last executing test programs: 33m46.564355499s ago: executing program 0 (id=1536): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x78, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000500), 0x4) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x81, 0x8, 0x0, 0x0}}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000b80)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x12, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xd, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1750c, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003800)}, 0x40010101) 33m46.336354132s ago: executing program 0 (id=1530): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x73b81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xa}, 0x802, 0x1, 0x5, 0x9, 0x13c, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="df1249a97304b280055bb2979407666be2ae2e0b066e6550c039bc3d434f72b521e9a46b56d3ecff2d32a3e653fd9c8d19eba4a815dffb2ba1f671798522c321662c815f6b5597bba30b5cebb671959a1bcaa426f722f5fd1b911072d6b914a9f8813b9f1ccfde7a0a20", 0x6a}, {0x0}, {&(0x7f0000000580)="cd2542ea830732a5f115b47bf1b46de655903b2aca4779a71b19f33d591ce9c1324e01cd000be8c0f09c61847082c6b9041c80906d6aa346e4f5aa8ecaf12d7c00833dc3ef27381db4dd3b9a28096b6c3719fa2a358100baae4f19334414ea58947b9e8985725990b52a855c2c7b", 0x6e}], 0x3}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 33m44.352961348s ago: executing program 0 (id=1542): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x73b81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xa}, 0x802, 0x1, 0x5, 0x9, 0x13c, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="df1249a97304b280055bb2979407666be2ae2e0b066e6550c039bc3d434f72b521e9a46b56d3ecff2d32a3e653fd9c8d19eba4a815dffb2ba1f671798522c321662c815f6b5597bba30b5cebb671959a1bcaa426f722f5fd1b911072d6b914a9f8813b9f1ccfde7a0a20", 0x6a}, {0x0}, {&(0x7f0000000580)="cd2542ea830732a5f115b47bf1b46de655903b2aca4779a71b19f33d591ce9c1324e01cd000be8c0f09c61847082c6b9041c80906d6aa346e4f5aa8ecaf12d7c00833dc3ef27381db4dd3b9a28096b6c3719fa2a358100baae4f19334414ea58947b9e8985725990b52a855c2c7b", 0x6e}], 0x3}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 33m43.764547372s ago: executing program 0 (id=1539): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x78, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000500), 0x4) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x81, 0x8, 0x0, 0x0}}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000b80)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x12, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xd, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1750c, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c80)}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003800)}, 0x40010101) 33m43.059069343s ago: executing program 0 (id=1543): r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x40}, 0x104101, 0x5, 0x3, 0x1, 0x0, 0x0, 0x81}, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0x7fffffff}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) socketpair(0x22, 0x2, 0xd6ef, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="000003000000c600003e77de8c0000ff00000041ab77e88d71"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000280), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r4, 0x0, 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) socket$kcm(0x10, 0x3, 0x10) 33m42.694179844s ago: executing program 0 (id=1544): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300001fffffff850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1000000004000000040000000680000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3e971d"], 0x9a) recvmsg$unix(r2, &(0x7f0000000b40)={&(0x7f0000000800), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/130, 0x82}, {&(0x7f0000000940)=""/118, 0x76}, {&(0x7f00000009c0)=""/116, 0x74}, {&(0x7f0000000780)=""/34, 0x22}], 0x4}, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x42, &(0x7f0000000300)=""/66, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xe, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600), &(0x7f0000000640)=[{0x3, 0x4, 0x5, 0xd}, {0x0, 0x2, 0x10, 0x3}, {0x3, 0x2, 0x4, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x5, 0x2, 0xa, 0xc}, {0x4, 0x5, 0x1, 0xa}], 0x10, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10182, 0x0, 0x0, 0x0, 0x9, 0x0, 0x65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='cpu&20\t&&') 33m27.567454415s ago: executing program 32 (id=1544): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300001fffffff850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1000000004000000040000000680000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3e971d"], 0x9a) recvmsg$unix(r2, &(0x7f0000000b40)={&(0x7f0000000800), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/130, 0x82}, {&(0x7f0000000940)=""/118, 0x76}, {&(0x7f00000009c0)=""/116, 0x74}, {&(0x7f0000000780)=""/34, 0x22}], 0x4}, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x42, &(0x7f0000000300)=""/66, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xe, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000600), &(0x7f0000000640)=[{0x3, 0x4, 0x5, 0xd}, {0x0, 0x2, 0x10, 0x3}, {0x3, 0x2, 