init+0x189/0x270 [ 2222.783869][ T8659] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2222.789643][ T8659] ? memcpy+0x3c/0x60 [ 2222.793668][ T8659] hwsim_new_radio_nl+0xab7/0xc90 [ 2222.798752][ T8659] genl_family_rcv_msg_doit+0x22f/0x350 [ 2222.804424][ T8659] ? end_current_label_crit_section+0x170/0x170 [ 2222.810708][ T8659] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2222.816650][ T8659] ? bpf_lsm_capable+0x5/0x10 [ 2222.821367][ T8659] ? security_capable+0x85/0xb0 [ 2222.826352][ T8659] genl_rcv_msg+0x601/0x790 [ 2222.830907][ T8659] ? genl_bind+0x360/0x360 [ 2222.835392][ T8659] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2222.841776][ T8659] netlink_rcv_skb+0x1ef/0x440 [ 2222.846579][ T8659] ? genl_bind+0x360/0x360 [ 2222.851039][ T8659] ? netlink_ack+0x1160/0x1160 [ 2222.855899][ T8659] ? down_read+0x1a8/0x2d0 [ 2222.860344][ T8659] genl_rcv+0x24/0x40 [ 2222.864363][ T8659] netlink_unicast+0x7ad/0x920 [ 2222.869172][ T8659] netlink_sendmsg+0x8ad/0xbd0 [ 2222.873975][ T8659] ? netlink_getsockopt+0x550/0x550 [ 2222.879254][ T8659] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2222.884839][ T8659] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2222.890152][ T8659] ? security_socket_sendmsg+0x7c/0xa0 [ 2222.895645][ T8659] ? netlink_getsockopt+0x550/0x550 [ 2222.900890][ T8659] ____sys_sendmsg+0x5ed/0x9a0 [ 2222.905755][ T8659] ? __sys_sendmsg_sock+0x30/0x30 [ 2222.910813][ T8659] ? __import_iovec+0x306/0x510 [ 2222.915741][ T8659] ? import_iovec+0x6f/0xa0 [ 2222.920321][ T8659] ___sys_sendmsg+0x2a2/0x360 [ 2222.925072][ T8659] ? __sys_sendmsg+0x2a0/0x2a0 [ 2222.929941][ T8659] __se_sys_sendmsg+0x1c3/0x2b0 [ 2222.934842][ T8659] ? __x64_sys_sendmsg+0x80/0x80 [ 2222.939847][ T8659] ? lockdep_hardirqs_on+0x94/0x140 [ 2222.945090][ T8659] do_syscall_64+0x4c/0xa0 [ 2222.949570][ T8659] ? clear_bhb_loop+0x60/0xb0 [ 2222.954334][ T8659] ? clear_bhb_loop+0x60/0xb0 [ 2222.959071][ T8659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2222.965048][ T8659] RIP: 0033:0x7fea5e39de99 [ 2222.969587][ T8659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2222.989231][ T8659] RSP: 002b:00007fea5f198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2222.997684][ T8659] RAX: ffffffffffffffda RBX: 00007fea5e625fa0 RCX: 00007fea5e39de99 [ 2223.005686][ T8659] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2223.013688][ T8659] RBP: 00007fea5e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 2223.021685][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2223.029689][ T8659] R13: 00007fea5e626038 R14: 00007fea5e625fa0 R15: 00007fff916d8678 [ 2223.037706][ T8659] [ 2223.079335][ T8655] device syzkaller0 entered promiscuous mode [ 2223.655498][ T8681] netlink: 'syz.3.32500': attribute type 7 has an invalid length. [ 2223.667775][ T8681] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.32500'. [ 2225.107800][ T8702] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.32504'. [ 2225.126750][ T8702] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2225.136792][ T8702] CPU: 1 PID: 8702 Comm: syz.3.32504 Not tainted syzkaller #0 [ 2225.144333][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2225.154507][ T8702] Call Trace: [ 2225.157842][ T8702] [ 2225.160851][ T8702] dump_stack_lvl+0x188/0x24e [ 2225.165613][ T8702] ? show_regs_print_info+0x12/0x12 [ 2225.170861][ T8702] ? load_image+0x410/0x410 [ 2225.175430][ T8702] sysfs_warn_dup+0x8a/0xa0 [ 2225.179992][ T8702] sysfs_do_create_link_sd+0xc0/0x110 [ 2225.185425][ T8702] device_add+0x83b/0x1050 [ 2225.189905][ T8702] wiphy_register+0x1d8b/0x2aa0 [ 2225.194833][ T8702] ? cfg80211_event_work+0x40/0x40 [ 2225.200005][ T8702] ? minstrel_ht_alloc+0x894/0xa20 [ 2225.205155][ T8702] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2225.211250][ T8702] ieee80211_register_hw+0x2d48/0x39f0 [ 2225.216758][ T8702] ? ieee80211_register_hw+0xf61/0x39f0 [ 2225.222336][ T8702] ? ieee80211_register_hw+0xf61/0x39f0 [ 2225.227925][ T8702] ? ieee80211_tasklet_handler+0x20/0x20 [ 2225.233584][ T8702] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2225.239523][ T8702] ? __debug_object_init+0xed/0x440 [ 2225.244765][ T8702] ? memset+0x1e/0x40 [ 2225.248770][ T8702] ? __hrtimer_init+0x189/0x270 [ 2225.253651][ T8702] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2225.259417][ T8702] ? memcpy+0x3c/0x60 [ 2225.263436][ T8702] hwsim_new_radio_nl+0xab7/0xc90 [ 2225.268503][ T8702] genl_family_rcv_msg_doit+0x22f/0x350 [ 2225.274108][ T8702] ? end_current_label_crit_section+0x170/0x170 [ 2225.280389][ T8702] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2225.286517][ T8702] ? bpf_lsm_capable+0x5/0x10 [ 2225.291271][ T8702] ? security_capable+0x85/0xb0 [ 2225.296174][ T8702] genl_rcv_msg+0x601/0x790 [ 2225.300719][ T8702] ? lock_chain_count+0x20/0x20 [ 2225.305610][ T8702] ? genl_bind+0x360/0x360 [ 2225.310068][ T8702] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2225.316445][ T8702] netlink_rcv_skb+0x1ef/0x440 [ 2225.321239][ T8702] ? genl_bind+0x360/0x360 [ 2225.325693][ T8702] ? netlink_ack+0x1160/0x1160 [ 2225.330494][ T8702] ? down_read+0x1a8/0x2d0 [ 2225.334936][ T8702] genl_rcv+0x24/0x40 [ 2225.338951][ T8702] netlink_unicast+0x7ad/0x920 [ 2225.343754][ T8702] netlink_sendmsg+0x8ad/0xbd0 [ 2225.348553][ T8702] ? netlink_getsockopt+0x550/0x550 [ 2225.353788][ T8702] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2225.359382][ T8702] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2225.364695][ T8702] ? security_socket_sendmsg+0x7c/0xa0 [ 2225.370180][ T8702] ? netlink_getsockopt+0x550/0x550 [ 2225.375415][ T8702] ____sys_sendmsg+0x5ed/0x9a0 [ 2225.380215][ T8702] ? __sys_sendmsg_sock+0x30/0x30 [ 2225.385266][ T8702] ? __import_iovec+0x306/0x510 [ 2225.390158][ T8702] ? import_iovec+0x6f/0xa0 [ 2225.394692][ T8702] ___sys_sendmsg+0x2a2/0x360 [ 2225.399410][ T8702] ? __sys_sendmsg+0x2a0/0x2a0 [ 2225.404258][ T8702] __se_sys_sendmsg+0x1c3/0x2b0 [ 2225.409139][ T8702] ? __x64_sys_sendmsg+0x80/0x80 [ 2225.414122][ T8702] ? lockdep_hardirqs_on+0x94/0x140 [ 2225.419392][ T8702] do_syscall_64+0x4c/0xa0 [ 2225.423847][ T8702] ? clear_bhb_loop+0x60/0xb0 [ 2225.428556][ T8702] ? clear_bhb_loop+0x60/0xb0 [ 2225.433268][ T8702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2225.439195][ T8702] RIP: 0033:0x7f0e30f9de99 [ 2225.443633][ T8702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2225.463268][ T8702] RSP: 002b:00007f0e31e43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2225.471706][ T8702] RAX: ffffffffffffffda RBX: 00007f0e31225fa0 RCX: 00007f0e30f9de99 [ 2225.479715][ T8702] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2225.487759][ T8702] RBP: 00007f0e31033eaf R08: 0000000000000000 R09: 0000000000000000 [ 2225.495760][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2225.503762][ T8702] R13: 00007f0e31226038 R14: 00007f0e31225fa0 R15: 00007ffe45f73ed8 [ 2225.511783][ T8702] [ 2225.526567][ T8703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2225.819029][ T8710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2229.652044][ T8748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2232.188256][ T8767] sock: sock_timestamping_bind_phc: sock not bind to device [ 2232.198220][ T8769] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.32539'. [ 2237.274511][ T8813] netlink: 'syz.0.32569': attribute type 11 has an invalid length. [ 2237.318995][ T8813] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.32569'. [ 2238.152658][ T8812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2238.325277][ T8831] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.32576'. [ 2238.502127][ T8837] device syzkaller0 entered promiscuous mode [ 2239.615523][ T8860] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.32579'. [ 2241.588304][ T8866] netlink: 'syz.4.32582': attribute type 11 has an invalid length. [ 2241.622678][ T8866] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.32582'. [ 2241.637003][ T8865] device syzkaller0 entered promiscuous mode [ 2242.459488][ T8864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2244.552218][ T8895] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.32604'. [ 2246.248391][ T8899] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.32594'. [ 2246.822608][ T8908] netlink: 'syz.1.32601': attribute type 11 has an invalid length. [ 2246.859017][ T8908] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.32601'. [ 2247.712817][ T8905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2248.057667][ T8932] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.32610'. [ 2248.093881][ T8930] device syzkaller0 entered promiscuous mode [ 2250.491895][ T8959] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2250.499022][ T8959] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2250.996475][ T8977] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2251.003610][ T8977] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2251.338576][ T8987] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.32630'. [ 2251.518413][ T8991] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2251.525688][ T8991] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2251.659754][ T8990] device syzkaller0 entered promiscuous mode [ 2254.315013][ T9008] netlink: 'syz.1.32650': attribute type 1 has an invalid length. [ 2254.985606][ T9033] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2254.992785][ T9033] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2256.055306][T20657] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 2256.222019][ T9058] netlink: 'syz.1.32663': attribute type 7 has an invalid length. [ 2256.266862][ T9058] netlink: 'syz.1.32663': attribute type 7 has an invalid length. [ 2256.286437][ T9058] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.32663'. [ 2257.059028][ T4324] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 2257.346976][ T9092] netlink: 'syz.4.32679': attribute type 7 has an invalid length. [ 2257.383880][ T9092] netlink: 'syz.4.32679': attribute type 7 has an invalid length. [ 2257.398934][ T9092] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.32679'. [ 2257.936606][ T9109] netlink: 'syz.1.32698': attribute type 11 has an invalid length. [ 2258.031259][ T9109] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.32698'. [ 2258.084445][ T9112] netlink: 'syz.1.32698': attribute type 11 has an invalid length. [ 2258.124665][ T9112] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.32698'. [ 2258.134518][T20657] Bluetooth: hci4: command 0x0409 tx timeout [ 2258.243187][ T9108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2258.677856][ T9119] netlink: 'syz.4.32703': attribute type 11 has an invalid length. [ 2258.736318][T20657] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 2258.743484][ T9119] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.32703'. [ 2258.863721][ T9124] netlink: 'syz.4.32703': attribute type 11 has an invalid length. [ 2258.893344][ T9124] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.32703'. [ 2258.919039][ T9118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2259.082571][ T4324] Bluetooth: hci3: command 0x0409 tx timeout [ 2259.541433][ T9140] netlink: 'syz.0.32697': attribute type 7 has an invalid length. [ 2259.590396][ T9140] netlink: 'syz.0.32697': attribute type 7 has an invalid length. [ 2259.630014][ T9140] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.32697'. [ 2259.817676][ T9144] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2259.824952][ T9144] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2260.128618][ T9146] netlink: 'syz.2.32708': attribute type 11 has an invalid length. [ 2260.212144][ T9146] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.32708'. [ 2260.320026][ T9154] netlink: 'syz.2.32708': attribute type 11 has an invalid length. [ 2260.369785][ T9154] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.32708'. [ 2260.433377][ T9145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2260.607028][ T9157] device syzkaller0 entered promiscuous mode [ 2260.673120][ T4324] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 2260.704221][ T9164] netlink: 'syz.2.32711': attribute type 1 has an invalid length. [ 2260.769487][ T4324] Bluetooth: hci0: command 0x0409 tx timeout [ 2262.913756][T20657] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 2262.945360][ T9200] netlink: 'syz.0.32725': attribute type 11 has an invalid length. [ 2262.969616][ T9200] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.32725'. [ 2262.993893][ T9201] netlink: 'syz.0.32725': attribute type 11 has an invalid length. [ 2263.013487][ T9201] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.32725'. [ 2263.061982][ T9199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2263.608036][ T9213] ref_ctr_offset mismatch. inode: 0xcc7 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2266.448866][ T9236] netlink: 'syz.3.32740': attribute type 11 has an invalid length. [ 2266.627568][ T9236] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.32740'. [ 2266.834687][ T9239] netlink: 'syz.3.32740': attribute