last executing test programs: 18.803800126s ago: executing program 1 (id=36325): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x6, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='Gb', 0x2}, {&(0x7f0000000b40)="22003c93b682ef5cb6dc5c145ff000000000", 0x12}], 0x2}, 0x0) 18.524838955s ago: executing program 1 (id=36331): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 17.384842261s ago: executing program 1 (id=36338): perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x1, 0x19000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, @perf_config_ext={0xe8, 0x401}, 0x0, 0x40000006, 0xffffffff, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x4004010) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) 16.311787575s ago: executing program 1 (id=36352): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20004000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x1000, 0x0, 0x1000000000000000, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 15.914520308s ago: executing program 1 (id=36354): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d0000009500000000000000402bca7352f843c77c504b24b7d19994c053aa2e05a39c8b013943758ebfa1c64325881f2fd51114e58e8bd2151d63fa757156212bce58457287eac9860d86"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0400000000d85ff9782762f88ca", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.308230807s ago: executing program 1 (id=36362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40380, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 12.979462201s ago: executing program 2 (id=36369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="bbff03316844268cb89e14f008", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x13) 7.415239276s ago: executing program 2 (id=36378): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) 6.722087478s ago: executing program 2 (id=36383): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 6.66533364s ago: executing program 0 (id=36384): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0xdb, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x3, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 6.491808555s ago: executing program 2 (id=36386): perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x19000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe8, 0x401}, 0x0, 0x40000006, 0xffffffff, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)="07c0", 0x2}], 0x1}, 0x4004010) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) 6.481429706s ago: executing program 4 (id=36387): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0xffffffff, 0x0, 0x3, 0x7}, 0x10}, 0x94) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x101d0) 6.281170912s ago: executing program 4 (id=36389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4329}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x40, 0x0, 0x2, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) 6.244858353s ago: executing program 0 (id=36390): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000010", 0x5}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xb}, {0x10000002, 0x3, 0x0, 0x6}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) 6.03980674s ago: executing program 0 (id=36392): r0 = socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xfffffe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x1, 0x6, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) 6.0269071s ago: executing program 4 (id=36393): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x2300, 0x0, 0x0, 0x0, 0x0, 0x0) 5.946325592s ago: executing program 3 (id=36394): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="007ceec574126b1521cb04665ffa90fc9607af7a985b58207c83327013e90617e46290dc690afdcf8b5972853ecfdb99dd5204845a13909de6b63201e115d7147f9cc39cd48ecf93815e62bb872c5f2542b23860ea2ced4a770e59d5333f22fb6e7eb5162e74c89c44b2c2cbfcac9fb2643871d8723682bea1a92b71c17ff806ac0143ea5dcf77ca4972350fe09a6128432a33561e5a87114c1a79069f53cdfd5ebd3e73b7b65031643905a42ca7893fbf4c3a7e88299d053a078c8f0058cec517e71089356f6bc7128aceaf5499d9ab4cb7e2", 0xd3}, {&(0x7f0000001080)="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", 0x9be}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 5.457669888s ago: executing program 2 (id=36395): openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90324fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) 5.297859883s ago: executing program 4 (id=36396): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x12, &(0x7f00000001c0), 0x4) 5.197702016s ago: executing program 0 (id=36397): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000001c0)="01073eb6", 0x4}], 0x1}, 0x4000807) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 5.043807141s ago: executing program 4 (id=36398): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1c, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 4.968165174s ago: executing program 3 (id=36399): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4112, 0x1010}], 0x1}, 0x10100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f030301", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.028278566s ago: executing program 0 (id=36400): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.748178425s ago: executing program 3 (id=36401): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) 1.563474171s ago: executing program 3 (id=36402): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'team_slave_1\x00', @remote}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.387763547s ago: executing program 3 (id=36403): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) 13.01742ms ago: executing program 32 (id=36362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40380, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 1.00343ms ago: executing program 4 (id=36405): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 543.671µs ago: executing program 0 (id=36406): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 325.071µs ago: executing program 2 (id=36407): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4bfcbfe18f727cef}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRESDEC=r2], 0x9a) 0s ago: executing program 3 (id=36408): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): : No IGMP Querier present - multicast optimizations disabled [ 2126.384667][T25631] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2126.518192][ T5183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.30801'. [ 2126.717065][ T5191] netlink: 'syz.3.30802': attribute type 275 has an invalid length. [ 2127.402227][ T5216] bridge0: port 3(batadv0) entered blocking state [ 2127.418152][ T5216] bridge0: port 3(batadv0) entered disabled state [ 2127.436523][ T5216] device batadv0 entered promiscuous mode [ 2127.461689][ T5216] bridge0: port 3(batadv0) entered blocking state [ 2127.468320][ T5216] bridge0: port 3(batadv0) entered forwarding state [ 2127.653927][ T5224] netlink: 'syz.1.30819': attribute type 10 has an invalid length. [ 2127.821242][ T5224] device veth0_vlan left promiscuous mode [ 2127.907641][ T5224] device veth0_vlan entered promiscuous mode [ 2127.917970][ T1651] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2127.927484][ T1651] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2127.998541][ T5224] team0: Device veth0_vlan failed to register rx_handler [ 2128.448006][ T5222] netlink: 'syz.0.30818': attribute type 275 has an invalid length. [ 2128.810331][ T5242] netlink: 'syz.1.30838': attribute type 275 has an invalid length. [ 2128.932218][ T5249] bridge0: port 4(batadv0) entered blocking state [ 2128.952978][ T5249] bridge0: port 4(batadv0) entered disabled state [ 2128.962169][ T5249] device batadv0 entered promiscuous mode [ 2128.984853][ T5249] bridge0: port 4(batadv0) entered blocking state [ 2128.991461][ T5249] bridge0: port 4(batadv0) entered forwarding state [ 2129.469865][T25631] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2129.479318][T25631] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2129.974006][ T5281] netlink: 'syz.4.30846': attribute type 275 has an invalid length. [ 2130.009728][ T5285] bridge0: port 3(batadv0) entered blocking state [ 2130.024784][ T5285] bridge0: port 3(batadv0) entered disabled state [ 2130.033838][ T5285] device batadv0 entered promiscuous mode [ 2130.040942][ T5285] bridge0: port 3(batadv0) entered blocking state [ 2130.047540][ T5285] bridge0: port 3(batadv0) entered forwarding state [ 2130.084367][ T1651] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2130.093903][ T1651] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2130.301162][ T5291] netlink: 'syz.4.30860': attribute type 275 has an invalid length. [ 2130.677230][ T5301] device syzkaller0 entered promiscuous mode [ 2133.026346][ T5305] netlink: 'syz.1.30866': attribute type 275 has an invalid length. [ 2133.934666][ T5347] device syzkaller0 entered promiscuous mode [ 2141.987613][ T5470] device syzkaller0 entered promiscuous mode [ 2145.190040][ T5495] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.30936'. [ 2145.791001][ T5519] device syzkaller0 entered promiscuous mode [ 2151.186956][ T5592] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.30984'. [ 2151.309852][ T5596] device syzkaller0 entered promiscuous mode [ 2155.792228][ T5635] netlink: 'syz.2.30992': attribute type 10 has an invalid length. [ 2155.840396][ T5635] device veth0_vlan left promiscuous mode [ 2155.877318][ T5635] device veth0_vlan entered promiscuous mode [ 2155.905167][ T5635] team0: Device veth0_vlan failed to register rx_handler [ 2157.171305][ T5640] netlink: 168 bytes leftover after parsing attributes in process `syz.0.30994'. [ 2158.031377][ T5673] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.31015'. [ 2158.216177][ T5675] netlink: 'syz.4.31006': attribute type 10 has an invalid length. [ 2158.493689][ T5675] device veth0_vlan left promiscuous mode [ 2158.598719][ T5675] device veth0_vlan entered promiscuous mode [ 2158.743630][ T5675] team0: Device veth0_vlan failed to register rx_handler [ 2160.317723][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.324254][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.220769][ T5716] syz.1.31026[5716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2162.220881][ T5716] syz.1.31026[5716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2162.504234][ T5731] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.31034'. [ 2163.718088][ T5776] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.31054'. [ 2163.957743][ T5780] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.31067'. [ 2164.295313][ T5797] netlink: 'syz.1.31061': attribute type 1 has an invalid length. [ 2164.324534][ T5797] netlink: 'syz.1.31061': attribute type 4 has an invalid length. [ 2164.339609][ T5797] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.31061'. [ 2164.379688][ T5799] netlink: 'syz.0.31060': attribute type 10 has an invalid length. [ 2164.609144][ T5799] device veth0_vlan left promiscuous mode [ 2164.707823][ T5799] device veth0_vlan entered promiscuous mode [ 2164.853347][ T5799] team0: Device veth0_vlan failed to register rx_handler [ 2165.156154][ T5811] netlink: 'syz.1.31070': attribute type 22 has an invalid length. [ 2165.727654][ T5830] netlink: 'syz.0.31079': attribute type 2 has an invalid length. [ 2165.735793][ T5830] netlink: 'syz.0.31079': attribute type 1 has an invalid length. [ 2165.744053][ T5830] netlink: 'syz.0.31079': attribute type 4 has an invalid length. [ 2165.752503][ T5830] netlink: 'syz.0.31079': attribute type 6 has an invalid length. [ 2165.760943][ T5830] netlink: 'syz.0.31079': attribute type 7 has an invalid length. [ 2165.769246][ T5830] netlink: 'syz.0.31079': attribute type 5 has an invalid length. [ 2165.777799][ T5830] netlink: 206468 bytes leftover after parsing attributes in process `syz.0.31079'. [ 2167.746421][ T5851] device veth0_vlan left promiscuous mode [ 2167.849240][ T5851] device veth0_vlan entered promiscuous mode [ 2167.940548][ T5851] team0: Device veth0_vlan failed to register rx_handler [ 2168.674297][ T5865] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.31090'. [ 2169.530099][ T5873] validate_nla: 3 callbacks suppressed [ 2169.530118][ T5873] netlink: 'syz.0.31096': attribute type 22 has an invalid length. [ 2170.149860][ T5880] netlink: 'syz.1.31102': attribute type 2 has an invalid length. [ 2170.172805][ T5883] netlink: 'syz.0.31100': attribute type 10 has an invalid length. [ 2170.181136][ T5880] netlink: 'syz.1.31102': attribute type 1 has an invalid length. [ 2170.198347][ T5880] netlink: 'syz.1.31102': attribute type 4 has an invalid length. [ 2170.207431][ T5883] device veth0_vlan left promiscuous mode [ 2170.226786][ T5880] netlink: 'syz.1.31102': attribute type 6 has an invalid length. [ 2170.236932][ T5883] device veth0_vlan entered promiscuous mode [ 2170.250963][ T5880] netlink: 'syz.1.31102': attribute type 7 has an invalid length. [ 2170.290506][ T5883] team0: Device veth0_vlan failed to register rx_handler [ 2170.299510][ T5880] netlink: 'syz.1.31102': attribute type 5 has an invalid length. [ 2170.339339][ T5880] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.31102'. [ 2170.372533][ T5890] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.31104'. [ 2171.345919][ T5912] netlink: 'syz.1.31116': attribute type 10 has an invalid length. [ 2171.406003][ T5913] netlink: 'syz.0.31114': attribute type 4 has an invalid length. [ 2171.420566][ T5912] device veth0_vlan left promiscuous mode [ 2171.435952][ T5913] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.31114'. [ 2171.470486][ T5912] device veth0_vlan entered promiscuous mode [ 2171.555996][ T5912] team0: Device veth0_vlan failed to register rx_handler [ 2171.891400][ T5919] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.31118'. [ 2172.034843][ T5922] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.31120'. [ 2175.491239][ T5952] validate_nla: 6 callbacks suppressed [ 2175.502311][ T5952] netlink: 'syz.3.31132': attribute type 10 has an invalid length. [ 2175.539200][ T5952] device veth0_vlan left promiscuous mode [ 2175.597034][ T5952] device veth0_vlan entered promiscuous mode [ 2175.693799][ T5952] team0: Device veth0_vlan failed to register rx_handler [ 2176.720395][ T5969] netlink: 'syz.4.31134': attribute type 2 has an invalid length. [ 2176.752726][ T5969] netlink: 'syz.4.31134': attribute type 1 has an invalid length. [ 2176.760615][ T5969] netlink: 'syz.4.31134': attribute type 4 has an invalid length. [ 2176.812667][ T5969] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.31134'. [ 2178.702065][ T5974] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.31136'. [ 2178.851000][ T5976] netlink: 152 bytes leftover after parsing attributes in process `syz.4.31139'. [ 2179.024926][ T5976] bond0: (slave bond_slave_0): Releasing backup interface [ 2179.091603][ T5976] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2179.155724][ T5984] netlink: 'syz.0.31142': attribute type 1 has an invalid length. [ 2179.184476][ T5984] netlink: 'syz.0.31142': attribute type 4 has an invalid length. [ 2179.219293][ T5984] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.31142'. [ 2180.102246][ T6002] netlink: 