last executing test programs: 6.864013868s ago: executing program 3 (id=7201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x3, 0xfffffffc, 0x3, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) close(0x3) 6.188757294s ago: executing program 3 (id=7207): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000800)=r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x1d, 0x200c, 0x0, @value=r0}, 0x20) 5.995979359s ago: executing program 3 (id=7210): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x59c1a8c570b7e9c0}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa9}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcf, &(0x7f0000000180)=""/207, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x45) 5.805913193s ago: executing program 3 (id=7212): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair(0xa, 0x2, 0x88, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$cgroup_subtree(r1, &(0x7f0000000f80), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1e6, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, 0x0, 0xffff, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1, 0xa, 0x4, 0x1b}, 0x10, 0x13e93, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5dc3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008477fbac141516e000000107080511b180008989040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 5.427966052s ago: executing program 3 (id=7217): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x9c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x50}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xbb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) 5.271820876s ago: executing program 0 (id=7219): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x8, 0x7, 0x0, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.194552967s ago: executing program 3 (id=7221): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x9, &(0x7f0000000580)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x21) 4.962074163s ago: executing program 0 (id=7224): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x98000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x4448, 0x800000000000ca, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB=','], 0x9a) 4.696711509s ago: executing program 0 (id=7226): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0xff, 0xff, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xe, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x61, 0x6, &(0x7f0000000400)="ca06a0c67b3fb9fe7b3f792492514baffe0351b90f5a2aae966a9b2dcfc3051434851a07bcb8827578ee0c9614d0f74e77c18a2589583750fa2a3149956d0891f2ef8995a490de5bdd6dfea8e573c280152514c5497307531e7f22d0edb471eb48", &(0x7f0000000540)=""/6, 0x8, 0x0, 0xa9, 0x0, &(0x7f0000000580)="a046f63b55412f9bd67270c83d948933af7bb5cfdeca5f80221cd6a770b9175ce577134368c9757468086517d84760249093f7e0f71017e0dbdc973c975c5c13680c56f3a0e3fb211743782840e459926f988ac3e1b63855348c86a35b527c1d9bd091e2b628c83dd9b16b225a158e63f2cbd8f079262b1646dce33b8006b2cca78e88136ad03cc2cff2bd11f8a64c854216df75061be18907de9a7a3885a0bb6bfaab7dfe5f693b25", &(0x7f0000000780), 0x4}, 0x50) recvmsg$unix(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x7}, 0x29a, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[], 0xfdef) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3.80888299s ago: executing program 2 (id=7230): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x596, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="150000000000010057000000ffffffff040500000d5d735cad5f4d70b4532ec7fe89152e869c4cc062521fd35aff594f8ecaa448a460653b4eb09cadd62650918f8f9218e442c9587fdcb6fd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000e00"/21], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)=ANY=[], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x1, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x3, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB="3e0002"], 0x9a) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4, r0}, 0x10) 2.0878707s ago: executing program 2 (id=7232): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x30020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xfffffffffffffff7, 0x8001}, 0xc080, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) 1.903404525s ago: executing program 0 (id=7237): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x20028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x9) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.760083408s ago: executing program 4 (id=7240): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x80) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x25, 0x3, 0x0, 0x0, 0x0, 0x8000000000083, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2, @perf_bp={0x0, 0x3}, 0x70c0, 0x1, 0x40000001, 0x8, 0x0, 0x80000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x2000000000000051, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.407975217s ago: executing program 4 (id=7242): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X9\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3\xa5X\xb3S\x83rFp\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="0200"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x1, 0x3, &(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000000000b3850000001b000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000006c8"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 1.172992852s ago: executing program 1 (id=7243): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x596, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="150000000000010057000000ffffffff040500000d5d735cad5f4d70b4532ec7fe89152e869c4cc062521fd35aff594f8ecaa448a460653b4eb09cadd62650918f8f9218e442c9587fdcb6fd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000e00"/21], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)=ANY=[], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x1, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x3, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB="3e0002"], 0x9a) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4, r0}, 0x10) 1.144987873s ago: executing program 4 (id=7244): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0xff, 0x5, 0x80, 0xea, 0x0, 0x5, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={0x0}, 0xc02, 0x5, 0x1, 0x6, 0x5, 0x101, 0x4, 0x0, 0x1, 0x0, 0x81}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0xfd, 0x0, 0x3, 0x80220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x4000, 0x4, 0x80000000, 0x6, 0x8000000000000000, 0x4, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfdef) getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x8841) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="010003201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.023534066s ago: executing program 2 (id=7245): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 932.478218ms ago: executing program 1 (id=7246): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x4, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair(0x28, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xc) 883.108839ms ago: executing program 4 (id=7247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a8bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec7bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaacc59608f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58217bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec00000000000000006d425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636ddc7c3fc59baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x4020940d, &(0x7f0000000080)) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000940)={&(0x7f0000000580)=@abs, 0xfe3a, &(0x7f00000007c0)=[{0x0}], 0x1, &(0x7f00000008c0)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xab, '\x00', r1, r2, 0x5, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x48) 851.94101ms ago: executing program 0 (id=7248): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20004011) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x6, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x5, 0x9, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 683.991554ms ago: executing program 1 (id=7249): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000000, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000e80)=ANY=[], 0x12) 633.569385ms ago: executing program 4 (id=7250): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x0, r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0), 0xc) ioctl$TUNSETVNETBE(r5, 0x400454de, 0x0) 618.136755ms ago: executing program 2 (id=7251): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 452.289129ms ago: executing program 0 (id=7252): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x34}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x95, &(0x7f0000000000)=""/149}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r2, 0x12) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_config_ext={0x76, 0x9}, 0x100004, 0x4, 0x98, 0x0, 0x2, 0x7f, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x5, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x7f, 0x86, 0x0, 0x0, 0xc43, 0x11049, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x58e, 0x4}, 0x3104, 0x6, 0x4, 0x7, 0x0, 0x5, 0x2, 0x0, 0x7, 0x0, 0x100000000}, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 451.980759ms ago: executing program 1 (id=7253): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X9\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3\xa5X\xb3S\x83rFp\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="0200"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x1, 0x3, &(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000000000b3850000001b000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000006c8"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 302.870003ms ago: executing program 1 (id=7254): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5}, 0xc) close(r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f0000000300), &(0x7f00000003c0)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={0x0, 0x0, 0x4010, r1}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r0, 0xe42becf5618ecd39, 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0]}, 0x40) 144.072806ms ago: executing program 4 (id=7255): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4, r0}, 0x10) 136.893057ms ago: executing program 2 (id=7256): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e60d", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee00}}}], 0x20, 0x10}, 0x10044001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 85.878778ms ago: executing program 1 (id=7257): mkdir(0x0, 0x12) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000100)={'bond_slave_0\x00', @random="01310600"}) 0s ago: executing program 2 (id=7258): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e68, 0x1, 0x4000, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000002980), 0x12) kernel console output (not intermixed with test programs): sing attributes in process `syz.1.5367'. [ 941.175277][T22735] netlink: 'syz.1.5367': attribute type 2 has an invalid length. [ 941.433382][T22735] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5367'. [ 941.809198][T22732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5364'. [ 942.779200][T22768] netlink: 'syz.3.5375': attribute type 2 has an invalid length. [ 942.915355][T22780] netlink: 'syz.4.5377': attribute type 29 has an invalid length. [ 942.948269][T22768] device 0 entered promiscuous mode [ 942.974475][T22780] netlink: 'syz.4.5377': attribute type 29 has an invalid length. [ 943.447954][T22783] netlink: 'syz.0.5378': attribute type 39 has an invalid length. [ 943.503465][T22774] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5379'. [ 943.547614][T22785] netlink: 8964 bytes leftover after parsing attributes in process `syz.3.5375'. [ 943.605008][T22781] netlink: 'syz.2.5379': attribute type 2 has an invalid length. [ 943.612933][T22791] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5379'. [ 945.420685][T22844] syz.1.5393[22844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 945.420795][T22844] syz.1.5393[22844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 945.670071][T22849] validate_nla: 4 callbacks suppressed [ 945.670108][T22849] netlink: 'syz.1.5395': attribute type 39 has an invalid length. [ 945.847028][T22849] device hsr_slave_1 left promiscuous mode [ 946.032170][T22855] syz.0.5405[22855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 946.032301][T22855] syz.0.5405[22855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 946.236229][T22847] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5394'. [ 946.478044][T22852] netlink: 'syz.3.5394': attribute type 2 has an invalid length. [ 946.539121][T22854] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5394'. [ 948.112834][T22884] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5404'. [ 948.223791][T22888] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5406'. [ 948.388855][T22895] netlink: 'syz.1.5409': attribute type 46 has an invalid length. [ 948.816930][T22903] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.5411'. [ 948.851000][T22902] netlink: 'syz.2.5410': attribute type 39 has an invalid length. [ 949.616538][T22902] device hsr_slave_1 left promiscuous mode [ 949.788518][T22905] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.5412'. [ 949.953479][T22908] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5413'. [ 950.032591][T22912] netlink: 'syz.4.5414': attribute type 4 has an invalid length. [ 950.045520][T22921] netlink: 'syz.0.5417': attribute type 21 has an invalid length. [ 950.073833][T22912] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5414'. [ 950.103244][T22921] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.5417'. [ 950.104461][T22914] netlink: 'syz.2.5415': attribute type 3 has an invalid length. [ 950.147400][T22914] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5415'. [ 950.204436][T22923] syz.0.5417[22923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 951.246548][T22938] device lo entered promiscuous mode [ 951.304992][T22938] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 951.417542][T22938] netlink: 'syz.3.5421': attribute type 11 has an invalid length. [ 951.471150][T22938] netlink: 147680 bytes leftover after parsing attributes in process `syz.3.5421'. [ 951.765564][T22947] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5425'. [ 952.221196][T22967] netlink: 154868 bytes leftover after parsing attributes in process `syz.1.5431'. [ 952.943185][T22977] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5435'. [ 953.047548][T22977] bridge0: port 2(ip6gretap0) entered blocking state [ 953.056404][T22977] bridge0: port 2(ip6gretap0) entered disabled state [ 953.079559][T22977] device ip6gretap0 entered promiscuous mode [ 953.100344][T22977] bridge0: port 2(ip6gretap0) entered blocking state [ 953.108621][T22977] bridge0: port 2(ip6gretap0) entered forwarding state [ 953.237798][T22982] device ip6gretap0 left promiscuous mode [ 953.251529][T22982] bridge0: port 2(ip6gretap0) entered disabled state [ 953.322756][T22989] netlink: 'syz.1.5437': attribute type 21 has an invalid length. [ 953.549336][T22996] netlink: 'syz.0.5439': attribute type 21 has an invalid length. [ 953.598871][T22996] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5439'. [ 953.617856][T22996] netlink: 'syz.0.5439': attribute type 4 has an invalid length. [ 953.636339][T22996] netlink: 'syz.0.5439': attribute type 5 has an invalid length. [ 953.653317][T22996] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5439'. [ 953.742782][T23001] netlink: 'syz.3.5441': attribute type 10 has an invalid length. [ 953.904681][T23010] netlink: 'syz.1.5446': attribute type 39 has an invalid length. [ 953.966952][T23015] sock: sock_timestamping_bind_phc: sock not bind to device [ 954.360792][T23036] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5451'. [ 