type 11 has an invalid length. [ 2266.950143][ T9239] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.32740'. [ 2267.003178][ T9235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2269.852670][ T9258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.32746'. [ 2272.106232][ T9299] netlink: 'syz.4.32765': attribute type 10 has an invalid length. [ 2272.145473][ T9299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.32765'. [ 2272.167487][ T9299] device team0 entered promiscuous mode [ 2272.204005][ T9299] device team_slave_0 entered promiscuous mode [ 2272.219849][ T9299] device team_slave_1 entered promiscuous mode [ 2272.232106][ T9299] bridge0: port 2(team0) entered blocking state [ 2272.247843][ T9299] bridge0: port 2(team0) entered disabled state [ 2272.274578][ T9299] bridge0: port 2(team0) entered blocking state [ 2272.281115][ T9299] bridge0: port 2(team0) entered forwarding state [ 2272.757986][ T9321] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.32776'. [ 2272.782068][ T9321] netlink: 'syz.4.32776': attribute type 10 has an invalid length. [ 2273.581480][ T9346] netlink: 'syz.0.32786': attribute type 10 has an invalid length. [ 2273.599565][ T9346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.32786'. [ 2273.619242][ T9346] device team0 entered promiscuous mode [ 2273.629174][ T9346] device team_slave_0 entered promiscuous mode [ 2273.647795][ T9346] device team_slave_1 entered promiscuous mode [ 2273.670708][ T9346] bridge0: port 2(team0) entered blocking state [ 2273.696887][ T9346] bridge0: port 2(team0) entered disabled state [ 2273.718368][ T9346] bridge0: port 2(team0) entered blocking state [ 2273.724937][ T9346] bridge0: port 2(team0) entered forwarding state [ 2274.068658][ T9362] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.32791'. [ 2274.118152][ T9362] netlink: 'syz.1.32791': attribute type 10 has an invalid length. [ 2274.192696][ T9362] team0: Port device macvlan0 added [ 2275.258478][ T9402] ref_ctr_offset mismatch. inode: 0x1164 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2276.337653][ T9429] netlink: 176 bytes leftover after parsing attributes in process `syz.4.32820'. [ 2276.433252][ T9431] ref_ctr_offset mismatch. inode: 0xd8f offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2276.887028][ T9444] netlink: 176 bytes leftover after parsing attributes in process `syz.0.32835'. [ 2278.126898][ T9479] netlink: 176 bytes leftover after parsing attributes in process `syz.1.32845'. [ 2278.246336][ T9481] netlink: 132 bytes leftover after parsing attributes in process `syz.4.32846'. [ 2280.236447][T20657] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 2281.223498][ T9560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.32875'. [ 2282.272260][T20657] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4 [ 2283.152171][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.165904][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.069948][ T9594] netlink: 'syz.2.32892': attribute type 2 has an invalid length. [ 2284.119683][ T9594] netlink: 10 bytes leftover after parsing attributes in process `syz.2.32892'. [ 2284.423883][T20657] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 2284.990150][ T9628] netlink: 'syz.4.32908': attribute type 2 has an invalid length. [ 2285.030192][ T9628] netlink: 10 bytes leftover after parsing attributes in process `syz.4.32908'. [ 2289.197594][ T9705] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.32938'. [ 2290.707362][ T9736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.32950'. [ 2290.804525][ T9732] ref_ctr_offset mismatch. inode: 0x11db offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2292.687922][ T9776] ref_ctr_offset mismatch. inode: 0x118c offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2295.924911][ T9829] netlink: 126324 bytes leftover after parsing attributes in process `syz.4.32986'. [ 2296.998964][ T9845] can: request_module (can-proto-0) failed. [ 2297.444774][ T9861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.33003'. [ 2299.508485][ T9888] device syzkaller0 entered promiscuous mode [ 2299.685113][ T9893] netlink: 1 bytes leftover after parsing attributes in process `syz.0.33017'. [ 2299.808411][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33018'. [ 2300.896169][ T9929] netlink: 60 bytes leftover after parsing attributes in process `syz.0.33033'. [ 2300.983312][ T9931] IPv6: NLM_F_CREATE should be specified when creating new route [ 2301.029495][ T9931] netlink: 1 bytes leftover after parsing attributes in process `syz.4.33034'. [ 2301.229822][ T9935] device syzkaller0 entered promiscuous mode [ 2303.800221][ T9969] netlink: 1 bytes leftover after parsing attributes in process `syz.1.33048'. [ 2315.194201][T10245] device pim6reg1 entered promiscuous mode [ 2316.473570][T10300] device pim6reg1 entered promiscuous mode [ 2317.016175][T10317] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.33211'. [ 2317.028079][T10323] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.33213'. [ 2317.212829][T10327] device syzkaller0 entered promiscuous mode [ 2317.493377][T10334] netlink: 'syz.1.33218': attribute type 1 has an invalid length. [ 2318.425382][T10353] netlink: 56843 bytes leftover after parsing attributes in process `syz.4.33227'. [ 2319.883677][T10384] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.33240'. [ 2320.455577][T10398] device pim6reg1 entered promiscuous mode [ 2320.561277][T10404] netlink: 'syz.0.33248': attribute type 1 has an invalid length. [ 2321.120864][T10417] device syzkaller0 entered promiscuous mode [ 2321.514161][T10433] netlink: 192432 bytes leftover after parsing attributes in process `syz.4.33262'. [ 2321.525278][T10433] netlink: get zone limit has 4 unknown bytes [ 2321.819529][T10431] netlink: 'syz.2.33261': attribute type 1 has an invalid length. [ 2322.338530][T10450] device syzkaller0 entered promiscuous mode [ 2323.846909][T10491] device syzkaller0 entered promiscuous mode [ 2324.933888][T10505] device syzkaller0 entered promiscuous mode [ 2327.314254][T10539] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.33308'. [ 2327.338249][T10538] device syzkaller0 entered promiscuous mode [ 2327.882232][T10559] sctp: [Deprecated]: syz.1.33317 (pid 10559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2327.882232][T10559] Use struct sctp_sack_info instead [ 2331.478011][T10589] sctp: [Deprecated]: syz.3.33332 (pid 10589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2331.478011][T10589] Use struct sctp_sack_info instead [ 2333.255427][T10621] sctp: [Deprecated]: syz.0.33346 (pid 10621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2333.255427][T10621] Use struct sctp_sack_info instead [ 2335.804764][T10686] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.33375'. [ 2335.829712][T10686] openvswitch: netlink: Flow actions attr not present in new flow. [ 2336.196395][T10698] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.33391'. [ 2336.228269][T10698] openvswitch: netlink: Flow actions attr not present in new flow. [ 2337.076595][T10721] netlink: 'syz.3.33390': attribute type 2 has an invalid length. [ 2337.097314][T10721] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.33390'. [ 2337.825121][T10741] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.33400'. [ 2337.885977][T10741] openvswitch: netlink: Flow actions attr not present in new flow. [ 2338.613122][T10750] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.33415'. [ 2338.643986][T10750] openvswitch: netlink: Flow actions attr not present in new flow. [ 2344.523625][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.531567][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.115768][T10854] device syzkaller0 entered promiscuous mode [ 2348.422645][T10893] netlink: 'syz.3.33465': attribute type 2 has an invalid length. [ 2348.440124][T10893] netlink: 'syz.3.33465': attribute type 1 has an invalid length. [ 2348.448069][T10893] netlink: 'syz.3.33465': attribute type 4 has an invalid length. [ 2348.487262][T10893] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.33465'. [ 2350.026753][T10901] netlink: 'syz.3.33469': attribute type 21 has an invalid length. [ 2350.039242][T10901] netlink: 'syz.3.33469': attribute type 22 has an invalid length. [ 2350.054368][T10901] netlink: 'syz.3.33469': attribute type 22 has an invalid length. [ 2350.069609][T10901] netlink: 'syz.3.33469': attribute type 15 has an invalid length. [ 2350.089352][T10901] netlink: 6124 bytes leftover after parsing attributes in process `syz.3.33469'. [ 2351.150531][T10933] netlink: 60 bytes leftover after parsing attributes in process `syz.4.33482'. [ 2351.176593][T10933] netlink: 60 bytes leftover after parsing attributes in process `syz.4.33482'. [ 2351.202450][T10933] netlink: 60 bytes leftover after parsing attributes in process `syz.4.33482'. [ 2352.134347][T10969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33498'. [ 2352.180216][T10969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33498'. [ 2352.224108][T10971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33498'. [ 2352.744858][T20657] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2353.092690][T11001] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.33510'. [ 2353.512898][T11003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33512'. [ 2353.565128][T11003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33512'. [ 2353.659465][T11005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33512'. [ 2354.198099][T11022] mac80211_hwsim hwsim59 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2354.502340][T10992] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2354.607067][T11030] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.33522'. [ 2354.956029][T11037] device syzkaller0 entered promiscuous mode [ 2356.491920][T10992] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2356.679781][ T4645] wlan1: Trigger new scan to find an IBSS to join [ 2359.579589][T11070] netlink: 'syz.4.33538': attribute type 21 has an invalid length. [ 2359.587956][T11070] netlink: 'syz.4.33538': attribute type 1 has an invalid length. [ 2359.617264][T11070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33538'. [ 2359.642400][T11095] netlink: 'syz.2.33549': attribute type 1 has an invalid length. [ 2359.720869][T17138] wlan1: Trigger new scan to find an IBSS to join [ 2359.793453][ T4324] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2361.105266][T11122] netlink: 'syz.3.33560': attribute type 9 has an invalid length. [ 2361.162767][T11122] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.33560'. [ 2361.390261][T11126] device syzkaller0 entered promiscuous mode [ 2362.155282][T11145] syz.4.33571[11145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2362.155608][T11145] syz.4.33571[11145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2362.309971][ T4324] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2362.681661][T17121] wlan1: Creating new IBSS network, BSSID 62:08:f4:cd:e9:cc [ 2364.362893][ T4324] Bluetooth: hci3: command 0x2016 tx timeout [ 2365.182724][T11156] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2365.197594][T11158] netlink: 'syz.1.33576': attribute type 9 has an invalid length. [ 2365.209391][T11158] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.33576'. [ 2365.591363][T11178] syz.2.33584[11178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2365.591530][T11178] syz.2.33584[11178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2365.718763][T11182] sctp: [Deprecated]: syz.1.33588 (pid 11182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2365.718763][T11182] Use struct sctp_sack_info instead [ 2366.107562][T11196] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.33596'. [ 2366.434015][ T4324] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2367.071853][T11208] syz.1.33603[11208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2367.072047][T11208] syz.1.33603[11208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2367.720777][T17138] wlan1: Trigger new scan to find an IBSS to join [ 2367.933981][T11234] netlink: 14 bytes leftover after parsing attributes in process `syz.4.33613'. [ 2368.168496][T11239] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.33617'. [ 2368.519654][ T4324] Bluetooth: hci2: command 0x2016 tx timeout [ 2368.602228][T11255] sctp: [Deprecated]: syz.2.33624 (pid 11255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2368.602228][T11255] Use struct sctp_sack_info instead [ 2368.942850][T11265] netlink: 14 bytes leftover after parsing attributes in process `syz.0.33628'. [ 2369.401631][T11273] netlink: 14 bytes leftover after parsing attributes in process `syz.1.33643'. [ 2369.752399][T11285] sctp: [Deprecated]: syz.4.33639 (pid 11285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2369.752399][T11285] Use struct sctp_sack_info instead [ 2370.184936][T11295] device bridge_slave_1 left promiscuous mode [ 2370.204566][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 2370.227034][T11295] device bridge_slave_0 left promiscuous