0x4, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x5, 0x2, 0xa, 0xc}, {0x4, 0x5, 0x1, 0xa}], 0x10, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10182, 0x0, 0x0, 0x0, 0x9, 0x0, 0x65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000040) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) gettid() syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='cpu&20\t&&') 24.774475642s ago: executing program 4 (id=10538): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x800000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000080180100002020702500000000002020207b0af8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xfffffdef) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000980), 0x20000992) 23.743102511s ago: executing program 4 (id=10548): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000340), 0xfffffffffffffed2) 20.32614151s ago: executing program 4 (id=10553): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x7, 0x0, 0x4000000009, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 20.194278858s ago: executing program 4 (id=10554): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) 20.063691475s ago: executing program 4 (id=10555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00c774df4f36c90f000007000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1a9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5d2ee622b4b079e8, 0x80, 0x2, 0x95, 0xfe, 0x10, 0x0, 0xc8d, 0x1040, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3, @perf_config_ext={0x3, 0x1}, 0x10000, 0x0, 0x2, 0x3, 0x8000, 0x1000, 0x2907, 0x0, 0x3541, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00', r4}, 0x18) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\x00'], 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f00000001c0)='GPL\x00', 0x7fff, 0x91, &(0x7f0000000500)=""/145, 0x41100, 0x6, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x0, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x3, 0x3, 0xb, 0x5}, {0x3, 0x4, 0x1, 0x4}], 0x10, 0xfa35}, 0x94) 18.098249119s ago: executing program 4 (id=10556): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000004c0)={&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000240)=""/89, 0x59}], 0x2, &(0x7f0000000440)=""/93, 0x5d}, 0x10140) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.770673671s ago: executing program 2 (id=10592): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000002, 0x1}, 0x2008, 0x401, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 5.981917093s ago: executing program 1 (id=10597): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 5.788587974s ago: executing program 1 (id=10598): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0500000005000000ae"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086466670881ffe80000000000000", @ANYRESDEC], 0xffdd) 5.231422246s ago: executing program 2 (id=10600): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) 5.078885556s ago: executing program 1 (id=10601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.047523787s ago: executing program 2 (id=10602): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x7, 0x0, 0x4000000009, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 4.969028821s ago: executing program 3 (id=10603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ddffffff850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.854986618s ago: executing program 1 (id=10604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00c774df4f36c90f000007000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1a9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5d2ee622b4b079e8, 0x80, 0x2, 0x95, 0xfe, 0x10, 0x0, 0xc8d, 0x1040, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3, @perf_config_ext={0x3, 0x1}, 0x10000, 0x0, 0x2, 0x3, 0x8000, 0x1000, 0x2907, 0x0, 0x3541, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00', r4}, 0x18) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\x00'], 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 4.833712079s ago: executing program 2 (id=10605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 4.644484761s ago: executing program 2 (id=10606): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3.537256445s ago: executing program 1 (id=10607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0500000005000000ae0c000009"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000200)=r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.470359519s ago: executing program 2 (id=10608): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000009f0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000062000000b700000000000000950000000000000009"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4107}, 0x4c) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x9, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)='cpu<-0||!') openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xc00c1, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.395777171s ago: executing program 33 (id=10556): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000004c0)={&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000240)=""/89, 0x59}], 0x2, &(0x7f0000000440)=""/93, 0x5d}, 0x10140) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 