last executing test programs: 7.968278568s ago: executing program 2 (id=3688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0x5, 0x1, 0xfffff76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 6.485467363s ago: executing program 2 (id=3681): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa3108", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f00000000c0), 0xb9) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x3d) 6.1714744s ago: executing program 1 (id=3696): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f00000007c0), 0x20000004}, 0x20) 6.170973s ago: executing program 2 (id=3687): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00082b0000000003000000040000004a0000002236d94c7725cec6be549165b80d6ba5c709a8321507706a3263cba455fa80be379c5c3622b300010000000000002c4525fb2d3d2774f69d613efb7796cf7b2d282322f8039a6d78dc8db8505d7d9fb540bba8d05ec41e7080ff22cbb31885b26ed16b8ecea086718753b9fe597a0b020a7966f981fd80c048a18abee382b4", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02b6a4e6fd8400000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) r5 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 5.940884769s ago: executing program 1 (id=3691): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5.897768803s ago: executing program 3 (id=3692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x1, 0x70, 0x9, 0x314, r0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x48) 4.876594298s ago: executing program 1 (id=3693): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x46, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x11, 0x0, 0x0) 4.86046074s ago: executing program 3 (id=3694): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000280), 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0028000f000300028000001294", 0x2e}], 0x1}, 0x0) 4.789828976s ago: executing program 1 (id=3695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0x5, 0x1, 0xfffff76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.815992242s ago: executing program 2 (id=3697): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x4, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r2, &(0x7f0000001400)=ANY=[@ANYRES8=r1, @ANYBLOB="3e971d"], 0x9a) 2.773310976s ago: executing program 4 (id=3699): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001600000000000000ae330018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0xf, 0x0, 0xffffffd0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000}, 0x17) 2.72516986s ago: executing program 1 (id=3700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e80)={0xffffffffffffffff, 0x0, 0x0, 0xc7eb3679d837a13c}, 0x20) 2.660783145s ago: executing program 0 (id=3701): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f00000000c0), 0xb9) close(r0) 2.660336315s ago: executing program 2 (id=3702): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) 2.647216597s ago: executing program 0 (id=3703): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.6075719s ago: executing program 3 (id=3704): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000280), 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}], 0x1}, 0x0) 1.484531675s ago: executing program 4 (id=3705): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0xd, 0x4, 0x8, 0x3020, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xc, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x1, 0x9, 0xb8, 0x2001, r2, 0xfffffff7, '\x00', 0x0, r3, 0x0, 0x5, 0x0, 0x9, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="2b6370752047714f2845c87fb0e60b74e6a66cbe20bb7c9807d2f0907bd122f6aa3547725cf71d2296bac6ee1ef5cc88b8be8a7ff396ae13646ba7842d"], 0x5) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x16, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0xb1}, @call={0x85, 0x0, 0x0, 0x40}, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x18d}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000980)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0x9, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[r2, r0, r0, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x5, 0x5, 0x4, 0x9}, {0x0, 0x1, 0x2, 0xc}, {0x3, 0x3, 0x2}, {0x5, 0x2, 0x9}], 0x10, 0xfffff801, @void, @value}, 0x90) openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x32}}) 1.484045574s ago: executing program 1 (id=3706): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x7ab046, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00082b0000000003000000040000004a0000002236d94c7725cec6be549165b80d6ba5c709a8321507706a3263cba455fa80be379c5c3622b300010000000000002c4525fb2d3d2774f69d613efb7796cf7b2d282322f8039a6d78dc8db8505d7d9fb540bba8d05ec41e7080ff22cbb31885b26ed16b8ecea086718753b9fe597a0b020a7966f981fd80c048a18abee382b4c61964b5a93903a66348d3897c1e8dd958dcf438", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02b6a4e6fd8400000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 814.798291ms ago: executing program 2 (id=3707): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00082b0000000003000000040000004a0000002236d94c7725cec6be549165b80d6ba5c709a8321507706a3263cba455fa80be379c5c3622b300010000000000002c4525fb2d3d2774f69d613efb7796cf7b2d282322f8039a6d78dc8db8505d7d9fb540bba8d05ec41e7080ff22cbb31885b26ed16b8ecea086718753b9fe597a0b020a7966f981fd80c048a18abee382b4c61964b5a93903a66348", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02b6a4e6fd8400000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) r5 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) 604.324019ms ago: executing program 0 (id=3708): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f00000007c0), 0x20000004}, 0x20) 603.029069ms ago: executing program 4 (id=3709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60066, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 504.281557ms ago: executing program 3 (id=3710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f0000001a80)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 367.591478ms ago: executing program 0 (id=3711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) close(0x3) 355.34458ms ago: executing program 4 (id=3712): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe40, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 250.306208ms ago: executing program 3 (id=3713): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, 0x0, &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'macvlan0\x00', @random="9315f06e0100"}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 165.182326ms ago: executing program 3 (id=3714): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000280), 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0028000f000300028000001294", 0x2e}], 0x1}, 0x0) 132.849768ms ago: executing program 4 (id=3715): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x17, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf038}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x40, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 128.239929ms ago: executing program 0 (id=3716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 474µs ago: executing program 0 (id=3717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=3718): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): h. [ 280.470444][ T7277] netlink: 'syz.3.1045': attribute type 40 has an invalid length. [ 281.464943][ T7288] netlink: 'syz.2.1047': attribute type 40 has an invalid length. [ 281.927359][ T7293] netlink: 'syz.3.1050': attribute type 40 has an invalid length. [ 284.112502][ T7313] netlink: 'syz.2.1057': attribute type 40 has an invalid length. [ 285.041762][ T7324] netlink: 'syz.2.1060': attribute type 40 has an invalid length. [ 285.660309][ T7331] netlink: 'syz.4.1063': attribute type 40 has an invalid length. [ 287.114190][ T7339] netlink: 'syz.3.1065': attribute type 2 has an invalid length. [ 287.440729][ T7342] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 287.447369][ T7342] dvmrp1: linktype set to 805 [ 287.792319][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 288.361289][ T7356] netlink: 'syz.3.1070': attribute type 40 has an invalid length. [ 288.937283][ T7363] netlink: 'syz.1.1082': attribute type 40 has an invalid length. [ 289.027230][ T7362] netlink: 'syz.3.1071': attribute type 10 has an invalid length. [ 289.295323][ T7362] device veth1_macvtap left promiscuous mode [ 289.732921][ T7364] Â: renamed from pim6reg1 [ 290.555318][ T7378] netlink: 'syz.1.1077': attribute type 40 has an invalid length. [ 291.595829][ T3648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.605476][ T3648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.614276][ T3648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.623614][ T3648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.720027][ T7403] netlink: 'syz.4.1086': attribute type 40 has an invalid length. [ 291.735365][ T3648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.745206][ T3648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.160968][ T7398] chnl_net:caif_netlink_parms(): no params data found [ 293.603935][ T7427] netlink: 'syz.4.1091': attribute type 40 has an invalid length. [ 293.829062][ T3655] Bluetooth: hci2: command tx timeout [ 293.913390][ T7429] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 293.945268][ T7429] dvmrp1: linktype set to 805 [ 293.984026][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.998285][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.056083][ T7398] device bridge_slave_0 entered promiscuous mode [ 294.188768][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.195943][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.321227][ T7398] device bridge_slave_1 entered promiscuous mode [ 294.848929][ T7398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.964204][ T7398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.443203][ T7398] team0: Port device team_slave_0 added [ 295.475362][ T7447] netlink: 'syz.1.1096': attribute type 40 has an invalid length. [ 295.505000][ T7398] team0: Port device team_slave_1 added [ 295.860379][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.867435][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.897888][ T3655] Bluetooth: hci2: command tx timeout [ 296.184758][ T7398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.346745][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.397986][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.459615][ T7398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.495225][ T7457] netlink: 'syz.4.1099': attribute type 10 has an invalid length. [ 296.806150][ T7457] team0: Device hsr_slave_0 failed to register rx_handler [ 297.044691][ T7466] netlink: 'syz.1.1100': attribute type 40 has an invalid length. [ 297.478386][ T7398] device hsr_slave_0 entered promiscuous mode [ 297.628381][ T7398] device hsr_slave_1 entered promiscuous mode [ 297.649834][ T7398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.657553][ T7398] Cannot create hsr debugfs directory [ 297.664513][ T7471] netlink: 'syz.2.1101': attribute type 40 has an invalid length. [ 297.948132][ T3655] Bluetooth: hci2: command tx timeout [ 297.949681][ T7476] netlink: 'syz.4.1103': attribute type 40 has an invalid length. [ 298.936881][ T7398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.042413][ T7497] netlink: 'syz.2.1107': attribute type 40 has an invalid length. [ 299.105370][ T7499] netlink: 'syz.4.1109': attribute type 40 has an invalid length. [ 299.343830][ T7398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.404053][ T7503] netlink: 'syz.3.1110': attribute type 40 has an invalid length. [ 299.483000][ T7398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.581837][ T7398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.740337][ T7514] netlink: 'syz.3.1113': attribute type 40 has an invalid length. [ 299.851775][ T7516] netlink: 'syz.1.1122': attribute type 40 has an invalid length. [ 299.979617][ T7398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.007457][ T7398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.021746][ T7398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.029126][ T3655] Bluetooth: hci2: command tx timeout [ 300.052125][ T7398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.130460][ T7519] netlink: 'syz.4.1114': attribute type 40 has an invalid length. [ 300.236475][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.284021][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.305210][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.326702][ T7398] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.359180][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.377061][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.394721][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.401996][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.447133][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.508373][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.536415][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.555702][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.562999][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.621371][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.650748][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.689467][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.755189][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.785247][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.820361][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.844002][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.871442][ T7535] netlink: 'syz.2.1120': attribute type 10 has an invalid length. [ 300.970293][ T7535] team0: Device hsr_slave_0 failed to register rx_handler [ 301.067508][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.085938][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.152341][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.324836][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.352746][ T7398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.909941][ T7549] device geneve0 entered promiscuous mode [ 302.245962][ T7549] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 302.434035][ T7557] validate_nla: 5 callbacks suppressed [ 302.434055][ T7557] netlink: 'syz.3.1127': attribute type 40 has an invalid length. [ 302.542368][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.562843][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.627854][ T7398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.661322][ T7560] netlink: 'syz.4.1128': attribute type 40 has an invalid length. [ 302.930407][ T7566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.938489][ T7566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.992186][ T7567] netlink: 'syz.1.1130': attribute type 40 has an invalid length. [ 303.001520][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.011350][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.053590][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.072527][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.089284][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.098094][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.123185][ T7398] device veth0_vlan entered promiscuous mode [ 303.146255][ T7398] device veth1_vlan entered promiscuous mode [ 303.185497][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 303.196028][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.206603][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.216735][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.230568][ T7398] device veth0_macvtap entered promiscuous mode [ 303.260063][ T7398] device veth1_macvtap entered promiscuous mode [ 303.281636][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.292480][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.303407][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.314349][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.324520][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.335271][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.347051][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.368573][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.377196][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.388257][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.397546][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.412228][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.424389][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.434925][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.447805][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.458380][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.469977][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.480621][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.497274][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.509500][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.518037][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.527103][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.539910][ T7398] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.551552][ T7398] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.561104][ T7398] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.571379][ T7398] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.668550][ T3707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.683853][ T3707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.704520][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.725971][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.735040][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.750573][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.050898][ T7571] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 304.330966][ T7571] team0: Device hsr_slave_0 failed to register rx_handler [ 304.608859][ T7577] netlink: 'syz.4.1143': attribute type 21 has an invalid length. [ 304.700938][ T7587] netlink: 'syz.4.1143': attribute type 10 has an invalid length. [ 304.834915][ T7587] device geneve0 entered promiscuous mode [ 304.859081][ T7587] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 304.877796][ T7588] netlink: 'syz.1.1140': attribute type 40 has an invalid length. [ 305.224546][ T7596] netlink: 'syz.1.1132': attribute type 40 has an invalid length. [ 305.463382][ T7606] netlink: 'syz.4.1135': attribute type 40 has an invalid length. [ 306.001806][ T7617] netlink: 'syz.0.1137': attribute type 40 has an invalid length. [ 306.283072][ T7626] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1144'. [ 306.408632][ T7626] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 306.436749][ T7626] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 307.989155][ T7638] Â: renamed from pim6reg1 [ 308.199824][ T7648] validate_nla: 2 callbacks suppressed [ 308.199846][ T7648] netlink: 'syz.3.1150': attribute type 40 has an invalid length. [ 310.994974][ T7663] netlink: 'syz.2.1153': attribute type 40 has an invalid length. [ 311.008253][ T7657] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 311.014713][ T7657] dvmrp1: linktype set to 805 [ 311.024528][ T7673] netlink: 'syz.4.1155': attribute type 40 has an invalid length. [ 311.495151][ T7684] netlink: 'syz.3.1156': attribute type 40 has an invalid length. [ 312.229621][ T7692] netlink: 'syz.2.1160': attribute type 40 has an invalid length. [ 312.844479][ T7694] netlink: 'syz.4.1162': attribute type 40 has an invalid length. [ 313.896493][ T7717] netlink: 'syz.2.1167': attribute type 40 has an invalid length. [ 314.820246][ T7723] netlink: 'syz.0.1168': attribute type 40 has an invalid length. [ 315.174325][ T7728] netlink: 'syz.4.1171': attribute type 40 has an invalid length. [ 315.417187][ T7742] netlink: 'syz.1.1174': attribute type 40 has an invalid length. [ 315.501487][ T7743] netlink: 'syz.0.1175': attribute type 40 has an invalid length. [ 316.023089][ T7750] Â: renamed from pim6reg1 [ 316.422862][ T7762] netlink: 'syz.4.1182': attribute type 40 has an invalid length. [ 316.461669][ T7758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.489354][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.782699][ T7761] netlink: 'syz.0.1179': attribute type 10 has an invalid length. [ 317.065479][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.072744][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.145007][ T7761] team0: Device hsr_slave_0 failed to register rx_handler [ 317.743250][ T7781] netlink: 'syz.1.1186': attribute type 40 has an invalid length. [ 317.767177][ T7777] netlink: 'syz.0.1187': attribute type 40 has an invalid length. [ 317.780268][ T7783] netlink: 'syz.3.1185': attribute type 40 has an invalid length. [ 318.659349][ T7800] device geneve0 entered promiscuous mode [ 319.027947][ T7800] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 319.160648][ T7803] validate_nla: 2 callbacks suppressed [ 319.160668][ T7803] netlink: 'syz.1.1193': attribute type 40 has an invalid length. [ 319.231154][ T7808] netlink: 'syz.3.1194': attribute type 40 has an invalid length. [ 320.440067][ T7826] netlink: 'syz.3.1200': attribute type 40 has an invalid length. [ 320.820200][ T7837] netlink: 'syz.2.1203': attribute type 40 has an invalid length. [ 320.859690][ T7836] netlink: 'syz.1.1204': attribute type 40 has an invalid length. [ 321.339080][ T7849] Â: renamed from pim6reg1 [ 321.538277][ T7853] netlink: 'syz.4.1208': attribute type 40 has an invalid length. [ 321.867224][ T7860] netlink: 'syz.2.1210': attribute type 40 has an invalid length. [ 322.386308][ T7869] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1214'. [ 322.682199][ T7871] netlink: 'syz.4.1215': attribute type 40 has an invalid length. [ 323.321924][ T7890] netlink: 'syz.4.1219': attribute type 40 has an invalid length. [ 323.418624][ T7889] netlink: 'syz.3.1220': attribute type 40 has an invalid length. [ 324.026448][ T7893] Â: renamed from pim6reg1 [ 324.249112][ T7907] netlink: 'syz.2.1225': attribute type 40 has an invalid length. [ 324.971208][ T7915] netlink: 'syz.1.1227': attribute type 10 has an invalid length. [ 325.361549][ T7915] team0: Device hsr_slave_0 failed to register rx_handler [ 325.621657][ T7918] netlink: 'syz.4.1229': attribute type 40 has an invalid length. [ 325.631985][ T7919] netlink: 'syz.3.1228': attribute type 40 has an invalid length. [ 325.652934][ T7923] netlink: 'syz.2.1230': attribute type 40 has an invalid length. [ 326.259444][ T7938] netlink: 'syz.3.1234': attribute type 40 has an invalid length. [ 326.614286][ T7947] netlink: 'syz.4.1236': attribute type 40 has an invalid length. [ 327.134580][ T7952] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1240'. [ 327.182611][ T7952] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 327.226710][ T7952] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 327.475523][ T7957] netlink: 'syz.2.1241': attribute type 40 has an invalid length. [ 328.035795][ T7968] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 328.045419][ T7968] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 328.526075][ T7969] netlink: 'syz.1.1244': attribute type 40 has an invalid length. [ 328.820458][ T7973] netlink: 'syz.2.1246': attribute type 40 has an invalid length. [ 329.696374][ T7988] validate_nla: 1 callbacks suppressed [ 329.696620][ T7988] netlink: 'syz.2.1250': attribute type 40 has an invalid length. [ 330.851442][ T8002] netlink: 'syz.0.1253': attribute type 40 has an invalid length. [ 331.460510][ T8017] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1258'. [ 333.978371][ T8027] netlink: 'syz.0.1259': attribute type 40 has an invalid length. [ 333.993567][ T8028] netlink: 'syz.2.1260': attribute type 40 has an invalid length. [ 334.074297][ T32] device hsr_slave_0 left promiscuous mode [ 334.092694][ T32] device hsr_slave_1 left promiscuous mode [ 334.127483][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.197753][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.228796][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.236380][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.267172][ T32] device bond0 left promiscuous mode [ 334.359530][ T32] device bond_slave_0 left promiscuous mode [ 334.409175][ T32] device bond_slave_1 left promiscuous mode [ 334.415535][ T32] bridge0: port 3(bond0) entered disabled state [ 334.588095][ T3645] Bluetooth: hci5: command 0x0406 tx timeout [ 334.594480][ T3645] Bluetooth: hci6: command 0x0406 tx timeout [ 334.618733][ T32] device bridge_slave_1 left promiscuous mode [ 334.626099][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.640027][ T32] device bridge_slave_0 left promiscuous mode [ 334.647004][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.683918][ T32] device veth1_macvtap left promiscuous mode [ 334.690310][ T32] device veth0_macvtap left promiscuous mode [ 334.696490][ T32] device veth1_vlan left promiscuous mode [ 334.703077][ T32] device veth0_vlan left promiscuous mode [ 335.440786][ T32] team0 (unregistering): Port device team_slave_1 removed [ 335.502938][ T32] team0 (unregistering): Port device team_slave_0 removed [ 335.607345][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.670554][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.231806][ T32] bond0 (unregistering): Released all slaves [ 336.305600][ T8040] netlink: 'syz.0.1265': attribute type 40 has an invalid length. [ 336.317821][ T8041] netlink: 'syz.1.1261': attribute type 40 has an invalid length. [ 336.341722][ T8051] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 336.388396][ T8051] dvmrp1: linktype set to 805 [ 336.634247][ T8059] device sit0 entered promiscuous mode [ 337.401999][ T8067] netlink: 'syz.1.1271': attribute type 40 has an invalid length. [ 338.053353][ T8087] netlink: 'syz.1.1277': attribute type 40 has an invalid length. [ 338.190142][ T8090] netlink: 'syz.0.1278': attribute type 40 has an invalid length. [ 338.750471][ T8100] netlink: 'syz.3.1281': attribute type 40 has an invalid length. [ 338.851037][ T8103] netlink: 'syz.2.1282': attribute type 40 has an invalid length. [ 338.932127][ T8105] netlink: 'syz.0.1284': attribute type 46 has an invalid length. [ 338.947521][ T8105] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1284'. [ 339.705031][ T8123] netlink: 'syz.3.1287': attribute type 40 has an invalid length. [ 339.797859][ T8126] netlink: 'syz.1.1288': attribute type 40 has an invalid length. [ 341.316021][ T8158] validate_nla: 2 callbacks suppressed [ 341.316042][ T8158] netlink: 'syz.1.1297': attribute type 40 has an invalid length. [ 341.609944][ T8164] netlink: 'syz.0.1300': attribute type 40 has an invalid length. [ 342.182652][ T8170] netlink: 'syz.2.1302': attribute type 40 has an invalid length. [ 342.361750][ T8172] netlink: 'syz.4.1303': attribute type 40 has an invalid length. [ 342.730355][ T8176] netlink: 'syz.1.1304': attribute type 40 has an invalid length. [ 343.170725][ T8184] netlink: 'syz.0.1305': attribute type 40 has an invalid length. [ 344.497992][ T8210] netlink: 'syz.4.1314': attribute type 40 has an invalid length. [ 345.101978][ T8215] netlink: 'syz.3.1316': attribute type 40 has an invalid length. [ 345.361452][ T8221] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.369217][ T8221] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.399178][ T8222] netlink: 'syz.3.1317': attribute type 40 has an invalid length. [ 346.224469][ T8226] netlink: 'syz.0.1329': attribute type 40 has an invalid length. [ 346.444565][ T8237] netlink: 'syz.3.1319': attribute type 46 has an invalid length. [ 346.691051][ T8237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1319'. [ 346.765050][ T8235] netlink: 'syz.1.1320': attribute type 40 has an invalid length. [ 346.790975][ T8238] netlink: 'syz.2.1322': attribute type 40 has an invalid length. [ 347.572648][ T8262] netlink: 'syz.0.1327': attribute type 40 has an invalid length. [ 348.380280][ T8268] device sit0 entered promiscuous mode [ 349.185996][ T8277] netlink: 'syz.3.1332': attribute type 40 has an invalid length. [ 349.194517][ T8276] netlink: 'syz.2.1334': attribute type 40 has an invalid length. [ 351.709662][ T8293] netlink: 'syz.3.1337': attribute type 40 has an invalid length. [ 351.822384][ T8296] netlink: 'syz.2.1336': attribute type 46 has an invalid length. [ 351.839495][ T8296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1336'. [ 352.086269][ T8302] netlink: 'syz.4.1339': attribute type 40 has an invalid length. [ 352.272714][ T8307] netlink: 'syz.2.1342': attribute type 40 has an invalid length. [ 353.035077][ T8320] netlink: 'syz.0.1348': attribute type 40 has an invalid length. [ 353.425816][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1350'. [ 353.768027][ T8336] netlink: 'syz.4.1352': attribute type 40 has an invalid length. [ 353.960065][ T8338] netlink: 'syz.0.1353': attribute type 29 has an invalid length. [ 354.241882][ T8338] netlink: 'syz.0.1353': attribute type 29 has an invalid length. [ 354.308897][ T8342] netlink: 'syz.0.1353': attribute type 29 has an invalid length. [ 354.320420][ T8343] netlink: 'syz.0.1353': attribute type 29 has an invalid length. [ 356.292319][ T8375] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 356.308695][ T8375] dvmrp1: linktype set to 805 [ 357.079590][ T8401] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 357.092178][ T8401] dvmrp1: linktype set to 805 [ 357.134170][ T8400] validate_nla: 4 callbacks suppressed [ 357.134192][ T8400] netlink: 'syz.0.1369': attribute type 40 has an invalid length. [ 357.606112][ T8410] netlink: 'syz.1.1372': attribute type 40 has an invalid length. [ 358.061016][ T8421] netlink: 'syz.0.1384': attribute type 40 has an invalid length. [ 358.236232][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1376'. [ 358.594113][ T8429] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1377'. [ 359.192090][ T8444] netlink: 'syz.2.1381': attribute type 29 has an invalid length. [ 359.202575][ T8444] netlink: 'syz.2.1381': attribute type 29 has an invalid length. [ 359.219779][ T8444] netlink: 'syz.2.1381': attribute type 29 has an invalid length. [ 359.252017][ T8444] netlink: 'syz.2.1381': attribute type 29 has an invalid length. [ 359.281454][ T8444] netlink: 'syz.2.1381': attribute type 29 has an invalid length. [ 360.591839][ T8462] Â: renamed from pim6reg1 [ 360.890493][ T8469] netlink: 'syz.4.1388': attribute type 40 has an invalid length. [ 361.425771][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1393'. [ 361.464668][ T8484] netlink: 'syz.4.1394': attribute type 40 has an invalid length. [ 361.978062][ T8499] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 362.027141][ T8499] dvmrp1: linktype set to 805 [ 363.779635][ T8507] Â: renamed from pim6reg1 [ 365.045316][ T8539] netlink: 'syz.3.1408': attribute type 40 has an invalid length. [ 365.357910][ T8546] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 365.363634][ T8546] dvmrp1: linktype set to 805 [ 365.396468][ T8547] netlink: 'syz.0.1409': attribute type 40 has an invalid length. [ 365.753521][ T8555] netlink: 'syz.2.1412': attribute type 40 has an invalid length. [ 366.461080][ T8561] netlink: 'syz.4.1415': attribute type 29 has an invalid length. [ 366.506516][ T8561] netlink: 'syz.4.1415': attribute type 29 has an invalid length. [ 366.544197][ T8564] netlink: 'syz.4.1415': attribute type 29 has an invalid length. [ 366.579860][ T8564] netlink: 'syz.4.1415': attribute type 29 has an invalid length. [ 366.609031][ T8569] netlink: 'syz.2.1429': attribute type 40 has an invalid length. [ 366.623675][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1418'. [ 366.709594][ T8561] netlink: 'syz.4.1415': attribute type 29 has an invalid length. [ 368.682036][ T8602] netlink: 'syz.4.1428': attribute type 40 has an invalid length. [ 369.729658][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1432'. [ 370.439384][ T8625] validate_nla: 6 callbacks suppressed [ 370.439406][ T8625] netlink: 'syz.1.1433': attribute type 29 has an invalid length. [ 371.555252][ T8650] netlink: 'syz.1.1443': attribute type 40 has an invalid length. [ 371.647276][ T8649] netlink: 'syz.0.1444': attribute type 40 has an invalid length. [ 371.995088][ T8658] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1446'. [ 372.517320][ T8667] sctp: [Deprecated]: syz.1.1451 (pid 8667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.517320][ T8667] Use struct sctp_sack_info instead [ 372.824948][ T8668] netlink: 'syz.3.1447': attribute type 40 has an invalid length. [ 373.029420][ T8675] netlink: 'syz.0.1452': attribute type 29 has an invalid length. [ 373.064785][ T8675] netlink: 'syz.0.1452': attribute type 29 has an invalid length. [ 373.092843][ T8678] netlink: 'syz.0.1452': attribute type 29 has an invalid length. [ 373.140769][ T8675] netlink: 'syz.0.1452': attribute type 29 has an invalid length. [ 373.203294][ T8678] netlink: 'syz.0.1452': attribute type 29 has an invalid length. [ 374.817270][ T8704] netlink: 'syz.0.1468': attribute type 40 has an invalid length. [ 375.303425][ T8711] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1461'. [ 375.428307][ T8713] Â: renamed from pim6reg1 [ 377.459632][ T8755] validate_nla: 1 callbacks suppressed [ 377.459653][ T8755] netlink: 'syz.4.1474': attribute type 40 has an invalid length. [ 378.439834][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.446241][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.640683][ T8766] sctp: [Deprecated]: syz.4.1478 (pid 8766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.640683][ T8766] Use struct sctp_sack_info instead [ 378.847342][ T8769] netlink: 'syz.1.1477': attribute type 40 has an invalid length. [ 380.490108][ T8801] netlink: 'syz.3.1487': attribute type 29 has an invalid length. [ 380.603726][ T8801] netlink: 'syz.3.1487': attribute type 29 has an invalid length. [ 380.734061][ T8799] netlink: 'syz.1.1486': attribute type 22 has an invalid length. [ 380.767076][ T8799] netlink: 14378 bytes leftover after parsing attributes in process `syz.1.1486'. [ 380.821272][ T8803] netlink: 'syz.3.1487': attribute