mode [ 2370.251669][T11295] bridge0: port 1(bridge_slave_0) entered disabled state [ 2370.562923][T11310] tipc: Started in network mode [ 2370.599748][T11310] tipc: Node identity 9215a268, cluster identity 4711 [ 2370.617652][T11310] tipc: Node number set to 2450891368 [ 2370.760304][ T5127] wlan1: Trigger new scan to find an IBSS to join [ 2370.892286][T11316] syz.4.33652[11316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2370.892406][T11316] syz.4.33652[11316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2370.963669][T11312] device syzkaller0 entered promiscuous mode [ 2372.954624][T11354] syz.0.33669[11354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2372.954716][T11354] syz.0.33669[11354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2373.726298][T16117] wlan1: Trigger new scan to find an IBSS to join [ 2374.145472][T11367] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.33674'. [ 2374.925797][T27894] wlan1: Creating new IBSS network, BSSID 1a:7c:46:2b:29:1f [ 2375.163640][T11400] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.33690'. [ 2375.698121][T11419] device bridge_slave_0 left promiscuous mode [ 2375.714790][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 2375.929074][T11424] tipc: Started in network mode [ 2375.936314][T11424] tipc: Node identity 9215a268, cluster identity 4711 [ 2375.964568][T11424] tipc: Node number set to 2450891368 [ 2376.076309][T11428] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 2377.121200][T11457] bridge0: port 2(team0) entered disabled state [ 2377.178267][T11457] device bridge_slave_0 left promiscuous mode [ 2377.207315][T11457] bridge0: port 1(bridge_slave_0) entered disabled state [ 2377.220053][T11460] ref_ctr_offset mismatch. inode: 0x147f offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2377.450077][T11462] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 2379.088160][T11490] ref_ctr_offset mismatch. inode: 0x1103 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2379.385217][T11500] device bridge_slave_0 left promiscuous mode [ 2379.396824][T11500] bridge0: port 1(bridge_slave_0) entered disabled state [ 2379.599641][T11509] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 2379.949253][T11520] device syzkaller0 entered promiscuous mode [ 2382.539742][T11548] bridge0: port 2(team0) entered disabled state [ 2382.554545][T11548] device bridge_slave_0 left promiscuous mode [ 2382.594603][T11548] bridge0: port 1(bridge_slave_0) entered disabled state [ 2385.089454][T11603] syzkaller0: tun_chr_ioctl cmd 1074033753 [ 2386.081551][T11631] netlink: 'syz.0.33789': attribute type 10 has an invalid length. [ 2386.123952][T11631] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.33789'. [ 2386.560527][T11648] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 2386.949615][T11668] netlink: 'syz.1.33806': attribute type 10 has an invalid length. [ 2386.978024][T11668] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.33806'. [ 2387.700571][T11692] netlink: 'syz.3.33818': attribute type 10 has an invalid length. [ 2387.777470][T11692] 8021q: adding VLAN 0 to HW filter on device team0 [ 2387.818225][T11692] bond0: (slave team0): Enslaving as an active interface with an up link [ 2388.045493][T11704] netlink: 'syz.2.33822': attribute type 10 has an invalid length. [ 2388.072029][T11704] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.33822'. [ 2388.575195][T11722] netlink: 14 bytes leftover after parsing attributes in process `syz.3.33832'. [ 2389.227807][T11743] netlink: 'syz.0.33851': attribute type 10 has an invalid length. [ 2389.262670][T11743] device team0 left promiscuous mode [ 2389.292897][T11743] device team_slave_0 left promiscuous mode [ 2389.299118][T11743] device team_slave_1 left promiscuous mode [ 2389.376324][T11743] 8021q: adding VLAN 0 to HW filter on device team0 [ 2389.405504][T11743] bond0: (slave team0): Enslaving as an active interface with an up link [ 2389.647947][T11757] netlink: 26 bytes leftover after parsing attributes in process `syz.2.33849'. [ 2390.833380][T17132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2391.506835][T11798] netlink: 'syz.1.33866': attribute type 10 has an invalid length. [ 2391.585331][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 2391.624255][T11798] bond0: (slave team0): Enslaving as an active interface with an up link [ 2392.710233][T11820] netlink: 14 bytes leftover after parsing attributes in process `syz.1.33876'. [ 2393.826228][T11835] netlink: 14 bytes leftover after parsing attributes in process `syz.0.33893'. [ 2394.456089][T11851] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33901'. [ 2396.741445][T11887] netlink: 14 bytes leftover after parsing attributes in process `syz.4.33905'. [ 2396.833793][T11889] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.33908'. [ 2397.563950][T11907] netlink: 'syz.2.33917': attribute type 21 has an invalid length. [ 2397.613328][T11907] netlink: 'syz.2.33917': attribute type 4 has an invalid length. [ 2397.675174][T11907] netlink: 'syz.2.33917': attribute type 23 has an invalid length. [ 2397.758225][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.33917'. [ 2398.652922][T11922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33923'. [ 2401.914788][T11944] netlink: 'syz.1.33931': attribute type 3 has an invalid length. [ 2401.951143][T11944] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.33931'. [ 2402.228381][T11951] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.33935'. [ 2402.881822][T11977] netlink: 'syz.2.33948': attribute type 3 has an invalid length. [ 2402.932154][T11977] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.33948'. [ 2403.043020][ T4324] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 2403.343535][T11983] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.33953'. [ 2404.351645][ T4324] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10 [ 2404.392593][T12012] netlink: 'syz.0.33963': attribute type 3 has an invalid length. [ 2404.469570][T12012] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.33963'. [ 2404.954909][T17138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2405.032972][T12028] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.33974'. [ 2405.050932][T12028] netlink: zone id is out of range [ 2405.059774][T12028] netlink: zone id is out of range [ 2405.065645][T12028] netlink: zone id is out of range [ 2405.072245][T12028] netlink: zone id is out of range [ 2405.077810][T12028] netlink: zone id is out of range [ 2405.083543][ T4324] Bluetooth: hci1: command 0x2021 tx timeout [ 2405.089917][T12028] netlink: zone id is out of range [ 2405.095447][T12028] netlink: zone id is out of range [ 2405.104571][T12028] netlink: zone id is out of range [ 2405.110252][T12028] netlink: zone id is out of range [ 2405.115965][T12028] netlink: zone id is out of range [ 2405.506581][ T4324] Bluetooth: hci4: unexpected subevent 0x06 length: 150 > 10 [ 2405.768089][T12051] netlink: 'syz.0.33983': attribute type 3 has an invalid length. [ 2405.846402][T12051] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.33983'. [ 2405.979006][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.985528][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.439605][ T4324] Bluetooth: hci0: command 0x2021 tx timeout [ 2407.570154][ T4324] Bluetooth: hci4: command 0x2021 tx timeout [ 2408.964836][T12074] netlink: 'syz.3.34005': attribute type 3 has an invalid length. [ 2409.036196][T12074] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34005'. [ 2409.170064][T12078] netlink: 172 bytes leftover after parsing attributes in process `syz.2.33995'. [ 2410.393962][T12113] netlink: 'syz.4.34012': attribute type 3 has an invalid length. [ 2410.495183][T12113] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34012'. [ 2421.849252][T16117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2425.665945][T12360] netlink: 'syz.3.34119': attribute type 3 has an invalid length. [ 2425.697924][T12360] netlink: 'syz.3.34119': attribute type 1 has an invalid length. [ 2425.714925][T12360] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.34119'. [ 2426.282747][T10992] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2426.319010][T12379] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.34128'. [ 2427.378037][T10992] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 2427.614635][T12408] netlink: 'syz.3.34139': attribute type 10 has an invalid length. [ 2427.664108][T12408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34139'. [ 2427.768405][T12408] net_ratelimit: 3660 callbacks suppressed [ 2427.768478][T12408] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2428.385341][ T4324] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2428.393050][ T4324] Bluetooth: hci4: Invalid handle: 0xffff > 0x0eff [ 2429.399452][ T4324] Bluetooth: hci2: command 0x0409 tx timeout [ 2429.788754][ T4324] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2430.166831][T12456] netlink: 'syz.1.34172': attribute type 3 has an invalid length. [ 2430.220731][T12456] netlink: 'syz.1.34172': attribute type 1 has an invalid length. [ 2430.251820][T12456] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.34172'. [ 2432.446997][T12475] sock: sock_timestamping_bind_phc: sock not bind to device [ 2432.602642][T12480] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.34170'. [ 2437.069134][T12528] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.34189'. [ 2438.046740][T16117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2439.539671][T12554] device syzkaller0 entered promiscuous mode [ 2443.022897][T12595] netlink: 'syz.0.34220': attribute type 21 has an invalid length. [ 2445.264581][T12663] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34251'. [ 2445.493570][ T4324] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 2447.983308][T12717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.34272'. [ 2448.459859][T12733] netlink: 'syz.0.34279': attribute type 1 has an invalid length. [ 2448.484206][T12733] netlink: 'syz.0.34279': attribute type 4 has an invalid length. [ 2448.492668][T12733] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.34279'. [ 2450.296476][T10992] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 2450.339813][T12763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.34291'. [ 2450.653759][T12774] device syzkaller0 entered promiscuous mode [ 2450.852732][T12780] netlink: 'syz.2.34313': attribute type 1 has an invalid length. [ 2450.861612][T12780] netlink: 'syz.2.34313': attribute type 4 has an invalid length. [ 2450.870799][T12780] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.34313'. [ 2451.450415][T12793] netlink: 'syz.4.34317': attribute type 1 has an invalid length. [ 2451.458625][T12793] netlink: 'syz.4.34317': attribute type 4 has an invalid length. [ 2451.474389][T12793] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.34317'. [ 2451.629568][ T4324] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2452.232672][T12808] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34310'. [ 2452.545244][T12816] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.34316'. [ 2453.291483][T17132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2454.513972][T12843] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.34330'. [ 2454.778199][T12855] netlink: 44 bytes leftover after parsing attributes in process `syz.4.34331'. [ 2455.719728][ T4324] Bluetooth: hci3: command 0x0406 tx timeout [ 2460.466429][T12896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34350'. [ 2462.819991][T12943] netlink: 44 bytes leftover after parsing attributes in process `syz.2.34372'. [ 2464.368605][T12975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34390'. [ 2465.476809][T13010] netlink: 44 bytes leftover after parsing attributes in process `syz.0.34404'. [ 2467.402725][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.409109][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.736186][T13037] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.34414'. [ 2467.967636][T13044] netlink: 44 bytes leftover after parsing attributes in process `syz.4.34419'. [ 2469.155570][ T5127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2470.424882][T13075] netlink: 'syz.2.34432': attribute type 2 has an invalid length. [ 2470.539920][T13075] netlink: 'syz.2.34432': attribute type 1 has an invalid length. [ 2470.568703][T13075] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.34432'. [ 2470.966085][T13085] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.34440'. [ 2471.064194][T13088] IPv6: Can't replace route, no match found [ 2476.204684][T13137] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.34470'. [ 2477.424763][T13161] netlink: 'syz.4.34471': attribute type 2 has an invalid length. [ 2477.463251][T13161] netlink: 'syz.4.34471': attribute type 1 has an invalid length. [ 2477.493177][T13161] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.34471'. [ 2480.754461][T13176] netlink: 'syz.1.34485': attribute type 3 has an invalid length. [ 