954.431284][T23036] bridge0: port 2(ip6gretap0) entered blocking state [ 954.441157][T23036] bridge0: port 2(ip6gretap0) entered disabled state [ 954.464857][T23036] device ip6gretap0 entered promiscuous mode [ 954.559732][T23036] device ip6gretap0 left promiscuous mode [ 954.581194][T23036] bridge0: port 2(ip6gretap0) entered disabled state [ 955.031869][T23059] device syzkaller0 entered promiscuous mode [ 955.057004][T23063] netlink: 'syz.3.5458': attribute type 25 has an invalid length. [ 955.099274][T23063] netlink: 'syz.3.5458': attribute type 9 has an invalid length. [ 955.144318][T23063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5458'. [ 955.172296][T23073] netlink: 'syz.0.5459': attribute type 10 has an invalid length. [ 955.203537][T23077] netlink: 'syz.2.5463': attribute type 39 has an invalid length. [ 957.112977][T23090] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5467'. [ 958.164359][T23132] team0: Device veth1_vlan failed to register rx_handler [ 958.211341][T23131] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5480'. [ 958.278772][ T4272] Bluetooth: hci1: unexpected event 0x31 length: 151 > 6 [ 958.672215][T23147] validate_nla: 6 callbacks suppressed [ 958.672242][T23147] netlink: 'syz.2.5484': attribute type 13 has an invalid length. [ 958.697873][T23147] netlink: 'syz.2.5484': attribute type 14 has an invalid length. [ 958.707036][T23147] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5484'. [ 959.077406][T23152] netlink: 'syz.1.5485': attribute type 39 has an invalid length. [ 960.217996][T23166] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5490'. [ 960.824944][T23187] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5496'. [ 960.923752][T23187] netlink: 'syz.1.5496': attribute type 3 has an invalid length. [ 960.949868][T23187] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5496'. [ 961.396971][T23198] netlink: 'syz.0.5499': attribute type 17 has an invalid length. [ 961.452060][T23198] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5499'. [ 961.565358][T23198] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 961.616999][T23198] net_ratelimit: 143 callbacks suppressed [ 961.617018][T23198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 962.499782][T23215] netlink: 'syz.4.5504': attribute type 1 has an invalid length. [ 962.549083][T23215] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5504'. [ 963.180188][T23220] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5506'. [ 963.792344][T23235] sock: sock_timestamping_bind_phc: sock not bind to device [ 964.454187][T23238] netlink: 'syz.3.5511': attribute type 10 has an invalid length. [ 964.534098][T23246] netlink: 'syz.2.5513': attribute type 21 has an invalid length. [ 964.566010][T23246] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5513'. [ 964.816022][T23246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 964.823913][T23246] IPv6: NLM_F_CREATE should be set when creating new route [ 964.832617][T23246] IPv6: NLM_F_CREATE should be set when creating new route [ 964.841449][T23246] IPv6: NLM_F_CREATE should be set when creating new route [ 965.138076][T23255] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5517'. [ 967.495317][T23290] netlink: 'syz.0.5536': attribute type 2 has an invalid length. [ 967.503142][T23290] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5536'. [ 967.721906][T23301] sock: sock_timestamping_bind_phc: sock not bind to device [ 967.778085][T23300] netlink: 'syz.4.5528': attribute type 29 has an invalid length. [ 967.824792][T23300] netlink: 'syz.4.5528': attribute type 29 has an invalid length. [ 967.929559][T23302] netlink: 'syz.4.5528': attribute type 29 has an invalid length. [ 968.239928][ T4272] Bluetooth: hci2: unexpected event 0x31 length: 151 > 6 [ 968.673687][T23316] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.5531'. [ 969.175215][T23312] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5540'. [ 969.516370][T23312] netlink: 'syz.3.5540': attribute type 2 has an invalid length. [ 969.744357][T23312] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5540'. [ 969.808050][T23312] netlink: 'syz.3.5540': attribute type 10 has an invalid length. [ 971.526130][T23345] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.5543'. [ 972.591716][T23344] device syzkaller0 entered promiscuous mode [ 977.617117][T23374] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5552'. [ 977.626567][T23376] netlink: 'syz.1.5552': attribute type 2 has an invalid length. [ 977.642902][T23380] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5552'. [ 977.654277][T23379] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 977.666721][T23381] netlink: 'syz.1.5552': attribute type 10 has an invalid length. [ 977.674710][T23379] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 977.710511][T23383] device aaaaaaaaaaaaaaa entered promiscuous mode [ 977.728748][T23379] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 977.743037][T23390] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5554'. [ 978.116037][T23404] netlink: 'syz.2.5558': attribute type 10 has an invalid length. [ 978.496736][T23416] netlink: 'syz.2.5562': attribute type 7 has an invalid length. [ 978.510577][T23416] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.5562'. [ 978.547111][T23416] netlink: 'syz.2.5562': attribute type 21 has an invalid length. [ 978.571654][T23416] netlink: 'syz.2.5562': attribute type 6 has an invalid length. [ 978.586028][T23416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5562'. [ 978.794102][T23423] netlink: 'syz.4.5565': attribute type 10 has an invalid length. [ 979.100324][T23433] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5567'. [ 979.178548][T23433] netlink: 'syz.2.5567': attribute type 2 has an invalid length. [ 979.552547][T23442] netlink: 'syz.1.5570': attribute type 4 has an invalid length. [ 979.587931][T23442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5570'. [ 979.637406][T23433] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5567'. [ 979.671319][T23437] netlink: 'syz.2.5567': attribute type 10 has an invalid length. [ 979.849211][T23453] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5573'. [ 979.891681][T23435] device aaaaaaaaaaaaaaa entered promiscuous mode [ 980.681452][ T4272] Bluetooth: hci1: ISO packet for unknown connection handle 1076 [ 980.692908][T23481] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5581'. [ 980.925009][T23486] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.948621][T23486] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.971711][T23486] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.054032][T23486] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.247309][T23508] device aaaaaaaaaaaaaaa entered promiscuous mode [ 983.605156][T23546] __nla_validate_parse: 3 callbacks suppressed [ 983.605174][T23546] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5599'. [ 983.663214][T23546] validate_nla: 4 callbacks suppressed [ 983.663233][T23546] netlink: 'syz.2.5599': attribute type 2 has an invalid length. [ 983.740446][T23546] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5599'. [ 983.750960][T23546] netlink: 'syz.2.5599': attribute type 10 has an invalid length. [ 983.858841][T23555] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.5603'. [ 984.657426][T23575] -1: renamed from syzkaller0 [ 984.937528][T23595] netlink: 'syz.0.5614': attribute type 10 has an invalid length. [ 984.992296][T23596] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5615'. [ 985.081131][T23597] netlink: 'syz.4.5615': attribute type 2 has an invalid length. [ 985.147450][T23596] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5615'. [ 985.265140][T23597] netlink: 'syz.4.5615': attribute type 10 has an invalid length. [ 985.407905][T23612] netlink: 'syz.1.5619': attribute type 7 has an invalid length. [ 985.478430][T23612] netlink: 'syz.1.5619': attribute type 7 has an invalid length. [ 985.554065][T23612] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.5619'. [ 985.760870][T23617] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5621'. [ 985.999419][T23626] netlink: 'syz.4.5624': attribute type 27 has an invalid length. [ 987.201266][T23651] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5631'. [ 987.374174][T23651] netlink: 'syz.1.5631': attribute type 2 has an invalid length. [ 987.533776][T23654] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5631'. [ 987.574959][T23661] netlink: 'syz.1.5631': attribute type 10 has an invalid length. [ 988.448630][T23679] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5637'. [ 988.981381][T23695] __nla_validate_parse: 1 callbacks suppressed [ 988.981399][T23695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5642'. [ 989.083209][T23695] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5642'. [ 989.182701][T23698] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5644'. [ 989.265944][T23698] netlink: 'syz.3.5644': attribute type 2 has an invalid length. [ 989.306081][T23698] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5644'. [ 989.383904][T23698] netlink: 'syz.3.5644': attribute type 10 has an invalid length. [ 989.449712][T23708] netlink: 763 bytes leftover after parsing attributes in process `syz.2.5647'. [ 990.967911][T23746] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5660'. [ 990.995027][T23733] -1: renamed from syzkaller0 [ 991.926819][T23746] netlink: 'syz.2.5660': attribute type 2 has an invalid length. [ 991.953172][T23752] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5660'. [ 991.976802][T23755] netlink: 'syz.2.5660': attribute type 10 has an invalid length. [ 992.867859][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.874580][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.309151][T23792] netlink: 'syz.1.5671': attribute type 19 has an invalid length. [ 993.403428][T23794] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5672'. [ 994.123687][T23800] netlink: 'syz.3.5672': attribute type 2 has an invalid length. [ 994.229825][T23794] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5672'. [ 994.259333][T23802] netlink: 'syz.3.5672': attribute type 10 has an invalid length. [ 995.704686][T23849] netlink: 'syz.2.5688': attribute type 2 has an invalid length. [ 995.909852][T23858] netlink: 'syz.2.5688': attribute type 10 has an invalid length. [ 996.115347][T23861] netlink: 'syz.3.5691': attribute type 29 has an invalid length. [ 996.185159][T23861] netlink: 'syz.3.5691': attribute type 29 has an invalid length. [ 996.820820][T23869] netlink: 'syz.0.5693': attribute type 25 has an invalid length. [ 996.864320][T23869] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.5693'. [ 997.202641][T23867] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5692'. [ 997.371389][T23871] netlink: 'syz.1.5692': attribute type 2 has an invalid length. [ 997.461142][T23879] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5692'. [ 997.597135][T23867] netlink: 'syz.1.5692': attribute type 10 has an invalid length. [ 997.613424][T23876] netlink: 'syz.3.5695': attribute type 3 has an invalid length. [ 997.625786][T23876] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5695'. [ 997.894156][T23884] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5697'. [ 998.616972][T23888] device syzkaller0 entered promiscuous mode [ 999.237970][T23906] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5703'. [ 999.796574][T23922] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5707'. [ 999.852239][T23922] netlink: 'syz.0.5707': attribute type 2 has an invalid length. [ 999.911042][T23922] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5707'. [ 999.971532][T23924] netlink: 'syz.0.5707': attribute type 10 has an invalid length. [ 1003.592928][T23955] netlink: 'syz.1.5715': attribute type 21 has an invalid length. [ 1003.643001][T23955] netlink: 'syz.1.5715': attribute type 4 has an invalid length. [ 1003.671429][T23955] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5715'. [ 1003.792624][T23961] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5716'. [ 1003.818705][T23961] openvswitch: netlink: Message has 6 unknown bytes. [ 1004.898362][T23984] netlink: 'syz.4.5722': attribute type 33 has an invalid length. [ 1004.913744][T23984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5722'. [ 1004.931371][T23984] device team0 entered promiscuous mode [ 1004.941567][T23984] device team_slave_0 entered promiscuous mode [ 1004.953892][T23984] device team_slave_1 entered promiscuous mode [ 1004.968747][T23984] device bridge_slave_1 entered promiscuous mode [ 1005.209351][T23992] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5723'. [ 1005.247446][T23997] netlink: 'syz.2.5724': attribute type 10 has an invalid length. [ 1005.321169][T23992] netlink: 'syz.4.5723': attribute type 2 has an invalid length. [ 1005.358356][T23993] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5723'. [ 1005.495467][T23992] netlink: 'syz.4.5723': attribute type 10 has an invalid length. [ 1005.937227][T24009] netlink: 'syz.3.5729': attribute type 2 has an invalid length. [ 1005.963745][T24009] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5729'. [ 1006.038145][T24004] netlink: 'syz.0.5727': attribute type 10 has an invalid length. [ 1006.053050][T24004] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5727'. [ 1006.356448][T24028] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5733'. [ 1007.010116][T24047] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5740'. [ 1007.137602][T24051] netlink: 'syz.3.5740': attribute type 2 has an invalid length. [ 1007.172057][T24047] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5740'. [ 1007.346404][T24052] netlink: 'syz.3.5740': attribute type 10 has an invalid length. [ 1008.552721][T24082] __sock_release: fasync list not empty! [ 1010.303863][T13592] Bluetooth: hci3: command 0x0406 tx timeout [ 1010.801415][T24066] netlink: 'syz.4.5744': attribute type 10 has an invalid length. [ 1010.812356][T24066] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.822883][T24066] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.834845][T24066] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.845216][T24066] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.889378][T24066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.901063][T24066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.912729][T24066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.922626][T24066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.937765][T24066] device geneve1 entered promiscuous mode [ 1010.956020][T24066] team0: Port device geneve1 added [ 1010.963660][T24078] netlink: 'syz.0.5750': attribute type 8 has an invalid length. [ 1010.971415][T24078] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5750'. [ 1010.999872][T24084] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5752'. [ 1011.408332][T24096] netlink: 'syz.4.5755': attribute type 10 has an invalid length. [ 1011.418712][T24096] device bridge_slave_1 left promiscuous mode [ 1011.439313][T24096] team0: Port device bridge_slave_1 removed [ 1011.449979][T24096] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1011.466885][T24092] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5756'. [ 1011.567146][T24092] netlink: 'syz.3.5756': attribute type 2 has an invalid length. [ 1011.664777][T24097] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5756'. [ 1011.744686][T24092] netlink: 'syz.3.5756': attribute type 10 has an invalid length. [ 1012.138315][T24103] netlink: 'syz.0.5760': attribute type 2 has an invalid length. [ 1012.205155][T24106] netlink: 'syz.3.5761': attribute type 10 has an invalid length. [ 1012.431332][T24103] device 2 entered promiscuous mode [ 1012.564017][T13592] Bluetooth: hci5: unexpected event 0x31 length: 151 > 6 [ 1015.219677][T24140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5773'. [ 