type 29 has an invalid length. [ 380.878133][ T8806] netlink: 'syz.3.1487': attribute type 29 has an invalid length. [ 380.896307][ T8801] netlink: 'syz.3.1487': attribute type 29 has an invalid length. [ 381.090121][ T8810] netlink: 'syz.0.1488': attribute type 40 has an invalid length. [ 381.824021][ T8821] sctp: [Deprecated]: syz.3.1490 (pid 8821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.824021][ T8821] Use struct sctp_sack_info instead [ 382.282026][ T8831] netlink: 'syz.0.1494': attribute type 40 has an invalid length. [ 382.466051][ T8832] Â: renamed from pim6reg1 [ 384.092577][ T8856] device veth0_vlan left promiscuous mode [ 384.104670][ T8856] device veth0_vlan entered promiscuous mode [ 384.161811][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.186719][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 384.226195][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.045394][ T8877] netlink: 'syz.4.1507': attribute type 40 has an invalid length. [ 385.510734][ T8889] netlink: 'syz.2.1512': attribute type 40 has an invalid length. [ 386.177220][ T8893] Â: renamed from pim6reg1 [ 386.453133][ T8905] netlink: 'syz.2.1517': attribute type 40 has an invalid length. [ 386.663592][ T8907] netlink: 'syz.3.1518': attribute type 22 has an invalid length. [ 386.685129][ T8907] netlink: 14378 bytes leftover after parsing attributes in process `syz.3.1518'. [ 387.415309][ T8930] netlink: 'syz.0.1523': attribute type 40 has an invalid length. [ 389.017630][ T8952] sctp: [Deprecated]: syz.2.1527 (pid 8952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.017630][ T8952] Use struct sctp_sack_info instead [ 389.522771][ T8954] netlink: 'syz.3.1528': attribute type 40 has an invalid length. [ 389.591370][ T8958] netlink: 'syz.4.1529': attribute type 40 has an invalid length. [ 390.784007][ T8979] netlink: 'syz.2.1536': attribute type 40 has an invalid length. [ 391.476142][ T8986] device veth0_vlan left promiscuous mode [ 391.483903][ T8986] device veth0_vlan entered promiscuous mode [ 391.520838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 391.551805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 391.568955][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 393.873087][ T9007] netlink: 'syz.1.1545': attribute type 40 has an invalid length. [ 393.962028][ T9006] sctp: [Deprecated]: syz.0.1544 (pid 9006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.962028][ T9006] Use struct sctp_sack_info instead [ 394.667000][ T9016] Â: renamed from pim6reg1 [ 395.651543][ T9040] Â: renamed from pim6reg1 [ 395.682231][ T9041] device veth0_vlan left promiscuous mode [ 395.690446][ T9041] device veth0_vlan entered promiscuous mode [ 395.701588][ T9036] netlink: 'syz.4.1556': attribute type 22 has an invalid length. [ 395.714964][ T9036] netlink: 14378 bytes leftover after parsing attributes in process `syz.4.1556'. [ 396.322601][ T9056] netlink: 'syz.4.1562': attribute type 40 has an invalid length. [ 397.522729][ T9076] Â: renamed from pim6reg1 [ 399.193024][ T9109] netlink: 'syz.4.1579': attribute type 40 has an invalid length. [ 399.580500][ T9117] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1584'. [ 399.768348][ T9119] Â: renamed from pim6reg1 [ 401.041468][ T9142] netlink: 'syz.1.1602': attribute type 39 has an invalid length. [ 401.168482][ T9146] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1602'. [ 401.188320][ T9146] netlink: zone id is out of range [ 401.193514][ T9146] netlink: zone id is out of range [ 401.226192][ T9146] netlink: zone id is out of range [ 401.232507][ T9146] netlink: zone id is out of range [ 401.250989][ T9146] netlink: zone id is out of range [ 401.277144][ T9146] netlink: zone id is out of range [ 401.293347][ T9146] netlink: zone id is out of range [ 401.327800][ T9146] netlink: zone id is out of range [ 401.345063][ T9146] netlink: zone id is out of range [ 401.364337][ T9146] netlink: zone id is out of range [ 401.752962][ T9147] device veth0_vlan left promiscuous mode [ 401.809400][ T9147] device veth0_vlan entered promiscuous mode [ 402.578263][ T9161] netlink: 'syz.4.1596': attribute type 40 has an invalid length. [ 402.590129][ T9164] netlink: 'syz.1.1597': attribute type 40 has an invalid length. [ 403.332154][ T9173] Â: renamed from pim6reg1 [ 403.651777][ T9177] team0: Port device team_slave_0 removed [ 404.554229][ T9203] device sit0 left promiscuous mode [ 404.764191][ T9209] netlink: 'syz.1.1611': attribute type 40 has an invalid length. [ 404.802661][ T9212] netlink: 'syz.2.1613': attribute type 39 has an invalid length. [ 404.862283][ T9213] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1613'. [ 405.344462][ T9219] netlink: 'syz.4.1614': attribute type 40 has an invalid length. [ 405.596188][ T9225] Â: renamed from pim6reg1 [ 405.953919][ T9234] netlink: 'syz.1.1629': attribute type 40 has an invalid length. [ 406.115472][ T9238] netlink: 'syz.4.1622': attribute type 40 has an invalid length. [ 406.314229][ T9243] netlink: 'syz.2.1623': attribute type 10 has an invalid length. [ 406.740150][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.835115][ T9243] bond0: (slave team0): Enslaving as an active interface with an up link [ 406.878989][ T9247] netlink: 'syz.3.1624': attribute type 40 has an invalid length. [ 407.457520][ T9263] netlink: 'syz.0.1631': attribute type 39 has an invalid length. [ 407.628971][ T9264] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1631'. [ 407.642298][ T9264] net_ratelimit: 61 callbacks suppressed [ 407.642314][ T9264] netlink: zone id is out of range [ 407.660907][ T9262] netlink: 'syz.3.1638': attribute type 40 has an invalid length. [ 407.700558][ T9264] netlink: zone id is out of range [ 407.725812][ T9264] netlink: zone id is out of range [ 407.739523][ T9264] netlink: zone id is out of range [ 407.744963][ T9264] netlink: zone id is out of range [ 407.750479][ T9264] netlink: zone id is out of range [ 407.755962][ T9264] netlink: zone id is out of range [ 407.761964][ T9264] netlink: zone id is out of range [ 407.767128][ T9264] netlink: zone id is out of range [ 407.779754][ T9264] netlink: zone id is out of range [ 407.978394][ T9271] netlink: 'syz.4.1632': attribute type 40 has an invalid length. [ 408.004832][ T9272] netlink: 'syz.2.1633': attribute type 40 has an invalid length. [ 408.415417][ T9276] Â: renamed from pim6reg1 [ 408.443914][ T9280] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1635'. [ 408.976807][ T9291] team0: Port device team_slave_0 removed [ 409.078996][ T9292] netlink: 'syz.1.1639': attribute type 40 has an invalid length. [ 409.113095][ T9296] netlink: 'syz.0.1642': attribute type 10 has an invalid length. [ 409.426475][ T9296] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.543810][ T9296] bond0: (slave team0): Enslaving as an active interface with an up link [ 409.711210][ T9299] netlink: 'syz.2.1643': attribute type 40 has an invalid length. [ 410.113935][ T9312] netlink: 'syz.1.1646': attribute type 40 has an invalid length. [ 410.723068][ T9324] netlink: 'syz.2.1650': attribute type 40 has an invalid length. [ 410.869430][ T9325] Â: renamed from pim6reg1 [ 411.029839][ T9335] netlink: 'syz.3.1651': attribute type 40 has an invalid length. [ 411.531365][ T9348] netlink: 'syz.1.1656': attribute type 40 has an invalid length. [ 412.485747][ T9353] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.527194][ T9353] bond0: (slave team0): Enslaving as an active interface with an up link [ 412.718045][ T9356] team0: Port device team_slave_0 removed [ 412.735288][ T9356] net_ratelimit: 26 callbacks suppressed [ 412.735510][ T9356] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 413.369224][ T9372] validate_nla: 2 callbacks suppressed [ 413.369326][ T9372] netlink: 'syz.1.1663': attribute type 40 has an invalid length. [ 413.920805][ T9384] netlink: 'syz.3.1669': attribute type 10 has an invalid length. [ 414.004079][ T9385] netlink: 'syz.4.1667': attribute type 40 has an invalid length. [ 414.037170][ T9391] netlink: 'syz.0.1668': attribute type 40 has an invalid length. [ 414.373430][ T9397] netlink: 'syz.2.1671': attribute type 40 has an invalid length. [ 414.405504][ T9396] Â: renamed from pim6reg1 [ 415.495073][ T9417] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1678'. [ 415.946245][ T9433] netlink: 'syz.4.1681': attribute type 10 has an invalid length. [ 416.201875][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.289104][ T9433] bond0: (slave team0): Enslaving as an active interface with an up link [ 416.317098][ T9436] netlink: 'syz.2.1691': attribute type 40 has an invalid length. [ 416.373173][ T9432] netlink: 'syz.3.1682': attribute type 40 has an invalid length. [ 416.428253][ T3648] Bluetooth: hci2: command 0x0406 tx timeout [ 416.648427][ T9445] Â: renamed from pim6reg1 [ 416.911878][ T9448] netlink: 'syz.4.1684': attribute type 40 has an invalid length. [ 416.958117][ T9450] netlink: 'syz.0.1686': attribute type 40 has an invalid length. [ 418.678205][ T9481] validate_nla: 1 callbacks suppressed [ 418.678246][ T9481] netlink: 'syz.1.1696': attribute type 10 has an invalid length. [ 418.782018][ T9481] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.801349][ T9481] device team0 entered promiscuous mode [ 418.807030][ T9481] device team_slave_1 entered promiscuous mode [ 418.820489][ T9481] bond0: (slave team0): Enslaving as an active interface with an up link [ 419.102928][ T9490] netlink: 'syz.1.1700': attribute type 40 has an invalid length. [ 419.164131][ T9488] netlink: 'syz.0.1699': attribute type 40 has an invalid length. [ 419.664810][ T9494] netlink: 'syz.4.1701': attribute type 40 has an invalid length. [ 419.979414][ T9500] netlink: 'syz.0.1702': attribute type 40 has an invalid length. [ 420.988902][ T9520] netlink: 'syz.2.1710': attribute type 10 has an invalid length. [ 421.511745][ T9525] device veth0_vlan left promiscuous mode [ 421.529565][ T9525] device veth0_vlan entered promiscuous mode [ 421.567375][ T9534] netlink: 'syz.3.1711': attribute type 10 has an invalid length. [ 421.629754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.645274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.663930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.952640][ T9540] netlink: 'syz.1.1712': attribute type 40 has an invalid length. [ 421.996289][ T9544] netlink: 'syz.0.1713': attribute type 40 has an invalid length. [ 422.276675][ T9553] netlink: 'syz.2.1717': attribute type 10 has an invalid length. [ 422.286617][ T9553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1717'. [ 422.300886][ T9553] device ipvlan1 entered promiscuous mode [ 422.341632][ T9553] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 424.012476][ T9581] validate_nla: 2 callbacks suppressed [ 424.012497][ T9581] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 424.265225][ T9581] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 424.323350][ T9589] netlink: 'syz.2.1726': attribute type 40 has an invalid length. [ 424.861882][ T9600] netlink: 'syz.1.1731': attribute type 40 has an invalid length. [ 425.037018][ T9603] netlink: 'syz.2.1732': attribute type 40 has an invalid length. [ 425.407126][ T9611] bond0: (slave team0): Error: Slave device does not support XDP [ 425.564862][ T9612] Â: renamed from pim6reg1 [ 426.068267][ T9622] netlink: 'syz.3.1739': attribute type 40 has an invalid length. [ 426.308809][ T9629] netlink: 'syz.1.1740': attribute type 40 has an invalid length. [ 426.491873][ T9631] netlink: 'syz.0.1743': attribute type 40 has an invalid length. [ 427.235516][ T9643] team0: Port device team_slave_0 removed [ 427.355315][ T9643] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 427.435114][ T9648] netlink: 'syz.3.1750': attribute type 40 has an invalid length. [ 427.462414][ T9645] netlink: 'syz.1.1749': attribute type 10 has an invalid length. [ 427.652184][ T9651] Â: renamed from pim6reg1 [ 427.785940][ T9657] netlink: 'syz.4.1752': attribute type 40 has an invalid length. [ 429.072564][ T9687] validate_nla: 3 callbacks suppressed [ 429.072584][ T9687] netlink: 'syz.0.1761': attribute type 40 has an invalid length. [ 429.183575][ T9688] netlink: 'syz.4.1762': attribute type 40 has an invalid length. [ 429.804746][ T9699] netlink: 'syz.2.1766': attribute type 40 has an invalid length. [ 430.135546][ T9709] netlink: 'syz.0.1778': attribute type 40 has an invalid length. [ 430.481148][ T9714] netlink: 'syz.4.1771': attribute type 40 has an invalid length. [ 430.507510][ T9711] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1770'. [ 430.539588][ T9711] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 431.118541][ T9724] netlink: 'syz.2.1774': attribute type 40 has an invalid length. [ 431.229650][ T9730] netlink: 'syz.0.1773': attribute type 10 has an invalid length. [ 431.769018][ T9734] netlink: 'syz.4.1776': attribute type 40 has an invalid length. [ 431.964530][ T9739] bond0: (slave geneve0): Error: Slave device does not support XDP [ 431.989952][ T9738] netlink: 'syz.3.1779': attribute type 40 has an invalid length. [ 433.996991][ T9780] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 434.890367][ T9798] validate_nla: 6 callbacks suppressed [ 434.890496][ T9798] netlink: 'syz.0.1795': attribute type 40 has an invalid length. [ 435.432237][ T9811] netlink: 'syz.4.1800': attribute type 40 has an invalid length. [ 435.986517][ T9815] netlink: 'syz.0.1801': attribute type 40 has an invalid length. [ 436.490240][ T9820] netlink: 'syz.1.1802': attribute type 40 has an invalid length. [ 436.538752][ T9824] netlink: 'syz.4.1803': attribute type 40 has an invalid length. [ 437.645850][ T9838] bond0: (slave geneve0): Error: Slave device does not support XDP [ 437.761210][ T9842] netlink: 'syz.3.1818': attribute type 40 has an invalid length. [ 437.837193][ T9834] netlink: 'syz.1.1807': attribute type 10 has an invalid length. [ 438.147325][ T9834] device macvlan0 entered promiscuous mode [ 438.347272][ T9834] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 438.356226][ T9851] netlink: 'syz.0.1811': attribute type 40 has an invalid length. [ 438.929045][ T9865] netlink: 'syz.2.1813': attribute type 40 has an invalid length. [ 439.038123][ T9867] netlink: 'syz.3.1815': attribute type 40 has an invalid length. [ 439.974474][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.981282][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.941304][ T9891] validate_nla: 1 callbacks suppressed [ 440.941466][ T9891] netlink: 'syz.0.1825': attribute type 10 has an invalid length. [ 440.966680][ T9891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1825'. [ 441.038048][ T9891] device ipvlan1 entered promiscuous mode [ 441.079981][ T9891] bridge0: port 3(ipvlan1) entered blocking state [ 441.124557][ T9891] bridge0: port 3(ipvlan1) entered disabled state [ 441.173554][ T9891] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 441.219481][ T9895] netlink: 'syz.1.1826': attribute type 40 has an invalid length. [ 441.318381][ T9897] netlink: 'syz.3.1827': attribute type 40 has an invalid length. [ 441.665411][ T9891] syz.0.1825 (9891) used greatest stack depth: 18104 bytes left [ 442.269023][ T9912] netlink: 'syz.3.1832': attribute type 40 has an invalid length. [ 442.307671][ T9911] netlink: 'syz.0.1831': attribute type 40 has an invalid length. [ 443.448521][ T9929] netlink: 'syz.1.1835': attribute type 40 has an invalid length. [ 444.206692][ T9940] netlink: 'syz.2.1839': attribute type 40 has an invalid length. [ 444.737762][ T9949] netlink: 'syz.3.1842': attribute type 40 has an invalid length. [ 445.536629][ T9962] netlink: 'syz.2.1846': attribute type 40 has an invalid length. [ 445.606227][ T9967] netlink: 'syz.4.1847': attribute type 40 has an invalid length. [ 446.403798][ T9980] netlink: 'syz.0.1851': attribute type 40 has an invalid length. [ 446.549783][ T9988] netlink: 'syz.3.1863': attribute type 40 has an invalid length. [ 447.476915][ T3645] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5 [ 447.534326][T10000] netlink: 'syz.0.1865': attribute type 40 has an invalid length. [ 447.621020][T10005] netlink: 'syz.4.1857': attribute type 40 has an invalid length. [ 448.096812][T10012] netlink: 'syz.1.1859': attribute type 40 has an invalid length. [ 448.787920][T10020] netlink: 'syz.4.1862': attribute type 40 has an invalid length. [ 449.028454][T10015] netlink: 'syz.0.1861': attribute type 2 has an invalid length. [ 449.037121][T10015] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 449.321008][T10035] netlink: 'syz.1.1866': attribute type 40 has an invalid length. [ 450.445125][T10043] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1870'. [ 450.466836][T10043] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 452.234789][T10074] validate_nla: 1 callbacks suppressed [ 452.234811][T10074] netlink: 'syz.3.1877': attribute type 40 has an invalid length. [ 453.236966][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.246949][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.485103][T10093] netlink: 