'syz.3.31153': attribute type 10 has an invalid length. [ 2180.159714][ T6002] device veth0_vlan left promiscuous mode [ 2180.206730][ T6002] device veth0_vlan entered promiscuous mode [ 2180.398414][ T6002] team0: Device veth0_vlan failed to register rx_handler [ 2180.603076][ T6005] netlink: 'syz.2.31154': attribute type 4 has an invalid length. [ 2180.627602][ T6005] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.31154'. [ 2181.761771][ T6038] netlink: 152 bytes leftover after parsing attributes in process `syz.1.31167'. [ 2182.149066][ T6042] netlink: 'syz.4.31169': attribute type 4 has an invalid length. [ 2182.172711][ T6042] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.31169'. [ 2184.370292][ T6038] bond0: (slave bond_slave_0): Releasing backup interface [ 2184.454886][ T6038] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2187.932494][ T6092] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.31191'. [ 2188.558054][ T6120] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.31207'. [ 2188.706333][ T6124] netlink: 'syz.3.31209': attribute type 2 has an invalid length. [ 2188.720308][ T6124] netlink: 'syz.3.31209': attribute type 1 has an invalid length. [ 2188.728865][ T6124] netlink: 185292 bytes leftover after parsing attributes in process `syz.3.31209'. [ 2188.933283][ T6131] netlink: 'syz.4.31211': attribute type 21 has an invalid length. [ 2188.941531][ T6131] netlink: 'syz.4.31211': attribute type 7 has an invalid length. [ 2189.418091][ T6135] bridge0: port 3(batadv0) entered disabled state [ 2189.424966][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.432284][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.531648][ T6142] device batadv0 left promiscuous mode [ 2189.574235][ T6142] bridge0: port 3(batadv0) entered disabled state [ 2189.591269][ T6142] device bridge_slave_1 left promiscuous mode [ 2189.629622][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.680549][ T6142] device bridge_slave_0 left promiscuous mode [ 2189.699746][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.381276][ T6146] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.31218'. [ 2190.598914][ T6155] netlink: 'syz.0.31222': attribute type 2 has an invalid length. [ 2190.628583][ T6159] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.31224'. [ 2190.647330][ T6155] netlink: 'syz.0.31222': attribute type 1 has an invalid length. [ 2190.673252][ T6155] netlink: 185292 bytes leftover after parsing attributes in process `syz.0.31222'. [ 2191.513421][ T6185] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.31235'. [ 2191.949922][ T6187] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.31238'. [ 2192.376612][ T6193] netlink: 'syz.1.31239': attribute type 2 has an invalid length. [ 2192.390812][ T6193] netlink: 'syz.1.31239': attribute type 1 has an invalid length. [ 2192.406140][ T6193] netlink: 185292 bytes leftover after parsing attributes in process `syz.1.31239'. [ 2193.102785][T26795] Bluetooth: hci3: command 0x0406 tx timeout [ 2193.107489][ T4417] Bluetooth: hci4: command 0x0406 tx timeout [ 2193.510295][ T6216] netlink: 'syz.0.31250': attribute type 10 has an invalid length. [ 2193.556075][ T6216] bridge0: port 3(batadv0) entered disabled state [ 2193.565313][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.575072][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.684579][ T6216] bridge0: port 3(batadv0) entered blocking state [ 2193.692341][ T6216] bridge0: port 3(batadv0) entered forwarding state [ 2193.702860][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.710424][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2193.719042][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.727043][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2194.664982][ T6216] team0: Port device bridge0 added [ 2194.672045][ T6224] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.31253'. [ 2197.823447][ T6230] bridge0: port 3(batadv0) entered disabled state [ 2197.830145][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 2197.837406][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 2197.949352][ T6231] device batadv0 left promiscuous mode [ 2197.973947][ T6231] bridge0: port 3(batadv0) entered disabled state [ 2198.001795][ T6231] device bridge_slave_1 left promiscuous mode [ 2198.066177][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.083764][ T6231] device bridge_slave_0 left promiscuous mode [ 2198.090058][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.225383][ T6231] team0: Port device bridge0 removed [ 2202.604797][ T6382] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.31329'. [ 2204.366943][ T6433] netlink: 'syz.1.31349': attribute type 21 has an invalid length. [ 2204.433348][ T6433] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.31349'. [ 2204.650210][ T6440] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.31353'. [ 2206.093279][ T4417] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 2206.560128][ T6477] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.31370'. [ 2208.463172][T26795] Bluetooth: hci0: command 0x0406 tx timeout [ 2208.465190][ T4417] Bluetooth: hci1: command 0x0406 tx timeout [ 2209.467285][ T6505] netlink: 'syz.2.31381': attribute type 21 has an invalid length. [ 2209.512739][ T6505] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.31381'. [ 2209.688667][ T6515] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.31385'. [ 2209.706352][ T6513] netlink: 'syz.4.31386': attribute type 10 has an invalid length. [ 2209.738513][T26795] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 2210.517664][ T6543] netlink: 'syz.0.31399': attribute type 21 has an invalid length. [ 2210.565736][ T6543] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.31399'. [ 2213.205222][ T6549] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.31402'. [ 2213.232120][T26795] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 2214.169326][ T6585] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.31420'. [ 2215.414963][ T6628] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.31438'. [ 2219.116271][ T6657] device syzkaller0 entered promiscuous mode [ 2221.759546][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.765932][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.759338][ T6672] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.31454'. [ 2223.339590][ T6732] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.31482'. [ 2223.389400][ T6732] netlink: zone id is out of range [ 2223.399258][ T6732] netlink: zone id is out of range [ 2223.405646][ T6734] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 2223.430872][ T6732] netlink: zone id is out of range [ 2223.446912][ T6732] netlink: zone id is out of range [ 2223.459517][ T6732] netlink: zone id is out of range [ 2223.468688][ T6732] netlink: zone id is out of range [ 2223.496022][ T6732] netlink: zone id is out of range [ 2223.501396][ T6732] netlink: zone id is out of range [ 2223.515721][ T6732] netlink: zone id is out of range [ 2225.376208][ T6772] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.31499'. [ 2226.365508][ T6803] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.31513'. [ 2227.618040][ T6844] netlink: 'syz.3.31530': attribute type 22 has an invalid length. [ 2235.662767][ T6930] sock: sock_timestamping_bind_phc: sock not bind to device [ 2238.897877][ T6980] sock: sock_timestamping_bind_phc: sock not bind to device [ 2240.090280][ T7015] sock: sock_timestamping_bind_phc: sock not bind to device [ 2242.609752][ T7093] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.31644'. [ 2244.414446][ T7127] netlink: 'syz.0.31657': attribute type 9 has an invalid length. [ 2244.482832][ T7127] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.31657'. [ 2247.020924][ T7177] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.31673'. [ 2247.152404][ T7177] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2247.385091][ T7179] netlink: 144 bytes leftover after parsing attributes in process `syz.4.31678'. [ 2249.174212][ T7219] netlink: 10 bytes leftover after parsing attributes in process `syz.4.31694'. [ 2249.853908][ T7227] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.31697'. [ 2249.881977][ T7227] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2250.361096][ T7236] device syzkaller0 entered promiscuous mode [ 2253.199738][ T7266] netlink: 'syz.1.31724': attribute type 1 has an invalid length. [ 2253.252637][ T7266] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.31724'. [ 2253.272458][ T7265] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.31714'. [ 2255.505494][ T7251] netlink: 10 bytes leftover after parsing attributes in process `syz.0.31709'. [ 2255.514950][ T7263] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.31724'. [ 2255.527275][ T7265] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2255.731112][ T7274] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.31718'. [ 2256.286369][T26795] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2257.650978][ T7318] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.31738'. [ 2258.132800][T26795] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2258.302734][T26795] Bluetooth: hci3: command 0x2016 tx timeout [ 2260.228636][T26795] Bluetooth: hci2: command 0x2016 tx timeout [ 2261.039809][ T7350] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.31749'. [ 2261.738402][T26795] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2262.810848][ T7374] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.31760'. [ 2263.824303][T26795] Bluetooth: hci0: command 0x2016 tx timeout [ 2265.801662][ T7403] netlink: 'syz.4.31773': attribute type 10 has an invalid length. [ 2265.825671][ T7403] netlink: 9279 bytes leftover after parsing attributes in process `syz.4.31773'. [ 2265.872715][T26795] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2267.764208][ T7452] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.31788'. [ 2267.784240][ T7451] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.31787'. [ 2267.902793][T26795] Bluetooth: hci1: command 0x2016 tx timeout [ 2268.421401][ T7465] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.31797'. [ 2269.529745][ T7485] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.31805'. [ 2269.866983][ T7483] ref_ctr_offset mismatch. inode: 0x596 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2270.439527][ T7503] netlink: 'syz.3.31813': attribute type 10 has an invalid length. [ 2270.498626][ T7503] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.31813'. [ 2270.587957][ T7507] netlink: 'syz.0.31815': attribute type 7 has an invalid length. [ 2270.628121][ T7509] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.31817'. [ 2270.635527][ T7507] netlink: 'syz.0.31815': attribute type 7 has an invalid length. [ 2270.668218][ T7507] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.31815'. [ 2270.959257][ T7515] device pim6reg1 entered promiscuous mode [ 2271.419486][ T7525] device syzkaller0 entered promiscuous mode [ 2272.145287][ T7538] netlink: 'syz.2.31829': attribute type 10 has an invalid length. [ 2272.178702][ T7538] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.31829'. [ 2272.420020][ T7545] netlink: 'syz.1.31832': attribute type 7 has an invalid length. [ 2272.458394][ T7545] netlink: 'syz.1.31832': attribute type 7 has an invalid length. [ 2272.504583][ T7545] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.31832'. [ 2272.586011][ T7552] sock: sock_timestamping_bind_phc: sock not bind to device [ 2272.637899][ T7551] device syzkaller0 entered promiscuous mode [ 2272.969646][ T7555] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.31838'. [ 2275.777230][ T7561] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.31839'. [ 2275.787700][ T7555] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2275.805358][ T7555] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2275.818167][ T7555] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2276.384468][ T7583] netlink: 'syz.0.31848': attribute type 10 has an invalid length. [ 2276.434406][ T7583] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.31848'. [ 2276.530788][ T7585] sock: sock_timestamping_bind_phc: sock not bind to device [ 2276.875535][ T7591] netlink: 'syz.2.31852': attribute type 7 has an invalid length. [ 2276.883612][ T7591] netlink: 'syz.2.31852': attribute type 7 has an invalid length. [ 2276.891571][ T7591] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.31852'. [ 2277.850517][ T7615] device syzkaller0 entered promiscuous mode [ 2278.619979][ T7624] sock: sock_timestamping_bind_phc: sock not bind to device [ 2279.140810][ T7634] device syzkaller0 entered promiscuous mode [ 2279.424751][ T7644] ref_ctr_offset mismatch. inode: 0x508 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2283.192991][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.199348][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.762767][ T7650] device syzkaller0 entered promiscuous mode [ 2286.986916][ T7688] ref_ctr_offset mismatch. inode: 0xe63 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2288.127938][ T7717] netlink: 'syz.4.31905': attribute type 4 has an invalid length. [ 2288.148814][ T7717] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.31905'. [ 2288.459580][ T7725] netlink: 'syz.4.31911': attribute type 21 has an invalid length. [ 2288.467964][ T7725] netlink: 'syz.4.31911': attribute type 4 has an invalid length. [ 2288.486660][ T7725] netlink: 'syz.4.31911': attribute type 23 has an invalid length. [ 2288.516339][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31911'. [ 2288.572145][ T7727] ref_ctr_offset mismatch. inode: 0x596 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2289.143000][ T7748] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.31923'. [ 2289.875794][ T7774] ref_ctr_offset mismatch. inode: 0x5c9 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2290.141450][ T7786] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.31939'. [ 2290.749116][ T7802] netlink: 168 bytes leftover after parsing attributes in process `syz.2.31947'. [ 2290.874933][ T7806] net_ratelimit: 10649 callbacks suppressed [ 2290.874952][ T7806] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 2291.397563][ T7818] ref_ctr_offset mismatch. inode: 0x5da offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2291.669910][ T7826] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.31954'. [ 2292.065768][ T7836] ref_ctr_offset mismatch. inode: 0x5e6 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2295.823351][ T7873] ref_ctr_offset mismatch. inode: 0xebf offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2297.075043][ T7907] netlink: 168 bytes leftover after parsing attributes in process `syz.4.31987'. [ 2304.354484][ T7995] ref_ctr_offset mismatch. inode: 0x5a1 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2306.851827][ T8025] netlink: 'syz.3.32039': attribute type 2 has an invalid length. [ 2306.860452][ T8032] ref_ctr_offset mismatch. inode: 0x615 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2306.882184][ T8025] netlink: 128 bytes leftover after parsing attributes in process `syz.3.32039'. [ 