1015.249827][T24138] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5772'. [ 1015.318433][T24138] netlink: 'syz.0.5772': attribute type 2 has an invalid length. [ 1015.337651][T24138] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5772'. [ 1015.431865][T24138] netlink: 'syz.0.5772': attribute type 10 has an invalid length. [ 1016.173879][T13592] Bluetooth: hci2: unexpected event 0x31 length: 151 > 6 [ 1019.498209][T24201] netlink: 'syz.0.5787': attribute type 3 has an invalid length. [ 1019.714657][T24201] netlink: 'syz.0.5787': attribute type 8 has an invalid length. [ 1019.722468][T24201] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.5787'. [ 1020.515578][T24212] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.5791'. [ 1020.579393][T24209] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5790'. [ 1020.643998][T24213] netlink: 'syz.3.5790': attribute type 2 has an invalid length. [ 1020.713660][T24220] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5790'. [ 1021.712953][T24221] netlink: 'syz.3.5790': attribute type 10 has an invalid length. [ 1022.995371][T13592] Bluetooth: hci1: unexpected event 0x31 length: 151 > 6 [ 1024.373847][T24245] netlink: 'syz.1.5800': attribute type 4 has an invalid length. [ 1024.423680][T24245] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5800'. [ 1024.951109][T24251] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5802'. [ 1025.157451][T24247] netlink: 38 bytes leftover after parsing attributes in process `syz.4.5801'. [ 1025.184026][T24247] openvswitch: netlink: Flow key attr not present in new flow. [ 1025.320646][T24247] netlink: 'syz.4.5801': attribute type 21 has an invalid length. [ 1025.597819][T24265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5806'. [ 1025.634243][T24265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5806'. [ 1025.670304][T24266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5806'. [ 1026.666925][T24276] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5807'. [ 1026.958723][T24276] netlink: 'syz.0.5807': attribute type 2 has an invalid length. [ 1027.029402][T24278] netlink: 'syz.1.5820': attribute type 25 has an invalid length. [ 1027.201286][T24278] netlink: 'syz.1.5820': attribute type 9 has an invalid length. [ 1027.244241][T24278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5820'. [ 1027.581461][T24282] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5807'. [ 1027.615549][T24276] netlink: 'syz.0.5807': attribute type 10 has an invalid length. [ 1028.182935][T13592] Bluetooth: hci0: unexpected event 0x31 length: 151 > 6 [ 1028.255387][T24302] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5816'. [ 1030.010849][T24325] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5819'. [ 1031.621136][T24339] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5825'. [ 1031.646910][T24340] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5824'. [ 1031.660447][T24345] netlink: 'syz.4.5825': attribute type 2 has an invalid length. [ 1031.765544][T24349] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5825'. [ 1031.933010][T24350] netlink: 'syz.4.5825': attribute type 10 has an invalid length. [ 1032.043984][T24350] bond0: (slave bridge_slave_1): Releasing backup interface [ 1032.120361][T24350] device bridge_slave_1 entered promiscuous mode [ 1032.176169][T24350] team0: Port device bridge_slave_1 added [ 1032.429750][T24353] sock: sock_set_timeout: `syz.1.5827' (pid 24353) tries to set negative timeout [ 1032.835093][T24353] netlink: 'syz.1.5827': attribute type 10 has an invalid length. [ 1032.976098][T24353] team0: Port device netdevsim0 added [ 1033.366721][T24358] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5828'. [ 1034.844277][T13592] Bluetooth: hci1: unexpected event 0x31 length: 151 > 6 [ 1036.440988][T24395] netlink: 'syz.4.5837': attribute type 2 has an invalid length. [ 1036.555536][T24395] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5837'. [ 1036.642214][T24399] netlink: 'syz.2.5838': attribute type 10 has an invalid length. [ 1036.689662][T24399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.385335][T24404] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5841'. [ 1038.096096][T24407] netlink: 'syz.1.5840': attribute type 6 has an invalid length. [ 1038.185134][T24407] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.5840'. [ 1039.065186][T24423] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1039.137981][T24423] netlink: 'syz.0.5843': attribute type 2 has an invalid length. [ 1039.178926][T24423] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1039.217524][T24423] netlink: 'syz.0.5843': attribute type 10 has an invalid length. [ 1039.494915][T13592] Bluetooth: hci3: unexpected event 0x31 length: 151 > 6 [ 1041.339647][T24446] netlink: 'syz.1.5853': attribute type 10 has an invalid length. [ 1041.393730][T24446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.405792][T24446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.716793][T24446] team0: Port device bridge0 added [ 1041.766674][T10147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1041.814458][T24452] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1042.521299][T24467] netlink: 'syz.4.5858': attribute type 1 has an invalid length. [ 1043.282575][T24472] netlink: 'syz.0.5859': attribute type 6 has an invalid length. [ 1043.335121][T24472] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5859'. [ 1043.656982][T24475] netlink: 'syz.3.5861': attribute type 10 has an invalid length. [ 1043.764416][T24475] netlink: 'syz.3.5861': attribute type 25 has an invalid length. [ 1044.450084][T13592] Bluetooth: hci5: unexpected event 0x31 length: 151 > 6 [ 1044.861017][T24491] netlink: 'syz.0.5866': attribute type 49 has an invalid length. [ 1045.500734][T24506] netlink: 'syz.0.5870': attribute type 29 has an invalid length. [ 1045.554872][T24506] netlink: 'syz.0.5870': attribute type 29 has an invalid length. [ 1045.868566][T24501] netlink: 'syz.3.5867': attribute type 10 has an invalid length. [ 1046.020036][T24501] bond0: (slave wlan1): Releasing backup interface [ 1046.191474][T24510] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5872'. [ 1046.262084][T24512] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1048.068899][T24528] netlink: 'syz.2.5878': attribute type 10 has an invalid length. [ 1048.088229][T24532] netlink: 'syz.3.5876': attribute type 6 has an invalid length. [ 1048.144271][T24532] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.5876'. [ 1048.609194][T24537] netlink: 'syz.4.5877': attribute type 10 has an invalid length. [ 1048.725843][T24537] netlink: 'syz.4.5877': attribute type 25 has an invalid length. [ 1049.322510][T24539] netlink: 'syz.0.5890': attribute type 10 has an invalid length. [ 1049.854637][T24539] team0: Port device wlan1 added [ 1050.036633][T24541] netlink: 'syz.2.5880': attribute type 49 has an invalid length. [ 1050.415656][T13592] Bluetooth: hci1: unexpected event 0x31 length: 151 > 6 [ 1052.177543][T24568] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5886'. [ 1052.384888][T24573] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5888'. [ 1054.018536][T24583] netlink: 'syz.2.5893': attribute type 6 has an invalid length. [ 1054.073772][T24583] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5893'. [ 1054.307257][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.313788][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.357476][T24597] netlink: 'syz.4.5896': attribute type 49 has an invalid length. [ 1058.260659][T24618] netlink: 'syz.3.5899': attribute type 22 has an invalid length. [ 1058.293958][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5899'. [ 1058.429886][T24626] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5905'. [ 1058.484941][T24626] netlink: 'syz.0.5905': attribute type 2 has an invalid length. [ 1058.506661][T24626] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5905'. [ 1058.547818][T24626] netlink: 'syz.0.5905': attribute type 10 has an invalid length. [ 1060.462094][T24646] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5909'. [ 1061.139103][T24662] netlink: 'syz.4.5914': attribute type 12 has an invalid length. [ 1061.216570][T24667] netlink: 'syz.0.5915': attribute type 21 has an invalid length. [ 1061.243937][T24667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5915'. [ 1062.221010][T13592] Bluetooth: hci3: unexpected event 0x31 length: 151 > 6 [ 1062.946256][T24674] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1063.193828][T24677] netlink: 'syz.3.5917': attribute type 2 has an invalid length. [ 1063.204300][T24692] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1063.341955][T24694] netlink: 'syz.3.5917': attribute type 10 has an invalid length. [ 1063.418157][T24695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5921'. [ 1065.097318][T24713] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1066.748654][T13592] Bluetooth: hci0: unexpected event 0x31 length: 151 > 6 [ 1067.032367][T24737] netlink: 'syz.0.5934': attribute type 21 has an invalid length. [ 1067.103969][T24737] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5934'. [ 1068.539495][T24754] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5937'. [ 1068.864047][T24762] netlink: 'syz.2.5937': attribute type 2 has an invalid length. [ 1068.884427][T24762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5937'. [ 1069.195247][T24764] netlink: 'syz.2.5937': attribute type 10 has an invalid length. [ 1069.374289][T24770] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5941'. [ 1073.588107][T13592] Bluetooth: hci1: unexpected event 0x31 length: 151 > 6 [ 1074.857093][T24807] netlink: 'syz.2.5951': attribute type 10 has an invalid length. [ 1075.624913][T24815] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1077.099927][T24825] netlink: 'syz.2.5956': attribute type 5 has an invalid length. [ 1077.181106][T24820] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5955'. [ 1077.603327][T24828] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1077.800041][T24828] netlink: 'syz.3.5957': attribute type 2 has an invalid length. [ 1077.980629][T24837] netlink: 'syz.0.5959': attribute type 10 has an invalid length. [ 1078.040313][T24837] team0: Port device bridge_slave_1 removed [ 1078.134401][T24830] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1078.219591][T24838] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5958'. [ 1078.775514][T24838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.833062][T24838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.956946][T24838] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1079.073468][T24838] bond0 (unregistering): Released all slaves [ 1079.213736][T24828] netlink: 'syz.3.5957': attribute type 10 has an invalid length. [ 1079.220467][T24857] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1079.228430][T24857] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1079.353782][T24849] netlink: 'syz.0.5963': attribute type 22 has an invalid length. [ 1079.361720][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5963'. [ 1079.388012][T24852] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5964'. [ 1080.072346][T24864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5966'. [ 1080.085817][T24865] netlink: 'syz.2.5968': attribute type 2 has an invalid length. [ 1080.454701][T24865] device 0 entered promiscuous mode [ 1081.026810][T13592] Bluetooth: hci3: unexpected event 0x31 length: 151 > 6 [ 1081.089786][T24874] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.5970'. [ 1081.131272][T24876] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5973'. [ 1082.275991][T24890] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5978'. [ 1082.306983][T24886] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5976'. [ 1082.375350][T24886] netlink: 'syz.3.5976': attribute type 2 has an invalid length. [ 1082.414179][T24886] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5976'. [ 1082.474042][T24886] netlink: 'syz.3.5976': attribute type 10 has an invalid length. [ 1082.774104][T13592] Bluetooth: hci2: unexpected event 0x31 length: 151 > 6 [ 1083.006258][T24901] netlink: 'syz.1.5977': attribute type 10 has an invalid length. [ 1085.313948][T24917] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5984'. [ 1086.015772][T24920] mac80211_hwsim hwsim164 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1086.146853][T24920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5986'. [ 1086.884099][T24931] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1087.405161][T24940] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6001'. [ 1087.991478][T24944] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5993'. [ 1088.067932][T24944] netlink: 'syz.2.5993': attribute type 2 has an invalid length. [ 1088.087016][T13592] Bluetooth: hci0: unexpected event 0x31 length: 151 > 6 [ 1088.104459][T24944] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5993'. [ 1088.248065][T24948] netlink: 'syz.2.5993': attribute type 10 has an invalid length. [ 1091.514000][T24985] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6008'. [ 1091.654944][T24989] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6007'. [ 1091.885579][T24991] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1091.948887][T24991] netlink: 'syz.3.6011': attribute type 2 has an invalid length. [ 1091.967992][T24991] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1091.998634][T24991] netlink: 'syz.3.6011': attribute type 10 has an invalid length. [ 1092.240824][T25004] netlink: 'syz.2.6012': attribute type 25 has an invalid length. [ 1092.263783][T25004] netlink: 'syz.2.6012': attribute type 29 has an invalid length. [ 1092.314225][T25004] netlink: 'syz.2.6012': attribute type 22 has an invalid length. [ 1092.322114][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6012'. [ 1092.404736][T13592] Bluetooth: hci2: unexpected event 0x31 length: 151 > 6 [ 1093.322448][T25018] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6018'. [ 1094.865830][T25031] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6024'. [ 1095.181380][T25038] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.6023'. [ 1095.402469][T25041] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6025'. [ 1095.603786][T25036] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6026'. [ 1095.654259][T25047] netlink: 'syz.3.6026': attribute type 2 has an invalid length. [ 1095.775488][T25051] netlink: 'syz.3.6026': attribute type 10 has an invalid length. [ 1098.109616][T25080] __nla_validate_parse: 1 callbacks suppressed [ 1098.109634][T25080] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6037'. [ 1098.944822][T25097] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6041'. [ 1099.591467][T25104] netlink: 'syz.0.6043': attribute type 2 has an invalid length. [ 1099.658639][T25100] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1099.813995][T25100] netlink: 'syz.2.6042': attribute type 2 has an invalid length. [ 1099.863090][T25102] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1099.894748][T25100] netlink: 'syz.2.6042': attribute type 10 has an invalid length. [ 1100.255771][T25115] netlink: 'syz.3.6047': attribute type 12 has an invalid length. [ 1100.280725][T25115] device bridge_slave_0 left promiscuous mode [ 1100.289772][T25115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.032336][T25126] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6051'. [ 1101.364692][T25130] netlink: 'syz.1.6052': attribute type 25 has an invalid length. [ 1101.372574][T25130] netlink: 'syz.1.6052': attribute type 28 has an invalid length. [ 1101.471357][T25134] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6055'. [ 1103.239734][T25148] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6060'. [ 1103.333843][T25159] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6064'. [ 1103.460839][T25149] netlink: 