2480.788253][T13176] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.34485'. [ 2481.082925][T13188] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.34479'. [ 2484.563044][T17132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2484.626768][T13222] netlink: 'syz.3.34494': attribute type 3 has an invalid length. [ 2484.644446][T13222] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.34494'. [ 2488.928774][T13251] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.34507'. [ 2489.816553][T13255] netlink: 'syz.4.34509': attribute type 3 has an invalid length. [ 2489.837230][T13255] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.34509'. [ 2491.735794][T13243] netlink: 'syz.2.34504': attribute type 1 has an invalid length. [ 2491.743898][T13243] netlink: 'syz.2.34504': attribute type 4 has an invalid length. [ 2491.752859][T13243] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.34504'. [ 2492.095391][T13274] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.34518'. [ 2493.455718][T13310] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.34533'. [ 2500.080081][T17121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2501.392366][T13318] netlink: 'syz.0.34536': attribute type 10 has an invalid length. [ 2501.400539][T13318] device hsr0 entered promiscuous mode [ 2501.406516][T13318] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2503.396432][T10992] Bluetooth: hci1: Dropping invalid advertising data [ 2503.403706][T10992] Bluetooth: hci1: unknown advertising packet type: 0xff [ 2503.403735][T10992] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2504.422113][T13454] device syzkaller0 entered promiscuous mode [ 2505.428122][T10992] Bluetooth: hci3: Dropping invalid advertising data [ 2505.435607][T10992] Bluetooth: hci3: unknown advertising packet type: 0xff [ 2505.435645][T10992] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2509.856145][T10992] Bluetooth: hci2: Dropping invalid advertising data [ 2509.863745][T10992] Bluetooth: hci2: unknown advertising packet type: 0xff [ 2509.863772][T10992] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2510.036160][T10992] Bluetooth: hci4: Dropping invalid advertising data [ 2510.043186][T10992] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2511.095054][T10992] Bluetooth: hci0: Dropping invalid advertising data [ 2511.102033][T10992] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2512.643910][T13579] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2514.686904][T13581] syz.1.34665[13581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2514.687145][T13581] syz.1.34665[13581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2514.709974][T10992] Bluetooth: hci3: Dropping invalid advertising data [ 2514.736211][T10992] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2517.022428][T13619] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2517.101279][T13625] syz.3.34674[13625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2517.101534][T13625] syz.3.34674[13625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2517.318132][T13631] device syzkaller0 entered promiscuous mode [ 2517.797501][T27894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2520.449197][T13653] netlink: 'syz.2.34685': attribute type 21 has an invalid length. [ 2520.562855][T13655] netlink: 'syz.0.34686': attribute type 15 has an invalid length. [ 2520.570966][T13655] netlink: 'syz.0.34686': attribute type 16 has an invalid length. [ 2520.579017][T13655] netlink: 'syz.0.34686': attribute type 4 has an invalid length. [ 2520.587475][T13655] netlink: 'syz.0.34686': attribute type 6 has an invalid length. [ 2520.595899][T13655] netlink: 'syz.0.34686': attribute type 15 has an invalid length. [ 2520.604324][T13655] netlink: 'syz.0.34686': attribute type 16 has an invalid length. [ 2520.612758][T13655] netlink: 'syz.0.34686': attribute type 20 has an invalid length. [ 2520.621345][T13655] netlink: 'syz.0.34686': attribute type 21 has an invalid length. [ 2520.629760][T13655] netlink: 'syz.0.34686': attribute type 23 has an invalid length. [ 2520.637854][T13655] netlink: 13226 bytes leftover after parsing attributes in process `syz.0.34686'. [ 2522.275858][T13694] netlink: 13226 bytes leftover after parsing attributes in process `syz.2.34702'. [ 2524.073013][T13730] netlink: 13226 bytes leftover after parsing attributes in process `syz.1.34717'. [ 2524.889471][T13752] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.34727'. [ 2525.594294][T13771] netlink: 15794 bytes leftover after parsing attributes in process `syz.4.34737'. [ 2526.200690][T13782] netlink: 14 bytes leftover after parsing attributes in process `syz.1.34741'. [ 2526.229781][T13782] openvswitch: netlink: Message has 6 unknown bytes. [ 2528.851957][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.858666][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.646070][T13823] device syzkaller0 entered promiscuous mode [ 2530.672900][T13823] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 2531.107880][T17121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2533.211418][T13841] validate_nla: 33 callbacks suppressed [ 2533.211471][T13841] netlink: 'syz.4.34768': attribute type 3 has an invalid length. [ 2533.227200][T13841] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.34768'. [ 2533.758595][T13845] device syzkaller0 entered promiscuous mode [ 2539.778018][T13875] netlink: 'syz.0.34782': attribute type 14 has an invalid length. [ 2539.789789][T13875] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.34782'. [ 2542.228572][T13920] device syzkaller0 entered promiscuous mode [ 2548.464204][T13972] netlink: 14 bytes leftover after parsing attributes in process `syz.4.34823'. [ 2548.853282][T17121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2549.867712][T13991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34832'. [ 2549.985973][T13993] netlink: 'syz.1.34832': attribute type 12 has an invalid length. [ 2550.021597][T13993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34832'. [ 2551.756576][T14025] netlink: 'syz.1.34845': attribute type 11 has an invalid length. [ 2551.795363][T14025] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34845'. [ 2552.331633][T14024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2553.017698][T14039] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34849'. [ 2553.056472][T14039] netlink: 'syz.2.34849': attribute type 12 has an invalid length. [ 2553.065894][T14039] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34849'. [ 2553.523010][T14043] netlink: 'syz.0.34850': attribute type 1 has an invalid length. [ 2553.574519][T14043] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.34850'. [ 2554.984274][T14063] netlink: 'syz.0.34864': attribute type 3 has an invalid length. [ 2555.008912][T14063] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.34864'. [ 2555.107004][T14061] device syzkaller0 entered promiscuous mode [ 2557.636670][T14071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.34867'. [ 2557.698610][T14071] netlink: 'syz.4.34867': attribute type 12 has an invalid length. [ 2557.718171][T14071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.34867'. [ 2558.598608][T14099] netlink: 'syz.3.34878': attribute type 11 has an invalid length. [ 2558.648628][T14099] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34878'. [ 2558.966586][T14098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2562.241072][T27894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2564.968346][T14116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34883'. [ 2564.977815][T14117] netlink: 'syz.3.34883': attribute type 12 has an invalid length. [ 2564.987096][T14117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34883'. [ 2565.435672][T14145] netlink: 'syz.0.34894': attribute type 11 has an invalid length. [ 2565.443837][T14145] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34894'. [ 2566.070908][T14144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2566.778533][T14163] netlink: 'syz.2.34904': attribute type 4 has an invalid length. [ 2566.829619][T14163] netlink: 'syz.2.34904': attribute type 7 has an invalid length. [ 2566.873414][T14163] netlink: 194740 bytes leftover after parsing attributes in process `syz.2.34904'. [ 2567.127705][T14174] netlink: 'syz.4.34908': attribute type 11 has an invalid length. [ 2567.200641][T14174] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34908'. [ 2567.329862][T14172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2569.378919][T14212] device syzkaller0 entered promiscuous mode [ 2570.050594][T14232] netlink: 'syz.4.34933': attribute type 4 has an invalid length. [ 2570.058517][T14232] netlink: 'syz.4.34933': attribute type 7 has an invalid length. [ 2570.159477][T14232] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.34933'. [ 2578.527700][T14286] netlink: 'syz.2.34953': attribute type 10 has an invalid length. [ 2578.548070][T14286] netlink: 'syz.2.34953': attribute type 11 has an invalid length. [ 2578.568499][T14286] netlink: 5145 bytes leftover after parsing attributes in process `syz.2.34953'. [ 2579.852155][T17138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2579.873117][T14329] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.34971'. [ 2579.956353][T14333] sctp: [Deprecated]: syz.0.34973 (pid 14333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2579.956353][T14333] Use struct sctp_sack_info instead [ 2590.305126][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.311615][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.924516][T14428] device syzkaller0 entered promiscuous mode [ 2593.269476][T27894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2601.572793][T14492] netlink: 'syz.2.35031': attribute type 3 has an invalid length. [ 2601.604794][T14492] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.35031'. [ 2606.241086][T14549] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.35063'. [ 2610.183243][T14624] -1: renamed from syzkaller0 [ 2610.847011][ T4645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2612.666596][T14658] -1: renamed from syzkaller0 [ 2615.241693][T14692] -1: renamed from syzkaller0 [ 2618.755447][T10992] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 2619.395465][ T4324] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 2620.759610][ T4324] Bluetooth: hci1: command 0x0409 tx timeout [ 2621.095394][ T4324] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 2621.479408][T10992] Bluetooth: hci2: command 0x0409 tx timeout [ 2621.535485][T14840] netlink: 'syz.3.35182': attribute type 3 has an invalid length. [ 2621.603778][T14840] netlink: 'syz.3.35182': attribute type 8 has an invalid length. [ 2621.624921][T14840] netlink: 'syz.3.35182': attribute type 7 has an invalid length. [ 2621.689403][T14840] netlink: 194740 bytes leftover after parsing attributes in process `syz.3.35182'. [ 2623.173894][T10992] Bluetooth: hci0: command 0x0409 tx timeout [ 2623.278661][T14879] netlink: 'syz.4.35200': attribute type 3 has an invalid length. [ 2623.305869][T14879] netlink: 'syz.4.35200': attribute type 8 has an invalid length. [ 2623.345479][T14883] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35201'. [ 2623.352785][T14879] netlink: 'syz.4.35200': attribute type 7 has an invalid length. [ 2623.396444][T14879] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.35200'. [ 2623.551792][T14888] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.35214'. [ 2624.217116][T17126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2624.978411][T14909] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.35220'. [ 2625.848455][T14936] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.35226'. [ 2627.923536][T14972] device syzkaller0 entered promiscuous mode [ 2630.908717][T14989] netlink: 'syz.2.35247': attribute type 21 has an invalid length. [ 2630.919407][T14989] netlink: 'syz.2.35247': attribute type 6 has an invalid length. [ 2630.927284][T14989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.35247'. [ 2631.364254][T15008] device syzkaller0 entered promiscuous mode [ 2631.902214][T10992] Bluetooth: hci1: Malformed HCI Event [ 2632.077032][T15037] sock: sock_timestamping_bind_phc: sock not bind to device [ 2635.247393][T15066] sock: sock_timestamping_bind_phc: sock not bind to device [ 2636.328645][T15102] sock: sock_timestamping_bind_phc: sock not bind to device [ 2642.007132][T17132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2642.266335][T15222] netlink: 'syz.3.35351': attribute type 3 has an invalid length. [ 2642.277571][T15222] netlink: 'syz.3.35351': attribute type 1 has an invalid length. [ 2642.293567][T15222] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.35351'. [ 2643.108600][T15234] device syzkaller0 entered promiscuous mode [ 2646.343595][T15250] nr0: port 1(hsr0) entered blocking state [ 2646.350162][T15250] nr0: port 1(hsr0) entered disabled state [ 2646.357497][T15250] device hsr0 entered promiscuous mode [ 2647.549040][T15291] device syzkaller0 entered promiscuous mode [ 