2307.333325][ T8041] ref_ctr_offset mismatch. inode: 0x61c offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2311.996214][ T8099] netlink: 'syz.4.32069': attribute type 2 has an invalid length. [ 2312.015700][ T8099] netlink: 128 bytes leftover after parsing attributes in process `syz.4.32069'. [ 2312.616254][ T8124] ref_ctr_offset mismatch. inode: 0xf4a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2312.858014][ T8138] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.32087'. [ 2318.911225][ T8252] : renamed from pim6reg1 [ 2320.599676][ T8288] : renamed from pim6reg1 [ 2322.334429][ T8324] : renamed from pim6reg1 [ 2322.846469][ T8337] netlink: 192432 bytes leftover after parsing attributes in process `syz.1.32179'. [ 2322.899498][ T8337] netlink: get zone limit has 4 unknown bytes [ 2323.719474][ T8356] netlink: 48 bytes leftover after parsing attributes in process `syz.2.32190'. [ 2323.814456][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state [ 2323.980040][ T8366] netlink: 192432 bytes leftover after parsing attributes in process `syz.4.32194'. [ 2324.018744][ T8366] netlink: get zone limit has 4 unknown bytes [ 2325.060890][ T8400] netlink: 192432 bytes leftover after parsing attributes in process `syz.3.32208'. [ 2325.076853][ T8400] netlink: get zone limit has 4 unknown bytes [ 2325.271471][ T8404] netlink: 192432 bytes leftover after parsing attributes in process `syz.2.32221'. [ 2325.291265][ T8404] netlink: get zone limit has 4 unknown bytes [ 2325.917871][ T8424] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.32218'. [ 2326.810794][ T8438] netlink: 'syz.1.32226': attribute type 7 has an invalid length. [ 2326.835145][ T8438] netlink: 'syz.1.32226': attribute type 7 has an invalid length. [ 2326.869616][ T8438] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.32226'. [ 2327.905899][ T8453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.32232'. [ 2327.986851][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 2328.218126][ T8460] netlink: 168 bytes leftover after parsing attributes in process `syz.3.32234'. [ 2328.618496][ T8473] netlink: 'syz.0.32241': attribute type 7 has an invalid length. [ 2328.663192][ T8473] netlink: 'syz.0.32241': attribute type 7 has an invalid length. [ 2328.699067][ T8473] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.32241'. [ 2330.389105][ T8497] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.32250'. [ 2330.777656][ T8506] netlink: 'syz.2.32255': attribute type 7 has an invalid length. [ 2330.812726][ T8506] netlink: 'syz.2.32255': attribute type 7 has an invalid length. [ 2330.820626][ T8506] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.32255'. [ 2333.086058][ T8546] netlink: 168 bytes leftover after parsing attributes in process `syz.1.32275'. [ 2333.348640][ T8550] can: request_module (can-proto-4) failed. [ 2333.426170][ T8562] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.32281'. [ 2334.456033][ T8578] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.32290'. [ 2334.491866][ T8578] openvswitch: netlink: Flow actions attr not present in new flow. [ 2334.979718][ T8586] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.32303'. [ 2335.051695][ T8586] openvswitch: netlink: Flow actions attr not present in new flow. [ 2335.885581][ T8604] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.32297'. [ 2335.995395][ T8607] netlink: 'syz.3.32300': attribute type 3 has an invalid length. [ 2336.004698][ T8610] netlink: 168 bytes leftover after parsing attributes in process `syz.4.32299'. [ 2336.039286][ T8607] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.32300'. [ 2336.134521][ T8611] netlink: 'syz.3.32300': attribute type 3 has an invalid length. [ 2336.194275][ T8611] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.32300'. [ 2337.099261][ T8627] can: request_module (can-proto-4) failed. [ 2338.089308][ T8653] netlink: 168 bytes leftover after parsing attributes in process `syz.0.32318'. [ 2338.712954][ T8664] can: request_module (can-proto-4) failed. [ 2338.727385][ T8670] netlink: 168 bytes leftover after parsing attributes in process `syz.2.32337'. [ 2338.910981][ T8675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32339'. [ 2338.926966][ T8675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.32339'. [ 2339.235969][ T8684] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.32331'. [ 2339.276152][ T8684] openvswitch: netlink: Flow actions attr not present in new flow. [ 2342.298339][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.32355'. [ 2342.322656][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.32355'. [ 2343.101971][ T8762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.32370'. [ 2343.129115][ T8762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.32370'. [ 2344.628750][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.635264][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.471972][ T8829] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.32401'. [ 2346.585047][ T8865] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.32418'. [ 2346.595525][ T8865] openvswitch: netlink: Flow actions attr not present in new flow. [ 2346.893244][ T8866] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.32429'. [ 2347.119059][ T8870] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.32431'. [ 2347.148777][ T8870] openvswitch: netlink: Flow actions attr not present in new flow. [ 2347.929261][ T8904] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.32438'. [ 2347.947823][ T8904] openvswitch: netlink: Flow actions attr not present in new flow. [ 2347.973469][ T8906] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.32439'. [ 2348.441628][T26795] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2348.449745][T26795] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 2348.463103][T26795] CPU: 0 PID: 26795 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2348.470807][T26795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2348.480909][T26795] Workqueue: hci0 hci_rx_work [ 2348.485766][T26795] Call Trace: [ 2348.489095][T26795] [ 2348.492075][T26795] dump_stack_lvl+0x188/0x24e [ 2348.496808][T26795] ? show_regs_print_info+0x12/0x12 [ 2348.502052][T26795] ? load_image+0x400/0x400 [ 2348.506643][T26795] sysfs_create_dir_ns+0x26a/0x290 [ 2348.511812][T26795] ? sysfs_warn_dup+0xa0/0xa0 [ 2348.516550][T26795] ? do_raw_spin_unlock+0x11d/0x230 [ 2348.521881][T26795] kobject_add_internal+0x61c/0xcc0 [ 2348.527207][T26795] kobject_add+0x160/0x230 [ 2348.531687][T26795] ? kobject_init+0x1d0/0x1d0 [ 2348.536456][T26795] ? klist_children_get+0x50/0x50 [ 2348.541533][T26795] ? get_device_parent+0x121/0x3f0 [ 2348.546693][T26795] device_add+0x48c/0x1000 [ 2348.551157][T26795] ? kmem_cache_free+0xf7/0x290 [ 2348.556077][T26795] hci_conn_add_sysfs+0xd1/0x1e0 [ 2348.561166][T26795] le_conn_complete_evt+0x1062/0x1670 [ 2348.566608][T26795] ? le_conn_complete_evt+0xe9/0x1670 [ 2348.572054][T26795] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2348.578367][T26795] ? bt_info+0x180/0x180 [ 2348.582667][T26795] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2348.588337][T26795] ? skb_pull_data+0xf7/0x200 [ 2348.593058][T26795] hci_le_conn_complete_evt+0x183/0x440 [ 2348.598635][T26795] ? hci_remote_host_features_evt+0x270/0x270 [ 2348.604730][T26795] hci_event_packet+0x7b9/0x1280 [ 2348.609702][T26795] ? bis_list+0x280/0x280 [ 2348.614059][T26795] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2348.619990][T26795] ? kcov_remote_start+0x4c7/0x7e0 [ 2348.625190][T26795] ? mt_dump_node+0x750/0x1920 [ 2348.629982][T26795] ? hci_send_to_monitor+0x9c/0x4a0 [ 2348.635208][T26795] hci_rx_work+0x3eb/0xd40 [ 2348.639656][T26795] ? _raw_spin_unlock+0x40/0x40 [ 2348.644552][T26795] ? process_one_work+0x7b0/0x1160 [ 2348.649747][T26795] process_one_work+0x8a2/0x1160 [ 2348.654726][T26795] ? worker_detach_from_pool+0x240/0x240 [ 2348.660402][T26795] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2348.665452][T26795] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2348.671026][T26795] ? kthread_data+0x4b/0xc0 [ 2348.675613][T26795] worker_thread+0xaa2/0x1270 [ 2348.680341][T26795] ? __kthread_parkme+0x162/0x1c0 [ 2348.685404][T26795] kthread+0x29d/0x330 [ 2348.689496][T26795] ? worker_clr_flags+0x1a0/0x1a0 [ 2348.694557][T26795] ? kthread_blkcg+0xd0/0xd0 [ 2348.699170][T26795] ret_from_fork+0x1f/0x30 [ 2348.703702][T26795] [ 2348.709859][T26795] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2348.723135][T26795] Bluetooth: hci0: failed to register connection device [ 2349.447930][ T8938] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.32455'. [ 2349.545290][ T8938] openvswitch: netlink: Flow actions attr not present in new flow. [ 2350.100435][ T8953] device syzkaller0 entered promiscuous mode [ 2350.782852][T26795] Bluetooth: hci0: command 0x2016 tx timeout [ 2352.939630][ T8999] netlink: 'syz.0.32482': attribute type 3 has an invalid length. [ 2352.987386][ T9000] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.32481'. [ 2352.997777][ T8999] netlink: 'syz.0.32482': attribute type 8 has an invalid length. [ 2353.007012][ T8996] netlink: 'syz.3.32480': attribute type 25 has an invalid length. [ 2353.021108][ T9000] openvswitch: netlink: Flow actions attr not present in new flow. [ 2353.031711][ T8999] netlink: 'syz.0.32482': attribute type 7 has an invalid length. [ 2353.051974][ T8999] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.32482'. [ 2354.638194][ T9028] device syzkaller0 entered promiscuous mode [ 2354.882034][ T9035] netlink: 'syz.1.32496': attribute type 25 has an invalid length. [ 2356.851678][T26795] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2356.859811][T26795] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 2356.869984][T26795] CPU: 0 PID: 26795 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2356.877675][T26795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2356.887774][T26795] Workqueue: hci2 hci_rx_work [ 2356.892514][T26795] Call Trace: [ 2356.895835][T26795] [ 2356.898808][T26795] dump_stack_lvl+0x188/0x24e [ 2356.903544][T26795] ? show_regs_print_info+0x12/0x12 [ 2356.908786][T26795] ? load_image+0x400/0x400 [ 2356.913355][T26795] sysfs_create_dir_ns+0x26a/0x290 [ 2356.918522][T26795] ? sysfs_warn_dup+0xa0/0xa0 [ 2356.923247][T26795] ? do_raw_spin_unlock+0x11d/0x230 [ 2356.928502][T26795] kobject_add_internal+0x61c/0xcc0 [ 2356.933764][T26795] kobject_add+0x160/0x230 [ 2356.938234][T26795] ? kobject_init+0x1d0/0x1d0 [ 2356.942969][T26795] ? klist_children_get+0x50/0x50 [ 2356.948040][T26795] ? get_device_parent+0x121/0x3f0 [ 2356.953197][T26795] device_add+0x48c/0x1000 [ 2356.957647][T26795] ? kmem_cache_free+0xf7/0x290 [ 2356.962643][T26795] hci_conn_add_sysfs+0xd1/0x1e0 [ 2356.967651][T26795] le_conn_complete_evt+0x1062/0x1670 [ 2356.973082][T26795] ? le_conn_complete_evt+0xe9/0x1670 [ 2356.978523][T26795] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2356.984799][T26795] ? bt_info+0x180/0x180 [ 2356.989076][T26795] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2356.994731][T26795] ? skb_pull_data+0xf7/0x200 [ 2356.999444][T26795] hci_le_conn_complete_evt+0x183/0x440 [ 2357.005034][T26795] ? hci_remote_host_features_evt+0x270/0x270 [ 2357.011140][T26795] hci_event_packet+0x7b9/0x1280 [ 2357.016121][T26795] ? bis_list+0x280/0x280 [ 2357.020488][T26795] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2357.026417][T26795] ? kcov_remote_start+0x4c7/0x7e0 [ 2357.031558][T26795] ? mt_dump_node+0x750/0x1920 [ 2357.036346][T26795] ? hci_send_to_monitor+0x9c/0x4a0 [ 2357.041583][T26795] hci_rx_work+0x3eb/0xd40 [ 2357.046067][T26795] ? _raw_spin_unlock+0x40/0x40 [ 2357.050967][T26795] ? process_one_work+0x7b0/0x1160 [ 2357.056108][T26795] process_one_work+0x8a2/0x1160 [ 2357.061080][T26795] ? worker_detach_from_pool+0x240/0x240 [ 2357.066742][T26795] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2357.071798][T26795] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2357.077373][T26795] ? kthread_data+0x4b/0xc0 [ 2357.081909][T26795] worker_thread+0xaa2/0x1270 [ 2357.086623][T26795] ? __kthread_parkme+0x162/0x1c0 [ 2357.091693][T26795] kthread+0x29d/0x330 [ 2357.095806][T26795] ? worker_clr_flags+0x1a0/0x1a0 [ 2357.100857][T26795] ? kthread_blkcg+0xd0/0xd0 [ 2357.105478][T26795] ret_from_fork+0x1f/0x30 [ 2357.110025][T26795] [ 2357.117771][T26795] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2357.131515][T26795] Bluetooth: hci2: failed to register connection device [ 2357.304607][ T9080] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.32525'. [ 2357.318406][ T9080] openvswitch: netlink: Flow actions attr not present in new flow. [ 2357.545468][ T9087] netlink: 'syz.4.32515': attribute type 3 has an invalid length. [ 2357.582790][ T9087] netlink: 'syz.4.32515': attribute type 8 has an invalid length. [ 2357.612018][ T9087] netlink: 'syz.4.32515': attribute type 7 has an invalid length. [ 2357.652663][ T9087] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.32515'. [ 2357.897470][ T9099] device syzkaller0 entered promiscuous mode [ 2358.976966][T26795] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2358.985986][T26795] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 2358.995998][T26795] CPU: 0 PID: 26795 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2359.003684][T26795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2359.013780][T26795] Workqueue: hci1 hci_rx_work [ 2359.018503][T26795] Call Trace: [ 2359.021810][T26795] [ 2359.024803][T26795] dump_stack_lvl+0x188/0x24e [ 2359.029540][T26795] ? show_regs_print_info+0x12/0x12 [ 2359.034789][T26795] ? load_image+0x400/0x400 [ 2359.039376][T26795] sysfs_create_dir_ns+0x26a/0x290 [ 2359.044559][T26795] ? sysfs_warn_dup+0xa0/0xa0 [ 2359.049296][T26795] ? do_raw_spin_unlock+0x11d/0x230 [ 2359.054549][T26795] kobject_add_internal+0x61c/0xcc0 [ 2359.059811][T26795] kobject_add+0x160/0x230 [ 2359.064275][T26795] ? kobject_init+0x1d0/0x1d0 [ 2359.069007][T26795] ? klist_children_get+0x50/0x50 [ 2359.074117][T26795] ? get_device_parent+0x121/0x3f0 [ 2359.079280][T26795] device_add+0x48c/0x1000 [ 2359.083731][T26795] ? kmem_cache_free+0xf7/0x290 [ 2359.088637][T26795] hci_conn_add_sysfs+0xd1/0x1e0 [ 2359.093630][T26795] le_conn_complete_evt+0x1062/0x1670 [ 2359.099056][T26795] ? le_conn_complete_evt+0xe9/0x1670 [ 2359.104499][T26795] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2359.110800][T26795] ? bt_info+0x180/0x180 [ 2359.115112][T26795] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2359.120825][T26795] ? skb_pull_data+0xf7/0x200 [ 2359.125564][T26795] hci_le_conn_complete_evt+0x183/0x440 [ 2359.131227][T26795] ? hci_remote_host_features_evt+0x270/0x270 [ 2359.137357][T26795] hci_event_packet+0x7b9/0x1280 [ 2359.142347][T26795] ? bis_list+0x280/0x280 [ 2359.146712][T26795] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2359.152657][T26795] ? kcov_remote_start+0x4c7/0x7e0 [ 2359.157833][T26795] ? mt_dump_node+0x750/0x1920 [ 2359.162642][T26795] ? hci_send_to_monitor+0x9c/0x4a0 [ 2359.167892][T26795] hci_rx_work+0x3eb/0xd40 [ 2359.172358][T26795] ? _raw_spin_unlock+0x40/0x40 [ 2359.177302][T26795] ? process_one_work+0x7b0/0x1160 [ 