'syz.1.6060': attribute type 2 has an invalid length. [ 1103.551013][T25148] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6060'. [ 1103.691058][T25161] netlink: 'syz.1.6060': attribute type 10 has an invalid length. [ 1104.295465][T25170] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6069'. [ 1104.777491][T25177] netlink: 'syz.1.6070': attribute type 3 has an invalid length. [ 1104.944026][T25177] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1105.393338][T25190] device syzkaller0 entered promiscuous mode [ 1105.563317][T25190] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6076'. [ 1105.889903][T25190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.028594][T25190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.109878][T25190] bond0 (unregistering): Released all slaves [ 1108.640085][T25201] netlink: 'syz.2.6081': attribute type 10 has an invalid length. [ 1108.648072][T25201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1108.658649][T25201] device hsr0 entered promiscuous mode [ 1108.665956][T25201] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1108.678212][T25199] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6080'. [ 1108.703614][T25202] netlink: 'syz.0.6080': attribute type 2 has an invalid length. [ 1108.717274][T25207] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6080'. [ 1108.737033][T25210] netlink: 'syz.0.6080': attribute type 10 has an invalid length. [ 1108.748542][T25210] team0: Port device bridge_slave_1 added [ 1108.766329][T25214] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1108.793364][T25222] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6087'. [ 1108.812868][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1108.950114][T25233] netlink: 'syz.1.6093': attribute type 1 has an invalid length. [ 1108.975239][T25233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6093'. [ 1108.992127][T25233] netlink: 'syz.1.6093': attribute type 13 has an invalid length. [ 1109.000662][T25233] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6093'. [ 1109.049493][T25233] erspan0: refused to change device tx_queue_len [ 1109.219058][T25242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6096'. [ 1109.220165][T25246] netlink: 'syz.1.6097': attribute type 3 has an invalid length. [ 1109.253633][T25246] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6097'. [ 1109.438277][T25253] netlink: 'syz.2.6099': attribute type 10 has an invalid length. [ 1109.486066][T25253] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1109.579234][T25256] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6100'. [ 1109.633374][T25256] netlink: 'syz.3.6100': attribute type 2 has an invalid length. [ 1109.660771][T25267] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6103'. [ 1109.680325][T25256] netlink: 'syz.3.6100': attribute type 10 has an invalid length. [ 1109.757310][T25271] netlink: 'syz.2.6105': attribute type 5 has an invalid length. [ 1110.201744][T25300] FAULT_INJECTION: forcing a failure. [ 1110.201744][T25300] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.214826][T25300] CPU: 1 PID: 25300 Comm: syz.0.6115 Not tainted syzkaller #0 [ 1110.222320][T25300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1110.232388][T25300] Call Trace: [ 1110.235674][T25300] [ 1110.238613][T25300] dump_stack_lvl+0x188/0x24e [ 1110.243309][T25300] ? show_regs_print_info+0x12/0x12 [ 1110.248519][T25300] ? load_image+0x410/0x410 [ 1110.253036][T25300] ? __might_sleep+0xd0/0xd0 [ 1110.257640][T25300] ? __lock_acquire+0x7c40/0x7c40 [ 1110.262682][T25300] should_fail_ex+0x390/0x4c0 [ 1110.267379][T25300] should_failslab+0x5/0x20 [ 1110.271892][T25300] slab_pre_alloc_hook+0x59/0x300 [ 1110.276924][T25300] ? __lock_acquire+0x138a/0x7c40 [ 1110.281965][T25300] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1110.287698][T25300] __kmem_cache_alloc_node+0x4f/0x270 [ 1110.293082][T25300] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1110.298809][T25300] __kmalloc+0xa3/0x240 [ 1110.302985][T25300] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1110.308543][T25300] ? tomoyo_domain+0xd2/0x120 [ 1110.313230][T25300] ? tomoyo_path_number_perm+0x205/0x650 [ 1110.318873][T25300] tomoyo_path_number_perm+0x22f/0x650 [ 1110.324341][T25300] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1110.329806][T25300] ? ksys_write+0x1ce/0x260 [ 1110.334322][T25300] ? common_file_perm+0x171/0x1c0 [ 1110.339392][T25300] ? __fget_files+0x28/0x460 [ 1110.344002][T25300] security_file_ioctl+0x6c/0xa0 [ 1110.348950][T25300] __se_sys_ioctl+0x48/0x170 [ 1110.353617][T25300] do_syscall_64+0x4c/0xa0 [ 1110.358044][T25300] ? clear_bhb_loop+0x60/0xb0 [ 1110.362730][T25300] ? clear_bhb_loop+0x60/0xb0 [ 1110.367418][T25300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1110.373318][T25300] RIP: 0033:0x7ff59cd9de59 [ 1110.377737][T25300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.397349][T25300] RSP: 002b:00007ff59db95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.405772][T25300] RAX: ffffffffffffffda RBX: 00007ff59d025fa0 RCX: 00007ff59cd9de59 [ 1110.413749][T25300] RDX: 0000200000000100 RSI: 0000000000005411 RDI: 0000000000000003 [ 1110.421724][T25300] RBP: 00007ff59db95090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.429706][T25300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.437678][T25300] R13: 00007ff59d026038 R14: 00007ff59d025fa0 R15: 00007ffe52c01048 [ 1110.445676][T25300] [ 1110.453804][T25300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1110.762722][T25311] bond0: (slave bridge_slave_1): Releasing backup interface [ 1111.148475][T25331] FAULT_INJECTION: forcing a failure. [ 1111.148475][T25331] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.194688][T25331] CPU: 0 PID: 25331 Comm: syz.0.6129 Not tainted syzkaller #0 [ 1111.202198][T25331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1111.212273][T25331] Call Trace: [ 1111.215567][T25331] [ 1111.218506][T25331] dump_stack_lvl+0x188/0x24e [ 1111.223211][T25331] ? show_regs_print_info+0x12/0x12 [ 1111.228439][T25331] ? load_image+0x410/0x410 [ 1111.232961][T25331] ? __might_sleep+0xd0/0xd0 [ 1111.237563][T25331] ? __lock_acquire+0x7c40/0x7c40 [ 1111.242585][T25331] should_fail_ex+0x390/0x4c0 [ 1111.247270][T25331] should_failslab+0x5/0x20 [ 1111.251795][T25331] slab_pre_alloc_hook+0x59/0x300 [ 1111.256839][T25331] ? tomoyo_encode+0x28a/0x550 [ 1111.261626][T25331] __kmem_cache_alloc_node+0x4f/0x270 [ 1111.267104][T25331] ? tomoyo_encode+0x28a/0x550 [ 1111.271886][T25331] __kmalloc+0xa3/0x240 [ 1111.276069][T25331] tomoyo_encode+0x28a/0x550 [ 1111.280687][T25331] tomoyo_realpath_from_path+0x578/0x5c0 [ 1111.286350][T25331] ? tomoyo_domain+0xd2/0x120 [ 1111.291045][T25331] ? tomoyo_path_number_perm+0x205/0x650 [ 1111.296688][T25331] tomoyo_path_number_perm+0x22f/0x650 [ 1111.302167][T25331] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1111.307642][T25331] ? ksys_write+0x1ce/0x260 [ 1111.312167][T25331] ? common_file_perm+0x171/0x1c0 [ 1111.317357][T25331] ? __fget_files+0x28/0x460 [ 1111.321981][T25331] security_file_ioctl+0x6c/0xa0 [ 1111.326931][T25331] __se_sys_ioctl+0x48/0x170 [ 1111.331756][T25331] do_syscall_64+0x4c/0xa0 [ 1111.336191][T25331] ? clear_bhb_loop+0x60/0xb0 [ 1111.340892][T25331] ? clear_bhb_loop+0x60/0xb0 [ 1111.345586][T25331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1111.351497][T25331] RIP: 0033:0x7ff59cd9de59 [ 1111.355925][T25331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.375549][T25331] RSP: 002b:00007ff59db95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.383982][T25331] RAX: ffffffffffffffda RBX: 00007ff59d025fa0 RCX: 00007ff59cd9de59 [ 1111.391980][T25331] RDX: 0000200000000100 RSI: 0000000000005411 RDI: 0000000000000003 [ 1111.399959][T25331] RBP: 00007ff59db95090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.407931][T25331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.415900][T25331] R13: 00007ff59d026038 R14: 00007ff59d025fa0 R15: 00007ffe52c01048 [ 1111.423887][T25331] [ 1111.451682][T25331] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1111.903262][T25361] sock: sock_set_timeout: `syz.1.6138' (pid 25361) tries to set negative timeout [ 1111.929651][T25364] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1111.971834][T25364] syzkaller1: group set to 64758 [ 1112.542134][T25382] FAULT_INJECTION: forcing a failure. [ 1112.542134][T25382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.567199][T25382] CPU: 0 PID: 25382 Comm: syz.0.6147 Not tainted syzkaller #0 [ 1112.574718][T25382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1112.584793][T25382] Call Trace: [ 1112.588082][T25382] [ 1112.591024][T25382] dump_stack_lvl+0x188/0x24e [ 1112.595730][T25382] ? show_regs_print_info+0x12/0x12 [ 1112.600963][T25382] ? load_image+0x410/0x410 [ 1112.605479][T25382] ? __lock_acquire+0x7c40/0x7c40 [ 1112.610500][T25382] ? snprintf+0xe5/0x140 [ 1112.614733][T25382] should_fail_ex+0x390/0x4c0 [ 1112.619407][T25382] _copy_to_user+0x2c/0x130 [ 1112.623906][T25382] simple_read_from_buffer+0xe3/0x150 [ 1112.629293][T25382] proc_fail_nth_read+0x1a6/0x220 [ 1112.634337][T25382] ? proc_fault_inject_write+0x310/0x310 [ 1112.639988][T25382] ? fsnotify_perm+0x248/0x550 [ 1112.644765][T25382] ? proc_fault_inject_write+0x310/0x310 [ 1112.650414][T25382] vfs_read+0x2db/0x960 [ 1112.654593][T25382] ? kernel_read+0x1e0/0x1e0 [ 1112.659232][T25382] ? __fget_files+0x28/0x460 [ 1112.663936][T25382] ? __fget_files+0x3fc/0x460 [ 1112.668652][T25382] ? __fdget_pos+0x2ae/0x360 [ 1112.673260][T25382] ? ksys_read+0x70/0x260 [ 1112.677700][T25382] ksys_read+0x14d/0x260 [ 1112.681969][T25382] ? vfs_write+0x9a0/0x9a0 [ 1112.686413][T25382] ? lockdep_hardirqs_on+0x94/0x140 [ 1112.691728][T25382] do_syscall_64+0x4c/0xa0 [ 1112.696164][T25382] ? clear_bhb_loop+0x60/0xb0 [ 1112.700856][T25382] ? clear_bhb_loop+0x60/0xb0 [ 1112.705554][T25382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1112.711472][T25382] RIP: 0033:0x7ff59cd5e68e [ 1112.715905][T25382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1112.735701][T25382] RSP: 002b:00007ff59db94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1112.744186][T25382] RAX: ffffffffffffffda RBX: 00007ff59db956c0 RCX: 00007ff59cd5e68e [ 1112.752176][T25382] RDX: 000000000000000f RSI: 00007ff59db950a0 RDI: 0000000000000004 [ 1112.760161][T25382] RBP: 00007ff59db95090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.768156][T25382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.776156][T25382] R13: 00007ff59d026038 R14: 00007ff59d025fa0 R15: 00007ffe52c01048 [ 1112.784161][T25382] [ 1113.709741][T25437] __nla_validate_parse: 14 callbacks suppressed [ 1113.709761][T25437] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6168'. [ 1113.791354][T25450] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6174'. [ 1113.853273][T25444] validate_nla: 10 callbacks suppressed [ 1113.853294][T25444] netlink: 'syz.1.6168': attribute type 2 has an invalid length. [ 1113.884834][T25451] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6173'. [ 1113.917141][T25450] netlink: 'syz.2.6174': attribute type 10 has an invalid length. [ 1113.948699][T25450] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6174'. [ 1113.962566][T25437] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6168'. [ 1114.018559][T25444] netlink: 'syz.1.6168': attribute type 10 has an invalid length. [ 1114.045350][T25455] netlink: 'syz.3.6175': attribute type 16 has an invalid length. [ 1114.065006][T25455] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6175'. [ 1114.093778][T25455] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1114.830518][T25476] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6183'. [ 1115.309964][T25498] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6190'. [ 1115.374761][T25498] netlink: 'syz.4.6190': attribute type 2 has an invalid length. [ 1115.407717][T25498] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6190'. [ 1115.446543][T25506] netlink: 'syz.4.6190': attribute type 10 has an invalid length. [ 1115.767023][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.773438][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.684682][T25546] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6205'. [ 1116.764508][T25547] netlink: 'syz.0.6204': attribute type 2 has an invalid length. [ 1116.787128][T25547] netlink: 'syz.0.6204': attribute type 10 has an invalid length. [ 1117.291839][T25570] netlink: 'syz.1.6210': attribute type 2 has an invalid length. [ 1117.325308][T25574] netlink: 'syz.0.6211': attribute type 29 has an invalid length. [ 1117.889123][T25570] team0: Device hsr_slave_0 failed to register rx_handler [ 1119.155460][T25591] __nla_validate_parse: 2 callbacks suppressed [ 1119.155479][T25591] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6218'. [ 1119.250019][T25591] validate_nla: 5 callbacks suppressed [ 1119.250037][T25591] netlink: 'syz.0.6218': attribute type 2 has an invalid length. [ 1119.353991][T25593] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6218'. [ 1119.394348][T25599] netlink: 'syz.0.6218': attribute type 10 has an invalid length. [ 1119.547376][T25605] netlink: 'syz.2.6223': attribute type 2 has an invalid length. [ 1119.577244][T25605] netlink: 'syz.2.6223': attribute type 8 has an invalid length. [ 1119.609671][T25605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1119.698919][T25607] netlink: 'syz.2.6223': attribute type 2 has an invalid length. [ 1119.729612][T25607] netlink: 'syz.2.6223': attribute type 8 has an invalid length. [ 1119.748783][T25607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1119.805806][T25603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1120.181376][T25614] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6224'. [ 1120.828173][T25645] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6235'. [ 1120.896351][T25645] netlink: 'syz.4.6235': attribute type 2 has an invalid length. [ 1120.953475][T25651] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6235'. [ 1120.965596][T25645] netlink: 'syz.4.6235': attribute type 10 has an invalid length. [ 1121.211304][T25659] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6239'. [ 1122.912092][T25684] can: request_module (can-proto-0) failed. [ 1123.285092][T25705] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6253'. [ 1123.460554][T25703] netlink: 'syz.3.6252': attribute type 2 has an invalid length. [ 1123.495625][T25703] netlink: 'syz.3.6252': attribute type 10 has an invalid length. [ 1124.460140][T25729] validate_nla: 1 callbacks suppressed [ 1124.460178][T25729] netlink: 'syz.3.6260': attribute type 21 has an invalid length. [ 1124.513328][T25735] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1124.965176][T25744] __nla_validate_parse: 2 callbacks suppressed [ 1124.965195][T25744] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1125.121084][T25752] netlink: 'syz.0.6269': attribute type 28 has an invalid length. [ 1125.163124][T25752] netlink: 'syz.0.6269': attribute type 2 has an invalid length. [ 1125.181775][T25752] netlink: 'syz.0.6269': attribute type 8 has an invalid length. [ 1125.190373][T25752] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.6269'. [ 1125.269503][T25756] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6270'. [ 1125.331336][T25756] netlink: 'syz.1.6270': attribute type 2 has an invalid length. [ 1125.376584][T25756] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6270'. [ 1125.394844][T25756] netlink: 'syz.1.6270': attribute type 10 has an invalid length. [ 1125.526669][T25762] netlink: 'syz.4.6272': attribute type 10 has an invalid length. [ 1125.556219][T25762] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6272'. [ 1126.141115][T25780] FAULT_INJECTION: forcing a failure. [ 1126.141115][T25780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.220517][T25780] CPU: 0 PID: 25780 Comm: syz.1.6278 Not tainted syzkaller #0 [ 