651.854033ms ago: executing program 3 (id=10610): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) 563.463467ms ago: executing program 1 (id=10611): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 446.797624ms ago: executing program 3 (id=10612): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 215.246638ms ago: executing program 3 (id=10613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2) 88.471855ms ago: executing program 3 (id=10614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0xf00}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 0s ago: executing program 3 (id=10615): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f0000001280)=r0}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0xffffffffffffff49, 0x8, 0xff, 0x0, 0x3, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6}, 0x4295, 0x6}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) kernel console output (not intermixed with test programs): 78051][T24319] netlink: 'syz.3.5501': attribute type 29 has an invalid length. [ 1354.863085][T24330] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5504'. [ 1354.957864][T24335] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5504'. [ 1355.174460][T24330] netlink: 'syz.1.5504': attribute type 29 has an invalid length. [ 1355.244892][T24330] netlink: 'syz.1.5504': attribute type 29 has an invalid length. [ 1355.355440][T24346] syzkaller0: entered promiscuous mode [ 1355.364707][T24346] syzkaller0: entered allmulticast mode [ 1355.383244][T24335] netlink: 'syz.1.5504': attribute type 29 has an invalid length. [ 1355.396350][T24339] netlink: 'syz.1.5504': attribute type 29 has an invalid length. [ 1355.791175][T24345] aaaaaaaaaaaaaaa: entered promiscuous mode [ 1356.683166][T24359] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5510'. [ 1356.761822][T24367] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5510'. [ 1356.927690][T24359] netlink: 'syz.4.5510': attribute type 29 has an invalid length. [ 1357.305185][T24376] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5515'. [ 1357.316736][T24376] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5515'. [ 1357.536887][T24383] syzkaller0: entered promiscuous mode [ 1357.643069][T24383] syzkaller0: entered allmulticast mode [ 1360.169900][ T5783] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 1362.073178][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.086920][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.811820][ T5783] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1364.674717][ T5783] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 1365.123354][T24480] validate_nla: 7 callbacks suppressed [ 1365.123377][T24480] netlink: 'syz.3.5552': attribute type 10 has an invalid length. [ 1366.321088][T24497] netlink: 'syz.1.5559': attribute type 10 has an invalid length. [ 1366.335958][T24497] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.5559'. [ 1366.412677][T24501] syzkaller0: entered promiscuous mode [ 1366.418534][T24501] syzkaller0: entered allmulticast mode [ 1366.467018][T24503] syzkaller0: entered promiscuous mode [ 1366.479710][T24503] syzkaller0: entered allmulticast mode [ 1368.724785][T24514] syzkaller0: left promiscuous mode [ 1368.731558][T24514] syzkaller0: left allmulticast mode [ 1370.118256][T24551] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5577'. [ 1370.157483][T24551] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5577'. [ 1370.517051][T24551] netlink: 'syz.1.5577': attribute type 29 has an invalid length. [ 1370.920222][T24551] netlink: 'syz.1.5577': attribute type 29 has an invalid length. [ 1371.130544][T24569] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1371.154325][T24569] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1371.240091][T24569] netlink: 'syz.1.5590': attribute type 29 has an invalid length. [ 1371.277545][T24569] netlink: 'syz.1.5590': attribute type 29 has an invalid length. [ 1371.309830][T24576] netlink: 'syz.1.5590': attribute type 29 has an invalid length. [ 1371.337245][T24578] netlink: 'syz.1.5590': attribute type 29 has an invalid length. [ 1375.917601][T24607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5593'. [ 1376.116215][T24626] syzkaller0: entered promiscuous mode [ 1376.128071][T24626] syzkaller0: entered allmulticast mode [ 1376.135355][T24625] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5596'. [ 1376.155170][T24625] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5596'. [ 1376.207330][T24625] netlink: 'syz.2.5596': attribute type 29 has an invalid length. [ 1376.243284][T24625] netlink: 'syz.2.5596': attribute type 29 has an invalid length. [ 1376.255239][T24628] netlink: 'syz.2.5596': attribute type 29 has an invalid length. [ 1376.274132][T24625] netlink: 'syz.2.5596': attribute type 29 has an invalid length. [ 1376.385037][T24633] syzkaller0: left promiscuous mode [ 1376.402649][T24633] syzkaller0: left allmulticast mode [ 1376.505651][T24634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5609'. [ 1377.937153][ T5783] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 1377.937202][ T5783] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1378.262933][T24670] syzkaller0: left promiscuous mode [ 1378.303955][T24670] syzkaller0: left allmulticast mode [ 1378.530198][T24673] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5617'. [ 1378.627388][T24673] netlink: 'syz.1.5617': attribute type 29 has an invalid length. [ 1378.755219][T24675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5618'. [ 1378.769659][T24673] netlink: 'syz.1.5617': attribute type 29 has an invalid length. [ 1378.820279][T24672] netlink: 'syz.1.5617': attribute type 29 has an invalid length. [ 1378.954886][T24673] netlink: 'syz.1.5617': attribute type 29 has an invalid length. [ 1380.266855][T24698] netlink: 'syz.2.5624': attribute type 11 has an invalid length. [ 1380.330466][T24698] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5624'. [ 1380.803303][T24708] netlink: 'syz.2.5628': attribute type 19 has an invalid length. [ 1380.831189][T24708] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.5628'. [ 1381.144645][T24716] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5630'. [ 1381.183607][T24716] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5630'. [ 1381.316197][T24716] netlink: 'syz.4.5630': attribute type 29 has an invalid length. [ 1381.376257][T24716] netlink: 'syz.4.5630': attribute type 29 has an invalid length. [ 1381.423305][T24719] netlink: 'syz.4.5630': attribute type 29 has an invalid length. [ 1381.449434][T24720] netlink: 'syz.4.5630': attribute type 29 has an invalid length. [ 1386.521681][T24740] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5636'. [ 1386.590790][T24738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5637'. [ 1386.593192][T24742] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5636'. [ 1386.689033][T24740] netlink: 'syz.1.5636': attribute type 29 has an invalid length. [ 1386.712524][T24740] netlink: 'syz.1.5636': attribute type 29 has an invalid length. [ 1386.731944][T24742] netlink: 'syz.1.5636': attribute type 29 has an invalid length. [ 1386.747225][T24740] netlink: 'syz.1.5636': attribute type 29 has an invalid length. [ 1387.767426][T24755] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5643'. [ 1387.844929][T24756] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5643'. [ 1388.172095][T24755] netlink: 'syz.4.5643': attribute type 29 has an invalid length. [ 1388.233906][T24755] netlink: 'syz.4.5643': attribute type 29 has an invalid length. [ 1388.316738][T24756] netlink: 'syz.4.5643': attribute type 29 has an invalid length. [ 1388.399893][T24757] netlink: 'syz.4.5643': attribute type 29 has an invalid length. [ 1388.451836][T24759] ±ÿ: renamed from team_slave_1 (while UP) [ 1389.321307][T24770] netlink: 'syz.3.5647': attribute type 10 has an invalid length. [ 1389.359903][T24770] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.5647'. [ 1389.703118][T24778] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1389.748953][T24778] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1389.935214][T24778] netlink: 'syz.3.5651': attribute type 29 has an invalid length. [ 1392.102045][T24806] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1392.149038][T24801] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1392.160395][T24806] validate_nla: 3 callbacks suppressed [ 1392.160411][T24806] netlink: 'syz.2.5657': attribute type 29 has an invalid length. [ 1392.343084][T24806] netlink: 'syz.2.5657': attribute type 29 has an invalid length. [ 1392.403691][T24813] netlink: 'syz.1.5659': attribute type 10 has an invalid length. [ 1392.413866][T24810] netlink: 'syz.2.5657': attribute type 29 has an invalid length. [ 1392.461910][T24813] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.5659'. [ 1392.565282][T24801] netlink: 'syz.2.5657': attribute type 29 has an invalid length. [ 1393.006668][T24821] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5661'. [ 1396.596126][T24857] netlink: 'syz.1.5670': attribute type 10 has an invalid length. [ 1396.605673][T24857] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.5670'. [ 1396.728529][T24862] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5672'. [ 1396.763519][T24862] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5672'. [ 1396.914562][T24862] netlink: 'syz.4.5672': attribute type 29 has an invalid length. [ 1396.947469][T24862] netlink: 'syz.4.5672': attribute type 29 has an invalid length. [ 1396.996930][T24863] netlink: 'syz.4.5672': attribute type 29 has an invalid length. [ 1397.030682][T24864] netlink: 'syz.4.5672': attribute type 29 has an invalid length. [ 1399.659286][T24868] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP) [ 1405.277287][T24919] netlink: 'syz.3.5688': attribute type 29 has an invalid length. [ 1405.295542][T24919] netlink: 'syz.3.5688': attribute type 29 has an invalid length. [ 1405.317524][T24919] netlink: 'syz.3.5688': attribute type 29 has an invalid length. [ 1405.938273][T24928] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5691'. [ 1405.973037][T24932] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5691'. [ 1406.045365][T24928] netlink: 'syz.3.5691': attribute type 29 has an invalid length. [ 1406.086435][T24928] netlink: 'syz.3.5691': attribute type 29 has an invalid length. [ 1406.103876][T24932] netlink: 