'syz.4.1881': attribute type 40 has an invalid length. [ 453.528456][T10097] device bridge_slave_1 left promiscuous mode [ 453.561897][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.678791][T10097] device bridge_slave_0 left promiscuous mode [ 453.752108][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.011788][T10103] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1885'. [ 454.095951][T10103] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 455.099430][T10116] netlink: 'syz.4.1890': attribute type 40 has an invalid length. [ 455.891362][T10127] netlink: 'syz.3.1893': attribute type 40 has an invalid length. [ 457.534341][T10149] netlink: 'syz.4.1897': attribute type 40 has an invalid length. [ 458.432173][T10154] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1900'. [ 458.476141][T10154] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 458.757990][T10165] netlink: 'syz.3.1904': attribute type 40 has an invalid length. [ 459.021230][T10174] netlink: 'syz.0.1906': attribute type 40 has an invalid length. [ 459.155196][T10169] netlink: 'syz.2.1905': attribute type 2 has an invalid length. [ 459.166341][T10169] netlink: 'syz.2.1905': attribute type 1 has an invalid length. [ 459.622292][T10185] netlink: 'syz.4.1908': attribute type 40 has an invalid length. [ 460.618853][T10197] netlink: 'syz.1.1912': attribute type 40 has an invalid length. [ 461.277793][T10222] bond0: (slave team0): Error: Slave device does not support XDP [ 461.807912][T10233] netlink: 'syz.2.1920': attribute type 40 has an invalid length. [ 462.006472][T10237] netlink: 'syz.3.1921': attribute type 40 has an invalid length. [ 462.607258][T10248] netlink: 'syz.1.1924': attribute type 40 has an invalid length. [ 463.758056][T10268] netlink: 'syz.3.1929': attribute type 40 has an invalid length. [ 464.043499][T10273] Â: renamed from pim6reg1 [ 464.383991][T10285] bond0: (slave geneve0): Error: Slave device does not support XDP [ 464.491632][T10291] netlink: 'syz.3.1936': attribute type 40 has an invalid length. [ 464.629378][T10293] bridge0: port 3(bond0) entered disabled state [ 464.638335][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.646179][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.884594][T10293] device macsec0 left promiscuous mode [ 464.896957][T10293] bridge0: port 4(macsec0) entered disabled state [ 464.990264][T10293] device bond0 left promiscuous mode [ 465.018822][T10293] device bond_slave_0 left promiscuous mode [ 465.039551][T10293] device bond_slave_1 left promiscuous mode [ 465.046556][T10293] device team0 left promiscuous mode [ 465.060801][T10293] device team_slave_1 left promiscuous mode [ 465.073990][T10293] device macvlan0 left promiscuous mode [ 465.084405][T10293] bridge0: port 3(bond0) entered disabled state [ 465.155299][T10293] device bridge_slave_1 left promiscuous mode [ 465.201306][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.314829][T10293] device bridge_slave_0 left promiscuous mode [ 465.336555][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.614159][T10299] netlink: 'syz.4.1937': attribute type 40 has an invalid length. [ 466.348010][T10319] netlink: 'syz.3.1941': attribute type 40 has an invalid length. [ 467.296585][T10329] netlink: 'syz.0.1944': attribute type 40 has an invalid length. [ 467.656156][T10340] netlink: 'syz.2.1947': attribute type 40 has an invalid length. [ 467.789583][T10333] Â: renamed from pim6reg1 [ 467.955945][T10347] netlink: 'syz.4.1948': attribute type 40 has an invalid length. [ 468.845865][T10358] netlink: 'syz.1.1951': attribute type 40 has an invalid length. [ 469.661479][T10377] netlink: 'syz.0.1956': attribute type 40 has an invalid length. [ 470.755003][T10391] netlink: 'syz.2.1960': attribute type 40 has an invalid length. [ 470.770546][T10390] netlink: 'syz.0.1969': attribute type 40 has an invalid length. [ 470.976505][T10389] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1959'. [ 471.246940][T10389] netlink: 'syz.1.1959': attribute type 1 has an invalid length. [ 471.360332][T10400] netlink: 'syz.3.1963': attribute type 40 has an invalid length. [ 471.441129][T10403] netlink: 1033 bytes leftover after parsing attributes in process `syz.4.1964'. [ 471.862670][T10413] netlink: 'syz.1.1967': attribute type 40 has an invalid length. [ 472.450794][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 472.916977][T10412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.286079][T10431] bond0: (slave geneve0): Error: Slave device does not support XDP [ 473.793887][T10444] Â: renamed from pim6reg1 [ 474.128051][T10451] netlink: 'syz.0.1976': attribute type 40 has an invalid length. [ 474.415788][T10458] netlink: 'syz.2.1978': attribute type 40 has an invalid length. [ 474.761011][T10463] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1981'. [ 474.837932][T10463] netlink: 'syz.1.1981': attribute type 1 has an invalid length. [ 475.580486][T10472] netlink: 'syz.4.1987': attribute type 10 has an invalid length. [ 475.607018][T10472] bond0: (slave wlan1): Opening slave failed [ 475.904028][T10481] Â: renamed from pim6reg1 [ 476.933924][T10499] netlink: 'syz.0.1994': attribute type 40 has an invalid length. [ 477.079765][T10502] netlink: 'syz.1.1995': attribute type 40 has an invalid length. [ 477.261106][T10506] netlink: 1033 bytes leftover after parsing attributes in process `syz.3.1996'. [ 478.145719][T10513] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 478.406369][T10513] syzkaller0: linktype set to 773 [ 478.793079][T10520] Â: renamed from pim6reg1 [ 479.602711][T10533] delete_channel: no stack [ 480.023132][T10559] netlink: 'syz.1.2011': attribute type 40 has an invalid length. [ 480.274505][T10563] netlink: 'syz.0.2013': attribute type 10 has an invalid length. [ 480.503086][T10567] netlink: 'syz.0.2014': attribute type 10 has an invalid length. [ 480.516938][T10567] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 480.598059][T10569] Â: renamed from pim6reg1 [ 481.228246][T10584] netlink: 'syz.2.2017': attribute type 40 has an invalid length. [ 481.922098][T10598] netlink: 'syz.3.2023': attribute type 40 has an invalid length. [ 482.451059][T10608] Â: renamed from pim6reg1 [ 482.698376][T10616] netlink: 'syz.0.2028': attribute type 40 has an invalid length. [ 484.617423][T10627] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 484.668770][T10627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.688088][T10644] netlink: 'syz.2.2035': attribute type 40 has an invalid length. [ 484.864796][T10627] syz.1.2032 (10627) used greatest stack depth: 17976 bytes left [ 485.396192][T10660] netlink: 'syz.1.2040': attribute type 40 has an invalid length. [ 485.426293][T10661] netlink: 'syz.2.2041': attribute type 40 has an invalid length. [ 485.453328][T10662] Â: renamed from pim6reg1 [ 486.575922][T10675] netlink: 'syz.2.2046': attribute type 40 has an invalid length. [ 486.653944][T10681] netlink: 'syz.1.2047': attribute type 40 has an invalid length. [ 487.286138][T10692] netlink: 'syz.0.2051': attribute type 40 has an invalid length. [ 487.505364][T10702] netlink: 'syz.1.2064': attribute type 40 has an invalid length. [ 487.541429][T10704] netlink: 'syz.2.2052': attribute type 40 has an invalid length. [ 487.809508][T10703] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 488.041035][T10703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.662451][T10718] netlink: 'syz.2.2056': attribute type 40 has an invalid length. [ 488.690190][T10709] Â: renamed from pim6reg1 [ 488.808858][T10719] netlink: 'syz.4.2057': attribute type 10 has an invalid length. [ 488.830390][T10719] team0: Port device netdevsim0 added [ 488.846365][T10720] netlink: 'syz.1.2058': attribute type 40 has an invalid length. [ 489.614392][T10743] team0: Device hsr_slave_0 failed to register rx_handler [ 490.581250][T10762] validate_nla: 4 callbacks suppressed [ 490.581271][T10762] netlink: 'syz.3.2069': attribute type 40 has an invalid length. [ 491.288420][T10764] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 491.318184][T10764] syzkaller0: linktype set to 773 [ 491.348631][T10769] netlink: 'syz.2.2071': attribute type 10 has an invalid length. [ 491.413225][T10769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 491.668186][T10772] Â: renamed from pim6reg1 [ 492.021137][T10785] netlink: 'syz.2.2076': attribute type 40 has an invalid length. [ 492.577183][T10802] netlink: 'syz.0.2081': attribute type 40 has an invalid length. [ 492.959307][T10805] netlink: 'syz.4.2082': attribute type 40 has an invalid length. [ 493.416063][T10817] netlink: 'syz.1.2085': attribute type 40 has an invalid length. [ 494.886510][T10833] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 494.917986][T10833] syzkaller0: linktype set to 773 [ 495.220643][T10836] netlink: 'syz.4.2090': attribute type 10 has an invalid length. [ 495.788568][T10831] delete_channel: no stack [ 496.238385][T10850] netlink: 'syz.1.2093': attribute type 10 has an invalid length. [ 496.338346][T10850] team0: Port device netdevsim0 added [ 496.578824][T10855] netlink: 'syz.3.2095': attribute type 40 has an invalid length. [ 497.017088][T10864] netlink: 'syz.4.2096': attribute type 40 has an invalid length. [ 497.367305][T10870] netlink: 'syz.2.2100': attribute type 40 has an invalid length. [ 498.442331][T10881] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 498.464618][T10881] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 498.497421][T10885] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 498.541826][T10889] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 498.550411][T10893] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 498.608008][T10881] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 499.143568][T10903] team0: Port device netdevsim0 added [ 500.090371][T10925] Â: renamed from pim6reg1 [ 500.654868][T10933] netlink: 1033 bytes leftover after parsing attributes in process `syz.2.2120'. [ 501.428642][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.435103][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.949830][T10960] validate_nla: 5 callbacks suppressed [ 501.949851][T10960] netlink: 'syz.2.2125': attribute type 10 has an invalid length. [ 502.217623][T10960] bond0: (slave wlan1): Releasing backup interface [ 502.566344][T10975] netlink: 'syz.1.2129': attribute type 40 has an invalid length. [ 502.997770][T10978] Â: renamed from pim6reg1 [ 503.049064][T10984] netlink: 'syz.4.2132': attribute type 40 has an invalid length. [ 503.117061][T10982] netlink: 'syz.2.2131': attribute type 40 has an invalid length. [ 503.729822][T10997] netlink: 'syz.0.2135': attribute type 40 has an invalid length. [ 504.317026][T10999] netlink: 1033 bytes leftover after parsing attributes in process `syz.1.2136'. [ 504.772673][T11009] netlink: 'syz.2.2137': attribute type 13 has an invalid length. [ 504.968638][T11018] netlink: 'syz.1.2143': attribute type 10 has an invalid length. [ 505.700053][T11032] netlink: 'syz.4.2145': attribute type 40 has an invalid length. [ 505.992470][T11040] netlink: 'syz.1.2148': attribute type 40 has an invalid length. [ 506.061479][T11039] netlink: 'syz.2.2147': attribute type 40 has an invalid length. [ 507.336769][T11061] netlink: 'syz.3.2154': attribute type 40 has an invalid length. [ 507.428401][T11065] netlink: 'syz.2.2153': attribute type 40 has an invalid length. [ 507.770352][ T3645] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5 [ 508.105258][T11078] netlink: 'syz.1.2158': attribute type 13 has an invalid length. [ 509.135342][T11091] netlink: 'syz.0.2161': attribute type 40 has an invalid length. [ 509.480849][T11095] netlink: 'syz.2.2162': attribute type 10 has an invalid length. [ 509.513348][T11095] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2162'. [ 509.581055][T11096] netlink: 'syz.2.2162': attribute type 10 has an invalid length. [ 509.651528][T11096] team0: Device hsr_slave_0 failed to register rx_handler [ 509.906011][T11099] netlink: 'syz.4.2163': attribute type 40 has an invalid length. [ 510.043098][T11101] netlink: 'syz.1.2164': attribute type 29 has an invalid length. [ 510.083825][T11101] netlink: 'syz.1.2164': attribute type 29 has an invalid length. [ 510.132860][T11102] netlink: 'syz.1.2164': attribute type 29 has an invalid length. [ 511.197152][T11126] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2169'. [ 512.939107][T11159] validate_nla: 8 callbacks suppressed [ 512.939129][T11159] netlink: 'syz.2.2179': attribute type 40 has an invalid length. [ 513.134428][T11161] netlink: 'syz.0.2178': attribute type 40 has an invalid length. [ 514.119449][T11180] netlink: 'syz.4.2186': attribute type 40 has an invalid length. [ 515.139866][T11198] netlink: 'syz.3.2190': attribute type 40 has an invalid length. [ 515.391466][T11204] netlink: 'syz.4.2191': attribute type 40 has an invalid length. [ 515.936767][T11208] netlink: 'syz.0.2192': attribute type 13 has an invalid length. [ 516.111839][T11214] netlink: 'syz.2.2194': attribute type 40 has an invalid length. [ 516.309315][T11215] netlink: 'syz.3.2195': attribute type 40 has an invalid length. [ 517.269244][T11224] Â: renamed from pim6reg1 [ 518.075456][T11240] netlink: 'syz.4.2203': attribute type 10 has an invalid length. [ 518.128736][T11240] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2203'. [ 518.230756][T11235] netlink: 'syz.2.2202': attribute type 29 has an invalid length. [ 518.262849][T11235] netlink: 'syz.2.2202': attribute type 29 has an invalid length. [ 518.288734][T11241] netlink: 'syz.2.2202': attribute type 29 has an invalid length. [ 518.359525][T11247] netlink: 'syz.2.2202': attribute type 29 has an invalid length. [ 518.431738][T11235] netlink: 'syz.2.2202': attribute type 29 has an invalid length. [ 518.452207][T11239] netlink: 'syz.1.2201': attribute type 40 has an invalid length. [ 518.488503][T11246] netlink: 'syz.0.2205': attribute type 40 has an invalid length. [ 518.506667][T11241] netlink: 'syz.2.2202': attribute type 29 has an invalid length. [ 518.519758][T11235] netlink: 'syz.2.2202': attribute type 29 has an invalid length. [ 520.161724][T11268] Â: renamed from pim6reg1 [ 522.407160][T11314] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2225'. [ 523.354520][T11321] Â: renamed from pim6reg1 [ 523.963038][T11329] validate_nla: 15 callbacks suppressed [ 523.963081][T11329] netlink: 'syz.4.2229': attribute type 13 has an invalid length. [ 525.222627][T11353] netlink: 'syz.2.2235': attribute type 40 has an invalid length. [ 525.655069][T11359] netlink: 'syz.3.2237': attribute type 40 has an invalid length. [ 526.363456][T11368] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2241'. [ 526.625440][T11370] sctp: [Deprecated]: syz.3.2242 (pid 11370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.625440][T11370] Use struct sctp_sack_info instead [ 528.381533][T11386] netlink: 'syz.2.2246': attribute type 29 has an invalid length. [ 528.435972][T11386] netlink: 'syz.2.2246': attribute type 29 has an invalid length. [ 528.505402][T11390] netlink: 'syz.2.2246': attribute type 29 has an invalid length. [ 528.598557][T11393] netlink: 'syz.2.2246': attribute type 29 has an invalid length. [ 528.662882][T11386] netlink: 'syz.2.2246': attribute type 29 has an invalid length. [ 528.736515][T11386] netlink: 'syz.2.2246': attribute type 29 has an invalid length. [ 528.819040][T11390] netlink: 'syz.2.2246': attribute type 29 has an invalid length. [ 529.539894][T11403] netlink: 'syz.1.2250': attribute type 40 has an invalid length. [ 530.023911][T11407] Â: renamed from pim6reg1 [ 530.578861][T11415] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 530.586764][T11415] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2252'. [ 532.363885][T11448] netlink: 'syz.4.2261': attribute type 40 has an invalid length. [ 533.172562][T11460] netlink: 'syz.0.2262': attribute type 40 has an invalid length. [ 533.524427][T11473] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2265'. [ 533.932098][T11481] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2268'. [ 534.637548][T11489] netlink: 'syz.3.2270': attribute type 10 has an invalid length. [ 534.783860][T11495] netlink: 'syz.4.2271': attribute type 29 has an invalid length. [ 534.829206][T11495] netlink: 'syz.4.2271': attribute type 29 has an invalid length. [ 535.001311][T11491] netlink: 'syz.4.2271': attribute type 29 has an invalid length. [ 535.090319][T11491] netlink: 'syz.4.2271': attribute type 29 has an invalid length. [ 535.114165][T11491] netlink: 'syz.4.2271': attribute type 29 has an invalid length. [ 535.171571][T11491] netlink: 'syz.4.2271': attribute type 29 has an invalid length. [ 535.220712][T11495] netlink: 'syz.4.2271': attribute type 29 has an invalid length. [ 535.329909][T11503] netlink: 'syz.3.2275': attribute type 40 has an invalid length. [ 536.507660][T11526] Â: renamed from pim6reg1 [ 536.722569][T11530] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.2282'. [ 537.613147][T11543] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2285'. [ 