2651.729027][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.735867][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.880318][T15366] netlink: 'syz.0.35421': attribute type 27 has an invalid length. [ 2655.216041][T17121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2658.124140][T15429] netlink: 'syz.3.35443': attribute type 2 has an invalid length. [ 2658.228702][T15429] netlink: 'syz.3.35443': attribute type 2 has an invalid length. [ 2658.246847][T15429] netlink: 194740 bytes leftover after parsing attributes in process `syz.3.35443'. [ 2660.491115][T15468] netlink: 'syz.4.35461': attribute type 2 has an invalid length. [ 2660.518612][T15468] netlink: 'syz.4.35461': attribute type 2 has an invalid length. [ 2660.537293][T15468] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.35461'. [ 2660.745970][T15477] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.35467'. [ 2660.898291][T15480] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.35468'. [ 2662.418929][T15508] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.35481'. [ 2662.482854][T15511] netlink: 'syz.0.35480': attribute type 2 has an invalid length. [ 2662.522749][T15511] netlink: 'syz.0.35480': attribute type 2 has an invalid length. [ 2662.543296][T15511] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.35480'. [ 2662.597088][T15513] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.35483'. [ 2664.832244][T15542] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.35497'. [ 2665.541486][T15546] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.35499'. [ 2668.216186][T15574] netlink: 'syz.1.35511': attribute type 15 has an invalid length. [ 2668.239289][T15574] netlink: 'syz.1.35511': attribute type 16 has an invalid length. [ 2668.269627][T15574] netlink: 'syz.1.35511': attribute type 20 has an invalid length. [ 2668.277590][T15574] netlink: 'syz.1.35511': attribute type 21 has an invalid length. [ 2668.312558][T15574] netlink: 'syz.1.35511': attribute type 23 has an invalid length. [ 2668.325490][T15574] netlink: 'syz.1.35511': attribute type 25 has an invalid length. [ 2668.344251][T15574] netlink: 15862 bytes leftover after parsing attributes in process `syz.1.35511'. [ 2671.078751][T15596] sctp: [Deprecated]: syz.3.35519 (pid 15596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2671.078751][T15596] Use struct sctp_sack_info instead [ 2672.416125][T15624] sctp: [Deprecated]: syz.2.35533 (pid 15624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2672.416125][T15624] Use struct sctp_sack_info instead [ 2672.530450][T15623] device syzkaller0 entered promiscuous mode [ 2673.587024][T15638] netlink: 'syz.0.35538': attribute type 15 has an invalid length. [ 2673.627288][T15638] netlink: 'syz.0.35538': attribute type 16 has an invalid length. [ 2673.657327][ T4645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2673.688533][T15638] netlink: 'syz.0.35538': attribute type 20 has an invalid length. [ 2673.748451][T15638] netlink: 'syz.0.35538': attribute type 21 has an invalid length. [ 2673.775548][T15638] netlink: 'syz.0.35538': attribute type 23 has an invalid length. [ 2673.793719][T15638] netlink: 'syz.0.35538': attribute type 25 has an invalid length. [ 2673.824254][T15638] netlink: 15862 bytes leftover after parsing attributes in process `syz.0.35538'. [ 2674.215212][T15649] sctp: [Deprecated]: syz.4.35546 (pid 15649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2674.215212][T15649] Use struct sctp_sack_info instead [ 2675.824147][T15679] sctp: [Deprecated]: syz.0.35557 (pid 15679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2675.824147][T15679] Use struct sctp_sack_info instead [ 2684.715929][T15807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2686.284733][ T4645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2688.391343][T15843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2697.399090][T15993] can: request_module (can-proto-0) failed. [ 2704.022719][T16092] device syzkaller0 entered promiscuous mode [ 2704.175373][T10992] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 2704.846956][T16129] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.35748'. [ 2704.886213][T17126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2705.040921][T16137] device syzkaller0 entered promiscuous mode [ 2705.130240][T16104] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 2705.861840][T16165] netlink: 126324 bytes leftover after parsing attributes in process `syz.3.35763'. [ 2706.204897][T10992] Bluetooth: hci4: Opcode 0x206c failed: -110 [ 2706.279283][ T4324] Bluetooth: hci4: command 0x206c tx timeout [ 2706.286841][T10992] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 2706.662680][T10992] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 2706.836445][T16180] device syzkaller0 entered promiscuous mode [ 2707.159490][T10992] Bluetooth: hci0: command 0x206c tx timeout [ 2707.165779][T16104] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 2708.359309][T10992] Bluetooth: hci4: command 0x2046 tx timeout [ 2708.751652][T16221] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.35787'. [ 2708.817105][T16221] netlink: zone id is out of range [ 2708.843566][T16221] netlink: zone id is out of range [ 2708.869753][T16221] netlink: zone id is out of range [ 2708.908587][T16221] netlink: zone id is out of range [ 2708.927319][T16221] netlink: zone id is out of range [ 2708.941730][T16221] netlink: zone id is out of range [ 2708.969793][T16221] netlink: zone id is out of range [ 2708.998437][T16221] netlink: zone id is out of range [ 2709.026397][T16221] netlink: zone id is out of range [ 2709.045424][T16221] netlink: zone id is out of range [ 2709.055529][T16227] netlink: 'syz.1.35790': attribute type 1 has an invalid length. [ 2709.109474][T16227] netlink: 'syz.1.35790': attribute type 4 has an invalid length. [ 2709.138091][T16227] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.35790'. [ 2709.183427][T16228] netlink: 'syz.1.35790': attribute type 1 has an invalid length. [ 2709.210904][T16228] netlink: 'syz.1.35790': attribute type 4 has an invalid length. [ 2709.237830][T16228] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.35790'. [ 2709.249475][T10992] Bluetooth: hci0: command 0x2046 tx timeout [ 2709.255716][T16104] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 2710.472961][T16257] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.35804'. [ 2713.172930][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.179877][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.508573][T16359] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.35846'. [ 2714.791437][T16373] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.35854'. [ 2715.624027][T16394] can: request_module (can-proto-0) failed. [ 2715.883686][T16407] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35866'. [ 2717.011208][T16418] can: request_module (can-proto-0) failed. [ 2717.270576][T17138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2718.145220][T16104] Bluetooth: hci2: Malformed Event: 0x02 [ 2718.556796][T16455] can: request_module (can-proto-0) failed. [ 2718.875737][T16468] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.35892'. [ 2721.100403][T16507] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.35908'. [ 2721.310693][T16510] netlink: 132 bytes leftover after parsing attributes in process `syz.0.35922'. [ 2721.804690][T16513] can: request_module (can-proto-0) failed. [ 2723.928971][T16549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.35925'. [ 2725.756895][T16567] can: request_module (can-proto-0) failed. [ 2726.097030][T16586] netlink: 132 bytes leftover after parsing attributes in process `syz.4.35940'. [ 2727.612057][T16621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35954'. [ 2727.846571][T16104] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2727.854836][T16104] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2727.864602][T16104] CPU: 0 PID: 16104 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2727.872293][T16104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2727.882379][T16104] Workqueue: hci3 hci_rx_work [ 2727.887176][T16104] Call Trace: [ 2727.890480][T16104] [ 2727.893435][T16104] dump_stack_lvl+0x188/0x24e [ 2727.898147][T16104] ? show_regs_print_info+0x12/0x12 [ 2727.903379][T16104] ? load_image+0x410/0x410 [ 2727.907939][T16104] sysfs_create_dir_ns+0x26a/0x290 [ 2727.913087][T16104] ? __lock_acquire+0x7c40/0x7c40 [ 2727.918145][T16104] ? sysfs_warn_dup+0xa0/0xa0 [ 2727.922857][T16104] ? do_raw_spin_unlock+0x11d/0x230 [ 2727.928084][T16104] kobject_add_internal+0x617/0xca0 [ 2727.933351][T16104] kobject_add+0x160/0x230 [ 2727.937801][T16104] ? kobject_init+0x1c0/0x1c0 [ 2727.942523][T16104] ? __raw_spin_lock_init+0x41/0x100 [ 2727.947834][T16104] ? klist_children_get+0x50/0x50 [ 2727.952903][T16104] ? get_device_parent+0x121/0x3e0 [ 2727.958051][T16104] device_add+0x470/0x1050 [ 2727.962500][T16104] hci_conn_add_sysfs+0xd1/0x1e0 [ 2727.967566][T16104] le_conn_complete_evt+0xf69/0x1560 [ 2727.972892][T16104] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 2727.979169][T16104] ? bt_info+0x180/0x180 [ 2727.983445][T16104] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2727.989175][T16104] ? mutex_unlock+0x10/0x10 [ 2727.993719][T16104] ? skb_pull_data+0xec/0x1f0 [ 2727.998460][T16104] hci_le_conn_complete_evt+0x183/0x440 [ 2728.004042][T16104] ? hci_remote_host_features_evt+0x230/0x230 [ 2728.010326][T16104] hci_event_packet+0x7b3/0x1290 [ 2728.015298][T16104] ? __lock_acquire+0x7c40/0x7c40 [ 2728.020354][T16104] ? bis_list+0x280/0x280 [ 2728.024714][T16104] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2728.030642][T16104] ? kcov_remote_start+0x4b0/0x7e0 [ 2728.035860][T16104] ? mt_dump_node+0x1330/0x1900 [ 2728.040747][T16104] ? hci_send_to_monitor+0x9c/0x4a0 [ 2728.045976][T16104] hci_rx_work+0x3eb/0xd40 [ 2728.050427][T16104] ? _raw_spin_unlock+0x40/0x40 [ 2728.055324][T16104] ? process_one_work+0x7b4/0x1160 [ 2728.060602][T16104] process_one_work+0x8ab/0x1160 [ 2728.065582][T16104] ? worker_detach_from_pool+0x240/0x240 [ 2728.071251][T16104] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2728.076306][T16104] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2728.081890][T16104] ? wq_worker_running+0x97/0x190 [ 2728.087018][T16104] worker_thread+0xaf5/0x12a0 [ 2728.091746][T16104] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2728.097674][T16104] kthread+0x29d/0x330 [ 2728.101813][T16104] ? worker_clr_flags+0x1a0/0x1a0 [ 2728.106861][T16104] ? kthread_blkcg+0xd0/0xd0 [ 2728.111475][T16104] ret_from_fork+0x1f/0x30 [ 2728.115955][T16104] [ 2728.125623][T16104] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2728.138752][T16104] Bluetooth: hci3: failed to register connection device [ 2728.236397][T16632] netlink: 'syz.3.35960': attribute type 10 has an invalid length. [ 2729.639464][T16653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.35971'. [ 2729.828633][T16104] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2730.199537][T16104] Bluetooth: hci3: command 0x2016 tx timeout [ 2731.514708][T16696] netlink: 132 bytes leftover after parsing attributes in process `syz.2.35987'. [ 2731.767302][T16697] can: request_module (can-proto-0) failed. [ 2731.881506][T16104] Bluetooth: hci0: command 0x2016 tx timeout [ 2732.227678][T16711] bond0: (slave team0): Error: Slave device does not support XDP [ 2732.259861][T16711] netlink: 'syz.1.35993': attribute type 10 has an invalid length. [ 2732.320273][T16711] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2732.664523][T16727] netlink: 132 bytes leftover after parsing attributes in process `syz.4.36000'. [ 2733.421023][T16742] can: request_module (can-proto-0) failed. [ 2735.232372][T16771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.36016'. [ 2736.109355][T16797] can: request_module (can-proto-0) failed. [ 2736.363442][T17132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2736.557567][T16816] netlink: 'syz.2.36036': attribute type 10 has an invalid length. [ 2737.971151][T16860] bond0: (slave team0): Error: Slave device does not support XDP [ 2737.986301][T16850] can: request_module (can-proto-0) failed. [ 2738.020116][T16860] netlink: 'syz.3.36052': attribute type 10 has an invalid length. [ 2738.091727][T16860] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2739.033276][T16878] can: request_module (can-proto-0) failed. [ 2740.116136][T16906] bond0: (slave team0): Error: Slave device does not support XDP [ 2740.222198][T16907] netlink: 'syz.0.36068': attribute type 10 has an invalid length. [ 2740.354835][T16907] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2741.689770][T16932] can: request_module (can-proto-0) failed. [ 2744.497144][T16971] netlink: 'syz.1.36092': attribute type 8 has an invalid length. [ 2744.525128][T16971] netlink: 'syz.1.36092': attribute type 9 has an invalid length. [ 2744.543585][T16971] netlink: 'syz.1.36092': attribute type 10 has an invalid length. [ 2744.561531][T16971] netlink: 'syz.1.36092': attribute type 11 has an invalid length. [ 