2359.182461][T26795] process_one_work+0x8a2/0x1160 [ 2359.187466][T26795] ? worker_detach_from_pool+0x240/0x240 [ 2359.193158][T26795] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2359.198244][T26795] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2359.203832][T26795] ? kthread_data+0x4b/0xc0 [ 2359.208413][T26795] worker_thread+0xaa2/0x1270 [ 2359.213172][T26795] ? __kthread_parkme+0x162/0x1c0 [ 2359.218261][T26795] kthread+0x29d/0x330 [ 2359.222367][T26795] ? worker_clr_flags+0x1a0/0x1a0 [ 2359.227435][T26795] ? kthread_blkcg+0xd0/0xd0 [ 2359.232078][T26795] ret_from_fork+0x1f/0x30 [ 2359.236569][T26795] [ 2359.240755][ T4417] Bluetooth: hci2: command 0x2016 tx timeout [ 2359.250675][T26795] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2359.265541][T26795] Bluetooth: hci1: failed to register connection device [ 2359.278523][ T9119] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.32530'. [ 2359.317452][ T9119] openvswitch: netlink: Flow actions attr not present in new flow. [ 2361.346601][T26795] Bluetooth: hci1: command 0x2016 tx timeout [ 2362.756647][ T9177] netlink: 'syz.4.32556': attribute type 2 has an invalid length. [ 2362.789212][ T9177] netlink: 'syz.4.32556': attribute type 1 has an invalid length. [ 2362.815103][ T9177] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.32556'. [ 2363.080566][ T9184] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.32560'. [ 2363.702359][ T9197] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.32566'. [ 2364.360321][ T9214] netlink: 56843 bytes leftover after parsing attributes in process `syz.4.32572'. [ 2364.543178][ T9216] netlink: 'syz.3.32574': attribute type 10 has an invalid length. [ 2366.340319][ T9247] netlink: 'syz.0.32587': attribute type 2 has an invalid length. [ 2366.362596][ T9247] netlink: 'syz.0.32587': attribute type 1 has an invalid length. [ 2366.370484][ T9247] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.32587'. [ 2366.535747][ T9253] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.32588'. [ 2367.540983][ T9295] netlink: 14 bytes leftover after parsing attributes in process `syz.3.32604'. [ 2368.010628][ T9298] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.32619'. [ 2369.424796][ T9319] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.32617'. [ 2369.685340][ T9331] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.32633'. [ 2370.184759][ T9342] netlink: 'syz.2.32627': attribute type 2 has an invalid length. [ 2370.564606][ T9352] IPv6: : Disabled Multicast RS [ 2370.880554][ T9362] netlink: 132 bytes leftover after parsing attributes in process `syz.4.32638'. [ 2371.685434][ T9384] IPv6: : Disabled Multicast RS [ 2372.295938][ T9400] netlink: 132 bytes leftover after parsing attributes in process `syz.1.32652'. [ 2373.485777][ T9417] netlink: 'syz.0.32662': attribute type 7 has an invalid length. [ 2373.502553][ T9417] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.32662'. [ 2374.245944][ T9439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.32672'. [ 2374.369611][ T9440] netlink: 'syz.4.32681': attribute type 2 has an invalid length. [ 2376.174452][ T9473] netlink: 'syz.0.32685': attribute type 22 has an invalid length. [ 2376.319722][ T4418] Bluetooth: hci4: unexpected subevent 0x04 length: 150 > 11 [ 2376.338931][ T9478] netlink: 60 bytes leftover after parsing attributes in process `syz.3.32688'. [ 2376.443818][ T9484] netlink: 'syz.0.32693': attribute type 3 has an invalid length. [ 2376.472162][ T9484] netlink: 'syz.0.32693': attribute type 4 has an invalid length. [ 2376.497559][ T9484] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.32693'. [ 2377.284602][ T9510] netlink: 'syz.1.32704': attribute type 22 has an invalid length. [ 2377.411580][ T9512] netlink: 60 bytes leftover after parsing attributes in process `syz.2.32705'. [ 2378.895618][ T9551] netlink: 'syz.4.32722': attribute type 22 has an invalid length. [ 2379.806552][ T4418] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 2380.578540][ T9582] netlink: 'syz.2.32736': attribute type 7 has an invalid length. [ 2380.608782][ T9582] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.32736'. [ 2381.091572][ T4418] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 2381.274260][ T4418] Bluetooth: hci4: Malformed Event: 0x02 [ 2381.646717][ T9619] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.32753'. [ 2381.909160][ T9625] netlink: 'syz.0.32758': attribute type 29 has an invalid length. [ 2381.947693][ T9625] netlink: 'syz.0.32758': attribute type 29 has an invalid length. [ 2381.991378][ T9625] netlink: 'syz.0.32758': attribute type 29 has an invalid length. [ 2382.150681][T26795] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 2383.032218][ T9655] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.32768'. [ 2383.395998][T26795] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 2383.902570][T26795] Bluetooth: hci2: command 0x0406 tx timeout [ 2384.647256][ T9690] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.32784'. [ 2385.619656][ T9726] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.32794'. [ 2385.693206][ T9726] netlink: zone id is out of range [ 2389.330977][ T9758] netlink: 14 bytes leftover after parsing attributes in process `syz.4.32810'. [ 2389.361314][ T9758] openvswitch: netlink: Flow key attr not present in new flow. [ 2389.595706][ T9767] netlink: 'syz.2.32813': attribute type 10 has an invalid length. [ 2389.622830][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32813'. [ 2389.674239][ T9767] device ipvlan1 entered promiscuous mode [ 2389.748113][ T9767] bridge0: port 4(ipvlan1) entered blocking state [ 2389.793529][ T9767] bridge0: port 4(ipvlan1) entered disabled state [ 2389.849831][ T9767] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2391.096242][ T9796] netlink: 14 bytes leftover after parsing attributes in process `syz.3.32825'. [ 2391.138537][ T9794] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.32826'. [ 2391.148908][ T9794] netlink: zone id is out of range [ 2391.174457][ T9796] openvswitch: netlink: Flow key attr not present in new flow. [ 2392.367744][ T9836] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.32842'. [ 2392.401600][ T9836] netlink: zone id is out of range [ 2392.501310][ T9838] netlink: 14 bytes leftover after parsing attributes in process `syz.1.32843'. [ 2392.594748][ T9838] openvswitch: netlink: Flow key attr not present in new flow. [ 2393.778780][ T9870] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.32860'. [ 2393.829428][ T9870] netlink: zone id is out of range [ 2397.490759][ T9897] netlink: 'syz.3.32873': attribute type 10 has an invalid length. [ 2397.536723][ T9897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.32873'. [ 2397.585516][ T9897] device ipvlan1 entered promiscuous mode [ 2397.653433][ T9897] bridge0: port 5(ipvlan1) entered blocking state [ 2397.675347][ T9897] bridge0: port 5(ipvlan1) entered disabled state [ 2397.751121][ T9897] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2399.337419][ T9920] netlink: 'syz.2.32885': attribute type 2 has an invalid length. [ 2399.396135][ T9920] netlink: 10 bytes leftover after parsing attributes in process `syz.2.32885'. [ 2399.937154][T26795] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2400.911618][T26795] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2401.724151][ T9963] netlink: 'syz.0.32902': attribute type 2 has an invalid length. [ 2401.805977][ T9963] netlink: 10 bytes leftover after parsing attributes in process `syz.0.32902'. [ 2406.065770][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.072118][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2408.407034][T10036] device syzkaller0 entered promiscuous mode [ 2412.611519][T10102] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.32972'. [ 2412.831508][T26795] Bluetooth: hci4: ACL packet too small [ 2414.316172][T10143] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.32982'. [ 2414.444996][T26795] Bluetooth: hci2: ACL packet too small [ 2415.141056][T10172] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.32995'. [ 2415.841141][T26795] Bluetooth: hci0: ACL packet too small [ 2417.124452][T10206] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.33009'. [ 2419.813364][T10252] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.33031'. [ 2422.074410][T10289] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.33046'. [ 2424.030272][T10309] device syzkaller0 entered promiscuous mode [ 2428.004730][T10349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33082'. [ 2428.688851][T10364] netlink: 'syz.0.33077': attribute type 10 has an invalid length. [ 2428.717294][T10364] netlink: 55 bytes leftover after parsing attributes in process `syz.0.33077'. [ 2431.451876][T10413] netlink: 'syz.1.33102': attribute type 10 has an invalid length. [ 2431.479585][T10413] netlink: 55 bytes leftover after parsing attributes in process `syz.1.33102'. [ 2434.430056][T10465] netlink: 'syz.3.33125': attribute type 10 has an invalid length. [ 2434.465796][T10465] netlink: 55 bytes leftover after parsing attributes in process `syz.3.33125'. [ 2437.256987][T10523] sctp: [Deprecated]: syz.1.33151 (pid 10523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2437.256987][T10523] Use struct sctp_sack_info instead [ 2437.832159][T10538] netlink: 'syz.2.33158': attribute type 10 has an invalid length. [ 2437.862529][T10538] netlink: 55 bytes leftover after parsing attributes in process `syz.2.33158'. [ 2439.424755][T10562] sctp: [Deprecated]: syz.2.33170 (pid 10562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2439.424755][T10562] Use struct sctp_sack_info instead [ 2440.423824][T10590] netlink: 'syz.4.33181': attribute type 10 has an invalid length. [ 2440.431813][T10590] netlink: 55 bytes leftover after parsing attributes in process `syz.4.33181'. [ 2440.539764][T10595] sctp: [Deprecated]: syz.3.33184 (pid 10595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2440.539764][T10595] Use struct sctp_sack_info instead [ 2441.891033][T10618] netlink: 'syz.0.33206': attribute type 21 has an invalid length. [ 2441.941706][T10618] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.33206'. [ 2442.078185][T10624] netlink: 'syz.3.33196': attribute type 17 has an invalid length. [ 2442.112644][T10624] netlink: 'syz.3.33196': attribute type 16 has an invalid length. [ 2442.120613][T10624] netlink: 152 bytes leftover after parsing attributes in process `syz.3.33196'. [ 2442.286581][T26795] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 2442.286634][T26795] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 2442.709916][T10636] netlink: 'syz.3.33204': attribute type 10 has an invalid length. [ 2442.745451][T10636] netlink: 55 bytes leftover after parsing attributes in process `syz.3.33204'. [ 2445.009839][T26795] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 2446.353960][T10705] netlink: 'syz.0.33236': attribute type 17 has an invalid length. [ 2446.379886][T10705] netlink: 'syz.0.33236': attribute type 16 has an invalid length. [ 2446.422286][T10705] netlink: 152 bytes leftover after parsing attributes in process `syz.0.33236'. [ 2447.394060][T10732] netlink: 'syz.1.33250': attribute type 17 has an invalid length. [ 2447.448091][T10732] netlink: 'syz.1.33250': attribute type 16 has an invalid length. [ 2447.463073][T10732] netlink: 152 bytes leftover after parsing attributes in process `syz.1.33250'. [ 2448.055876][T10750] netlink: 'syz.1.33257': attribute type 9 has an invalid length. [ 2448.085169][T10750] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.33257'. [ 2449.146777][T10775] device syzkaller0 entered promiscuous mode [ 2450.500352][T26795] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 2451.802388][T10793] device syzkaller0 entered promiscuous mode [ 2454.241952][T10817] netlink: 'syz.2.33285': attribute type 9 has an invalid length. [ 2454.252593][T10817] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.33285'. [ 2454.748016][T10845] sctp: [Deprecated]: syz.0.33296 (pid 10845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2454.748016][T10845] Use struct sctp_sack_info instead [ 2454.964141][T10849] device pim6reg1 entered promiscuous mode [ 2455.079171][T10854] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2455.893025][T10888] device pim6reg1 entered promiscuous mode [ 2455.978776][T10893] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2456.157965][T10897] netlink: 'syz.2.33324': attribute type 10 has an invalid length. [ 2456.271024][T10897] team0: Device vxcan1 is of different type [ 2456.494589][T10903] device syzkaller0 entered promiscuous mode [ 2457.822941][ T4920] wlan1: Trigger new scan to find an IBSS to join [ 2459.520283][T10934] device pim6reg1 entered promiscuous mode [ 2459.731581][T10941] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2459.856649][T10943] device syzkaller0 entered promiscuous mode [ 2460.862609][T25633] wlan1: Trigger new scan to find an IBSS to join [ 2461.826047][ T1651] wlan1: Trigger new scan to find an IBSS to join [ 2463.832762][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 2464.511978][T11001] netlink: 'syz.1.33361': attribute type 1 has an invalid length. [ 2464.746972][ T1651] wlan1: Creating new IBSS network, BSSID 32:96:21:9b:4a:38 [ 2464.783535][ T1639] wlan1: Trigger new scan to find an IBSS to join [ 2465.653690][T11030] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.33375'. [ 2467.583119][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.589546][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.850874][ T1625] wlan1: Trigger new scan to find an IBSS to join [ 2469.054382][ T1639] wlan1: Creating new IBSS network, BSSID ae:5e:7f:08:f8:c8 [ 2477.732236][T11300] netlink: 'syz.2.33492': attribute type 14 has an invalid length. [ 2477.757801][T11300] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.33492'. [ 2479.278188][T11330] netlink: 14 bytes leftover after parsing attributes in process `syz.1.33506'. [ 2479.350737][T11330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2479.386040][T11330] bond0 (unregistering): Released all slaves [ 2480.682315][T11356] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.33517'. [ 2480.725618][T11356] netlink: zone id is out of range [ 2480.770596][T11356] netlink: zone id is out of range [ 2480.884400][T11356] netlink: del zone limit has 4 unknown bytes [ 2481.117694][T11373] netlink: 'syz.4.33524': attribute type 14 has an invalid length. [ 2481.152777][T11373] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.33524'. [ 2482.489359][T11410] netlink: 'syz.1.33540': attribute type 14 has an invalid length. [ 2482.497526][T11410] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.33540'. [ 2482.751494][T11424] netlink: 14 bytes leftover after parsing attributes in process `syz.4.33547'. [ 2483.004178][T11424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2483.084781][T11424] bond0 (unregistering): Released all slaves [ 2484.231727][T11462] sock: sock_timestamping_bind_phc: sock not bind to device [ 2485.439214][T11498] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.33578'. [ 2485.461077][T11498] netlink: zone id is out of range [ 