538.240736][T11550] netlink: 'syz.0.2288': attribute type 29 has an invalid length. [ 539.661245][T11575] Â: renamed from pim6reg1 [ 540.389658][T11588] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2298'. [ 541.163280][T11605] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2303'. [ 542.212951][T11621] validate_nla: 8 callbacks suppressed [ 542.213885][T11621] netlink: 'syz.2.2308': attribute type 40 has an invalid length. [ 542.426432][T11622] netlink: 'syz.3.2307': attribute type 40 has an invalid length. [ 543.436492][T11635] Â: renamed from pim6reg1 [ 544.100636][T11643] Â: renamed from pim6reg1 [ 544.462861][T11651] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.2315'. [ 545.057835][T11666] netlink: 'syz.2.2322': attribute type 40 has an invalid length. [ 545.405518][T11670] netlink: 'syz.0.2323': attribute type 40 has an invalid length. [ 545.594140][T11671] netlink: 'syz.1.2319': attribute type 10 has an invalid length. [ 545.602498][T11671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.610359][T11671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.808276][T11686] netlink: 'syz.0.2329': attribute type 40 has an invalid length. [ 547.138432][T11696] Â: renamed from pim6reg1 [ 547.727407][T11708] device pim6reg1 entered promiscuous mode [ 547.999007][T11713] netlink: 'syz.4.2337': attribute type 40 has an invalid length. [ 549.667492][T11734] netlink: 'syz.3.2339': attribute type 40 has an invalid length. [ 550.107186][T11745] netlink: 'syz.2.2344': attribute type 40 has an invalid length. [ 550.783722][T11758] netlink: 'syz.1.2345': attribute type 40 has an invalid length. [ 550.933079][T11761] Â: renamed from pim6reg1 [ 551.259007][T11770] netlink: 'syz.2.2350': attribute type 40 has an invalid length. [ 551.288636][T11764] delete_channel: no stack [ 551.544064][T11772] device pim6reg1 entered promiscuous mode [ 552.203752][T11783] netlink: 'syz.4.2356': attribute type 10 has an invalid length. [ 552.229344][T11783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.325979][T11783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.617979][T11821] netlink: 'syz.1.2364': attribute type 40 has an invalid length. [ 559.643692][T11824] Â: renamed from pim6reg1 [ 560.247513][T11840] netlink: 'syz.1.2379': attribute type 40 has an invalid length. [ 560.509853][T11830] delete_channel: no stack [ 561.055530][T11851] netlink: 'syz.4.2374': attribute type 10 has an invalid length. [ 561.099401][T11851] bond0: (slave team0): Releasing backup interface [ 561.167782][T11851] batman_adv: batadv0: Adding interface: team0 [ 561.236116][T11851] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.477746][T11851] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 561.489120][T11855] netlink: 'syz.4.2374': attribute type 10 has an invalid length. [ 561.586109][ T3645] Bluetooth: hci6: unexpected subevent 0x1a length: 14 > 6 [ 561.656021][T11855] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2374'. [ 561.786873][T11855] device team0 entered promiscuous mode [ 561.845486][T11855] device team_slave_1 entered promiscuous mode [ 561.851981][T11855] device netdevsim0 entered promiscuous mode [ 561.939917][T11855] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.946908][T11855] batman_adv: batadv0: Interface activated: team0 [ 561.990029][T11855] batman_adv: batadv0: Interface deactivated: team0 [ 561.996720][T11855] batman_adv: batadv0: Removing interface: team0 [ 562.158307][T11855] bridge0: port 4(team0) entered blocking state [ 562.164659][T11855] bridge0: port 4(team0) entered disabled state [ 562.190644][T11855] bridge0: port 4(team0) entered blocking state [ 562.197948][T11855] bridge0: port 4(team0) entered forwarding state [ 562.217887][T11859] netlink: 'syz.0.2372': attribute type 10 has an invalid length. [ 562.225808][T11859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.249013][T11859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.813738][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.820489][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.028181][T11881] netlink: 'syz.4.2383': attribute type 40 has an invalid length. [ 563.501595][ T3645] Bluetooth: hci1: unexpected event 0x48 length: 15 > 3 [ 563.501636][ T3645] Bluetooth: hci1: Malformed Event: 0x48 [ 564.117095][T11900] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2389'. [ 564.660169][T11916] netlink: 'syz.1.2391': attribute type 10 has an invalid length. [ 564.735983][T11916] bond0: (slave team0): Releasing backup interface [ 564.824206][T11916] batman_adv: batadv0: Adding interface: team0 [ 564.849477][T11916] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.894406][T11916] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 564.937848][T11925] netlink: 'syz.0.2390': attribute type 40 has an invalid length. [ 565.004261][T11921] netlink: 'syz.1.2391': attribute type 10 has an invalid length. [ 565.029516][T11921] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2391'. [ 565.062050][T11921] device team0 entered promiscuous mode [ 565.088152][T11921] device team_slave_1 entered promiscuous mode [ 565.115402][T11921] device netdevsim0 entered promiscuous mode [ 565.162649][T11921] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.195473][T11921] batman_adv: batadv0: Interface activated: team0 [ 565.247486][T11921] batman_adv: batadv0: Interface deactivated: team0 [ 565.281635][T11921] batman_adv: batadv0: Removing interface: team0 [ 567.488867][T11957] netlink: 'syz.1.2400': attribute type 40 has an invalid length. [ 568.942889][T11979] netlink: 'syz.4.2406': attribute type 40 has an invalid length. [ 569.378605][T11967] delete_channel: no stack [ 570.079397][T11999] Â: renamed from pim6reg1 [ 570.328997][T12007] netlink: 'syz.3.2414': attribute type 40 has an invalid length. [ 570.972987][ T3645] Bluetooth: hci1: unexpected subevent 0x1a length: 14 > 6 [ 572.048995][T12038] netlink: 'syz.0.2421': attribute type 40 has an invalid length. [ 573.552436][T12051] delete_channel: no stack [ 574.672872][ T3645] Bluetooth: hci2: unexpected event 0x48 length: 15 > 3 [ 574.672917][ T3645] Bluetooth: hci2: Malformed Event: 0x48 [ 576.826416][T12083] netlink: 'syz.1.2432': attribute type 40 has an invalid length. [ 577.153083][T12092] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2436'. [ 577.605403][T12103] netlink: 'syz.1.2437': attribute type 40 has an invalid length. [ 578.222471][T12115] netlink: 'syz.4.2441': attribute type 21 has an invalid length. [ 578.478743][T12108] bond0: (slave geneve0): Error: Slave device does not support XDP [ 579.364375][T12140] netlink: 'syz.0.2447': attribute type 40 has an invalid length. [ 580.607089][T12160] netlink: 'syz.3.2454': attribute type 10 has an invalid length. [ 580.627213][T12160] bond0: (slave bond_slave_0): Releasing backup interface [ 580.695003][T12163] netlink: 'syz.0.2453': attribute type 40 has an invalid length. [ 580.753926][T12166] device pim6reg1 entered promiscuous mode [ 582.073665][T12191] netlink: 'syz.3.2460': attribute type 40 has an invalid length. [ 582.210735][T12198] netlink: 'syz.2.2463': attribute type 40 has an invalid length. [ 582.494545][T12194] Â: renamed from pim6reg1 [ 583.304303][T12224] netlink: 'syz.1.2478': attribute type 40 has an invalid length. [ 583.326273][T12222] netlink: 'syz.4.2469': attribute type 40 has an invalid length. [ 583.370963][T12226] bond0: (slave team0): Error: Slave device does not support XDP [ 585.019972][T12253] netlink: 'syz.3.2474': attribute type 21 has an invalid length. [ 585.043081][T12252] Â: renamed from pim6reg1 [ 585.706747][T12263] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2480'. [ 586.264534][T12280] netlink: 'syz.3.2482': attribute type 40 has an invalid length. [ 586.557342][T12284] netlink: 'syz.2.2485': attribute type 10 has an invalid length. [ 586.604569][T12284] bond0: (slave bond_slave_0): Releasing backup interface [ 587.052998][T12287] bond0: (slave geneve0): Error: Slave device does not support XDP [ 587.838776][T12299] netlink: 'syz.1.2497': attribute type 40 has an invalid length. [ 589.933339][T12330] netlink: 'syz.1.2495': attribute type 21 has an invalid length. [ 590.198626][T12337] netlink: 'syz.4.2499': attribute type 10 has an invalid length. [ 590.341350][T12337] bond0: (slave bond_slave_0): Releasing backup interface [ 590.561470][T12339] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2498'. [ 590.739310][T12342] netlink: 'syz.2.2508': attribute type 40 has an invalid length. [ 590.825587][T12351] netlink: 'syz.0.2501': attribute type 40 has an invalid length. [ 593.684814][T12401] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 594.185557][T12407] netlink: 'syz.4.2517': attribute type 40 has an invalid length. [ 594.394588][T12413] netlink: 'syz.0.2518': attribute type 40 has an invalid length. [ 594.639924][T12417] Â: renamed from pim6reg1 [ 596.664677][T12440] netlink: 'syz.3.2527': attribute type 10 has an invalid length. [ 596.831518][T12446] netlink: 'syz.0.2525': attribute type 21 has an invalid length. [ 596.846491][T12443] netlink: 'syz.2.2528': attribute type 33 has an invalid length. [ 596.872600][T12443] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2528'. [ 597.398852][T12462] netlink: 'syz.4.2532': attribute type 40 has an invalid length. [ 597.851967][T12473] netlink: 'syz.0.2534': attribute type 40 has an invalid length. [ 599.400715][T12491] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.2541'. [ 599.434873][T12492] netlink: 'syz.4.2541': attribute type 10 has an invalid length. [ 599.451178][T12492] team0: Device hsr_slave_0 failed to register rx_handler [ 599.466522][T12491] netlink: 'syz.4.2541': attribute type 1 has an invalid length. [ 599.788533][T12495] netlink: 'syz.3.2542': attribute type 33 has an invalid length. [ 599.901162][T12495] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2542'. [ 600.381526][ T3645] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 601.091068][T12513] netlink: 'syz.4.2546': attribute type 40 has an invalid length. [ 602.430330][ T3655] Bluetooth: hci1: command 0x0406 tx timeout [ 603.511704][T12521] netlink: 'syz.4.2549': attribute type 40 has an invalid length. [ 604.131681][T12539] netlink: 'syz.1.2555': attribute type 33 has an invalid length. [ 604.162302][T12539] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2555'. [ 604.411880][ T3645] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 604.661957][T12555] netlink: 'syz.1.2559': attribute type 40 has an invalid length. [ 605.333803][T12565] netlink: 'syz.4.2564': attribute type 40 has an invalid length. [ 606.428113][ T3645] Bluetooth: hci5: command 0x0406 tx timeout [ 607.235499][T12572] device wg2 left promiscuous mode [ 609.487872][T12586] netlink: 'syz.0.2570': attribute type 33 has an invalid length. [ 609.495819][T12586] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2570'. [ 610.246767][T12612] netlink: 'syz.1.2576': attribute type 40 has an invalid length. [ 610.453507][T12613] Â: renamed from pim6reg1 [ 611.935619][T12642] netlink: 'syz.3.2583': attribute type 40 has an invalid length. [ 612.209416][T12647] netlink: 'syz.2.2586': attribute type 9 has an invalid length. [ 613.160638][T12667] netlink: 'syz.3.2588': attribute type 40 has an invalid length. [ 615.764883][T12672] netlink: 'syz.2.2591': attribute type 40 has an invalid length. [ 616.111855][T12699] netlink: 'syz.1.2598': attribute type 10 has an invalid length. [ 616.155031][T12696] netlink: 'syz.2.2600': attribute type 40 has an invalid length. [ 616.266772][T12700] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.2602'. [ 616.283241][T12700] netlink: 'syz.0.2602': attribute type 1 has an invalid length. [ 616.305276][T12702] netlink: 'syz.0.2602': attribute type 10 has an invalid length. [ 616.318257][T12702] team0: Device hsr_slave_0 failed to register rx_handler [ 617.254006][T12722] netlink: 'syz.1.2606': attribute type 40 has an invalid length. [ 617.724929][T12735] netlink: 'syz.0.2610': attribute type 40 has an invalid length. [ 618.342350][T12741] netlink: 'syz.1.2613': attribute type 8 has an invalid length. [ 618.443401][T12741] netlink: 'syz.1.2613': attribute type 7 has an invalid length. [ 618.487934][T12741] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.2613'. [ 619.017184][T12755] netlink: 'syz.4.2616': attribute type 9 has an invalid length. [ 619.087663][ T3645] Bluetooth: hci2: Malformed Event: 0x02 [ 620.970958][T12792] Â: renamed from pim6reg1 [ 621.175943][T12803] validate_nla: 5 callbacks suppressed [ 621.175994][T12803] netlink: 'syz.0.2629': attribute type 9 has an invalid length. [ 621.297334][ T3645] Bluetooth: hci4: Malformed Event: 0x02 [ 621.860843][T12816] netlink: 'syz.4.2634': attribute type 10 has an invalid length. [ 621.914576][T12818] netlink: 'syz.1.2644': attribute type 40 has an invalid length. [ 622.110537][T12824] netlink: 'syz.0.2635': attribute type 40 has an invalid length. [ 623.319278][T12843] netlink: 'syz.0.2639': attribute type 40 has an invalid length. [ 623.611165][T12849] netlink: 'syz.1.2642': attribute type 40 has an invalid length. [ 623.703746][T12850] Â: renamed from pim6reg1 [ 624.189519][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.195949][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.320725][T12856] netlink: 'syz.1.2645': attribute type 9 has an invalid length. [ 624.472220][T12861] netlink: 'syz.0.2655': attribute type 40 has an invalid length. [ 624.888038][ T3645] Bluetooth: hci1: Malformed Event: 0x02 [ 626.995630][T12872] netlink: 'syz.2.2649': attribute type 40 has an invalid length. [ 627.006268][T12876] netlink: 'syz.0.2650': attribute type 40 has an invalid length. [ 627.337156][T12886] netlink: 'syz.1.2663': attribute type 40 has an invalid length. [ 627.551274][T12893] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 627.795265][T12893] bond0: (slave wlan1): Releasing backup interface [ 628.115734][T12903] netlink: 'syz.4.2657': attribute type 40 has an invalid length. [ 628.292755][T12904] Â: renamed from pim6reg1 [ 628.720234][T12912] netlink: 'syz.0.2661': attribute type 40 has an invalid length. [ 629.072522][T12928] netlink: 'syz.4.2666': attribute type 40 has an invalid length. [ 629.090788][T12919] device veth0_vlan left promiscuous mode [ 629.139623][T12919] device veth0_vlan entered promiscuous mode [ 629.681108][T12941] netlink: 'syz.0.2670': attribute type 40 has an invalid length. [ 630.264726][T12949] Â: renamed from pim6reg1 [ 630.994743][T12963] netlink: 'syz.1.2676': attribute type 40 has an invalid length. [ 631.823937][T12975] netlink: 'syz.0.2680': attribute type 40 has an invalid length. [ 632.164806][T12986] netlink: 'syz.2.2683': attribute type 40 has an invalid length. [ 632.173474][T12981] device veth0_vlan left promiscuous mode [ 632.183462][T12981] device veth0_vlan entered promiscuous mode [ 632.196226][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.208805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 632.217265][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 632.455951][T12992] netlink: 'syz.1.2685': attribute type 40 has an invalid length. [ 632.842811][T12997] Â: renamed from pim6reg1 [ 633.854788][T13012] netlink: 'syz.4.2692': attribute type 40 has an invalid length. [ 637.319946][T13034] netlink: 'syz.2.2697': attribute type 40 has an invalid length. [ 637.328280][T13036] device veth0_vlan left promiscuous mode [ 637.339882][T13036] device veth0_vlan entered promiscuous mode [ 637.367794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.381509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.418463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.788850][T13053] netlink: 'syz.0.2703': attribute type 40 has an invalid length. [ 638.020277][T13061] netlink: 'syz.2.2705': attribute type 40 has an invalid length. [ 638.068478][T13056] Â: renamed from pim6reg1 [ 638.972225][T13079] netlink: 'syz.2.2710': attribute type 40 has an invalid length. [ 640.838644][T13114] netlink: 'syz.2.2722': attribute type 8 has an invalid length. [ 640.846453][T13114] netlink: 'syz.2.2722': attribute type 7 has an invalid length. [ 640.866499][T13114] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2722'. [ 642.279899][T13103] netlink: 'syz.4.2720': attribute type 40 has an invalid length. [ 642.290512][T13111] netlink: 'syz.1.2721': attribute type 40 has an invalid length. [ 643.032215][T13138] netlink: 'syz.2.2729': attribute type 40 has an invalid length. [ 643.755523][T13154] netlink: 'syz.3.2734': attribute type 40 has an invalid length. [ 644.022061][T13157] netlink: 'syz.2.2735': attribute type 40 has an invalid length. [ 644.598829][T13168] Â: renamed from pim6reg1 [ 645.460491][T13191] netlink: 'syz.1.2745': attribute type 40 has an invalid length. [ 645.767399][T13201] netlink: 'syz.4.2749': attribute type 40 has an invalid length. [ 645.984880][T13206] netlink: 'syz.2.2751': attribute type 1 has an invalid length. [ 645.993344][T13206] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2751'. [ 