2744.581673][T16971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36092'. [ 2748.415851][ T4645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2748.778183][T17004] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.36107'. [ 2748.917727][T17008] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.36108'. [ 2748.979293][T17008] net_ratelimit: 7096 callbacks suppressed [ 2748.979314][T17008] openvswitch: netlink: Flow actions attr not present in new flow. [ 2749.580228][T17016] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.36113'. [ 2750.643558][T17044] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.36125'. [ 2750.874583][T17046] can: request_module (can-proto-0) failed. [ 2751.066892][T17059] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.36130'. [ 2751.088268][T17059] openvswitch: netlink: Flow actions attr not present in new flow. [ 2753.573104][T17092] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.36144'. [ 2756.198360][T17136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.36161'. [ 2758.955200][T17187] netlink: 'syz.0.36184': attribute type 15 has an invalid length. [ 2758.969312][T17187] netlink: 'syz.0.36184': attribute type 7 has an invalid length. [ 2761.345704][T17223] netlink: 'syz.4.36196': attribute type 29 has an invalid length. [ 2761.381323][T17223] netlink: 'syz.4.36196': attribute type 29 has an invalid length. [ 2761.396497][T17223] netlink: 'syz.4.36196': attribute type 29 has an invalid length. [ 2761.421618][T17223] netlink: 'syz.4.36196': attribute type 29 has an invalid length. [ 2761.470842][T17225] netlink: 10 bytes leftover after parsing attributes in process `syz.2.36197'. [ 2761.504225][T17223] netlink: 'syz.4.36196': attribute type 29 has an invalid length. [ 2762.207019][T17244] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.36206'. [ 2762.241046][T17244] netlink: zone id is out of range [ 2762.897711][T17260] netlink: 10 bytes leftover after parsing attributes in process `syz.0.36215'. [ 2764.073721][T17290] netlink: 10 bytes leftover after parsing attributes in process `syz.3.36230'. [ 2764.617425][T17310] netlink: 'syz.3.36238': attribute type 15 has an invalid length. [ 2764.636628][T17310] netlink: 'syz.3.36238': attribute type 7 has an invalid length. [ 2764.649042][T16104] Bluetooth: Frame is too long (len 149, expected len 4) [ 2764.899846][T17318] netlink: 10 bytes leftover after parsing attributes in process `syz.4.36243'. [ 2764.977439][T17322] netlink: 'syz.1.36254': attribute type 15 has an invalid length. [ 2765.009662][T17322] netlink: 'syz.1.36254': attribute type 7 has an invalid length. [ 2765.169729][T17329] netlink: 'syz.4.36249': attribute type 3 has an invalid length. [ 2765.199291][T17329] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.36249'. [ 2766.219725][T16104] Bluetooth: Frame is too long (len 149, expected len 4) [ 2766.343967][T17361] netlink: 'syz.4.36261': attribute type 15 has an invalid length. [ 2766.353150][T17361] netlink: 'syz.4.36261': attribute type 7 has an invalid length. [ 2766.801237][T17375] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.36268'. [ 2766.816416][T17375] netlink: zone id is out of range [ 2767.116970][T17385] netlink: 188 bytes leftover after parsing attributes in process `syz.1.36273'. [ 2767.234897][T16104] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 2767.651519][T17132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2769.659206][T17399] netlink: 'syz.2.36278': attribute type 15 has an invalid length. [ 2769.667198][T17399] netlink: 'syz.2.36278': attribute type 7 has an invalid length. [ 2770.870781][T17421] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.36287'. [ 2770.907018][T17421] netlink: zone id is out of range [ 2771.454047][T17442] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.36308'. [ 2771.516090][T17442] netlink: zone id is out of range [ 2773.701080][T17487] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.36318'. [ 2773.741379][T17487] netlink: zone id is out of range [ 2774.627730][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.634298][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2777.641867][T17570] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.36357'. [ 2777.654490][T17570] netlink: zone id is out of range [ 2778.232836][T17584] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.36372'. [ 2778.350509][T17584] netlink: zone id is out of range [ 2779.130556][T16104] Bluetooth: Frame is too long (len 149, expected len 4) [ 2779.530001][T17121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2780.584936][T17624] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.36380'. [ 2780.644214][T17621] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.36378'. [ 2780.658937][T17621] netlink: zone id is out of range [ 2780.995484][T16104] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2783.407085][T17650] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.36393'. [ 2783.506210][T16104] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 2784.994531][T17672] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.36404'. [ 2787.142681][T17718] netlink: 'syz.3.36421': attribute type 10 has an invalid length. [ 2787.215502][T17718] team0: Port device geneve1 added [ 2787.672547][T17728] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.36428'. [ 2789.274255][T17760] netlink: 'syz.1.36441': attribute type 4 has an invalid length. [ 2789.295731][T17760] netlink: 'syz.1.36441': attribute type 1 has an invalid length. [ 2789.309691][T17760] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.36441'. [ 2794.368699][T17799] netlink: 'syz.0.36467': attribute type 4 has an invalid length. [ 2794.407452][T17804] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.36459'. [ 2794.413384][T17799] netlink: 'syz.0.36467': attribute type 1 has an invalid length. [ 2794.429606][T17799] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.36467'. [ 2794.708821][T17810] netlink: 'syz.4.36461': attribute type 2 has an invalid length. [ 2794.739344][T17810] netlink: 144 bytes leftover after parsing attributes in process `syz.4.36461'. [ 2796.124457][T17841] netlink: 'syz.2.36473': attribute type 4 has an invalid length. [ 2796.199610][T17841] netlink: 'syz.2.36473': attribute type 1 has an invalid length. [ 2796.208254][T17841] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.36473'. [ 2798.576206][T27894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2798.828915][T17883] netlink: 'syz.4.36489': attribute type 4 has an invalid length. [ 2798.846564][T17883] netlink: 'syz.4.36489': attribute type 1 has an invalid length. [ 2798.856243][T17883] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.36489'. [ 2802.051481][T17898] pimreg: tun_chr_ioctl cmd 2147767511 [ 2810.557249][T17138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2812.666609][T18020] tipc: Started in network mode [ 2812.671859][T18020] tipc: Node identity 9215a268, cluster identity 4711 [ 2812.678794][T18020] tipc: Node number set to 2450891368 [ 2812.692568][T18040] pimreg: tun_chr_ioctl cmd 2147767511 [ 2814.516962][T18097] pimreg: tun_chr_ioctl cmd 2147767511 [ 2817.684702][T18130] pimreg: tun_chr_ioctl cmd 2147767511 [ 2818.452605][T18147] pimreg: tun_chr_ioctl cmd 2147767511 [ 2820.425730][T16104] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 2826.770704][T18234] netlink: 'syz.1.36634': attribute type 11 has an invalid length. [ 2826.792057][T18234] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.36634'. [ 2827.640424][T18233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2829.603238][T17138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2830.817785][T18191] pimreg: tun_chr_ioctl cmd 2147767511 [ 2833.135464][T18283] netlink: 'syz.2.36655': attribute type 10 has an invalid length. [ 2833.213269][T18283] team0: Device wg1 is of different type [ 2833.381384][T18290] syz.3.36657[18290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2833.381500][T18290] syz.3.36657[18290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2834.852498][T18308] netlink: 'syz.4.36663': attribute type 11 has an invalid length. [ 2834.939460][T18308] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.36663'. [ 2835.014573][T18307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2836.064947][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.071449][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.240191][T18330] syz.0.36671[18330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2836.240316][T18330] syz.0.36671[18330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2839.340976][T18371] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.36689'. [ 2839.391122][T18371] netlink: zone id is out of range [ 2839.403695][T18371] netlink: zone id is out of range [ 2839.423372][T18371] netlink: zone id is out of range [ 2839.436107][T18371] netlink: zone id is out of range [ 2839.491737][T18371] netlink: del zone limit has 4 unknown bytes [ 2841.584262][T15656] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2841.710541][T18364] netlink: 'syz.0.36687': attribute type 10 has an invalid length. [ 2843.015364][T18422] netlink: 'syz.2.36712': attribute type 10 has an invalid length. [ 2843.393137][T18422] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2844.361896][T18447] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.36722'. [ 2844.447610][T18447] netlink: zone id is out of range [ 2844.472880][T18447] netlink: zone id is out of range [ 2844.478598][T18447] netlink: zone id is out of range [ 2844.498816][T18447] netlink: zone id is out of range [ 2844.587674][T18447] netlink: del zone limit has 4 unknown bytes [ 2847.422514][T18453] netlink: 'syz.1.36735': attribute type 10 has an invalid length. [ 2847.483642][T18453] team0: Device wg1 is of different type [ 2847.520016][T18460] netlink: 'syz.4.36726': attribute type 10 has an invalid length. [ 2847.594278][T18460] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2852.554313][T18597] syz.4.36793[18597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2852.554530][T18597] syz.4.36793[18597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2853.012508][T18615] sctp: [Deprecated]: syz.3.36800 (pid 18615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2853.012508][T18615] Use struct sctp_sack_info instead [ 2856.028551][T18626] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.36804'. [ 2860.631504][T17138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2865.525044][T18751] netlink: 'syz.3.36859': attribute type 4 has an invalid length. [ 2865.538339][T18751] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.36859'. [ 2866.728550][T18761] netlink: 'syz.0.36864': attribute type 1 has an invalid length. [ 2869.749744][T18785] netlink: 'syz.1.36872': attribute type 4 has an invalid length. [ 2869.759800][T18785] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.36872'. [ 2871.439587][T18830] netlink: 'syz.3.36894': attribute type 1 has an invalid length. [ 2871.739812][T18832] netlink: 'syz.1.36895': attribute type 3 has an invalid length. [ 2871.748906][T18832] netlink: 'syz.1.36895': attribute type 153 has an invalid length. [ 2871.799762][T18832] netlink: 85736 bytes leftover after parsing attributes in process `syz.1.36895'. [ 2872.011602][T18838] netlink: 2739 bytes leftover after parsing attributes in process `syz.2.36897'. [ 2872.617810][T17132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2873.843850][T18885] netlink: 'syz.2.36918': attribute type 10 has an invalid length. [ 2874.095029][T18885] team0: Port device geneve1 added [ 2879.736450][T18950] netlink: 'syz.1.36946': attribute type 3 has an invalid length. [ 2879.765253][T18950] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.36946'. [ 2879.766100][T18955] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36945'. [ 2884.590783][T19042] netlink: 'syz.0.36982': attribute type 3 has an invalid length. [ 2884.623636][T19042] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.36982'. [ 2888.553155][T19079] netlink: 'syz.0.36996': attribute type 9 has an invalid length. [ 2888.696140][T19082] netlink: 'syz.4.36998': attribute type 10 has an invalid length. [ 2888.856097][T19090] netlink: 'syz.3.37002': attribute type 3 has an invalid length. [ 2888.918490][T19090] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.37002'. [ 2888.938253][T19082] device geneve1 entered promiscuous mode [ 2889.001350][T19082] team0: Port device geneve1 added [ 2889.167441][T16104] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 2889.167479][T16104] Bluetooth: unknown link type 129 [ 2890.231208][T19113] netlink: 'syz.3.37013': attribute type 9 has an invalid length. [ 2891.239215][T16104] Bluetooth: hci0: command 0x0409 tx timeout [ 2891.289805][T16104] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 2891.289844][T16104] Bluetooth: unknown link type 129 [ 2891.335054][T19131] netlink: 'syz.3.37019': attribute type 10 has an invalid length. [ 2891.394403][T19132] netlink: 164 bytes leftover after parsing attributes in process `syz.4.37018'. [ 2891.461962][T19134] netlink: 