2485.480738][T11498] netlink: zone id is out of range [ 2485.564967][T11498] netlink: del zone limit has 4 unknown bytes [ 2490.527078][T11515] netlink: 'syz.0.33597': attribute type 27 has an invalid length. [ 2490.951487][T11532] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.33592'. [ 2490.975936][T11532] netlink: zone id is out of range [ 2490.989664][T11532] netlink: zone id is out of range [ 2491.117154][T11532] netlink: del zone limit has 4 unknown bytes [ 2492.212003][T11578] sock: sock_timestamping_bind_phc: sock not bind to device [ 2492.384937][T11580] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.33615'. [ 2492.602359][T11584] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.33626'. [ 2492.747459][T11585] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.33616'. [ 2492.780900][T11585] netlink: zone id is out of range [ 2492.854798][T11585] netlink: zone id is out of range [ 2492.950311][T11585] netlink: del zone limit has 4 unknown bytes [ 2493.955461][T11611] sock: sock_timestamping_bind_phc: sock not bind to device [ 2494.830912][ T1625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2496.187936][T26795] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 2498.114258][T26795] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 2499.136114][ T1625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2503.399465][T11724] netlink: 'syz.4.33676': attribute type 27 has an invalid length. [ 2520.404857][T12028] netlink: 'syz.1.33810': attribute type 27 has an invalid length. [ 2525.459797][T12059] device syzkaller0 entered promiscuous mode [ 2525.861193][ T1625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2528.973021][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.979420][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.404843][T26795] Bluetooth: hci0: Dropping invalid advertising data [ 2529.411634][T26795] Bluetooth: hci0: unknown advertising packet type: 0xff [ 2529.411667][T26795] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2530.060451][ T1639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2535.043482][T26795] Bluetooth: hci2: Dropping invalid advertising data [ 2535.050298][T26795] Bluetooth: hci2: unknown advertising packet type: 0xff [ 2535.050326][T26795] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2538.183572][T12231] netlink: 'syz.2.33894': attribute type 27 has an invalid length. [ 2542.337860][T12281] netlink: 'syz.3.33917': attribute type 27 has an invalid length. [ 2543.854419][T12301] netlink: 'syz.3.33924': attribute type 10 has an invalid length. [ 2543.874882][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33924'. [ 2543.893169][T12301] device team0 entered promiscuous mode [ 2543.898799][T12301] device team_slave_0 entered promiscuous mode [ 2543.923314][T12301] device team_slave_1 entered promiscuous mode [ 2543.959872][T12301] bridge0: port 5(team0) entered blocking state [ 2543.967308][T12301] bridge0: port 5(team0) entered disabled state [ 2543.978523][T12301] bridge0: port 5(team0) entered blocking state [ 2543.985019][T12301] bridge0: port 5(team0) entered forwarding state [ 2544.280580][T12318] netlink: 'syz.4.33933': attribute type 27 has an invalid length. [ 2547.429337][T12355] netlink: 'syz.0.33947': attribute type 27 has an invalid length. [ 2549.206387][T12383] netlink: 'syz.0.33968': attribute type 2 has an invalid length. [ 2549.234338][T12383] netlink: 196452 bytes leftover after parsing attributes in process `syz.0.33968'. [ 2551.523960][T12408] netlink: 'syz.4.33964': attribute type 27 has an invalid length. [ 2552.511088][T12429] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.33975'. [ 2553.912352][T12442] can: request_module (can-proto-0) failed. [ 2556.914231][ T1639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2557.886197][T12477] netlink: 'syz.1.33995': attribute type 2 has an invalid length. [ 2557.919333][T12477] netlink: 196452 bytes leftover after parsing attributes in process `syz.1.33995'. [ 2560.983196][ T1625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2565.553858][T26795] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2571.550517][T12636] netlink: 'syz.1.34062': attribute type 4 has an invalid length. [ 2574.441899][T12677] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.34079'. [ 2574.586962][T12679] netlink: 'syz.2.34081': attribute type 4 has an invalid length. [ 2578.267315][T12712] netlink: 'syz.3.34096': attribute type 4 has an invalid length. [ 2579.935262][T12742] netlink: 'syz.1.34107': attribute type 11 has an invalid length. [ 2580.036665][T12742] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34107'. [ 2580.128026][T12745] netlink: 'syz.4.34110': attribute type 4 has an invalid length. [ 2580.602605][T12740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2581.837287][T12761] can: request_module (can-proto-0) failed. [ 2585.320746][T12782] netlink: 'syz.4.34121': attribute type 29 has an invalid length. [ 2585.630259][T12790] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.34135'. [ 2585.645229][T12790] netlink: zone id is out of range [ 2585.653524][T12790] netlink: zone id is out of range [ 2585.666494][T12790] netlink: zone id is out of range [ 2585.677565][T12790] netlink: zone id is out of range [ 2585.688503][T12790] netlink: zone id is out of range [ 2585.706733][T12790] netlink: zone id is out of range [ 2585.713782][T12790] netlink: zone id is out of range [ 2585.751283][T12790] netlink: zone id is out of range [ 2585.760507][T12790] netlink: zone id is out of range [ 2585.774168][T12790] netlink: zone id is out of range [ 2585.990155][T12805] netlink: 'syz.0.34123': attribute type 4 has an invalid length. [ 2588.017397][ T1625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2588.444303][T12828] netlink: 'syz.2.34144': attribute type 29 has an invalid length. [ 2590.023766][T12849] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.34153'. [ 2590.385352][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.391745][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.367003][T12868] can: request_module (can-proto-0) failed. [ 2592.828133][ T1639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2593.828199][T12888] netlink: 'syz.0.34166': attribute type 2 has an invalid length. [ 2594.222028][T12898] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.34173'. [ 2594.233894][T12898] net_ratelimit: 3660 callbacks suppressed [ 2594.233912][T12898] netlink: zone id is out of range [ 2594.246947][T12898] netlink: get zone limit has 8 unknown bytes [ 2595.036974][T12911] netlink: 'syz.4.34178': attribute type 2 has an invalid length. [ 2595.072474][T12911] netlink: 'syz.4.34178': attribute type 4 has an invalid length. [ 2595.080954][T12911] netlink: 'syz.4.34178': attribute type 8 has an invalid length. [ 2595.120320][T12911] netlink: 'syz.4.34178': attribute type 9 has an invalid length. [ 2595.128807][T12911] netlink: 'syz.4.34178': attribute type 10 has an invalid length. [ 2595.142493][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34178'. [ 2595.224728][T12917] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.34177'. [ 2595.945109][T12931] netlink: 'syz.4.34186': attribute type 3 has an invalid length. [ 2595.969890][T12931] netlink: 'syz.4.34186': attribute type 8 has an invalid length. [ 2595.993061][T12931] netlink: 'syz.4.34186': attribute type 7 has an invalid length. [ 2596.024410][T12931] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.34186'. [ 2597.225257][T12957] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.34196'. [ 2597.261898][T12957] netlink: zone id is out of range [ 2597.284924][T12957] netlink: get zone limit has 8 unknown bytes [ 2598.932300][T26795] Bluetooth: hci2: Malformed HCI Event [ 2599.727160][T12998] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.34214'. [ 2599.783073][T12998] netlink: zone id is out of range [ 2599.809282][T12998] netlink: get zone limit has 8 unknown bytes [ 2600.184629][T13004] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.34216'. [ 2600.228567][T13004] netlink: zone id is out of range [ 2600.242629][T13004] netlink: zone id is out of range [ 2600.248351][T13004] netlink: zone id is out of range [ 2600.293195][T13004] netlink: zone id is out of range [ 2600.342766][T13004] netlink: zone id is out of range [ 2600.348417][T13004] netlink: zone id is out of range [ 2600.422654][T13004] netlink: zone id is out of range [ 2600.428184][T13004] netlink: zone id is out of range [ 2600.811376][T13010] netlink: 'syz.0.34218': attribute type 3 has an invalid length. [ 2600.869443][T13010] netlink: 'syz.0.34218': attribute type 8 has an invalid length. [ 2600.947151][T13010] netlink: 'syz.0.34218': attribute type 7 has an invalid length. [ 2601.067164][T13010] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.34218'. [ 2601.455397][T13020] netlink: 'syz.4.34224': attribute type 2 has an invalid length. [ 2601.491958][T13020] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.34224'. [ 2601.901448][T13025] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.34226'. [ 2604.755373][T13062] device syzkaller0 entered promiscuous mode [ 2605.655424][T13073] netlink: 'syz.1.34245': attribute type 3 has an invalid length. [ 2605.700208][T13073] netlink: 'syz.1.34245': attribute type 8 has an invalid length. [ 2605.720412][T13073] netlink: 'syz.1.34245': attribute type 7 has an invalid length. [ 2605.790425][T13073] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.34245'. [ 2605.883897][T13077] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.34244'. [ 2605.966303][T13077] net_ratelimit: 7215 callbacks suppressed [ 2605.966389][T13077] netlink: zone id is out of range [ 2606.050420][T13077] netlink: zone id is out of range [ 2606.084912][T13077] netlink: zone id is out of range [ 2606.117126][T13077] netlink: zone id is out of range [ 2606.165280][T13077] netlink: zone id is out of range [ 2606.212007][T13077] netlink: zone id is out of range [ 2606.261192][T13077] netlink: zone id is out of range [ 2606.305037][T13077] netlink: zone id is out of range [ 2606.347250][T13077] netlink: zone id is out of range [ 2606.396738][T13077] netlink: zone id is out of range [ 2611.301452][T13110] netlink: 'syz.1.34259': attribute type 21 has an invalid length. [ 2611.309641][T13110] netlink: 'syz.1.34259': attribute type 1 has an invalid length. [ 2611.317650][T13110] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.34259'. [ 2611.631483][T13124] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.34261'. [ 2611.657647][T13124] net_ratelimit: 3660 callbacks suppressed [ 2611.657669][T13124] netlink: zone id is out of range [ 2611.698198][T13124] netlink: zone id is out of range [ 2611.704315][T13124] netlink: zone id is out of range [ 2611.722730][T13124] netlink: zone id is out of range [ 2611.728369][T13124] netlink: zone id is out of range [ 2611.746771][T13124] netlink: zone id is out of range [ 2611.752420][T13124] netlink: zone id is out of range [ 2611.763203][T13124] netlink: zone id is out of range [ 2611.783242][T13124] netlink: zone id is out of range [ 2611.803551][T13124] netlink: zone id is out of range [ 2613.347264][T13154] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.34279'. [ 2615.716716][T13191] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.34291'. [ 2617.810295][T13223] netlink: 'syz.3.34309': attribute type 21 has an invalid length. [ 2617.900318][T13223] netlink: 'syz.3.34309': attribute type 1 has an invalid length. [ 2618.033451][T13223] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.34309'. [ 2619.485087][T25633] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2623.805450][T25633] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2629.965327][T13407] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.34386'. [ 2630.975898][T13413] device syzkaller0 entered promiscuous mode [ 2631.014269][T13417] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.34389'. [ 2635.657142][T13475] device syzkaller0 entered promiscuous mode [ 2638.671989][T13511] netlink: 'syz.2.34426': attribute type 2 has an invalid length. [ 2638.712814][T13511] netlink: 'syz.2.34426': attribute type 1 has an invalid length. [ 2638.738139][T13511] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.34426'. [ 2640.950353][T13551] netlink: 'syz.0.34446': attribute type 2 has an invalid length. [ 2640.986851][T13551] netlink: 'syz.0.34446': attribute type 1 has an invalid length. [ 2641.007261][T13551] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.34446'. [ 2641.461906][T13555] netlink: 'syz.0.34448': attribute type 10 has an invalid length. [ 2641.497030][T13555] netlink: 'syz.0.34448': attribute type 11 has an invalid length. [ 2641.527006][T13555] netlink: 5145 bytes leftover after parsing attributes in process `syz.0.34448'. [ 2645.077526][T13624] netlink: 'syz.2.34480': attribute type 10 has an invalid length. [ 2645.122496][T13624] netlink: 'syz.2.34480': attribute type 11 has an invalid length. [ 2645.163711][T13624] netlink: 5145 bytes leftover after parsing attributes in process `syz.2.34480'. [ 2646.753414][T13658] netlink: 'syz.3.34497': attribute type 10 has an invalid length. [ 2646.782588][T13658] netlink: 'syz.3.34497': attribute type 11 has an invalid length. [ 2646.817081][T13658] netlink: 5145 bytes leftover after parsing attributes in process `syz.3.34497'. [ 2649.618966][T13695] device syzkaller0 entered promiscuous mode [ 2649.679323][T13697] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 2649.895637][T13701] netlink: 'syz.3.34515': attribute type 21 has an invalid length. [ 2649.909844][T13701] netlink: 'syz.3.34515': attribute type 6 has an invalid length. [ 2649.927805][T13701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34515'. [ 2651.507662][T25639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2651.824781][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.831180][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.070303][T13735] device syzkaller0 entered promiscuous mode [ 2653.091776][T13747] netlink: 'syz.1.34531': attribute type 21 has an invalid length. [ 2653.101488][T13747] netlink: 'syz.1.34531': attribute type 6 has an invalid length. [ 2653.110059][T13747] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34531'. [ 2655.498871][T25631] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2655.878035][T13782] device syzkaller0 entered promiscuous mode [ 2658.732784][T13798] netlink: 'syz.2.34550': attribute type 21 has an invalid length. [ 2658.741348][T13798] netlink: 'syz.2.34550': attribute type 6 has an invalid length. [ 2658.752710][T13798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34550'. [ 2658.958087][T13801] netlink: 'syz.1.34553': attribute type 1 has an invalid length. [ 2658.966147][T13801] netlink: 'syz.1.34553': attribute type 4 has an invalid length. [ 2658.974385][T13801] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.34553'. [ 2664.250279][T26795] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 2666.211133][T13864] netlink: 'syz.0.34581': attribute type 10 has an invalid length. [ 2667.087074][T13864] team0: Device wg1 is of different type [ 2667.554337][T26795] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 