1126.228037][T25780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1126.238098][T25780] Call Trace: [ 1126.241395][T25780] [ 1126.244337][T25780] dump_stack_lvl+0x188/0x24e [ 1126.249038][T25780] ? show_regs_print_info+0x12/0x12 [ 1126.254259][T25780] ? load_image+0x410/0x410 [ 1126.258786][T25780] ? __lock_acquire+0x7c40/0x7c40 [ 1126.263933][T25780] ? snprintf+0xe5/0x140 [ 1126.268206][T25780] should_fail_ex+0x390/0x4c0 [ 1126.273005][T25780] _copy_to_user+0x2c/0x130 [ 1126.277534][T25780] simple_read_from_buffer+0xe3/0x150 [ 1126.282913][T25780] proc_fail_nth_read+0x1a6/0x220 [ 1126.287936][T25780] ? proc_fault_inject_write+0x310/0x310 [ 1126.293565][T25780] ? fsnotify_perm+0x248/0x550 [ 1126.298321][T25780] ? proc_fault_inject_write+0x310/0x310 [ 1126.303943][T25780] vfs_read+0x2db/0x960 [ 1126.308105][T25780] ? kernel_read+0x1e0/0x1e0 [ 1126.312695][T25780] ? __fget_files+0x28/0x460 [ 1126.317279][T25780] ? __fget_files+0x3fc/0x460 [ 1126.322095][T25780] ? __fdget_pos+0x2ae/0x360 [ 1126.326685][T25780] ? ksys_read+0x70/0x260 [ 1126.331017][T25780] ksys_read+0x14d/0x260 [ 1126.335259][T25780] ? vfs_write+0x9a0/0x9a0 [ 1126.339672][T25780] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1126.345565][T25780] do_syscall_64+0x4c/0xa0 [ 1126.349972][T25780] ? clear_bhb_loop+0x60/0xb0 [ 1126.354646][T25780] ? clear_bhb_loop+0x60/0xb0 [ 1126.359319][T25780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.365216][T25780] RIP: 0033:0x7fde9875e68e [ 1126.369629][T25780] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1126.389233][T25780] RSP: 002b:00007fde996dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1126.397644][T25780] RAX: ffffffffffffffda RBX: 00007fde996dc6c0 RCX: 00007fde9875e68e [ 1126.405605][T25780] RDX: 000000000000000f RSI: 00007fde996dc0a0 RDI: 0000000000000006 [ 1126.413568][T25780] RBP: 00007fde996dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.421529][T25780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.429489][T25780] R13: 00007fde98a26038 R14: 00007fde98a25fa0 R15: 00007ffde29af038 [ 1126.437471][T25780] [ 1126.854540][T25791] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6281'. [ 1127.289071][T25805] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6287'. [ 1127.343335][T25805] netlink: 'syz.1.6287': attribute type 2 has an invalid length. [ 1127.419210][T25805] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6287'. [ 1127.645516][T25806] netlink: 'syz.1.6287': attribute type 10 has an invalid length. [ 1127.687014][T25811] tipc: Started in network mode [ 1127.691982][T25811] tipc: Node identity 9215a268, cluster identity 4711 [ 1127.743900][T25811] tipc: Node number set to 2450891368 [ 1128.303689][T25843] netlink: 'syz.0.6300': attribute type 41 has an invalid length. [ 1128.417966][T25848] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6301'. [ 1128.618419][T25860] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6304'. [ 1130.243454][T25903] netlink: 'syz.4.6318': attribute type 11 has an invalid length. [ 1130.334430][T25903] __nla_validate_parse: 4 callbacks suppressed [ 1130.334448][T25903] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6318'. [ 1130.674706][T25896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1130.825416][T25905] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6319'. [ 1130.974146][T25905] validate_nla: 4 callbacks suppressed [ 1130.974168][T25905] netlink: 'syz.2.6319': attribute type 2 has an invalid length. [ 1131.251693][T25911] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6319'. [ 1131.286271][T25923] netlink: 'syz.2.6319': attribute type 10 has an invalid length. [ 1131.320004][T25930] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6330'. [ 1131.386388][T25936] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1131.876760][T25938] netlink: 'syz.0.6333': attribute type 10 has an invalid length. [ 1132.362561][T25959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6339'. [ 1132.413727][T25959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6339'. [ 1132.459866][T25959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6339'. [ 1132.805348][T25980] tap0: tun_chr_ioctl cmd 1074025677 [ 1132.810857][T25980] tap0: linktype set to 805 [ 1132.893611][T25983] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6344'. [ 1132.914825][T25987] netlink: 'syz.3.6347': attribute type 3 has an invalid length. [ 1132.948732][T25987] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6347'. [ 1132.967168][T25985] netlink: 'syz.4.6345': attribute type 2 has an invalid length. [ 1133.043254][T25975] netlink: 'syz.4.6345': attribute type 10 has an invalid length. [ 1133.469598][T26003] netlink: 'syz.1.6354': attribute type 28 has an invalid length. [ 1133.945511][T26011] netlink: 'syz.4.6356': attribute type 1 has an invalid length. [ 1134.751277][T26034] netlink: 'syz.4.6363': attribute type 2 has an invalid length. [ 1134.766802][T26034] netlink: 'syz.4.6363': attribute type 10 has an invalid length. [ 1135.439658][T26050] __nla_validate_parse: 8 callbacks suppressed [ 1135.439679][T26050] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1135.588997][T26056] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6373'. [ 1135.740780][T26068] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6374'. [ 1135.787098][T26068] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6374'. [ 1136.126670][T26078] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6379'. [ 1136.157748][T26078] validate_nla: 5 callbacks suppressed [ 1136.157765][T26078] netlink: 'syz.3.6379': attribute type 2 has an invalid length. [ 1136.204522][T26078] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6379'. [ 1136.236143][T26078] netlink: 'syz.3.6379': attribute type 10 has an invalid length. [ 1137.583309][T26108] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6390'. [ 1137.928436][T26110] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6391'. [ 1138.039022][T26110] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6391'. [ 1138.523026][T26117] netlink: 'syz.1.6395': attribute type 3 has an invalid length. [ 1138.549483][T26117] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6395'. [ 1138.733257][T26122] device sit0 entered promiscuous mode [ 1139.636940][T26126] netlink: 'syz.2.6394': attribute type 2 has an invalid length. [ 1139.704922][T26132] netlink: 'syz.2.6394': attribute type 10 has an invalid length. [ 1140.788369][ T4272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1140.797812][ T4272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1140.808454][ T4272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1140.821909][ T4272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1140.830759][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1140.838474][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1140.954203][T26145] __nla_validate_parse: 2 callbacks suppressed [ 1140.954221][T26145] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.6402'. [ 1141.046591][T26145] netlink: 'syz.2.6402': attribute type 33 has an invalid length. [ 1141.063815][T26145] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6402'. [ 1141.121779][T26145] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 1141.473623][T26149] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6403'. [ 1141.892756][T10148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.248605][T10148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.453122][T10148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.520628][T26142] chnl_net:caif_netlink_parms(): no params data found [ 1142.665811][T10148] team0: Port device netdevsim0 removed [ 1142.675820][T10148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.831154][T26142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.854007][T26142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.863716][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 1142.881660][T26142] device bridge_slave_0 entered promiscuous mode [ 1142.944600][T26142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.987388][T26142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.013043][T26142] device bridge_slave_1 entered promiscuous mode [ 1143.135881][T26142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.220925][T26142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.432884][T26142] team0: Port device team_slave_0 added [ 1143.474843][T26142] team0: Port device team_slave_1 added [ 1143.495298][T26178] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6410'. [ 1143.895193][T10148] device ip6gretap0 left promiscuous mode [ 1143.901076][T10148] : port 1(ip6gretap0) entered disabled state [ 1143.987251][T26178] netlink: 'syz.4.6410': attribute type 2 has an invalid length. [ 1144.004747][T26142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.011756][T26142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.101018][T26142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.134840][T26182] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6410'. [ 1144.188847][T26183] netlink: 'syz.4.6410': attribute type 10 has an invalid length. [ 1144.276321][T26142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.302384][T26142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.383705][T26142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.837030][T26202] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6416'. [ 1144.899508][T26209] netlink: 'syz.3.6415': attribute type 3 has an invalid length. [ 1144.915166][T26209] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.6415'. [ 1144.932588][T26142] device hsr_slave_0 entered promiscuous mode [ 1144.944312][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 1144.952275][T26142] device hsr_slave_1 entered promiscuous mode [ 1144.972920][T26142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1145.011529][T26142] Cannot create hsr debugfs directory [ 1147.031588][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 1147.920780][T26235] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6424'. [ 1148.165114][T26241] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6426'. [ 1148.221161][T26235] netlink: 'syz.0.6424': attribute type 2 has an invalid length. [ 1148.248822][T26236] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6424'. [ 1148.281880][T26250] netlink: 'syz.0.6424': attribute type 10 has an invalid length. [ 1148.386969][T10148] device hsr_slave_0 left promiscuous mode [ 1148.397752][T10148] device bridge_slave_0 left promiscuous mode [ 1148.419033][T10148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.456431][T10148] device veth1_macvtap left promiscuous mode [ 1149.108384][T13592] Bluetooth: hci4: command 0x0419 tx timeout [ 1152.355679][T10148] team0 (unregistering): Port device team_slave_1 removed [ 1152.407137][T10148] team0 (unregistering): Port device team_slave_0 removed [ 1152.508141][T10148] team0 (unregistering): Port device bridge_slave_1 removed [ 1152.688632][T10148] team0 (unregistering): Port device bridge0 removed [ 1152.807192][T26266] netlink: 'syz.4.6429': attribute type 2 has an invalid length. [ 1152.827076][T26266] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6429'. [ 1152.848112][T26142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1152.882329][T26142] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1152.931609][T26142] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1152.957350][T26142] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1153.041240][T26304] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6439'. [ 1153.191777][T26142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.212236][T26307] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6440'. [ 1153.258155][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1153.291552][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1153.329738][T26311] netlink: 'syz.3.6440': attribute type 2 has an invalid length. [ 1153.357469][T26142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.402078][T26307] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6440'. [ 1153.422307][T26311] netlink: 'syz.3.6440': attribute type 10 has an invalid length. [ 1153.460336][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1153.479385][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1153.507364][T19065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.514558][T19065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.552067][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1153.575086][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1153.585568][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1153.602657][T19055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.609839][T19055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.618845][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1153.657981][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1153.668456][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1153.678768][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1153.712655][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1153.734892][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1153.756743][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1153.852169][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1153.879950][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1153.905301][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1153.914330][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1153.937646][T26142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1154.018752][T26340] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6451'. [ 1154.432801][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1154.445176][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1154.462109][T26142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.503455][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1154.512903][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1154.549064][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1154.559754][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1154.570813][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1154.579235][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1154.589182][T26358] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6457'. [ 1154.609441][T26142] device veth0_vlan entered promiscuous mode [ 1154.618881][T26360] netlink: 'syz.4.6457': attribute type 2 has an invalid length. [ 1154.639704][T26358] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6457'. [ 1154.681142][T26142] device veth1_vlan entered promiscuous mode [ 1154.713419][T26360] netlink: 'syz.4.6457': attribute type 10 has an invalid length. [ 1154.734985][T26334] delete_channel: no stack [ 1154.836437][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1154.850906][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1154.889596][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1154.910193][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1154.935306][T26142] device veth0_macvtap entered promiscuous mode [ 1155.045328][T26142] device veth1_macvtap entered promiscuous mode [ 1155.219129][T26142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.246900][T26142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.269803][T26142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.292083][T26142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.319410][T26142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.340922][T26384] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6463'. [ 