164 bytes leftover after parsing attributes in process `syz.4.37018'. [ 2891.794673][T19148] netlink: 'syz.2.37029': attribute type 2 has an invalid length. [ 2891.830106][T19148] netlink: 'syz.2.37029': attribute type 1 has an invalid length. [ 2891.881335][T19148] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.37029'. [ 2891.963095][T17132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2893.211136][T19163] netlink: 'syz.1.37033': attribute type 10 has an invalid length. [ 2893.320013][T16104] Bluetooth: hci3: command 0x0409 tx timeout [ 2894.107824][T19163] team0: Port device geneve1 added [ 2894.542707][T19185] netlink: 'syz.3.37043': attribute type 2 has an invalid length. [ 2894.638525][T19185] netlink: 'syz.3.37043': attribute type 1 has an invalid length. [ 2894.656160][T19185] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.37043'. [ 2896.652357][T16104] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 2896.652397][T16104] Bluetooth: unknown link type 129 [ 2897.230549][T19223] netlink: 'syz.4.37061': attribute type 2 has an invalid length. [ 2897.238485][T19223] netlink: 'syz.4.37061': attribute type 1 has an invalid length. [ 2897.267490][T19223] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.37061'. [ 2897.400615][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37065'. [ 2897.503967][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.510514][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.679179][T16104] Bluetooth: hci1: command 0x0409 tx timeout [ 2899.726782][T19277] device syzkaller0 entered promiscuous mode [ 2899.762458][T19277] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 2903.153295][T19291] netlink: 'syz.1.37090': attribute type 9 has an invalid length. [ 2903.565212][T19336] netlink: 164 bytes leftover after parsing attributes in process `syz.1.37113'. [ 2903.578871][T19336] netlink: 164 bytes leftover after parsing attributes in process `syz.1.37113'. [ 2903.644750][ T4645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2907.532923][T19369] netlink: 164 bytes leftover after parsing attributes in process `syz.2.37126'. [ 2907.543022][T19372] netlink: 164 bytes leftover after parsing attributes in process `syz.2.37126'. [ 2907.561178][T19376] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.37129'. [ 2907.765573][T19386] device syzkaller0 entered promiscuous mode [ 2908.130065][T19399] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.37138'. [ 2916.117394][T19457] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37161'. [ 2916.845869][T19474] device syzkaller0 entered promiscuous mode [ 2922.991846][T16117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2923.567101][T19487] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.37176'. [ 2923.806297][T19530] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.37204'. [ 2924.270111][T19543] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.37202'. [ 2925.303243][T16104] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 2925.875646][T19577] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.37220'. [ 2925.983801][T10992] Bluetooth: hci3: unexpected event 0x31 length: 151 > 6 [ 2926.182374][T19590] netlink: 'syz.4.37224': attribute type 12 has an invalid length. [ 2926.219288][T19590] netlink: 132 bytes leftover after parsing attributes in process `syz.4.37224'. [ 2930.360727][T19627] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.37237'. [ 2935.392681][T16117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2937.102004][T10992] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 2938.325437][T19701] netlink: 'syz.2.37269': attribute type 2 has an invalid length. [ 2938.382911][T19701] netlink: 10 bytes leftover after parsing attributes in process `syz.2.37269'. [ 2941.498855][T19753] device syzkaller0 entered promiscuous mode [ 2941.615885][T19760] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.37294'. [ 2941.641180][T19760] netlink: zone id is out of range [ 2941.659298][T19760] netlink: zone id is out of range [ 2941.675120][T19760] netlink: zone id is out of range [ 2941.698362][T19760] netlink: zone id is out of range [ 2941.720961][T19760] netlink: zone id is out of range [ 2941.737237][T19760] netlink: zone id is out of range [ 2941.747543][T19760] netlink: zone id is out of range [ 2941.767461][T19760] netlink: zone id is out of range [ 2941.777060][T19760] netlink: zone id is out of range [ 2941.784825][T19760] netlink: zone id is out of range [ 2948.058255][T19825] netlink: 'syz.0.37328': attribute type 2 has an invalid length. [ 2948.074830][T19825] netlink: 10 bytes leftover after parsing attributes in process `syz.0.37328'. [ 2949.502277][T19840] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.37324'. [ 2949.904054][T16104] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 2949.937467][T19850] device syzkaller0 entered promiscuous mode [ 2954.025555][T17132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2955.141481][T19863] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.37335'. [ 2955.518976][T19871] netlink: 'syz.4.37338': attribute type 2 has an invalid length. [ 2955.566957][T19871] netlink: 10 bytes leftover after parsing attributes in process `syz.4.37338'. [ 2957.547962][T19901] netlink: 10 bytes leftover after parsing attributes in process `syz.0.37351'. [ 2958.377135][T19920] netlink: 'syz.3.37355': attribute type 2 has an invalid length. [ 2958.386129][T19920] netlink: 10 bytes leftover after parsing attributes in process `syz.3.37355'. [ 2958.925657][T19929] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.37359'. [ 2958.941245][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.947684][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 2966.313950][ T4645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2967.605114][T19985] netlink: 10 bytes leftover after parsing attributes in process `syz.4.37380'. [ 2969.261823][T20022] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.37394'. [ 2970.675467][T20008] netlink: 10 bytes leftover after parsing attributes in process `syz.2.37400'. [ 2971.430637][T20051] netlink: 'syz.3.37407': attribute type 1 has an invalid length. [ 2971.529842][T20051] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.37407'. [ 2972.177381][T20064] netlink: 10 bytes leftover after parsing attributes in process `syz.3.37411'. [ 2975.446246][T20084] delete_channel: no stack [ 2976.016869][T20100] netlink: 'syz.0.37426': attribute type 1 has an invalid length. [ 2976.061664][T20100] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.37426'. [ 2978.989861][T20121] netlink: 'syz.4.37435': attribute type 7 has an invalid length. [ 2979.025472][T20121] netlink: 'syz.4.37435': attribute type 7 has an invalid length. [ 2979.049856][T20121] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.37435'. [ 2980.373646][T20134] netlink: 'syz.2.37441': attribute type 1 has an invalid length. [ 2980.409153][T20134] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.37441'. [ 2984.944234][ T4645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2985.007447][T20181] netlink: 'syz.3.37460': attribute type 7 has an invalid length. [ 2985.049366][T20181] netlink: 'syz.3.37460': attribute type 7 has an invalid length. [ 2985.061135][T20181] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.37460'. [ 2988.962944][T20169] device syzkaller0 entered promiscuous mode [ 2988.970935][T20189] netlink: 'syz.4.37464': attribute type 11 has an invalid length. [ 2988.978905][T20189] netlink: 140 bytes leftover after parsing attributes in process `syz.4.37464'. [ 2993.040301][T20219] netlink: 'syz.1.37473': attribute type 7 has an invalid length. [ 2993.048194][T20219] netlink: 'syz.1.37473': attribute type 7 has an invalid length. [ 2993.071939][T20219] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.37473'. [ 2997.240796][T15656] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2999.547661][T10992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2999.571919][T10992] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2999.590383][T10992] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2999.607324][T10992] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2999.616330][T10992] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2999.626368][T10992] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2999.799486][T20252] chnl_net:caif_netlink_parms(): no params data found [ 2999.879875][T27894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2999.897505][T20252] bridge0: port 1(bridge_slave_0) entered blocking state [ 2999.905092][T20252] bridge0: port 1(bridge_slave_0) entered disabled state [ 2999.913573][T20252] device bridge_slave_0 entered promiscuous mode [ 2999.923065][T20252] bridge0: port 2(bridge_slave_1) entered blocking state [ 2999.934643][T20252] bridge0: port 2(bridge_slave_1) entered disabled state [ 2999.943077][T20252] device bridge_slave_1 entered promiscuous mode [ 2999.971124][T27894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2999.998740][T20252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3000.013610][T20252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3000.055744][T27894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3000.073276][T20252] team0: Port device team_slave_0 added [ 3000.081558][T20252] team0: Port device team_slave_1 added [ 3000.101439][T20252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3000.108441][T20252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3000.134549][T20252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3000.147593][T20252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3000.154720][T20252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3000.181085][T20252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3000.218985][T27894] bond0: (slave netdevsim0): Releasing backup interface [ 3000.231499][T27894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3000.265301][T20252] device hsr_slave_0 entered promiscuous mode [ 3000.272230][T20252] device hsr_slave_1 entered promiscuous mode [ 3000.502529][T20252] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3000.519866][T27894] tipc: Left network mode [ 3000.521830][T20252] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3000.552082][T20252] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3000.648071][T20252] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3000.924453][T20252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3000.948442][T17138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3000.966940][T17138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3001.027573][T20252] 8021q: adding VLAN 0 to HW filter on device team0 [ 3001.048062][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3001.061680][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3001.073072][T15656] bridge0: port 1(bridge_slave_0) entered blocking state [ 3001.080308][T15656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3001.127526][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3001.146723][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3001.166497][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3001.178713][T15656] bridge0: port 2(bridge_slave_1) entered blocking state [ 3001.185939][T15656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3001.257065][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3001.270080][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3001.331905][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3001.343456][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3001.352328][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3001.362498][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3001.373749][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3001.382480][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3001.393331][T15656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3001.425479][T20252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3001.438237][T20252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3001.448262][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3001.460036][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3001.723426][T10992] Bluetooth: hci5: command 0x0409 tx timeout [ 3001.974183][T17126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3001.981785][T17126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3002.002539][T20252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3002.225745][T27894] device hsr0 left promiscuous mode [ 3002.250421][T27894] nr0: port 1(hsr0) entered disabled state [ 3002.262694][T27894] device hsr_slave_0 left promiscuous mode [ 3002.274971][T27894] device hsr_slave_1 left promiscuous mode [ 3002.286226][T27894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3002.304166][T27894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3002.317958][T27894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3002.333319][T27894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3002.371708][T27894] device veth1_macvtap left promiscuous mode [ 