2669.520002][T13910] netlink: 'syz.4.34599': attribute type 10 has an invalid length. [ 2670.364183][T13910] team0: Device wg1 is of different type [ 2676.927375][T13956] netlink: 'syz.2.34617': attribute type 10 has an invalid length. [ 2676.960202][T13956] team0: Device wg1 is of different type [ 2676.983958][T13975] netlink: 'syz.3.34628': attribute type 19 has an invalid length. [ 2677.006389][T13983] device syzkaller0 entered promiscuous mode [ 2682.735253][T25639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2686.376354][T14083] sock: sock_timestamping_bind_phc: sock not bind to device [ 2686.414971][T14023] netlink: 'syz.3.34644': attribute type 10 has an invalid length. [ 2686.742260][T14023] device wg1 entered promiscuous mode [ 2686.760104][T14023] team0: Device wg1 is of different type [ 2686.834370][T25631] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2686.918478][T26795] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2686.926831][T26795] Bluetooth: hci4: Invalid handle: 0xffff > 0x0eff [ 2691.534436][T14090] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2691.542735][T14090] Bluetooth: hci1: Invalid handle: 0xffff > 0x0eff [ 2696.420606][T14090] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2696.428434][T14090] Bluetooth: hci3: Invalid handle: 0xffff > 0x0eff [ 2697.846890][T14090] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2697.855514][T14090] Bluetooth: hci0: Invalid handle: 0xffff > 0x0eff [ 2697.924629][T14240] sctp: [Deprecated]: syz.1.34737 (pid 14240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2697.924629][T14240] Use struct sctp_sack_info instead [ 2699.322618][T14090] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2699.331120][T14090] Bluetooth: hci2: Invalid handle: 0xffff > 0x0eff [ 2700.795913][T14268] netlink: 'syz.2.34751': attribute type 10 has an invalid length. [ 2702.121485][T14295] netlink: 'syz.4.34764': attribute type 3 has an invalid length. [ 2702.132525][T14295] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.34764'. [ 2702.246578][T14304] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.34763'. [ 2702.431734][T14307] sctp: [Deprecated]: syz.0.34778 (pid 14307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2702.431734][T14307] Use struct sctp_sack_info instead [ 2702.755139][T14316] netlink: 'syz.0.34772': attribute type 2 has an invalid length. [ 2702.802898][T14316] netlink: 'syz.0.34772': attribute type 1 has an invalid length. [ 2702.834826][T14316] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.34772'. [ 2705.668000][T14342] netlink: 'syz.0.34785': attribute type 11 has an invalid length. [ 2705.717010][T14342] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34785'. [ 2706.499274][T14341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2706.812020][T14351] netlink: 'syz.4.34788': attribute type 2 has an invalid length. [ 2706.820460][T14351] netlink: 'syz.4.34788': attribute type 1 has an invalid length. [ 2706.832137][T14351] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.34788'. [ 2708.519077][T14323] netlink: 'syz.3.34775': attribute type 1 has an invalid length. [ 2708.527024][T14323] netlink: 152 bytes leftover after parsing attributes in process `syz.3.34775'. [ 2708.542737][T14368] netlink: 'syz.4.34797': attribute type 10 has an invalid length. [ 2709.018046][T14379] netlink: 'syz.3.34803': attribute type 2 has an invalid length. [ 2709.054632][T14379] netlink: 'syz.3.34803': attribute type 1 has an invalid length. [ 2709.079335][T14379] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.34803'. [ 2709.152709][T14385] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.34805'. [ 2710.643868][T14421] netlink: 'syz.1.34819': attribute type 10 has an invalid length. [ 2713.264648][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.271003][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.619077][T14474] netlink: 15794 bytes leftover after parsing attributes in process `syz.2.34846'. [ 2713.764481][T25631] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2717.858353][ T1639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2719.514920][T14565] netlink: 15794 bytes leftover after parsing attributes in process `syz.0.34884'. [ 2719.955076][T14575] netlink: 'syz.0.34890': attribute type 3 has an invalid length. [ 2719.982051][T14575] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.34890'. [ 2720.780838][T14591] netlink: 'syz.0.34895': attribute type 3 has an invalid length. [ 2720.797125][T14591] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.34895'. [ 2724.525590][T14642] netlink: 'syz.2.34915': attribute type 3 has an invalid length. [ 2724.583218][T14642] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.34915'. [ 2726.163253][T14658] netlink: 'syz.3.34936': attribute type 11 has an invalid length. [ 2726.171229][T14658] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34936'. [ 2727.060920][T14657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2728.185137][T14680] sctp: [Deprecated]: syz.4.34933 (pid 14680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2728.185137][T14680] Use struct sctp_sack_info instead [ 2728.185632][T14678] netlink: 'syz.1.34931': attribute type 3 has an invalid length. [ 2728.235966][T14678] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.34931'. [ 2729.002217][T14708] net_ratelimit: 11000 callbacks suppressed [ 2729.002243][T14708] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2729.165720][T14708] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2729.248582][T14708] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2729.312094][T14708] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2729.383129][T14708] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2729.449374][T14708] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2729.569465][T14708] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2733.543177][T14734] netlink: 'syz.0.34969': attribute type 21 has an invalid length. [ 2733.571699][T14738] netlink: 'syz.1.34960': attribute type 11 has an invalid length. [ 2733.580077][T14734] netlink: 'syz.0.34969': attribute type 22 has an invalid length. [ 2733.598568][T14734] netlink: 'syz.0.34969': attribute type 13 has an invalid length. [ 2733.607734][T14738] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34960'. [ 2733.628330][T14734] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.34969'. [ 2733.916942][T14752] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2733.978211][T14752] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2734.021492][T14752] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2734.076853][T14752] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2734.101069][T14752] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2734.117415][T14752] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2734.127735][T14752] batman_adv: batadv0: adding TT local entry 00:00:00:e1:ff:ff to non-existent VLAN 815 [ 2734.451777][T14737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2737.000830][T14767] netlink: 'syz.2.34973': attribute type 11 has an invalid length. [ 2737.019791][T14767] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34973'. [ 2740.093311][T14765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2741.421471][T14792] netlink: 'syz.1.34980': attribute type 21 has an invalid length. [ 2741.459053][T14792] netlink: 'syz.1.34980': attribute type 22 has an invalid length. [ 2741.478919][T14792] netlink: 'syz.1.34980': attribute type 13 has an invalid length. [ 2741.487350][T14792] netlink: 6188 bytes leftover after parsing attributes in process `syz.1.34980'. [ 2744.825827][T13260] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2746.056603][T14829] netlink: 'syz.3.34999': attribute type 21 has an invalid length. [ 2746.095183][T14829] netlink: 'syz.3.34999': attribute type 22 has an invalid length. [ 2746.204802][T14829] netlink: 'syz.3.34999': attribute type 13 has an invalid length. [ 2746.254137][T14829] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.34999'. [ 2748.886795][ T4920] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2755.519980][T14902] netlink: 'syz.1.35028': attribute type 13 has an invalid length. [ 2755.528289][T14902] netlink: 152 bytes leftover after parsing attributes in process `syz.1.35028'. [ 2755.543245][T14902] syz_tun: refused to change device tx_queue_len [ 2755.549631][T14902] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2757.848149][T14963] netlink: 'syz.2.35050': attribute type 13 has an invalid length. [ 2757.882564][T14963] netlink: 152 bytes leftover after parsing attributes in process `syz.2.35050'. [ 2757.955877][T14963] syz_tun: refused to change device tx_queue_len [ 2758.002777][T14963] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2758.336744][T14967] netlink: 72 bytes leftover after parsing attributes in process `syz.1.35053'. [ 2758.410991][T14970] netlink: 'syz.4.35054': attribute type 11 has an invalid length. [ 2758.478730][T14970] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.35054'. [ 2761.404387][T14968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2763.566671][T15018] netlink: 'syz.0.35072': attribute type 11 has an invalid length. [ 2763.595472][T15018] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.35072'. [ 2764.484716][T15017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2765.058689][ T4418] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 2768.433849][T15068] IPv6: pim6reg1: Disabled Multicast RS [ 2769.051284][T15076] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.35095'. [ 2771.577579][T15112] IPv6: pim6reg1: Disabled Multicast RS [ 2773.406875][T15136] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.35117'. [ 2774.705936][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.712510][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.505546][T15164] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.35130'. [ 2777.720030][T15193] syz.3.35139[15193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2777.720205][T15193] syz.3.35139[15193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2777.761710][ T1625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2780.403511][T15230] netlink: 'syz.0.35154': attribute type 2 has an invalid length. [ 2780.422946][T15230] netlink: 'syz.0.35154': attribute type 4 has an invalid length. [ 2780.431541][T13260] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2780.443088][T15230] netlink: 84 bytes leftover after parsing attributes in process `syz.0.35154'. [ 2780.646212][T15238] netlink: 14 bytes leftover after parsing attributes in process `syz.1.35157'. [ 2780.703286][T15238] openvswitch: netlink: Message has 6 unknown bytes. [ 2783.254992][T15273] netlink: 'syz.2.35172': attribute type 2 has an invalid length. [ 2783.262941][T15273] netlink: 'syz.2.35172': attribute type 4 has an invalid length. [ 2783.270804][T15273] netlink: 84 bytes leftover after parsing attributes in process `syz.2.35172'. [ 2784.306073][T15278] netlink: 14 bytes leftover after parsing attributes in process `syz.0.35174'. [ 2784.413135][T15278] openvswitch: netlink: Message has 6 unknown bytes. [ 2786.245485][T15310] netlink: 'syz.3.35189': attribute type 2 has an invalid length. [ 2786.265468][T15310] netlink: 'syz.3.35189': attribute type 4 has an invalid length. [ 2786.353965][T15310] netlink: 84 bytes leftover after parsing attributes in process `syz.3.35189'. [ 2787.108484][T15326] netlink: 14 bytes leftover after parsing attributes in process `syz.4.35192'. [ 2787.128943][T15326] openvswitch: netlink: Message has 6 unknown bytes. [ 2790.995040][ T4418] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 2791.552618][T15393] device syzkaller0 entered promiscuous mode [ 2793.022759][ T4418] Bluetooth: hci2: command 0x2021 tx timeout [ 2794.363812][T15416] netlink: 'syz.2.35233': attribute type 11 has an invalid length. [ 2794.380880][T15416] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.35233'. [ 2794.419877][T15416] netlink: 'syz.2.35233': attribute type 3 has an invalid length. [ 2794.439526][T15416] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.35233'. [ 2795.188760][T15414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2796.537868][T15424] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.35237'. [ 2796.593931][ T4418] Bluetooth: hci4: unexpected subevent 0x05 length: 150 > 12 [ 2796.626582][T15430] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.35238'. [ 2798.161920][T15473] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.35258'. [ 2798.325075][T15479] netlink: 'syz.1.35262': attribute type 11 has an invalid length. [ 2798.346659][T15479] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.35262'. [ 2798.394794][T15479] netlink: 'syz.1.35262': attribute type 3 has an invalid length. [ 2798.431755][T15479] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.35262'. [ 2798.511357][T15477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2798.622785][ T4418] Bluetooth: hci4: command 0x201b tx timeout [ 2798.629267][ T4418] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 2798.679312][T15486] netlink: 56843 bytes leftover after parsing attributes in process `syz.4.35263'. [ 2799.317779][ T4418] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 2799.765104][T15508] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.35275'. [ 2799.813335][T15512] netlink: 'syz.0.35277': attribute type 11 has an invalid length. [ 2799.839532][T15512] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.35277'. [ 2799.883667][T15513] netlink: 'syz.0.35277': attribute type 3 has an invalid length. [ 2799.891557][T15513] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.35277'. [ 2799.958230][T15517] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.35278'. [ 2799.975930][T15509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2800.421468][ T4418] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10 [ 2800.702433][ T4418] Bluetooth: hci1: command 0x201b tx timeout [ 2801.342504][ T4418] Bluetooth: hci3: command 0x201b tx timeout [ 2801.593425][T15549] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.35290'. [ 2801.792013][T15551] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.35305'. [ 2802.099564][T15556] netlink: 'syz.3.35293': attribute type 11 has an invalid length. [ 2802.131565][T15556] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.35293'. [ 2802.220539][T15563] netlink: 'syz.3.35293': attribute type 3 has an invalid length. [ 2802.294535][T15563] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.35293'. [ 2802.388803][T15555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2802.464137][ T4418] Bluetooth: hci0: command 0x2021 tx timeout [ 2802.825279][T15572] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.35296'. [ 