1155.443913][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1155.478680][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1155.507915][T26142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.549596][T26142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.571221][T26142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.593909][T26142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.617125][T26142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.646126][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1155.669907][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1155.719005][T26142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.731403][T26142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.740680][T26142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.762993][T26142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.962004][T19961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.992240][T19961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.038837][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1156.081757][T19065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.102047][T19065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.128869][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1156.160943][T26403] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1156.242491][T26403] netlink: 'syz.0.6472': attribute type 2 has an invalid length. [ 1156.279049][T26403] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1156.344818][T26405] netlink: 'syz.0.6472': attribute type 10 has an invalid length. [ 1156.695105][T26431] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1157.242229][T13592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1157.251182][T13592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1157.259861][T13592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1157.276920][T13592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1157.284760][T13592] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1157.292057][T13592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1158.243124][T26443] chnl_net:caif_netlink_parms(): no params data found [ 1158.362677][T26443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.370134][T26443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.378397][T26443] device bridge_slave_0 entered promiscuous mode [ 1158.390225][T26443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.397467][T26443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.405649][T26443] device bridge_slave_1 entered promiscuous mode [ 1158.448747][T26466] netlink: 'syz.4.6486': attribute type 2 has an invalid length. [ 1158.459141][T26443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.478555][T26443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.513096][T26466] device 0 entered promiscuous mode [ 1158.579198][T26468] __nla_validate_parse: 1 callbacks suppressed [ 1158.604820][T26468] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6487'. [ 1158.623053][T26443] team0: Port device team_slave_0 added [ 1158.655345][T26443] team0: Port device team_slave_1 added [ 1158.677151][T26468] netlink: 'syz.0.6487': attribute type 2 has an invalid length. [ 1158.725396][T26471] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6487'. [ 1158.783298][T26468] netlink: 'syz.0.6487': attribute type 10 has an invalid length. [ 1158.816220][T26443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.823253][T26443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.910420][T26443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.935848][T26443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.960146][T26443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.987017][T26443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.069552][T19961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.246989][T19961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.301246][T26443] device hsr_slave_0 entered promiscuous mode [ 1159.318943][T26443] device hsr_slave_1 entered promiscuous mode [ 1159.339256][T26443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1159.350666][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 1159.370912][T26443] Cannot create hsr debugfs directory [ 1159.401629][T19961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.538612][T26498] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6496'. [ 1159.915959][T19961] device 0 left promiscuous mode [ 1160.429593][T26519] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1160.624488][T26523] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6502'. [ 1160.700977][T26525] netlink: 'syz.0.6502': attribute type 2 has an invalid length. [ 1160.949081][T26532] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6502'. [ 1161.053733][T26523] netlink: 'syz.0.6502': attribute type 10 has an invalid length. [ 1161.424001][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 1161.440253][T26443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1161.552250][T26443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1161.608931][T26443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1161.646450][T26443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1161.782057][T26558] netlink: 'syz.1.6510': attribute type 1 has an invalid length. [ 1162.163759][T26443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.231005][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1162.239590][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1162.276372][T26443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.313907][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1162.328709][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1162.344821][T19953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.351969][T19953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.375337][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1162.401417][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1162.432853][T19953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.440033][T19953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.454152][T26574] netlink: 'syz.1.6514': attribute type 16 has an invalid length. [ 1162.462011][T26574] netlink: 'syz.1.6514': attribute type 3 has an invalid length. [ 1162.513063][T26570] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6513'. [ 1162.550630][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1162.558146][T26574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6514'. [ 1162.573000][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1162.600771][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1162.649202][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1162.665999][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1162.729385][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1162.739968][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1162.783786][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1162.810569][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1162.835155][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1162.853444][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1162.874466][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1162.897752][T26443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1163.504289][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 1163.593862][T26596] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1163.686516][T26598] netlink: 'syz.4.6519': attribute type 2 has an invalid length. [ 1163.725724][T26607] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1163.873388][T19961] device hsr_slave_0 left promiscuous mode [ 1163.912162][T19961] device bridge_slave_0 left promiscuous mode [ 1163.928947][T19961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.506832][T19961] device veth1_macvtap left promiscuous mode [ 1164.513125][T19961] device veth0_vlan left promiscuous mode [ 1165.585947][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 1165.691912][T19961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.734116][T19961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.971128][T19961] bond0 (unregistering): Released all slaves [ 1166.056125][T26613] netlink: 'syz.4.6519': attribute type 10 has an invalid length. [ 1166.071627][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1166.083996][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1166.105350][T26630] netlink: 'syz.1.6528': attribute type 7 has an invalid length. [ 1166.162864][T26443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.220422][T26643] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6532'. [ 1166.282467][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1166.315553][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1166.362820][T26647] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6533'. [ 1166.431899][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1166.450373][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1166.471258][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1166.497817][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1166.513106][T26443] device veth0_vlan entered promiscuous mode [ 1166.551294][T26443] device veth1_vlan entered promiscuous mode [ 1166.612109][T26655] tap0: tun_chr_ioctl cmd 1074025675 [ 1166.622784][T26655] tap0: persist disabled [ 1166.636686][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1166.646752][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1166.656280][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1166.666720][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1166.685540][T26443] device veth0_macvtap entered promiscuous mode [ 1166.733511][T26443] device veth1_macvtap entered promiscuous mode [ 1166.781638][T26659] device syzkaller0 entered promiscuous mode [ 1166.868384][T26443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.908004][T26443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.938352][T26443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.961682][T26443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.972065][T26443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.983018][T26443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.006156][T26443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.074037][T26664] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1167.100174][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1167.121136][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1167.149834][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1167.185236][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1167.222114][T26443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.248995][T26443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.282813][T26443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.317687][T26443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.353762][T26443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.393934][T26443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.428201][T26443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.452813][T26668] netlink: 'syz.1.6541': attribute type 2 has an invalid length. [ 1167.484251][T26670] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1167.568779][T26664] netlink: 'syz.1.6541': attribute type 10 has an invalid length. [ 1167.592027][T26664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.603960][T26664] device bridge_slave_1 left promiscuous mode [ 1167.611205][T26664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.630195][T26664] team0: Port device bridge_slave_1 added [ 1167.638673][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1167.649370][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1167.663747][T26672] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1167.692733][T26682] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6543'. [ 1167.705321][T26682] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1167.739288][T26443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.750129][T26443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.769851][T26443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.793587][T26443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.914915][T26685] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6546'. [ 1167.978447][T19065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.000081][T19065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.017993][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1168.066390][T19065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.094605][T19065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.111640][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1168.454752][T26710] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1168.857476][T26724] netlink: 'syz.3.6558': attribute type 29 has an invalid length. [ 1169.353671][T26718] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6556'. [ 1169.401609][T26721] netlink: 'syz.2.6556': attribute type 2 has an invalid length. [ 1169.419969][T26723] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6556'. [ 1169.613726][T26724] netlink: 'syz.3.6558': attribute type 29 has an invalid length. [ 1169.643644][T26727] netlink: 'syz.2.6556': attribute type 10 has an invalid length. [ 1169.704802][T26727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.772770][T26727] device bridge_slave_1 left promiscuous mode [ 1169.785012][T26727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.815842][T26727] team0: Port device bridge_slave_1 added [ 1169.895306][T26725] netlink: 'syz.3.6558': attribute type 29 has an invalid length. [ 1169.914190][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1169.923223][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1169.936991][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1169.947442][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1169.957175][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1169.984375][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1170.095162][T26741] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6560'. [ 1170.107202][T26743] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6561'. [ 1170.217806][T19953] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.382240][T19953] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.459561][T26757] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1170.560411][T19953] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.846906][T19953] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.017291][T26735] chnl_net:caif_netlink_parms(): no params data found [ 1171.452529][T19953] device 0 left promiscuous mode [ 1171.516461][T26735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.582028][T26735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.624552][T26735] device bridge_slave_0 entered promiscuous mode [ 1171.688056][T19953] device 1 left promiscuous mode [ 1172.098814][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 1172.310253][T26783] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6571'. [ 1172.345023][T26786] netlink: 'syz.3.6571': attribute type 2 has an invalid length. [ 1172.353095][T26789] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6573'. [ 1172.380498][T26735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.393097][T26735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.407283][T26735] device bridge_slave_1 entered promiscuous mode [ 1172.459218][T26791] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6571'. [ 1172.486467][T26793] netlink: 'syz.3.6571': attribute type 10 has an invalid length. [ 1172.524077][T19953] device 2 left promiscuous mode [ 1172.583056][T26735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.605516][T26803] netlink: 'syz.1.6574': attribute type 13 has an invalid length. [ 1172.614624][T26803] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6574'. [ 1172.696871][T26803] erspan0: refused to change device tx_queue_len [ 1172.729871][T26735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.885717][T19953] device ip6gretap0 left promiscuous mode [ 1172.891553][T19953] : port 1(ip6gretap0) entered disabled state [ 1172.951471][T26735] team0: Port device team_slave_0 added [ 1172.976191][T26735] team0: Port device team_slave_1 added [ 1173.034881][T26820] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.6580'. [ 1173.096019][T26735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.126796][T26735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.258249][T26735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.347996][T26735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.363757][T26735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.467867][T26735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.802945][T26735] device hsr_slave_0 entered promiscuous mode [ 1173.834550][T26735] device hsr_slave_1 entered promiscuous mode [ 1173.853272][T26735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1173.877298][T26735] Cannot create hsr debugfs directory [ 1173.921515][T26845] can: request_module (can-proto-0) failed. [ 1174.046678][T26857] netlink: 'syz.2.6587': attribute type 2 has an invalid length. [ 1174.116510][T26848] netlink: 'syz.2.6587': attribute type 10 has an invalid length. [ 1174.144206][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 1174.711110][T26881] __nla_validate_parse: 3 callbacks suppressed [ 1174.711125][T26881] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.6596'. [ 1174.830785][T26883] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6597'. [ 1175.871062][T26735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1175.909457][T26914] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6603'. [ 1175.966109][T26735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1176.042136][T26915] netlink: 'syz.2.6603': attribute type 2 has an invalid length. [ 1176.224077][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 1176.509843][T19953] team0: Port device wlan1 removed [ 1176.581312][T26914] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6603'. [ 1176.615584][T26735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1176.628567][T26920] netlink: 'syz.2.6603': attribute type 10 has an invalid length. [ 1176.662948][T26735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1177.196462][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.202872][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.541170][T19953] device hsr_slave_0 left promiscuous mode [ 1177.551437][T19953] device bridge_slave_0 left promiscuous mode [ 1177.578381][T19953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.663006][T19953] device veth1_macvtap left promiscuous mode [ 1177.670304][T19953] device veth0_macvtap left promiscuous mode [ 1178.320254][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 1180.046534][T19953] team0 (unregistering): Port device team_slave_1 removed [ 1180.085995][T19953] team0 (unregistering): Port device team_slave_0 removed [ 1180.186325][T19953] team0 (unregistering): Port device bridge_slave_1 removed [ 1180.405501][T26938] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6610'. [ 1180.414851][T26942] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6611'. [ 1180.641510][T26735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.694469][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1180.719548][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1180.777015][T26735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.840566][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1180.864887][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1180.889477][T19946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.896640][T19946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.922580][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1180.949407][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1180.950511][T26970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6620'. [ 1180.964714][T19946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.977185][T19946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.081543][T26964] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6618'. [ 1181.107709][T26975] netlink: 'syz.2.6618': attribute type 2 has an invalid length. [ 1181.136615][T26970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6620'. [ 1181.168215][T26972] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6618'. [ 1181.196089][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1181.210441][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1181.239166][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1181.284377][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1181.313091][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1181.332757][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1181.347043][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1181.366244][T26964] netlink: 'syz.2.6618': attribute type 10 has an invalid length. [ 1181.391309][T26976] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6620'. [ 1181.416568][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.443459][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1181.495624][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1181.522593][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1181.539018][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1181.570951][T26991] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6624'. [ 1181.595503][T26995] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.6625'. [ 1182.464222][T27017] netlink: 'syz.2.6630': attribute type 2 has an invalid length. [ 1182.507412][T27017] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.6630'. [ 1182.673836][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1182.682038][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1182.741062][T26735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.820297][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1182.874218][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1182.973277][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1183.013252][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1183.049937][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1183.096086][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1183.126635][T26735] device veth0_vlan entered promiscuous mode [ 1183.169292][T26735] device veth1_vlan entered promiscuous mode [ 1183.233872][T27035] netlink: 'syz.4.6636': attribute type 2 has an invalid length. [ 1183.346727][T27035] netlink: 'syz.4.6636': attribute type 10 has an invalid length. [ 1183.481381][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1183.511811][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1183.574436][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1183.606147][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1183.638399][T26735] device veth0_macvtap entered promiscuous mode [ 1183.660742][T26735] device veth1_macvtap entered promiscuous mode [ 1183.693972][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1183.704141][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1183.742950][T26735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.763993][T26735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.806760][T26735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.842134][T26735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.888254][T26735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.924960][T26735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.959879][T26735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.986905][T26735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.016584][T26735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.044830][T27056] netlink: 'syz.1.6639': attribute type 13 has an invalid length. [ 1184.081969][T27056] syz_tun: refused to change device tx_queue_len [ 1184.114027][T27056] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1184.156669][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1184.175255][T19065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1184.219799][T26735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.261293][T26735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.295897][T26735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.340362][T26735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.383737][T26735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.423601][T26735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.451291][T26735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.488518][T26735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.525367][T26735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.569328][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1184.584167][T19946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1184.621160][T26735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.644153][T26735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.673920][T26735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.682677][T26735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.970847][T19953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.001177][T19953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.023173][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1185.063381][T10135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.096120][T10135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.138103][T19953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1185.595169][T27103] __nla_validate_parse: 5 callbacks suppressed [ 1185.595188][T27103] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6652'. [ 1185.848641][T27114] netlink: 'syz.3.6652': attribute type 2 has an invalid length. [ 1185.916739][T27132] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6652'. [ 1185.954513][T27134] netlink: 'syz.4.6658': attribute type 3 has an invalid length. [ 1186.018742][T27134] netlink: 'syz.4.6658': attribute type 8 has an invalid length. [ 1186.046106][T27134] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.6658'. [ 1186.356404][T27148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1191.500326][T27103] netlink: 'syz.3.6652': attribute type 10 has an invalid length. [ 1191.516272][T27148] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1191.532787][T27166] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6666'. [ 1191.566233][T27167] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1191.583905][T27167] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1191.608719][T27167] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1191.641025][T27171] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6667'. [ 1191.868901][T27182] device vcan0 entered promiscuous mode [ 1191.888357][T27182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1192.176640][T27193] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6677'. [ 1192.229176][T27193] netlink: 'syz.3.6677': attribute type 2 has an invalid length. [ 1192.264430][T27193] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6677'. [ 1192.336524][T27202] netlink: 'syz.3.6677': attribute type 10 has an invalid length. [ 1192.374604][T27198] netlink: 'syz.2.6678': attribute type 13 has an invalid length. [ 1192.383263][T27198] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6678'. [ 1192.424011][T27198] syz_tun: refused to change device tx_queue_len [ 1192.452812][T27198] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1192.486782][T27207] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1192.528052][T27207] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1192.569068][T27207] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1192.709904][T27214] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6683'. [ 1196.079903][T27255] netlink: 'syz.0.6694': attribute type 2 has an invalid length. [ 1196.126478][T27262] netlink: 'syz.0.6694': attribute type 10 has an invalid length. [ 1196.150219][T27262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.163314][T27262] device bridge_slave_1 left promiscuous mode [ 1196.169979][T27262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.184587][T27262] team0: Port device bridge_slave_1 added [ 1196.193810][T27268] netlink: 'syz.2.6698': attribute type 20 has an invalid length. [ 1196.207694][T27274] IPv6: NLM_F_CREATE should be specified when creating new route [ 1196.261462][T27285] netlink: 'syz.2.6698': attribute type 2 has an invalid length. [ 1196.270447][T27285] netlink: 'syz.2.6698': attribute type 8 has an invalid length. [ 1196.484099][T27298] device syzkaller0 entered promiscuous mode [ 1196.821013][T27328] __nla_validate_parse: 9 callbacks suppressed [ 1196.821030][T27328] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6715'. [ 1196.863782][T27325] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6714'. [ 1196.910987][T27327] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1196.945045][T27325] netlink: 'syz.0.6714': attribute type 2 has an invalid length. [ 1196.994797][T27325] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6714'. [ 1197.127601][T27331] netlink: 'syz.0.6714': attribute type 10 has an invalid length. [ 1197.354586][T27339] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6717'. [ 1197.851134][T27362] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6727'. [ 1198.121828][T27372] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6730'. [ 1198.223336][T27372] netlink: 'syz.2.6730': attribute type 2 has an invalid length. [ 1198.324530][T27377] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6730'. [ 1198.494092][T27372] netlink: 'syz.2.6730': attribute type 10 has an invalid length. [ 1198.544005][T27371] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.6728'. [ 1198.557286][T27373] netlink: 'syz.4.6728': attribute type 3 has an invalid length. [ 1198.599820][T27373] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6728'. [ 1199.566741][T27430] netlink: 'syz.0.6747': attribute type 2 has an invalid length. [ 1199.635324][T27430] netlink: 'syz.0.6747': attribute type 10 has an invalid length. [ 1200.011448][T27451] netlink: 'syz.0.6752': attribute type 21 has an invalid length. [ 1200.085396][T27451] netlink: 'syz.0.6752': attribute type 2 has an invalid length. [ 1200.165276][T27451] device 0 entered promiscuous mode [ 1200.855638][T27476] netlink: 'syz.4.6762': attribute type 10 has an invalid length. [ 1201.312420][T27494] device syzkaller0 entered promiscuous mode [ 1204.573351][T27517] validate_nla: 1 callbacks suppressed [ 1204.573366][T27517] netlink: 'syz.0.6775': attribute type 29 has an invalid length. [ 1204.591226][T27528] __nla_validate_parse: 11 callbacks suppressed [ 1204.591244][T27528] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6779'. [ 1204.607413][T27532] netlink: 'syz.2.6779': attribute type 2 has an invalid length. [ 1204.617225][T27533] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6779'. [ 1204.633788][T27534] netlink: 'syz.2.6779': attribute type 10 has an invalid length. [ 1204.663777][T27538] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6781'. [ 1204.901679][T27549] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6785'. [ 1204.907115][T27544] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1205.258120][T27557] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6789'. [ 1205.585812][T27565] tap0: tun_chr_ioctl cmd 1074025677 [ 1205.625020][T27565] tap0: linktype set to 776 [ 1205.760010][T27569] netlink: 'syz.3.6793': attribute type 21 has an invalid length. [ 1205.816527][T27569] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6793'. [ 1205.848096][T27569] netlink: 'syz.3.6793': attribute type 4 has an invalid length. [ 1205.888575][T27569] netlink: 'syz.3.6793': attribute type 3 has an invalid length. [ 1205.941193][T27569] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6793'. [ 1205.984473][T27577] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6795'. [ 1206.045262][T27577] netlink: 'syz.2.6795': attribute type 2 has an invalid length. [ 1206.073075][T27577] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6795'. [ 