3002.378042][T27894] device veth0_macvtap left promiscuous mode [ 3002.384562][T27894] device veth1_vlan left promiscuous mode [ 3002.391378][T27894] device veth0_vlan left promiscuous mode [ 3002.633609][T27894] team0 (unregistering): Port device geneve1 removed [ 3003.085588][T27894] team0 (unregistering): Port device team_slave_1 removed [ 3003.131201][T27894] team0 (unregistering): Port device team_slave_0 removed [ 3003.178833][T27894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3003.225328][T27894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3003.271661][T27894] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3003.574694][T27894] bond0 (unregistering): Released all slaves [ 3003.809414][T10992] Bluetooth: hci5: command 0x041b tx timeout [ 3003.842364][T17138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3003.852316][T17138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3003.893411][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3003.922118][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3003.948708][T20252] device veth0_vlan entered promiscuous mode [ 3003.964402][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3003.974381][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3003.988245][T20252] device veth1_vlan entered promiscuous mode [ 3004.033162][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3004.053043][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3004.067342][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3004.076686][T16117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3004.096951][T20252] device veth0_macvtap entered promiscuous mode [ 3004.115455][T20252] device veth1_macvtap entered promiscuous mode [ 3004.146666][T20252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3004.164757][T20252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3004.175980][T20252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3004.193436][T20252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3004.208304][T20252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3004.225092][T17132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3004.235325][T17132] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3004.243978][T17132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3004.253009][T17132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3004.264832][T20252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3004.277381][T20252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3004.287978][T20252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3004.301064][T20252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3004.311431][T20252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3004.322218][T20252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3004.332483][T20252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3004.343993][T20252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3004.355760][T20252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3004.364881][T17132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3004.378243][T17132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3004.400717][T20252] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3004.410323][T20252] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3004.420508][T20252] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3004.429617][T20252] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3004.576675][ T4645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3004.599563][ T4645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3004.624025][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3004.654951][T16117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3004.671334][T16117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3004.693454][T17132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3005.881439][T10992] Bluetooth: hci5: command 0x040f tx timeout [ 3007.971103][T10992] Bluetooth: hci5: command 0x0419 tx timeout [ 3017.302573][T27894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3020.361729][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.368121][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 3048.227229][ T4645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3079.152071][ T4645] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3081.801224][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.807605][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 3110.180304][T17138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3124.839104][T16104] Bluetooth: hci5: command 0x0406 tx timeout [ 3141.206510][T27894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3143.242801][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.249311][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 3151.877515][T17138] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3151.948666][T17138] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3152.038301][T17138] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3152.096590][T17138] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.193031][T17138] device hsr_slave_0 left promiscuous mode [ 3153.211977][T17138] device hsr_slave_1 left promiscuous mode [ 3153.218596][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3153.231981][T17138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3153.245177][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3153.256008][T17138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3153.266337][T17138] device bridge_slave_1 left promiscuous mode [ 3153.273116][T17138] bridge0: port 2(bridge_slave_1) entered disabled state [ 3153.283408][T17138] device bridge_slave_0 left promiscuous mode [ 3153.290597][T17138] bridge0: port 1(bridge_slave_0) entered disabled state [ 3153.322582][T17138] device veth1_macvtap left promiscuous mode [ 3153.328703][T17138] device veth0_macvtap left promiscuous mode [ 3153.338008][T17138] device veth1_vlan left promiscuous mode [ 3153.347159][T17138] device veth0_vlan left promiscuous mode [ 3153.966054][T17138] team0 (unregistering): Port device team_slave_1 removed [ 3154.011025][T17138] team0 (unregistering): Port device team_slave_0 removed [ 3154.055787][T17138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3154.100854][T17138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3154.418223][T17138] bond0 (unregistering): Released all slaves [ 3155.145707][T17138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3155.228517][T17138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3155.322555][T17138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3155.398253][T17138] bond0: (slave netdevsim0): Releasing backup interface [ 3155.419679][T17138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3155.598805][T17138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3155.686718][T17138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3155.772046][T17138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3155.830522][T17138] bond0: (slave netdevsim0): Releasing backup interface [ 3155.843662][T17138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3156.011640][T17138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3156.091499][T17138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3156.183296][T17138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3156.247858][T17138] bond0: (slave netdevsim0): Releasing backup interface [ 3156.264654][T17138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3156.503135][T17138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3156.610340][T17138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3156.699793][T17138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3156.769599][T17138] bond0: (slave netdevsim0): Releasing backup interface [ 3156.787570][T17138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3157.085427][T17138] tipc: Left network mode [ 3157.100277][T17138] tipc: Left network mode [ 3160.890452][T17138] device hsr_slave_0 left promiscuous mode [ 3160.897050][T17138] device hsr_slave_1 left promiscuous mode [ 3160.908117][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3160.917312][T17138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3160.932495][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3160.942015][T17138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3160.961885][T17138] device hsr_slave_0 left promiscuous mode [ 3160.968541][T17138] device hsr_slave_1 left promiscuous mode [ 3160.978671][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3160.987271][T17138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3161.006495][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3161.016224][T17138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3161.031835][T17138] device hsr_slave_0 left promiscuous mode [ 3161.038443][T17138] device hsr_slave_1 left promiscuous mode [ 3161.047526][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3161.058227][T17138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3161.068658][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3161.078656][T17138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3161.095864][T17138] device hsr_slave_0 left promiscuous mode [ 3161.105964][T17138] device hsr_slave_1 left promiscuous mode [ 3161.114883][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3161.124577][T17138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3161.134975][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3161.144784][T17138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3161.234059][T17138] device veth1_macvtap left promiscuous mode [ 3161.242687][T17138] device veth0_macvtap left promiscuous mode [ 3161.248904][T17138] device veth1_vlan left promiscuous mode [ 3161.258231][T17138] device veth0_vlan left promiscuous mode [ 3161.272488][T17138] device veth1_macvtap left promiscuous mode [ 3161.278594][T17138] device veth0_macvtap left promiscuous mode [ 3161.287090][T17138] device veth1_vlan left promiscuous mode [ 3161.295223][T17138] device veth0_vlan left promiscuous mode [ 3161.306301][T17138] device veth1_vlan left promiscuous mode [ 3161.317825][T17138] device veth1_macvtap left promiscuous mode [ 3161.327505][T17138] device veth0_macvtap left promiscuous mode [ 3161.335967][T17138] device veth1_vlan left promiscuous mode [ 3161.344169][T17138] device veth0_vlan left promiscuous mode [ 3161.684712][T17138] team0 (unregistering): Port device geneve1 removed [ 3161.833860][T17138] team0 (unregistering): Port device macvlan0 removed [ 3162.139149][T17138] team0 (unregistering): Port device team_slave_1 removed [ 3162.183689][T17138] team0 (unregistering): Port device team_slave_0 removed [ 3162.229949][T17138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3162.275448][T17138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3162.561951][T17138] bond0 (unregistering): (slave team0): Releasing backup interface [ 3162.596944][T17138] bond0 (unregistering): Released all slaves [ 3163.067421][T17138] team0 (unregistering): Port device team_slave_1 removed [ 3163.113786][T17138] team0 (unregistering): Port device team_slave_0 removed [ 3163.156760][T17138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3163.200524][T17138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3163.250284][T17138] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3163.480070][T17138] bond0 (unregistering): (slave team0): Releasing backup interface [ 3163.516851][T17138] bond0 (unregistering): Released all slaves [ 3163.568728][T17138] team0 (unregistering): Port device geneve1 removed [ 3163.935234][T17138] team0 (unregistering): Port device team_slave_1 removed [ 3163.978894][T17138] team0 (unregistering): Port device team_slave_0 removed [ 3164.020128][T17138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3164.063311][T17138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3164.106139][T17138] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3164.334758][T17138] bond0 (unregistering): (slave team0): Releasing backup interface [ 3164.370870][T17138] bond0 (unregistering): Released all slaves [ 3164.424123][T17138] device geneve1 left promiscuous mode [ 3164.434870][T17138] team0 (unregistering): Port device geneve1 removed [ 3164.838283][T17138] device team_slave_1 left promiscuous mode [ 3164.846303][T17138] team0 (unregistering): Port device team_slave_1 removed [ 3164.889162][T17138] device team_slave_0 left promiscuous mode [ 3164.897161][T17138] team0 (unregistering): Port device team_slave_0 removed [ 3164.938598][T17138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3164.984948][T17138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3165.033227][T17138] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3165.292244][T17138] bond0 (unregistering): Released all slaves [ 3204.682336][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.688676][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.122259][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.128605][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)