2804.844839][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2804.872537][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2804.881755][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2804.890960][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2804.900225][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2804.909392][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2804.918545][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2804.927753][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2804.937828][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2804.946993][T15591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2811.347185][T15706] netlink: 'syz.4.35353': attribute type 3 has an invalid length. [ 2811.365805][T15706] netlink: 'syz.4.35353': attribute type 1 has an invalid length. [ 2811.373874][T15706] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.35353'. [ 2811.555715][ T1639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2811.862558][ T1625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2818.600017][T15782] netlink: 'syz.3.35386': attribute type 3 has an invalid length. [ 2818.628649][T15782] netlink: 'syz.3.35386': attribute type 1 has an invalid length. [ 2818.655489][T15782] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.35386'. [ 2823.524219][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35420'. [ 2823.581092][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35420'. [ 2823.623248][T15871] netlink: 33 bytes leftover after parsing attributes in process `syz.1.35420'. [ 2823.643068][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35420'. [ 2823.663838][T15871] netlink: 33 bytes leftover after parsing attributes in process `syz.1.35420'. [ 2823.684962][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35420'. [ 2823.697107][T15871] netlink: 33 bytes leftover after parsing attributes in process `syz.1.35420'. [ 2827.302069][T15954] netlink: 'syz.1.35454': attribute type 3 has an invalid length. [ 2827.324987][T15954] netlink: 'syz.1.35454': attribute type 1 has an invalid length. [ 2827.339028][T15954] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.35454'. [ 2827.803858][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35476'. [ 2827.815563][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35476'. [ 2827.843648][T15973] netlink: 33 bytes leftover after parsing attributes in process `syz.4.35476'. [ 2827.855030][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35476'. [ 2827.893214][T15973] netlink: 33 bytes leftover after parsing attributes in process `syz.4.35476'. [ 2827.969955][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35476'. [ 2836.158452][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.164900][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2840.660366][T16140] netlink: 'syz.3.35538': attribute type 10 has an invalid length. [ 2842.593642][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2842.812900][ T1625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2844.162922][T16170] netlink: 'syz.2.35553': attribute type 10 has an invalid length. [ 2844.923489][T16193] netlink: 'syz.0.35572': attribute type 10 has an invalid length. [ 2856.863189][T16354] netlink: 'syz.3.35628': attribute type 1 has an invalid length. [ 2856.881392][T16354] netlink: 'syz.3.35628': attribute type 4 has an invalid length. [ 2856.915197][T16354] __nla_validate_parse: 1 callbacks suppressed [ 2856.915216][T16354] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.35628'. [ 2866.906201][T16396] netlink: 'syz.1.35647': attribute type 1 has an invalid length. [ 2866.914294][T16396] netlink: 'syz.1.35647': attribute type 4 has an invalid length. [ 2866.922150][T16396] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.35647'. [ 2871.396081][T16467] netlink: 'syz.2.35675': attribute type 1 has an invalid length. [ 2871.404117][T16467] netlink: 'syz.2.35675': attribute type 4 has an invalid length. [ 2871.411975][T16467] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.35675'. [ 2871.737552][T16483] netlink: 2739 bytes leftover after parsing attributes in process `syz.0.35691'. [ 2871.771100][T16484] netlink: 'syz.1.35679': attribute type 10 has an invalid length. [ 2873.814087][T25639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2873.916212][ T4917] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2875.311210][T16530] netlink: 'syz.4.35697': attribute type 10 has an invalid length. [ 2875.594001][T16537] netlink: 2739 bytes leftover after parsing attributes in process `syz.2.35701'. [ 2878.147729][T16575] netlink: 2739 bytes leftover after parsing attributes in process `syz.1.35718'. [ 2885.713888][ T4418] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 2886.337888][T16693] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.35778'. [ 2887.206607][ T4418] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 2896.800480][T16858] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.35837'. [ 2897.594429][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.600852][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.653611][T16879] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.35848'. [ 2898.164063][T16892] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.35854'. [ 2902.072732][T16919] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.35866'. [ 2904.185241][T16949] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.35877'. [ 2904.746098][T25633] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2904.963548][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2907.776997][T16989] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.35894'. [ 2908.949047][T17012] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.35905'. [ 2909.143831][T17020] sctp: [Deprecated]: syz.0.35916 (pid 17020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2909.143831][T17020] Use struct sctp_sack_info instead [ 2910.225973][T17032] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.35910'. [ 2911.438372][T17043] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.35917'. [ 2911.969117][T17055] sctp: [Deprecated]: syz.1.35922 (pid 17055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2911.969117][T17055] Use struct sctp_sack_info instead [ 2917.170946][T17081] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.35933'. [ 2917.196871][T17085] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.35935'. [ 2924.046969][T17183] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.35992'. [ 2933.537920][T17305] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.36035'. [ 2933.647194][T17305] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2933.684782][T17305] CPU: 1 PID: 17305 Comm: syz.2.36035 Not tainted syzkaller #0 [ 2933.692438][T17305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2933.702561][T17305] Call Trace: [ 2933.706000][T17305] [ 2933.708980][T17305] dump_stack_lvl+0x188/0x24e [ 2933.713725][T17305] ? show_regs_print_info+0x12/0x12 [ 2933.718987][T17305] ? load_image+0x400/0x400 [ 2933.723576][T17305] sysfs_warn_dup+0x8a/0xa0 [ 2933.728160][T17305] sysfs_do_create_link_sd+0xc0/0x110 [ 2933.733616][T17305] device_add+0x7f6/0x1000 [ 2933.738146][T17305] wiphy_register+0x1d9f/0x2ac0 [ 2933.743072][T17305] ? cfg80211_event_work+0x40/0x40 [ 2933.748270][T17305] ? minstrel_ht_alloc+0x894/0xa20 [ 2933.753445][T17305] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2933.759575][T17305] ieee80211_register_hw+0x2d00/0x39f0 [ 2933.765104][T17305] ? ieee80211_register_hw+0xec1/0x39f0 [ 2933.770692][T17305] ? ieee80211_register_hw+0xec1/0x39f0 [ 2933.776297][T17305] ? ieee80211_tasklet_handler+0x20/0x20 [ 2933.781991][T17305] ? memset+0x1e/0x40 [ 2933.786021][T17305] ? __hrtimer_init+0x186/0x270 [ 2933.790932][T17305] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2933.796731][T17305] hwsim_new_radio_nl+0xafa/0xce0 [ 2933.801822][T17305] genl_family_rcv_msg_doit+0x22a/0x330 [ 2933.807431][T17305] ? end_current_label_crit_section+0x170/0x170 [ 2933.813761][T17305] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2933.819723][T17305] ? bpf_lsm_capable+0x5/0x10 [ 2933.824451][T17305] ? security_capable+0x85/0xb0 [ 2933.829362][T17305] genl_rcv_msg+0x604/0x790 [ 2933.833937][T17305] ? genl_bind+0x360/0x360 [ 2933.838400][T17305] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2933.844798][T17305] netlink_rcv_skb+0x1fb/0x450 [ 2933.849609][T17305] ? genl_bind+0x360/0x360 [ 2933.854078][T17305] ? netlink_ack+0x1170/0x1170 [ 2933.858913][T17305] ? down_read+0x1a8/0x2d0 [ 2933.863383][T17305] genl_rcv+0x24/0x40 [ 2933.867411][T17305] netlink_unicast+0x74d/0x8d0 [ 2933.872229][T17305] netlink_sendmsg+0x8ad/0xbd0 [ 2933.877048][T17305] ? netlink_getsockopt+0x550/0x550 [ 2933.882288][T17305] ? aa_sock_msg_perm+0x94/0x150 [ 2933.887276][T17305] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2933.892605][T17305] ? security_socket_sendmsg+0x7c/0xa0 [ 2933.898109][T17305] ? netlink_getsockopt+0x550/0x550 [ 2933.903353][T17305] ____sys_sendmsg+0x5be/0x970 [ 2933.908177][T17305] ? __sys_sendmsg_sock+0x30/0x30 [ 2933.913247][T17305] ? __import_iovec+0x315/0x500 [ 2933.918160][T17305] ? import_iovec+0x6f/0xa0 [ 2933.922712][T17305] ___sys_sendmsg+0x2a2/0x360 [ 2933.927438][T17305] ? try_to_wake_up+0x67c/0x1080 [ 2933.932429][T17305] ? __sys_sendmsg+0x290/0x290 [ 2933.937306][T17305] __se_sys_sendmsg+0x1bb/0x2a0 [ 2933.942207][T17305] ? ct_nmi_exit+0x145/0x1c0 [ 2933.946857][T17305] ? __x64_sys_sendmsg+0x80/0x80 [ 2933.951874][T17305] ? lockdep_hardirqs_on+0x94/0x140 [ 2933.957182][T17305] do_syscall_64+0x4c/0xa0 [ 2933.961654][T17305] ? clear_bhb_loop+0x60/0xb0 [ 2933.966387][T17305] ? clear_bhb_loop+0x60/0xb0 [ 2933.971126][T17305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2933.977074][T17305] RIP: 0033:0x7f905ab9ce59 [ 2933.981533][T17305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2934.001204][T17305] RSP: 002b:00007f905baca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2934.009673][T17305] RAX: ffffffffffffffda RBX: 00007f905ae15fa0 RCX: 00007f905ab9ce59 [ 2934.017689][T17305] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2934.025708][T17305] RBP: 00007f905ac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2934.033830][T17305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2934.041915][T17305] R13: 00007f905ae16038 R14: 00007f905ae15fa0 R15: 00007ffe6b42cce8 [ 2934.049966][T17305] [ 2935.024136][T17318] device syzkaller0 entered promiscuous mode [ 2936.481982][ T1625] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2936.495973][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2944.403843][T17385] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.36067'. [ 2954.409582][T17450] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.36094'. [ 2954.977580][T17491] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.36110'. [ 2957.581004][T17531] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.36124'. [ 2959.024318][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.030792][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2967.715324][T25633] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2967.737602][ T1639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2977.128533][T17680] Q6`Ҙ: renamed from lo [ 2978.711090][T17715] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.36199'. [ 2978.833738][T14090] Bluetooth: hci1: ISO packet too small [ 2984.604022][T14090] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 2986.622756][ T4418] Bluetooth: hci3: command 0x0409 tx timeout [ 2991.552025][T17844] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.36248'. [ 2991.562001][T17846] netlink: 'syz.0.36249': attribute type 1 has an invalid length. [ 2991.573758][T17846] netlink: 'syz.0.36249': attribute type 4 has an invalid length. [ 2991.581626][T17846] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.36249'. [ 2992.148730][T17870] device syzkaller0 entered promiscuous mode [ 2992.203186][T17892] sctp: [Deprecated]: syz.1.36270 (pid 17892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2992.203186][T17892] Use struct sctp_sack_info instead [ 2995.178741][T17894] device syzkaller0 entered promiscuous mode [ 2999.048435][T25633] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2999.062125][T25639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2999.318929][T17945] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.36289'. [ 3000.419195][T17972] netlink: 60583 bytes leftover after parsing attributes in process `syz.2.36300'. [ 3000.449189][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36300'. [ 3000.741422][T17985] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.36305'. [ 3003.577540][T17993] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.36308'. [ 3003.741646][T18016] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.36317'. [ 3009.400805][T18138] netlink: 'syz.2.36365': attribute type 1 has an invalid length. [ 3009.428923][T18138] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.36365'. [ 3015.321805][T18152] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.36370'. [ 3015.332873][T18164] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.36374'. [ 3015.598709][ T4418] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 3017.548444][T18215] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.36395'. [ 3017.662329][T14090] Bluetooth: hci2: command 0x0409 tx timeout [ 3020.476049][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.483014][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 3022.744635][T18215] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.36395'. [ 3023.072014][T14090] Bluetooth: hci0: unexpected event 0x31 length: 151 > 6 [ 3023.677695][ T4418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3023.696061][ T4418] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3023.705128][ T4418] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3023.713961][ T4418] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3023.721977][ T4418] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3023.732112][ T4418] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3023.996806][T18246] chnl_net:caif_netlink_parms(): no params data found [ 3024.088412][T18246] bridge0: port 1(bridge_slave_0) entered blocking state [ 3024.096088][T18246] bridge0: port 1(bridge_slave_0) entered disabled state [ 3024.104952][T18246] device bridge_slave_0 entered promiscuous mode [ 3024.116003][T18246] bridge0: port 2(bridge_slave_1) entered blocking state [ 3024.123667][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 3024.132115][T18246] device bridge_slave_1 entered promiscuous mode [ 3024.190117][T18246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3024.217113][T18246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3024.284901][T18246] team0: Port device team_slave_0 added [ 3024.295966][T18246] team0: Port device team_slave_1 added [ 3024.323460][T18246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3024.331585][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3024.372993][T18246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3024.396911][T18246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3024.411575][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3024.449964][T18246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3024.653890][T18246] device hsr_slave_0 entered promiscuous mode [ 3024.675921][T18246] device hsr_slave_1 entered promiscuous mode [ 3024.704709][T18246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3024.722419][T18246] Cannot