646.427441][T13215] Â: renamed from pim6reg1 [ 646.503871][T13214] netlink: 'syz.3.2752': attribute type 40 has an invalid length. [ 646.906520][T13227] sctp: [Deprecated]: syz.2.2758 (pid 13227) Use of int in maxseg socket option. [ 646.906520][T13227] Use struct sctp_assoc_value instead [ 647.796197][T13242] netlink: 'syz.2.2763': attribute type 40 has an invalid length. [ 648.863942][T13251] netlink: 'syz.2.2765': attribute type 40 has an invalid length. [ 648.942002][T13255] netlink: 'syz.4.2767': attribute type 8 has an invalid length. [ 648.951929][T13255] netlink: 'syz.4.2767': attribute type 7 has an invalid length. [ 648.961073][T13255] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.2767'. [ 649.494825][T13260] Â: renamed from pim6reg1 [ 649.982433][T13274] netlink: 'syz.0.2771': attribute type 40 has an invalid length. [ 649.995426][ T3645] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 650.532901][T13285] netlink: 'syz.1.2776': attribute type 40 has an invalid length. [ 651.521437][T13300] netlink: 'syz.3.2781': attribute type 40 has an invalid length. [ 652.027648][ T3655] Bluetooth: hci1: command 0x0406 tx timeout [ 652.142908][ T3655] Bluetooth: hci6: unexpected event 0x05 length: 15 > 4 [ 652.286804][T13307] Â: renamed from pim6reg1 [ 652.935714][T13334] sctp: [Deprecated]: syz.1.2791 (pid 13334) Use of int in maxseg socket option. [ 652.935714][T13334] Use struct sctp_assoc_value instead [ 652.953189][T13331] netlink: 'syz.0.2789': attribute type 40 has an invalid length. [ 653.146810][T13341] netlink: 'syz.3.2792': attribute type 40 has an invalid length. [ 653.230030][T13343] netlink: 'syz.4.2793': attribute type 40 has an invalid length. [ 654.241998][T13360] netlink: 'syz.3.2797': attribute type 40 has an invalid length. [ 654.405966][T13366] Â: renamed from pim6reg1 [ 655.053201][T13369] netlink: 'syz.4.2801': attribute type 1 has an invalid length. [ 655.078104][T13369] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2801'. [ 656.187426][T13391] netlink: 'syz.2.2806': attribute type 40 has an invalid length. [ 656.363754][T13400] netlink: 'syz.3.2808': attribute type 40 has an invalid length. [ 656.439582][T13402] netlink: 'syz.4.2809': attribute type 40 has an invalid length. [ 656.940391][ T3655] Bluetooth: hci6: unexpected event 0x04 length: 15 > 10 [ 657.481481][T13417] netlink: 'syz.4.2814': attribute type 40 has an invalid length. [ 657.535775][T13418] netlink: 'syz.2.2813': attribute type 40 has an invalid length. [ 657.551141][ T3645] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 658.830502][T13453] netlink: 'syz.4.2821': attribute type 40 has an invalid length. [ 658.988089][ T3655] Bluetooth: hci6: command 0x0406 tx timeout [ 659.004682][T13456] netlink: 'syz.2.2823': attribute type 27 has an invalid length. [ 659.024668][T13456] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2823'. [ 659.162630][ T3655] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 659.340522][T13466] netlink: 'syz.1.2826': attribute type 40 has an invalid length. [ 659.627870][ T3645] Bluetooth: hci5: command 0x0406 tx timeout [ 659.731902][T13468] netlink: 'syz.3.2824': attribute type 40 has an invalid length. [ 660.153752][T13479] netlink: 'syz.0.2840': attribute type 27 has an invalid length. [ 660.189315][ T3645] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 660.190255][T13479] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2840'. [ 660.354449][T13487] netlink: 'syz.1.2832': attribute type 40 has an invalid length. [ 660.460579][T13489] netlink: 'syz.2.2831': attribute type 40 has an invalid length. [ 661.227851][ T3655] Bluetooth: hci2: command 0x0406 tx timeout [ 662.267685][ T3655] Bluetooth: hci4: command 0x0406 tx timeout [ 664.530702][T13520] netlink: 'syz.4.2839': attribute type 40 has an invalid length. [ 664.539063][T13521] netlink: 'syz.3.2841': attribute type 40 has an invalid length. [ 665.089148][T13532] netlink: 'syz.2.2844': attribute type 40 has an invalid length. [ 665.293081][T13535] netlink: 'syz.4.2847': attribute type 40 has an invalid length. [ 665.886107][T13543] netlink: 'syz.1.2849': attribute type 40 has an invalid length. [ 666.173855][ T3655] Bluetooth: hci6: Malformed LE Event: 0x0d [ 666.813932][ T3655] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 667.202739][T13563] netlink: 'syz.4.2854': attribute type 40 has an invalid length. [ 667.607046][T13574] netlink: 'syz.2.2856': attribute type 40 has an invalid length. [ 668.162750][T13586] netlink: 'syz.4.2860': attribute type 40 has an invalid length. [ 668.239678][T13585] netlink: 'syz.1.2861': attribute type 40 has an invalid length. [ 668.346798][T13588] netlink: 'syz.0.2863': attribute type 40 has an invalid length. [ 668.598718][T13590] device hsr_slave_0 left promiscuous mode [ 668.827846][ T3645] Bluetooth: hci1: command 0x0406 tx timeout [ 669.803776][ T3645] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 670.794263][T13622] validate_nla: 1 callbacks suppressed [ 670.794368][T13622] netlink: 'syz.1.2871': attribute type 40 has an invalid length. [ 671.137298][T13637] netlink: 'syz.3.2877': attribute type 40 has an invalid length. [ 671.194879][T13638] netlink: 'syz.2.2874': attribute type 40 has an invalid length. [ 671.482574][T13643] netlink: 'syz.1.2878': attribute type 40 has an invalid length. [ 671.867786][ T3655] Bluetooth: hci5: command 0x0406 tx timeout [ 675.704666][T13674] netlink: 'syz.3.2888': attribute type 40 has an invalid length. [ 676.110926][T13685] netlink: 'syz.1.2892': attribute type 40 has an invalid length. [ 676.164750][T13692] netlink: 'syz.4.2893': attribute type 40 has an invalid length. [ 676.600306][T13696] netlink: 'syz.2.2895': attribute type 40 has an invalid length. [ 677.361469][T13715] netlink: 'syz.1.2903': attribute type 10 has an invalid length. [ 677.478232][T13715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.508773][T13715] device batadv0 entered promiscuous mode [ 677.525786][T13715] team0: Port device batadv0 added [ 677.807744][T13721] netlink: 'syz.2.2904': attribute type 40 has an invalid length. [ 678.663265][T13735] netlink: 'syz.0.2908': attribute type 40 has an invalid length. [ 678.975401][T13738] netlink: 'syz.3.2911': attribute type 40 has an invalid length. [ 679.233506][T13745] netlink: 'syz.1.2912': attribute type 40 has an invalid length. [ 679.820694][T13752] netlink: 'syz.4.2916': attribute type 4 has an invalid length. [ 679.869951][T13752] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2916'. [ 680.894295][T13776] netlink: 'syz.0.2925': attribute type 40 has an invalid length. [ 681.265847][T13791] validate_nla: 1 callbacks suppressed [ 681.265864][T13791] netlink: 'syz.3.2927': attribute type 40 has an invalid length. [ 681.948431][T13802] netlink: 'syz.0.2930': attribute type 40 has an invalid length. [ 683.209554][T13824] netlink: 'syz.0.2940': attribute type 40 has an invalid length. [ 683.546366][T13831] netlink: 'syz.4.2943': attribute type 40 has an invalid length. [ 683.607726][T13835] netlink: 'syz.1.2946': attribute type 4 has an invalid length. [ 683.623441][T13835] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2946'. [ 684.248982][T13845] netlink: 'syz.2.2948': attribute type 40 has an invalid length. [ 684.477129][T13850] netlink: 'syz.3.2950': attribute type 40 has an invalid length. [ 684.982029][T13866] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 685.068369][T13866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.139996][T13866] device batadv0 entered promiscuous mode [ 685.147082][T13866] team0: Port device batadv0 added [ 685.593259][ T1198] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 685.603023][ T1198] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 685.767776][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.774266][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.012319][T13877] netlink: 'syz.2.2961': attribute type 40 has an invalid length. [ 686.380201][T13895] netlink: 'syz.0.2967': attribute type 4 has an invalid length. [ 686.393689][T13895] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2967'. [ 686.703768][T13901] netlink: 'syz.2.2969': attribute type 40 has an invalid length. [ 686.812658][T13907] device macvlan0 entered promiscuous mode [ 687.056115][T13911] netlink: 'syz.3.2971': attribute type 40 has an invalid length. [ 687.792996][T13925] netlink: 'syz.2.2978': attribute type 10 has an invalid length. [ 688.214931][T13935] netlink: 'syz.1.2980': attribute type 40 has an invalid length. [ 691.188207][T13955] netlink: 'syz.4.2989': attribute type 40 has an invalid length. [ 691.196258][T13954] netlink: 'syz.2.2988': attribute type 40 has an invalid length. [ 691.945833][T13984] netlink: 'syz.2.2995': attribute type 40 has an invalid length. [ 692.465387][T13996] netlink: 'syz.1.3002': attribute type 40 has an invalid length. [ 692.902247][T14004] netlink: 'syz.2.3005': attribute type 40 has an invalid length. [ 693.611243][T14015] netlink: 'syz.4.3017': attribute type 40 has an invalid length. [ 697.295351][T14050] netlink: 'syz.2.3021': attribute type 40 has an invalid length. [ 697.739469][T14072] netlink: 'syz.4.3026': attribute type 40 has an invalid length. [ 697.873678][T14077] netlink: 'syz.1.3031': attribute type 40 has an invalid length. [ 698.114236][T14074] Â: renamed from pim6reg1 [ 698.359776][T14084] netlink: 'syz.3.3034': attribute type 10 has an invalid length. [ 698.493389][T14084] team0: Device ipvlan1 failed to register rx_handler [ 699.054661][T14090] netlink: 'syz.0.3035': attribute type 40 has an invalid length. [ 699.211991][T14099] netlink: 'syz.1.3040': attribute type 10 has an invalid length. [ 699.323883][T14103] netlink: 'syz.3.3041': attribute type 10 has an invalid length. [ 699.335330][T14103] device macvlan0 entered promiscuous mode [ 699.378529][T14103] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 699.938842][T14118] netlink: 'syz.3.3047': attribute type 40 has an invalid length. [ 699.979126][T14120] netlink: 'syz.4.3046': attribute type 40 has an invalid length. [ 700.834035][T14141] netlink: 'syz.3.3055': attribute type 10 has an invalid length. [ 700.896456][T14141] bond0: (slave team0): Releasing backup interface [ 701.191639][T14152] device macvlan0 entered promiscuous mode [ 701.247511][T14152] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 702.360743][T14176] validate_nla: 4 callbacks suppressed [ 702.360765][T14176] netlink: 'syz.4.3070': attribute type 10 has an invalid length. [ 702.905621][T14190] netlink: 'syz.4.3075': attribute type 10 has an invalid length. [ 702.938063][T14190] device macvlan0 entered promiscuous mode [ 703.140562][T14196] netlink: 'syz.2.3077': attribute type 40 has an invalid length. [ 703.254093][T14202] netlink: 'syz.4.3081': attribute type 10 has an invalid length. [ 703.263499][T14202] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 703.436763][T14203] netlink: 'syz.0.3080': attribute type 40 has an invalid length. [ 703.913014][T14211] netlink: 'syz.2.3083': attribute type 10 has an invalid length. [ 703.944040][T14211] bond0: (slave team0): Releasing backup interface [ 704.077340][T14214] netlink: 'syz.1.3094': attribute type 40 has an invalid length. [ 704.464605][T14228] netlink: 'syz.2.3093': attribute type 29 has an invalid length. [ 704.487941][T14228] netlink: 'syz.2.3093': attribute type 29 has an invalid length. [ 704.526480][T14230] netlink: 'syz.2.3093': attribute type 29 has an invalid length. [ 704.916238][T14233] Â: renamed from pim6reg1 [ 706.241830][T14269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3108'. [ 707.141620][T14288] Â: renamed from pim6reg1 [ 708.376473][T14323] validate_nla: 2 callbacks suppressed [ 708.376497][T14323] netlink: 'syz.1.3126': attribute type 40 has an invalid length. [ 708.496368][T14327] Â: renamed from pim6reg1 [ 709.446784][T14357] Â: renamed from pim6reg1 [ 710.721856][T14388] netlink: 'syz.1.3157': attribute type 40 has an invalid length. [ 710.985299][T14400] Â: renamed from pim6reg1 [ 712.506454][T14429] Â: renamed from pim6reg1 [ 712.932513][T14432] netlink: 'syz.3.3175': attribute type 40 has an invalid length. [ 713.267257][T14441] netlink: 'syz.1.3179': attribute type 15 has an invalid length. [ 713.283810][T14441] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3179'. [ 714.690420][T14467] netlink: 'syz.2.3186': attribute type 40 has an invalid length. [ 714.902507][T14471] netlink: 'syz.4.3188': attribute type 21 has an invalid length. [ 714.982834][T14471] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3188'. [ 715.048574][T14471] netlink: 'syz.4.3188': attribute type 4 has an invalid length. [ 715.749467][T14489] Â: renamed from pim6reg1 [ 716.971668][T14512] netlink: 'syz.3.3204': attribute type 40 has an invalid length. [ 717.035216][T14515] netlink: 'syz.2.3206': attribute type 21 has an invalid length. [ 717.074961][T14515] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3206'. [ 717.103062][T14515] netlink: 'syz.2.3206': attribute type 4 has an invalid length. [ 718.002979][T14538] Â: renamed from pim6reg1 [ 718.942725][T14558] netlink: 'syz.2.3220': attribute type 40 has an invalid length. [ 718.985683][T14561] netlink: 'syz.3.3222': attribute type 21 has an invalid length. [ 719.040627][T14561] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3222'. [ 719.153484][T14561] netlink: 'syz.3.3222': attribute type 4 has an invalid length. [ 720.514855][T14586] Â: renamed from pim6reg1 [ 720.804959][T14596] Â: renamed from pim6reg1 [ 721.459317][T14610] netlink: 'syz.3.3239': attribute type 40 has an invalid length. [ 721.794098][T14616] netlink: 'syz.4.3241': attribute type 40 has an invalid length. [ 723.010203][T14641] netlink: 'syz.0.3251': attribute type 21 has an invalid length. [ 723.038712][T14641] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3251'. [ 723.072929][T14641] netlink: 'syz.0.3251': attribute type 4 has an invalid length. [ 723.251267][T14647] netlink: 'syz.4.3255': attribute type 40 has an invalid length. [ 724.123288][T14662] netlink: 'syz.0.3261': attribute type 40 has an invalid length. [ 725.236561][T14693] netlink: 'syz.4.3274': attribute type 40 has an invalid length. [ 725.387289][T14696] netlink: 'syz.0.3275': attribute type 40 has an invalid length. [ 726.053516][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.132136][T14700] device bridge_slave_0 left promiscuous mode [ 726.139082][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.442505][T14708] netlink: 'syz.0.3279': attribute type 40 has an invalid length. [ 726.618664][T14712] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3282'. [ 727.308315][T14731] netlink: 'syz.0.3289': attribute type 40 has an invalid length. [ 727.718986][T14744] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3295'. [ 727.836587][T14748] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3294'. [ 728.342522][T14760] netlink: 'syz.1.3300': attribute type 40 has an invalid length. [ 728.996101][T14785] netlink: 'syz.4.3312': attribute type 46 has an invalid length. [ 729.092416][T14786] netlink: 'syz.2.3311': attribute type 40 has an invalid length. [ 729.344175][T14796] netlink: 'syz.1.3313': attribute type 40 has an invalid length. [ 730.506848][T14825] netlink: 'syz.1.3324': attribute type 40 has an invalid length. [ 731.157976][T14838] netlink: 'syz.2.3330': attribute type 40 has an invalid length. [ 731.716955][T14854] netlink: 'syz.3.3344': attribute type 40 has an invalid length. [ 731.766939][T14853] netlink: 'syz.1.3334': attribute type 40 has an invalid length. [ 732.762822][T14868] netlink: 'syz.0.3347': attribute type 40 has an invalid length. [ 732.805143][T14869] Â: renamed from pim6reg1 [ 734.073615][T14905] Â: renamed from pim6reg1 [ 734.633735][T14927] netlink: 'syz.1.3364': attribute type 40 has an invalid length. [ 734.873788][T14935] netlink: 'syz.0.3368': attribute type 40 has an invalid length. [ 735.851617][T14951] Â: renamed from pim6reg1 [ 736.623502][T14986] netlink: 'syz.1.3388': attribute type 40 has an invalid length. [ 737.511231][T15011] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3401'. [ 737.537901][T15011] netlink: 'syz.3.3401': attribute type 8 has an invalid length. [ 737.552609][T14999] Â: renamed from pim6reg1 [ 738.349409][T15037] netlink: 'syz.1.3409': attribute type 46 has an invalid length. [ 738.937289][T15053] Â: renamed from pim6reg1 [ 738.947115][T15052] netlink: 'syz.3.3414': attribute type 40 has an invalid length. [ 739.074714][T15055] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3417'. [ 739.470159][T15070] netlink: 'syz.0.3422': attribute type 46 has an invalid length. [ 740.440947][T15091] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3428'. [ 740.458022][T15091] netlink: 'syz.0.3428': attribute type 8 has an invalid length. [ 740.862947][T15095] Â: renamed from pim6reg1 [ 740.909999][T15105] netlink: 'syz.4.3434': attribute type 46 has an invalid length. [ 741.278246][T15111] netlink: 