1206.092024][T27577] netlink: 'syz.2.6795': attribute type 10 has an invalid length. [ 1206.690863][T27605] netlink: 'syz.2.6805': attribute type 3 has an invalid length. [ 1206.774732][T27605] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6805'. [ 1207.186117][T27626] netlink: 'syz.2.6811': attribute type 2 has an invalid length. [ 1208.231004][T27673] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1208.916440][T27703] device syzkaller0 entered promiscuous mode [ 1212.049741][T27715] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1212.062852][T27732] __nla_validate_parse: 6 callbacks suppressed [ 1212.062868][T27732] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6842'. [ 1212.073074][T27715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1212.083242][T27734] validate_nla: 4 callbacks suppressed [ 1212.083254][T27734] netlink: 'syz.1.6842': attribute type 2 has an invalid length. [ 1212.089426][T27715] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1212.111790][T27735] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6842'. [ 1212.147965][T27741] netlink: 'syz.1.6842': attribute type 10 has an invalid length. [ 1212.266463][T27760] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6849'. [ 1212.280906][T27760] netlink: 'syz.4.6849': attribute type 10 has an invalid length. [ 1212.295213][T27760] device netdevsim0 entered promiscuous mode [ 1213.421116][T27792] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1213.435384][T27788] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1213.522137][T27788] netlink: 'syz.4.6860': attribute type 2 has an invalid length. [ 1213.555688][T27788] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1213.707044][T27796] netlink: 'syz.4.6860': attribute type 10 has an invalid length. [ 1214.436237][T27827] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6871'. [ 1214.824268][T27843] netlink: 'syz.3.6875': attribute type 2 has an invalid length. [ 1214.832051][T27843] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6875'. [ 1215.083429][T27848] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.6876'. [ 1215.132498][T27850] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6877'. [ 1215.205013][T27850] netlink: 'syz.2.6877': attribute type 2 has an invalid length. [ 1215.240883][T27850] netlink: 'syz.2.6877': attribute type 10 has an invalid length. [ 1215.600628][T27866] sock: sock_set_timeout: `syz.0.6894' (pid 27866) tries to set negative timeout [ 1216.319100][T27892] netlink: 'syz.1.6903': attribute type 12 has an invalid length. [ 1216.359713][T27892] device bridge_slave_0 left promiscuous mode [ 1216.426767][T27892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.012679][T27904] netlink: 'syz.0.6892': attribute type 2 has an invalid length. [ 1217.089673][T27911] __nla_validate_parse: 10 callbacks suppressed [ 1217.089690][T27911] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6896'. [ 1217.217424][T27911] netlink: 'syz.3.6896': attribute type 2 has an invalid length. [ 1217.273940][T27913] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6896'. [ 1217.404004][T27911] netlink: 'syz.3.6896': attribute type 10 has an invalid length. [ 1217.610054][T27929] netlink: 'syz.4.6902': attribute type 2 has an invalid length. [ 1217.768449][T27940] netlink: 'syz.4.6902': attribute type 10 has an invalid length. [ 1217.934118][T27940] team0: Device hsr_slave_0 failed to register rx_handler [ 1217.984991][T27938] sock: sock_set_timeout: `syz.3.6905' (pid 27938) tries to set negative timeout [ 1218.795326][T27956] netlink: 'syz.3.6921': attribute type 2 has an invalid length. [ 1218.961083][T27964] netlink: 'syz.3.6921': attribute type 10 has an invalid length. [ 1219.207740][T27965] netlink: 'syz.0.6911': attribute type 12 has an invalid length. [ 1219.281201][T27965] device bridge_slave_0 left promiscuous mode [ 1219.290593][T27965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.949716][T27976] netlink: 'syz.1.6913': attribute type 2 has an invalid length. [ 1219.970894][T27976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6913'. [ 1220.100108][T27980] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6916'. [ 1220.311647][T27991] netlink: 'syz.4.6916': attribute type 2 has an invalid length. [ 1220.379597][T27993] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6916'. [ 1220.454673][T27980] netlink: 'syz.4.6916': attribute type 10 has an invalid length. [ 1220.560814][T27999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6920'. [ 1221.204271][T28022] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6927'. [ 1221.253932][T28022] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6927'. [ 1221.298115][T28024] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6927'. [ 1221.583390][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6931'. [ 1222.146636][T28050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.263309][T28057] device vlan0 entered promiscuous mode [ 1222.280461][T28054] __nla_validate_parse: 10 callbacks suppressed [ 1222.280499][T28054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6942'. [ 1222.344987][T28054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6942'. [ 1222.367058][T28060] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6942'. [ 1222.410174][T28050] device bridge_slave_0 left promiscuous mode [ 1222.440521][T28050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.298800][T28063] validate_nla: 4 callbacks suppressed [ 1224.298821][T28063] netlink: 'syz.0.6953': attribute type 28 has an invalid length. [ 1224.342011][T28063] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6953'. [ 1224.359150][T28064] netlink: 'syz.2.6944': attribute type 21 has an invalid length. [ 1226.060579][T28096] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6951'. [ 1226.074719][T28100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1226.099530][T28100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1226.143281][T28100] netlink: 33 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1226.255140][T28100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1226.288098][T28100] netlink: 33 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1226.382868][T28096] netlink: 'syz.0.6951': attribute type 2 has an invalid length. [ 1226.398941][T28102] netlink: 'syz.0.6951': attribute type 10 has an invalid length. [ 1226.787320][T28120] netlink: 'syz.2.6956': attribute type 3 has an invalid length. [ 1227.197237][T28127] delete_channel: no stack [ 1230.531787][T28141] device syzkaller0 entered promiscuous mode [ 1230.598086][T28149] __nla_validate_parse: 4 callbacks suppressed [ 1230.598102][T28149] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6969'. [ 1230.772159][T28161] netlink: 'syz.1.6972': attribute type 10 has an invalid length. [ 1230.831903][T28159] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6971'. [ 1230.883838][T28159] netlink: 'syz.4.6971': attribute type 2 has an invalid length. [ 1230.897091][T28159] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6971'. [ 1230.907311][T28159] netlink: 'syz.4.6971': attribute type 10 has an invalid length. [ 1234.220612][T28202] device syzkaller0 entered promiscuous mode [ 1238.637834][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.644235][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.763600][T28292] device sit0 entered promiscuous mode [ 1242.482017][T28392] device syzkaller0 entered promiscuous mode [ 1242.499559][T28392] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1244.169570][ T4272] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 1244.643713][ T4272] Bluetooth: hci4: unexpected event 0x31 length: 15 > 6 [ 1246.421840][T28544] device syzkaller0 entered promiscuous mode [ 1247.046277][ T4272] Bluetooth: hci1: unknown advertising packet type: 0x10 [ 1249.971062][T28665] device syzkaller0 entered promiscuous mode [ 1256.641260][T28722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.723281][T28724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.730520][T28724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.754621][T28724] device bridge0 entered promiscuous mode [ 1256.919251][ T4272] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1256.919299][ T4272] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1256.979554][T28729] mac80211_hwsim hwsim171 »»»»»»: renamed from wlan0 [ 1258.322858][ T4272] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1258.322892][ T4272] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1258.735590][T28779] mac80211_hwsim hwsim189 »»»»»»: renamed from wlan0 [ 1259.320209][ T4272] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 1259.320240][ T4272] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 1259.724499][T13592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1259.737461][T13592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1259.754353][T13592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1259.762481][T13592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1259.770476][T13592] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1259.777977][T13592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1261.837765][T13592] Bluetooth: hci5: command 0x0409 tx timeout [ 1262.483331][T28812] chnl_net:caif_netlink_parms(): no params data found [ 1262.892317][T28812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.903332][T28812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.918914][T28812] device bridge_slave_0 entered promiscuous mode [ 1262.938665][T28812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.967317][T13592] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1262.993390][T28812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.048725][T28812] device bridge_slave_1 entered promiscuous mode [ 1263.122085][T28812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.189534][T28812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.316609][T28812] team0: Port device team_slave_0 added [ 1263.365130][T28812] team0: Port device team_slave_1 added [ 1263.449225][T19953] device 0 left promiscuous mode [ 1263.474765][T28812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.511916][T28812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.603816][T28812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.639936][T19953] tipc: Left network mode [ 1263.651040][T28812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.688609][T28812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.758427][T28812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.836351][T13592] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 1263.903594][ T4272] Bluetooth: hci5: command 0x041b tx timeout [ 1263.980675][T28812] device hsr_slave_0 entered promiscuous mode [ 1264.030488][T28812] device hsr_slave_1 entered promiscuous mode [ 1264.073806][T28812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1264.081404][T28812] Cannot create hsr debugfs directory [ 1264.224817][ T4272] ------------[ cut here ]------------ [ 1264.230612][ T4272] WARNING: CPU: 1 PID: 4272 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 1264.240584][ T4272] Modules linked in: [ 1264.244552][ T4272] CPU: 1 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1264.252116][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1264.262258][ T4272] Workqueue: hci4 hci_conn_timeout [ 1264.267438][ T4272] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1264.273099][ T4272] Code: 21 8e e8 84 33 9b f8 48 8b 35 c5 0d e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 0d 1c f8 e8 71 0d 4a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1264.292782][ T4272] RSP: 0018:ffffc90003ee7c08 EFLAGS: 00010293 [ 1264.298903][ T4272] RAX: ffffffff8938142f RBX: ffff888061986330 RCX: ffff88802a718000 [ 1264.306964][ T4272] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1264.314987][ T4272] RBP: 00000000ffffffff R08: ffff888061986013 R09: 1ffff1100c330c02 [ 1264.322981][ T4272] R10: dffffc0000000000 R11: ffffed100c330c03 R12: ffffffff81557724 [ 1264.331025][ T4272] R13: dffffc0000000000 R14: ffff888061986000 R15: ffff888061986010 [ 1264.339045][ T4272] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1264.348046][ T4272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1264.354680][ T4272] CR2: 0000200000000200 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 1264.362674][ T4272] DR0: 0000000000000000 DR1: 0000000000000b6e DR2: 0000000000000000 [ 1264.370724][ T4272] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1264.378742][ T4272] Call Trace: [ 1264.382038][ T4272] [ 1264.385030][ T4272] ? process_one_work+0x7b4/0x1160 [ 1264.390239][ T4272] process_one_work+0x8ab/0x1160 [ 1264.395244][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 1264.400895][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1264.405997][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1264.411563][ T4272] ? wq_worker_running+0x97/0x190 [ 1264.416727][ T4272] worker_thread+0xaf5/0x12a0 [ 1264.421448][ T4272] kthread+0x29d/0x330 [ 1264.425722][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 1264.430762][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 1264.435407][ T4272] ret_from_fork+0x1f/0x30 [ 1264.440073][ T4272] [ 1264.443114][ T4272] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1264.450422][ T4272] CPU: 1 PID: 4272 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1264.458046][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1264.468095][ T4272] Workqueue: hci4 hci_conn_timeout [ 1264.473204][ T4272] Call Trace: [ 1264.476487][ T4272] [ 1264.479501][ T4272] dump_stack_lvl+0x188/0x24e [ 1264.484171][ T4272] ? memcpy+0x3c/0x60 [ 1264.488143][ T4272] ? show_regs_print_info+0x12/0x12 [ 1264.493332][ T4272] ? load_image+0x410/0x410 [ 1264.497835][ T4272] panic+0x2d3/0x710 [ 1264.501720][ T4272] ? bpf_jit_dump+0xd0/0xd0 [ 1264.506214][ T4272] ? __warn+0x2e0/0x4f0 [ 1264.510364][ T4272] __warn+0x2f8/0x4f0 [ 1264.514339][ T4272] ? hci_conn_timeout+0x24f/0x450 [ 1264.519356][ T4272] ? hci_conn_timeout+0x24f/0x450 [ 1264.524379][ T4272] report_bug+0x2ba/0x4f0 [ 1264.528732][ T4272] ? hci_conn_timeout+0x24f/0x450 [ 1264.533761][ T4272] handle_bug+0x3a/0x70 [ 1264.537912][ T4272] exc_invalid_op+0x16/0x40 [ 1264.542414][ T4272] asm_exc_invalid_op+0x16/0x20 [ 1264.547254][ T4272] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1264.552904][ T4272] Code: 21 8e e8 84 33 9b f8 48 8b 35 c5 0d e9 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 0d 1c f8 e8 71 0d 4a f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1264.572500][ T4272] RSP: 0018:ffffc90003ee7c08 EFLAGS: 00010293 [ 1264.578557][ T4272] RAX: ffffffff8938142f RBX: ffff888061986330 RCX: ffff88802a718000 [ 1264.586520][ T4272] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1264.594480][ T4272] RBP: 00000000ffffffff R08: ffff888061986013 R09: 1ffff1100c330c02 [ 1264.602438][ T4272] R10: dffffc0000000000 R11: ffffed100c330c03 R12: ffffffff81557724 [ 1264.610400][ T4272] R13: dffffc0000000000 R14: ffff888061986000 R15: ffff888061986010 [ 1264.618370][ T4272] ? process_one_work+0x7b4/0x1160 [ 1264.623485][ T4272] ? hci_conn_timeout+0x24f/0x450 [ 1264.628506][ T4272] ? hci_conn_timeout+0x24f/0x450 [ 1264.633534][ T4272] ? process_one_work+0x7b4/0x1160 [ 1264.638648][ T4272] process_one_work+0x8ab/0x1160 [ 1264.643597][ T4272] ? worker_detach_from_pool+0x240/0x240 [ 1264.649233][ T4272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1264.654256][ T4272] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1264.659798][ T4272] ? wq_worker_running+0x97/0x190 [ 1264.664822][ T4272] worker_thread+0xaf5/0x12a0 [ 1264.669512][ T4272] kthread+0x29d/0x330 [ 1264.673571][ T4272] ? worker_clr_flags+0x1a0/0x1a0 [ 1264.678604][ T4272] ? kthread_blkcg+0xd0/0xd0 [ 1264.683191][ T4272] ret_from_fork+0x1f/0x30 [ 1264.687632][ T4272] [ 1264.690895][ T4272] Kernel Offset: disabled [ 1264.695271][ T4272] Rebooting in 86400 seconds..