create hsr debugfs directory [ 3025.229581][T18246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3025.362796][T18246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3025.822508][T18248] Bluetooth: hci5: command 0x0409 tx timeout [ 3026.388814][T18246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3026.530262][T18246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3026.590475][T18246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3026.606935][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3026.616887][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3026.635515][T18246] 8021q: adding VLAN 0 to HW filter on device team0 [ 3026.647182][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3026.656220][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3026.665967][ T4917] bridge0: port 1(bridge_slave_0) entered blocking state [ 3026.673176][ T4917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3026.681445][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3026.697324][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3026.706899][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3026.717703][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state [ 3026.724906][ T1639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3026.738214][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3026.778730][T25633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3026.796628][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3026.807919][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3026.817477][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3026.826524][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3026.854681][T25633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3026.889514][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3026.907635][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3026.916350][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3026.925408][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3026.934297][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3026.943097][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3026.969350][T25633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3026.983172][T18246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3027.049679][T25633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3027.271456][T25639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3027.283890][T25639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3027.297255][T18246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3027.903194][T18248] Bluetooth: hci5: command 0x041b tx timeout [ 3028.159050][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3028.170621][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3028.215365][T18246] device veth0_vlan entered promiscuous mode [ 3028.223348][T25639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3028.235421][T25639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3028.253351][T18246] device veth1_vlan entered promiscuous mode [ 3028.260522][T25639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3028.277242][T25639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3028.290211][T25639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3028.364894][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3028.373458][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3028.394072][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3028.411847][T18246] device veth0_macvtap entered promiscuous mode [ 3028.449923][T18246] device veth1_macvtap entered promiscuous mode [ 3028.469292][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3028.480869][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.491451][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3028.503836][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.514267][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3028.525448][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.540998][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3028.553339][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.564291][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3028.580596][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.593364][T18246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3028.611294][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3028.627961][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3028.643143][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3028.654618][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3028.669728][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3028.685689][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.697003][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3028.715864][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.726441][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3028.737238][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.748159][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3028.759002][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.769292][T18246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3028.792683][T18246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3028.813665][T18246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3028.832353][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3028.841217][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3028.879077][T18246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3028.891550][T18246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3028.908246][T18246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3028.917370][T18246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3029.092173][ T1625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3029.102443][ T1625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3029.133262][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3029.147497][ T4917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3029.161722][ T4917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3029.243480][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3029.451661][T25633] device hsr_slave_0 left promiscuous mode [ 3029.458432][T25633] device hsr_slave_1 left promiscuous mode [ 3029.468726][T25633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3029.476823][T25633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3029.485143][T25633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3029.492952][T25633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3029.504169][T25633] device batadv0 left promiscuous mode [ 3029.509966][T25633] bridge0: port 3(batadv0) entered disabled state [ 3029.519534][T25633] device bridge_slave_1 left promiscuous mode [ 3029.525891][T25633] bridge0: port 2(bridge_slave_1) entered disabled state [ 3029.534811][T25633] device bridge_slave_0 left promiscuous mode [ 3029.541092][T25633] bridge0: port 1(bridge_slave_0) entered disabled state [ 3029.982990][T18248] Bluetooth: hci5: command 0x040f tx timeout [ 3030.076593][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3030.189478][T25633] team0 (unregistering): Port device team_slave_1 removed [ 3030.315919][T25633] team0 (unregistering): Port device team_slave_0 removed [ 3032.062326][T18248] Bluetooth: hci5: command 0x0419 tx timeout [ 3061.103115][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3081.904526][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.910923][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 3092.027466][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3122.952407][ T4917] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3143.345089][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.351450][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 3150.542252][ T4418] Bluetooth: hci5: command 0x0406 tx timeout [ 3153.979593][T25639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3175.027372][ T4101] bridge0: port 3(syz_tun) entered disabled state [ 3175.164686][ T4101] device syz_tun left promiscuous mode [ 3175.170275][ T4101] bridge0: port 3(syz_tun) entered disabled state [ 3175.305863][ T1639] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3175.446740][ T1639] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3175.591946][ T1639] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3175.689707][ T1639] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3176.820664][ T1639] device hsr_slave_0 left promiscuous mode [ 3176.829616][ T1639] device hsr_slave_1 left promiscuous mode [ 3176.841098][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3176.849901][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3176.861421][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3176.870295][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3176.884080][ T1639] device bridge_slave_1 left promiscuous mode [ 3176.890366][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 3176.899650][ T1639] device bridge_slave_0 left promiscuous mode [ 3176.908628][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 3176.949388][ T1639] device veth1_macvtap left promiscuous mode [ 3176.957763][ T1639] device veth0_macvtap left promiscuous mode [ 3176.969620][ T1639] device veth1_vlan left promiscuous mode [ 3176.975653][ T1639] device veth0_vlan left promiscuous mode [ 3177.573169][ T1639] team0 (unregistering): Port device team_slave_1 removed [ 3177.620660][ T1639] team0 (unregistering): Port device team_slave_0 removed [ 3177.670584][ T1639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3177.716990][ T1639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3178.030760][ T1639] bond0 (unregistering): Released all slaves [ 3178.643973][ T1639] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3178.717108][ T1639] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3178.800964][ T1639] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3178.907164][ T1639] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.059371][ T1639] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.151688][ T1639] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.234449][ T1639] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.314094][ T1639] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.524956][ T1639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.623876][ T1639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.721366][ T1639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3179.790431][ T1639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3180.017973][ T1639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3180.078956][ T1639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3180.167554][ T1639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3180.255052][ T1639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3184.245162][ T1639] device hsr_slave_0 left promiscuous mode [ 3184.251740][ T1639] device hsr_slave_1 left promiscuous mode [ 3184.262920][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3184.270374][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3184.278694][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3184.286435][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3184.296014][ T1639] device hsr_slave_0 left promiscuous mode [ 3184.302819][ T1639] device hsr_slave_1 left promiscuous mode [ 3184.309333][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3184.317136][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3184.325624][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3184.333482][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3184.346629][ T1639] device batadv0 left promiscuous mode [ 3184.352492][ T1639] bridge0: port 3(batadv0) entered disabled state [ 3184.360886][ T1639] device bridge_slave_1 left promiscuous mode [ 3184.367980][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 3184.379974][ T1639] device bridge_slave_0 left promiscuous mode [ 3184.388745][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 3184.404370][ T1639] device hsr_slave_0 left promiscuous mode [ 3184.410947][ T1639] device hsr_slave_1 left promiscuous mode [ 3184.421359][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3184.430341][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3184.441835][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3184.451801][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3184.467588][ T1639] device hsr_slave_0 left promiscuous mode [ 3184.476746][ T1639] device hsr_slave_1 left promiscuous mode [ 3184.486016][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3184.496027][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3184.506837][ T1639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3184.516906][ T1639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3184.528601][ T1639] bridge0: port 5(team0) entered disabled state [ 3184.539809][ T1639] device batadv0 left promiscuous mode [ 3184.547790][ T1639] bridge0: port 4(batadv0) entered disabled state [ 3184.561768][ T1639] device bridge_slave_1 left promiscuous mode [ 3184.570406][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 3184.585578][ T1639] device bridge_slave_0 left promiscuous mode [ 3184.591854][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 3184.668218][ T1639] device veth1_macvtap left promiscuous mode [ 3184.674456][ T1639] device veth0_macvtap left promiscuous mode [ 3184.688876][ T1639] device veth1_macvtap left promiscuous mode [ 3184.695052][ T1639] device veth0_macvtap left promiscuous mode [ 3185.330875][ T1639] team0 (unregistering): Port device team_slave_1 removed [ 3185.378802][ T1639] team0 (unregistering): Port device team_slave_0 removed [ 3185.431900][ T1639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3185.478309][ T1639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3185.824523][ T1639] bond0 (unregistering): Released all slaves [ 3186.158067][ T1639] team0 (unregistering): Port device team_slave_1 removed [ 3186.204294][ T1639] team0 (unregistering): Port device team_slave_0 removed [ 3186.247922][ T1639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3186.292855][ T1639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3186.599790][ T1639] bond0 (unregistering): Released all slaves [ 3186.996101][ T1639] team0 (unregistering): Port device team_slave_1 removed [ 3187.040564][ T1639] team0 (unregistering): Port device team_slave_0 removed [ 3187.765035][ T1639] device team_slave_1 left promiscuous mode [ 3187.774552][ T1639] team0 (unregistering): Port device team_slave_1 removed [ 3187.823543][ T1639] device team_slave_0 left promiscuous mode [ 3187.830365][ T1639] team0 (unregistering): Port device team_slave_0 removed [ 3187.875498][ T1639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3187.921187][ T1639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3188.237894][ T1639] bond0 (unregistering): Released all slaves [ 3204.785343][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.791734][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.224808][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.231199][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)