'syz.4.3435': attribute type 40 has an invalid length. [ 741.515921][T15121] netlink: 'syz.3.3439': attribute type 40 has an invalid length. [ 742.758242][T15151] Â: renamed from pim6reg1 [ 743.159244][T15160] netlink: 'syz.0.3453': attribute type 33 has an invalid length. [ 743.185805][T15160] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3453'. [ 744.063995][T15179] netlink: 'syz.2.3457': attribute type 40 has an invalid length. [ 744.496049][T15185] netlink: 'syz.3.3459': attribute type 3 has an invalid length. [ 744.504854][T15185] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.3459'. [ 744.884715][T15197] tap0: tun_chr_ioctl cmd 1074812118 [ 745.010687][T15199] netlink: 'syz.4.3465': attribute type 3 has an invalid length. [ 745.105548][T15199] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3465'. [ 745.618254][T15215] netlink: 'syz.4.3472': attribute type 33 has an invalid length. [ 745.626285][T15215] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3472'. [ 745.845697][T15223] netlink: 'syz.3.3473': attribute type 40 has an invalid length. [ 746.541155][T15237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3489'. [ 746.570903][T15237] netlink: 'syz.0.3489': attribute type 1 has an invalid length. [ 746.652688][T15240] tap0: tun_chr_ioctl cmd 1074812118 [ 746.830472][T15245] netlink: 'syz.2.3482': attribute type 3 has an invalid length. [ 746.861540][T15245] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3482'. [ 746.993663][T15250] netlink: 'syz.3.3492': attribute type 40 has an invalid length. [ 747.071160][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.077780][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.236512][T15270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3493'. [ 748.842996][T15279] tap0: tun_chr_ioctl cmd 1074812118 [ 749.518358][T15296] netlink: 'syz.4.3502': attribute type 40 has an invalid length. [ 751.509868][T15350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3521'. [ 753.028370][T15377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 753.038665][T15377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 753.057282][T15377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 753.067030][T15377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 753.077297][T15377] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 753.086047][T15377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 753.117399][T15376] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3533'. [ 753.422337][T15379] Â: renamed from pim6reg1 [ 753.481052][T15377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 753.494516][T15377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 753.502746][T15377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 753.515076][T15377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 753.523916][T15377] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 753.539110][T15377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.672667][ T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.704596][T15373] chnl_net:caif_netlink_parms(): no params data found [ 753.783447][ T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.846097][T15373] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.858438][T15373] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.866826][T15373] device bridge_slave_0 entered promiscuous mode [ 753.877162][T15373] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.884920][T15373] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.894426][T15373] device bridge_slave_1 entered promiscuous mode [ 753.943928][ T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.983391][T15373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.997806][T15373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.042542][ T32] device netdevsim0 left promiscuous mode [ 754.056517][ T32] team0: Port device netdevsim0 removed [ 754.071387][ T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.091152][T15373] team0: Port device team_slave_0 added [ 754.101518][T15373] team0: Port device team_slave_1 added [ 754.138554][T15385] chnl_net:caif_netlink_parms(): no params data found [ 754.155157][T15373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.172733][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.200335][T15373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.215804][T15373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.223390][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.251436][T15373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.653205][T15373] device hsr_slave_0 entered promiscuous mode [ 754.673836][T15373] device hsr_slave_1 entered promiscuous mode [ 754.691273][T15373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.712967][T15373] Cannot create hsr debugfs directory [ 755.147748][ T3655] Bluetooth: hci0: command tx timeout [ 755.215552][T15385] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.235704][T15385] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.263308][T15385] device bridge_slave_0 entered promiscuous mode [ 755.320387][ T32] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.354278][T15385] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.377884][T15385] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.386553][T15385] device bridge_slave_1 entered promiscuous mode [ 755.522652][ T32] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.583303][T15418] netlink: 'syz.3.3541': attribute type 40 has an invalid length. [ 755.627849][ T3655] Bluetooth: hci3: command tx timeout [ 755.639726][ T32] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.658576][T15385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.679268][T15385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.717687][ T32] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.776427][T15385] team0: Port device team_slave_0 added [ 755.786655][T15385] team0: Port device team_slave_1 added [ 755.847680][T15385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.854700][T15385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.905662][T15385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.968525][T15385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.986357][T15385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.019483][T15385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.180064][T15385] device hsr_slave_0 entered promiscuous mode [ 756.209494][T15385] device hsr_slave_1 entered promiscuous mode [ 756.218927][T15430] netlink: 'syz.3.3545': attribute type 29 has an invalid length. [ 756.226988][T15385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.235793][T15385] Cannot create hsr debugfs directory [ 756.250626][T15430] netlink: 'syz.3.3545': attribute type 29 has an invalid length. [ 756.350604][T15430] netlink: 'syz.3.3545': attribute type 29 has an invalid length. [ 757.227620][ T3655] Bluetooth: hci0: command tx timeout [ 757.707967][ T3655] Bluetooth: hci3: command tx timeout [ 758.048429][T15470] netlink: 'syz.3.3553': attribute type 40 has an invalid length. [ 758.131034][T15476] netlink: 'syz.0.3555': attribute type 29 has an invalid length. [ 758.276171][T15476] netlink: 'syz.0.3555': attribute type 29 has an invalid length. [ 758.319099][T15478] netlink: 'syz.0.3555': attribute type 29 has an invalid length. [ 758.502193][T15385] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 758.691754][T15385] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 758.726824][T15385] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 758.792589][T15385] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 759.031028][ T3655] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 759.225874][T15373] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 759.310841][ T3655] Bluetooth: hci0: command tx timeout [ 759.340232][T15373] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 759.378890][T15373] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 759.405377][T15373] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 759.454576][ T32] device hsr_slave_0 left promiscuous mode [ 759.490821][ T32] device hsr_slave_1 left promiscuous mode [ 759.501147][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.580585][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.614587][ T32] bridge0: port 4(team0) entered disabled state [ 759.754454][ T32] device macsec0 left promiscuous mode [ 759.761116][ T32] bridge0: port 3(macsec0) entered disabled state [ 759.769389][ T32] device bridge_slave_1 left promiscuous mode [ 759.775663][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.790717][ T3655] Bluetooth: hci3: command tx timeout [ 759.797606][ T32] device hsr_slave_1 left promiscuous mode [ 759.843804][ T32] device veth0_macvtap left promiscuous mode [ 759.853155][ T32] device veth1_vlan left promiscuous mode [ 759.862852][ T32] device veth0_vlan left promiscuous mode [ 759.880077][ T32] device veth1_vlan left promiscuous mode [ 759.886145][ T32] device veth0_vlan left promiscuous mode [ 760.083961][ T32] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 760.283279][ T32] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 760.556887][ T32] device team_slave_1 left promiscuous mode [ 760.571330][ T32] team0 (unregistering): Port device team_slave_1 removed [ 760.651561][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.838371][ T32] device batadv0 left promiscuous mode [ 760.845189][ T32] team0 (unregistering): Port device batadv0 removed [ 761.107137][ T32] bond0 (unregistering): Released all slaves [ 761.214984][ T32] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 761.260296][ T32] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 761.387610][ T3655] Bluetooth: hci0: command tx timeout [ 761.494661][ T32] team0 (unregistering): Port device team_slave_1 removed [ 761.567986][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.867736][ T3655] Bluetooth: hci3: command tx timeout [ 762.045039][ T32] bond0 (unregistering): Released all slaves [ 762.101639][T15520] netlink: 'syz.0.3565': attribute type 40 has an invalid length. [ 762.233320][T15385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.292433][T15385] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.330700][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 762.346536][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 762.366703][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 762.405202][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 762.419997][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.427245][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.442730][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 762.468054][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 762.492418][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.499610][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.562845][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 762.585912][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 762.647713][T15544] netlink: 'syz.1.3568': attribute type 29 has an invalid length. [ 762.657367][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 762.684354][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 762.723473][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 762.754458][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 762.783498][T15544] netlink: 'syz.1.3568': attribute type 29 has an invalid length. [ 762.828026][T15547] netlink: 'syz.1.3568': attribute type 29 has an invalid length. [ 762.886091][T15373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.900389][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 762.909524][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 762.939731][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 762.949125][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 762.958203][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 762.966708][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 762.978257][T15385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 763.008554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 763.018153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 763.066792][T15377] Bluetooth: hci5: unexpected event 0x30 length: 15 > 3 [ 763.084338][T15373] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.135522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 763.155126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 763.189170][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.196368][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.236202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 763.255371][T15558] tap0: tun_chr_ioctl cmd 1074025677 [ 763.262389][T15558] tap0: linktype set to 823 [ 763.273358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 763.306235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 763.356916][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.364260][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.413988][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 763.488769][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 763.500904][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 763.530615][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 763.576399][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 763.608800][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 763.618865][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 763.629220][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 763.638792][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 763.674516][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 763.683551][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 763.700261][T15373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 763.758470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 763.773715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 763.821567][T15385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.110601][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 764.132578][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 764.146591][T15578] netlink: 'syz.3.3574': attribute type 3 has an invalid length. [ 764.162590][T15373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.170626][T15578] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3574'. [ 764.214926][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 764.239027][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 764.287184][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 764.302463][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 764.331659][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 764.368521][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 764.407693][T15373] device veth0_vlan entered promiscuous mode [ 764.425802][T15373] device veth1_vlan entered promiscuous mode [ 764.483243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 764.504226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 764.526363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 764.555982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 764.575031][T15373] device veth0_macvtap entered promiscuous mode [ 764.611686][T15373] device veth1_macvtap entered promiscuous mode [ 764.646116][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 764.657338][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 764.674839][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 764.691374][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 764.731508][T15373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.758949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 764.779243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 764.811458][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.837475][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.869233][T15373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.911218][T15373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.933916][T15377] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 764.953172][T15373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.972876][T15385] device veth0_vlan entered promiscuous mode [ 765.000658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 765.013811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 765.032254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 765.043192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 765.075475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 765.093348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 765.110779][T15373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.145142][T15373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.154189][T15373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.162983][T15373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.178650][T15385] device veth1_vlan entered promiscuous mode [ 765.190505][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 765.329427][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 765.380474][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 765.589311][T15385] device veth0_macvtap entered promiscuous mode [ 765.605011][T15602] Â: renamed from pim6reg1 [ 765.613936][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.638349][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.639277][T15385] device veth1_macvtap entered promiscuous mode [ 765.667279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 765.675907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 765.685994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 765.723268][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.726237][T15385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.745420][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.753489][T15385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.771082][T15385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.787561][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 765.802235][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 765.812287][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 765.849565][T15385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.877095][T15385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.887094][T15385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.897913][T15385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.907891][T15385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.918525][T15385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.976440][T15385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.022002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 766.068562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 766.113482][T15385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.122572][T15385] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.133747][T15385] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.143025][T15385] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.320306][ T3707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.338211][T15620] netlink: 'syz.2.3590': attribute type 3 has an invalid length. [ 766.364649][T15620] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3590'. [ 766.381695][ T3707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.407253][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 766.436790][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.449412][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.463211][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 766.892389][T15634] tap0: tun_chr_ioctl cmd 1074025677 [ 766.906195][T15634] tap0: linktype set to 823 [ 767.565996][T15639] Â: renamed from pim6reg1 [ 767.861506][T15654] netlink: 'syz.4.3602': attribute type 3 has an invalid length. [ 767.879887][T15654] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3602'. [ 769.345769][T15690] Â: renamed from pim6reg1 [ 769.700225][T15709] Â: renamed from pim6reg1 [ 770.385092][T15733] netlink: 'syz.4.3632': attribute type 13 has an invalid length. [ 770.397744][T15733] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3632'. [ 771.085687][T15748] Â: renamed from pim6reg1 [ 772.094888][T15778] Â: renamed from pim6reg1 [ 772.971411][T15793] netlink: 'syz.1.3655': attribute type 40 has an invalid length. [ 777.317674][T15819] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3669'. [ 777.405133][T15824] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3680'. [ 779.381188][T15837] netlink: 'syz.3.3675': attribute type 40 has an invalid length. [ 783.088811][T15879] netlink: 'syz.3.3694': attribute type 40 has an invalid length. [ 783.140216][T15377] Bluetooth: hci0: Malformed LE Event: 0x1d [ 783.311565][T15895] netlink: 'syz.2.3702': attribute type 10 has an invalid length. [ 783.440986][T15895] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.530378][T15895] bond0: (slave team0): Enslaving as an active interface with an up link [ 784.086263][T15895] netlink: 'syz.2.3702': attribute type 10 has an invalid length. [ 784.298593][T15895] bond0: (slave team0): Releasing backup interface [ 784.376069][T15895] bridge0: port 3(team0) entered blocking state [ 784.415798][T15895] bridge0: port 3(team0) entered disabled state [ 784.456630][T15895] device team0 entered promiscuous mode [ 784.608249][T15895] device team_slave_0 entered promiscuous mode [ 784.759422][T15895] device team_slave_1 entered promiscuous mode [ 784.861221][T15905] Â: renamed from pim6reg1 [ 785.922316][T15933] netlink: 'syz.3.3714': attribute type 40 has an invalid length. [ 808.519477][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.526028][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.949459][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.955906][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.147523][T15949] Bluetooth: hci3: command 0x0406 tx timeout [ 877.147603][ T3655] Bluetooth: hci0: command 0x0406 tx timeout [ 931.399168][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.405729][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.347625][ T27] INFO: task syz.1.3706:15903 blocked for more than 143 seconds. [ 940.355493][ T27] Not tainted 6.1.112-syzkaller #0 [ 940.417443][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.426189][ T27] task:syz.1.3706 state:D stack:25832 pid:15903 ppid:3642 flags:0x00004000 [ 940.537448][ T27] Call Trace: [ 940.540788][ T27] [ 940.543743][ T27] __schedule+0x143f/0x4570 [ 940.627480][ T27] ? release_firmware_map_entry+0x186/0x186 [ 940.633450][ T27] ? __mutex_unlock_slowpath+0x218/0x750 [ 940.707499][ T27] ? task_work_cancel_func+0x2b0/0x2b0 [ 940.713050][ T27] ? _free_event+0xf5/0x1090 [ 940.777418][ T27] schedule+0xbf/0x180 [ 940.781568][ T27] _free_event+0x169/0x1090 [ 940.786121][ T27] perf_event_release_kernel+0x873/0x900 [ 940.878464][ T27] ? calc_timer_values+0x420/0x420 [ 940.883651][ T27] ? ima_file_free+0xe8/0x3c0 [ 940.957435][ T27] perf_release+0x37/0x40 [ 940.961855][ T27] ? perf_mmap+0x13e0/0x13e0 [ 940.966513][ T27] __fput+0x3f6/0x8d0 [ 941.057451][ T27] task_work_run+0x246/0x300 [ 941.062116][ T27] ? ct_nmi_exit+0x13f/0x1c0 [ 941.066764][ T27] ? task_work_cancel+0x2e0/0x2e0 [ 941.167454][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 941.172993][ T27] exit_to_user_mode_loop+0xde/0x100 [ 941.257443][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 941.263191][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 941.337421][ T27] do_syscall_64+0x47/0xb0 [ 941.342032][ T27] ? clear_bhb_loop+0x45/0xa0 [ 941.346754][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.428510][ T27] RIP: 0033:0x7f8fa637dff9 [ 941.433000][ T27] RSP: 002b:00007ffeb6410528 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 941.538500][ T27] RAX: 0000000000000000 RBX: 00007f8fa6537a80 RCX: 00007f8fa637dff9 [ 941.546755][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 941.648499][ T27] RBP: 00007f8fa6537a80 R08: 00007f8fa6522000 R09: 00007ffeb641081f [ 941.656552][ T27] R10: 00000000003fe538 R11: 0000000000000246 R12: 00000000000bfb57 [ 941.767559][ T27] R13: 00007ffeb6410630 R14: 0000000000000032 R15: ffffffffffffffff [ 941.775624][ T27] [ 941.861929][ T27] INFO: task syz.2.3707:15914 blocked for more than 144 seconds. [ 941.937479][ T27] Not tainted 6.1.112-syzkaller #0 [ 941.943174][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 942.052234][ T27] task:syz.2.3707 state:D stack:25832 pid:15914 ppid:15373 flags:0x00004000 [ 942.117475][ T27] Call Trace: [ 942.120817][ T27] [ 942.123776][ T27] __schedule+0x143f/0x4570 [ 942.227432][ T27] ? release_firmware_map_entry+0x186/0x186 [ 942.233413][ T27] ? __mutex_unlock_slowpath+0x218/0x750 [ 942.321878][ T27] ? task_work_cancel_func+0x2b0/0x2b0 [ 942.387411][ T27] ? _free_event+0xf5/0x1090 [ 942.395440][ T27] schedule+0xbf/0x180 [ 942.477477][ T27] _free_event+0x169/0x1090 [ 942.482082][ T27] perf_event_release_kernel+0x873/0x900 [ 942.547454][ T27] ? calc_timer_values+0x420/0x420 [ 942.552967][ T27] ? ima_file_free+0xe8/0x3c0 [ 942.627436][ T27] perf_release+0x37/0x40 [ 942.631860][ T27] ? perf_mmap+0x13e0/0x13e0 [ 942.636506][ T27] __fput+0x3f6/0x8d0 [ 942.727549][ T27] task_work_run+0x246/0x300 [ 942.732239][ T27] ? task_work_cancel+0x2e0/0x2e0 [ 942.737312][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 942.807429][ T27] exit_to_user_mode_loop+0xde/0x100 [ 942.812802][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 942.913430][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 942.962250][ T27] do_syscall_64+0x47/0xb0 [ 942.966743][ T27] ? clear_bhb_loop+0x45/0xa0 [ 943.042553][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.083520][ T27] RIP: 0033:0x7f48c917dff9 [ 943.117483][ T27] RSP: 002b:00007ffd69c7e3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 943.125979][ T27] RAX: 0000000000000000 RBX: 00007f48c9337a80 RCX: 00007f48c917dff9 [ 943.257479][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 943.265523][ T27] RBP: 00007f48c9337a80 R08: 00007f48c9322000 R09: 00007ffd69c7e6cf [ 943.382963][ T27] R10: 00000000003ff1f0 R11: 0000000000000246 R12: 00000000000bfe04 [ 943.457504][ T27] R13: 00007ffd69c7e4e0 R14: 0000000000000032 R15: ffffffffffffffff [ 943.465569][ T27] [ 943.552531][ T27] [ 943.552531][ T27] Showing all locks held in the system: [ 943.617512][ T27] 1 lock held by rcu_tasks_kthre/12: [ 943.622862][ T27] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 943.761905][ T27] 1 lock held by rcu_tasks_trace/13: [ 943.767268][ T27] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 943.887490][ T27] 3 locks held by kworker/1:0/22: [ 943.892589][ T27] 1 lock held by khungtaskd/27: [ 943.958470][ T27] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 944.047524][ T27] 2 locks held by udevd/3093: [ 944.052270][ T27] 1 lock held by dhcpcd/3308: [ 944.056976][ T27] 2 locks held by getty/3402: [ 944.178467][ T27] #0: ffff88814c658098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 944.247411][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 944.317440][ T27] 3 locks held by syz-executor/5971: [ 944.322789][ T27] 3 locks held by kworker/1:3/10232: [ 944.422554][ T27] 1 lock held by syz.0.3717/15938: [ 944.471880][ T27] [ 944.474255][ T27] ============================================= [ 944.474255][ T27] [ 944.567457][ T27] NMI backtrace for cpu 0 [ 944.571849][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 944.579768][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 944.589943][ T27] Call Trace: [ 944.593246][ T27] [ 944.596207][ T27] dump_stack_lvl+0x1e3/0x2cb [ 944.600925][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 944.606428][ T27] ? panic+0x764/0x764 [ 944.610517][ T27] ? vprintk_emit+0x622/0x740 [ 944.615247][ T27] ? printk_sprint+0x490/0x490 [ 944.620065][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 944.625221][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 944.630202][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 944.636391][ T27] ? _printk+0xd1/0x111 [ 944.640589][ T27] ? panic+0x764/0x764 [ 944.644698][ T27] ? __wake_up_klogd+0xcc/0x100 [ 944.649578][ T27] ? panic+0x764/0x764 [ 944.653684][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 944.659780][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 944.665879][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 944.671893][ T27] watchdog+0xf88/0xfd0 [ 944.676088][ T27] ? watchdog+0x1f8/0xfd0 [ 944.680464][ T27] kthread+0x28d/0x320 [ 944.684682][ T27] ? hungtask_pm_notify+0x50/0x50 [ 944.689762][ T27] ? kthread_blkcg+0xd0/0xd0 [ 944.694380][ T27] ret_from_fork+0x1f/0x30 [ 944.698844][ T27] [ 944.702457][ T27] Sending NMI from CPU 0 to CPUs 1: [ 944.707848][ C1] NMI backtrace for cpu 1 [ 944.707860][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.112-syzkaller #0 [ 944.707878][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 944.707888][ C1] RIP: 0010:unwind_next_frame+0xa/0x2220 [ 944.707913][ C1] Code: 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 95 4c 89 f7 e8 fb 7c a5 00 eb 8b 66 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 <48> 81 ec a8 00 00 00 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 8d [ 944.707943][ C1] RSP: 0018:ffffc900001b75c8 EFLAGS: 00000202 [ 944.707958][ C1] RAX: 0000000000000001 RBX: ffffc900001b7600 RCX: ffffffff8fdb3000 [ 944.707971][ C1] RDX: dffffc0000000000 RSI: ffffffff81e22bc7 RDI: ffffc900001b7600 [ 944.707984][ C1] RBP: ffffc900001b7690 R08: 0000000000000001 R09: ffffc900001b76f0 [ 944.707996][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888018c41dc0 [ 944.708009][ C1] R13: ffffffff81786c50 R14: ffffc900001b76e0 R15: 0000000000000000 [ 944.708021][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 944.708035][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.708048][ C1] CR2: 00007ffdca4d6580 CR3: 0000000076249000 CR4: 00000000003506e0 [ 944.708063][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 944.708073][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 944.708084][ C1] Call Trace: [ 944.708089][ C1] [ 944.708095][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 944.708113][ C1] ? read_lock_is_recursive+0x10/0x10 [ 944.708142][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 944.708160][ C1] ? nmi_handle+0x25/0x440 [ 944.708194][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 944.708221][ C1] ? nmi_handle+0x12e/0x440 [ 944.708247][ C1] ? nmi_handle+0x25/0x440 [ 944.708273][ C1] ? unwind_next_frame+0xa/0x2220 [ 944.708291][ C1] ? default_do_nmi+0x62/0x150 [ 944.708310][ C1] ? exc_nmi+0xa8/0x100 [ 944.708326][ C1] ? end_repeat_nmi+0x16/0x31 [ 944.708352][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 944.708379][ C1] ? __init_begin+0x3d000/0x3d000 [ 944.708405][ C1] ? kasan_save_free_info+0x27/0x40 [ 944.708425][ C1] ? unwind_next_frame+0xa/0x2220 [ 944.708444][ C1] ? unwind_next_frame+0xa/0x2220 [ 944.708464][ C1] ? unwind_next_frame+0xa/0x2220 [ 944.708482][ C1] [ 944.708487][ C1] [ 944.708493][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 944.708516][ C1] arch_stack_walk+0x10d/0x140 [ 944.708538][ C1] ? kasan_save_free_info+0x27/0x40 [ 944.708560][ C1] stack_trace_save+0x113/0x1c0 [ 944.708585][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 944.708614][ C1] ? rcu_core+0xade/0x1820 [ 944.708634][ C1] kasan_set_track+0x4b/0x70 [ 944.708659][ C1] ? kasan_set_track+0x4b/0x70 [ 944.708683][ C1] ? kasan_save_free_info+0x27/0x40 [ 944.708792][ C1] kasan_save_free_info+0x27/0x40 [ 944.708811][ C1] ____kasan_slab_free+0xd6/0x120 [ 944.708828][ C1] kmem_cache_free+0x292/0x510 [ 944.708850][ C1] ? rcu_core+0xade/0x1820 [ 944.708871][ C1] ? __d_free_external+0x60/0x60 [ 944.708892][ C1] rcu_core+0xade/0x1820 [ 944.708916][ C1] ? rcu_core+0xa6b/0x1820 [ 944.708938][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 944.708960][ C1] ? rcu_qs+0xed/0x190 [ 944.708985][ C1] ? rcu_softirq_qs+0x300/0x300 [ 944.709011][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 944.709036][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 944.709063][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 944.709090][ C1] ? print_irqtrace_events+0x210/0x210 [ 944.709120][ C1] handle_softirqs+0x2ee/0xa40 [ 944.709151][ C1] ? run_ksoftirqd+0xc6/0x120 [ 944.709170][ C1] ? do_softirq+0x240/0x240 [ 944.709197][ C1] ? run_ksoftirqd+0xa3/0x120 [ 944.709215][ C1] run_ksoftirqd+0xc6/0x120 [ 944.709231][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 944.709250][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 944.709268][ C1] smpboot_thread_fn+0x52c/0xa30 [ 944.709293][ C1] ? smpboot_thread_fn+0x4a/0xa30 [ 944.709323][ C1] kthread+0x28d/0x320 [ 944.709338][ C1] ? cpu_report_death+0x2b0/0x2b0 [ 944.709361][ C1] ? kthread_blkcg+0xd0/0xd0 [ 944.709377][ C1] ret_from_fork+0x1f/0x30 [ 944.709409][ C1] [ 945.637452][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 945.644360][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 945.652282][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 945.662370][ T27] Call Trace: [ 945.665672][ T27] [ 945.668657][ T27] dump_stack_lvl+0x1e3/0x2cb [ 945.673378][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 945.678873][ T27] ? panic+0x764/0x764 [ 945.682969][ T27] ? llist_add_batch+0x160/0x1d0 [ 945.687949][ T27] ? vscnprintf+0x59/0x80 [ 945.692308][ T27] panic+0x318/0x764 [ 945.696232][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 945.702426][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 945.707935][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 945.714134][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 945.720326][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 945.726515][ T27] watchdog+0xfc7/0xfd0 [ 945.730709][ T27] ? watchdog+0x1f8/0xfd0 [ 945.735089][ T27] kthread+0x28d/0x320 [ 945.739210][ T27] ? hungtask_pm_notify+0x50/0x50 [ 945.744271][ T27] ? kthread_blkcg+0xd0/0xd0 [ 945.748898][ T27] ret_from_fork+0x1f/0x30 [ 945.753364][ T27] [ 945.756680][ T27] Kernel Offset: disabled [ 945.761013][ T27] Rebooting in 86400 seconds..