'syz.3.5691': attribute type 29 has an invalid length. [ 1406.143812][T24928] netlink: 'syz.3.5691': attribute type 29 has an invalid length. [ 1406.427981][T24931] netlink: 'syz.1.5692': attribute type 10 has an invalid length. [ 1406.464440][T24931] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.5692'. [ 1407.306296][T24940] syzkaller0: entered promiscuous mode [ 1407.318306][T24940] syzkaller0: entered allmulticast mode [ 1411.979867][T24953] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1411.988972][T24954] netlink: 'syz.1.5700': attribute type 10 has an invalid length. [ 1412.038863][T24954] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1412.046143][T24954] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1412.057408][T24954] team0: Port device wlan1 removed [ 1412.241609][T24964] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5704'. [ 1412.306039][T24968] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5704'. [ 1412.550654][T24964] netlink: 'syz.1.5704': attribute type 29 has an invalid length. [ 1412.646243][T24964] netlink: 'syz.1.5704': attribute type 29 has an invalid length. [ 1412.700174][T24968] netlink: 'syz.1.5704': attribute type 29 has an invalid length. [ 1412.714126][T24970] netlink: 'syz.1.5704': attribute type 29 has an invalid length. [ 1414.018161][T24986] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 1414.037660][T24986] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 1414.707535][T24998] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5715'. [ 1414.775425][T25000] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5715'. [ 1418.813252][T25059] syzkaller0: entered promiscuous mode [ 1418.818819][T25059] syzkaller0: entered allmulticast mode [ 1418.865289][T25061] netlink: 'syz.2.5733': attribute type 1 has an invalid length. [ 1418.909681][T25061] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.5733'. [ 1418.949692][T25061] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5733'. [ 1420.623061][T25085] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 1420.666172][T25087] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5747'. [ 1420.742645][T25088] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5747'. [ 1420.769896][T25085] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 1421.104436][T25087] netlink: 'syz.2.5747': attribute type 29 has an invalid length. [ 1421.247668][T25087] netlink: 'syz.2.5747': attribute type 29 has an invalid length. [ 1421.383858][T25090] netlink: 'syz.2.5747': attribute type 29 has an invalid length. [ 1423.639971][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.649975][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.877817][T25125] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5751'. [ 1424.081970][T25123] netlink: 'syz.4.5751': attribute type 29 has an invalid length. [ 1424.102664][T25123] netlink: 'syz.4.5751': attribute type 29 has an invalid length. [ 1424.118323][T25125] netlink: 'syz.4.5751': attribute type 29 has an invalid length. [ 1424.186214][T25123] netlink: 'syz.4.5751': attribute type 29 has an invalid length. [ 1424.465002][T25136] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 1424.480878][T25136] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 1425.514403][T25148] syzkaller0: entered promiscuous mode [ 1425.520189][T25148] syzkaller0: entered allmulticast mode [ 1426.734248][T25169] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5765'. [ 1426.776395][T25169] netlink: 'syz.4.5765': attribute type 29 has an invalid length. [ 1432.216229][T25170] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5765'. [ 1432.225426][T25169] netlink: 'syz.4.5765': attribute type 29 has an invalid length. [ 1432.491629][T25198] netlink: 'syz.1.5772': attribute type 27 has an invalid length. [ 1433.184917][T25216] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5778'. [ 1433.207611][T25216] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5778'. [ 1433.278447][T25216] netlink: 'syz.3.5778': attribute type 29 has an invalid length. [ 1433.295904][T25216] netlink: 'syz.3.5778': attribute type 29 has an invalid length. [ 1433.314729][T25220] netlink: 'syz.3.5778': attribute type 29 has an invalid length. [ 1433.326963][T25216] netlink: 'syz.3.5778': attribute type 29 has an invalid length. [ 1433.373311][T25218] netlink: 'syz.4.5779': attribute type 10 has an invalid length. [ 1433.521901][T25218] `: Port device hsr0 added [ 1433.528322][T25222] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5780'. [ 1433.542152][T25222] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5780'. [ 1433.636357][T25222] netlink: 'syz.3.5780': attribute type 29 has an invalid length. [ 1433.652341][T25222] netlink: 'syz.3.5780': attribute type 29 has an invalid length. [ 1433.665045][T25223] netlink: 'syz.3.5780': attribute type 29 has an invalid length. [ 1434.405054][T25242] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1434.409714][T25240] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1435.083121][T25256] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5791'. [ 1435.151836][T25256] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5791'. [ 1435.871413][ T5783] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 1435.872854][T23880] Bluetooth: hci3: hardware error 0x00 [ 1436.472222][T25278] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5801'. [ 1437.818055][T25298] validate_nla: 14 callbacks suppressed [ 1437.818178][T25298] netlink: 'syz.1.5806': attribute type 10 has an invalid length. [ 1437.989794][T23880] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1438.041128][T25308] __nla_validate_parse: 1 callbacks suppressed [ 1438.041169][T25308] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5808'. [ 1438.185556][T25314] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5808'. [ 1438.205363][T25312] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5810'. [ 1438.283057][T25313] Ÿë: port 1(veth0_to_team) entered blocking state [ 1438.285325][T25308] netlink: 'syz.4.5808': attribute type 29 has an invalid length. [ 1438.325376][T25313] Ÿë: port 1(veth0_to_team) entered disabled state [ 1438.342610][T25313] veth0_to_team: entered allmulticast mode [ 1438.361197][T25313] veth0_to_team: entered promiscuous mode [ 1438.379807][T25308] netlink: 'syz.4.5808': attribute type 29 has an invalid length. [ 1438.426555][T25316] netlink: 'syz.4.5808': attribute type 29 has an invalid length. [ 1438.448493][T25314] netlink: 'syz.4.5808': attribute type 29 has an invalid length. [ 1438.527224][T25318] netlink: 'syz.3.5812': attribute type 10 has an invalid length. [ 1440.911974][T25347] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5821'. [ 1441.447599][T25354] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5823'. [ 1441.487363][T25352] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5823'. [ 1441.504660][T25350] Ÿë: port 1(veth0_to_team) entered blocking state [ 1441.535675][T25350] Ÿë: port 1(veth0_to_team) entered disabled state [ 1441.545230][T25354] netlink: 'syz.3.5823': attribute type 29 has an invalid length. [ 1441.567085][T25350] veth0_to_team: entered allmulticast mode [ 1441.588360][T25350] veth0_to_team: entered promiscuous mode [ 1441.630194][T25354] netlink: 'syz.3.5823': attribute type 29 has an invalid length. [ 1441.663098][T25352] netlink: 'syz.3.5823': attribute type 29 has an invalid length. [ 1441.761640][T25354] netlink: 'syz.3.5823': attribute type 29 has an invalid length. [ 1442.530110][T23880] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1 [ 1442.531481][ T5783] Bluetooth: hci4: hardware error 0x00 [ 1443.511307][T25377] netlink: 'syz.3.5829': attribute type 10 has an invalid length. [ 1444.431939][T23880] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1444.630493][ T5783] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1444.764947][T25398] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5834'. [ 1444.770103][T25401] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5834'. [ 1444.995553][T25398] netlink: 'syz.3.5834': attribute type 29 has an invalid length. [ 1445.105589][T25398] netlink: 'syz.3.5834': attribute type 29 has an invalid length. [ 1445.230452][T25401] netlink: 'syz.3.5834': attribute type 29 has an invalid length. [ 1445.288002][T25403] netlink: 'syz.3.5834': attribute type 29 has an invalid length. [ 1445.730414][T25421] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5848'. [ 1445.828632][T25423] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5848'. [ 1446.074331][ T5783] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 1446.075653][ T5783] Bluetooth: hci2: hardware error 0x00 [ 1446.206965][T25421] netlink: 'syz.4.5848': attribute type 29 has an invalid length. [ 1446.249207][T25421] netlink: 'syz.4.5848': attribute type 29 has an invalid length. [ 1446.321314][T25423] netlink: 'syz.4.5848': attribute type 29 has an invalid length. [ 1446.348791][T25425] netlink: 'syz.4.5848': attribute type 29 has an invalid length. [ 1447.591080][T25440] Ÿë: port 1(veth0_to_team) entered blocking state [ 1447.598143][T25440] Ÿë: port 1(veth0_to_team) entered disabled state [ 1447.659868][T25440] veth0_to_team: entered allmulticast mode [ 1447.681250][T25440] veth0_to_team: entered promiscuous mode [ 1448.229783][ T5783] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1450.810494][T25470] netlink: 'syz.4.5854': attribute type 10 has an invalid length. [ 1453.171402][T25496] IPv6: pim6reg1: Disabled Multicast RS [ 1454.488530][T25511] netlink: 'syz.3.5868': attribute type 10 has an invalid length. [ 1454.544518][T25509] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1455.372409][ T5783] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 1456.472254][T25523] netlink: 'syz.3.5871': attribute type 21 has an invalid length. [ 1456.539830][T25523] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5871'. [ 1458.803333][T25547] netlink: 'syz.3.5877': attribute type 10 has an invalid length. [ 1458.879799][T25547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1460.143366][T25559] netlink: 'syz.3.5880': attribute type 10 has an invalid length. [ 1460.181861][T25559] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.5880'. [ 1467.439634][T25614] netlink: 'syz.2.5893': attribute type 3 has an invalid length. [ 1467.525259][T25614] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5893'. [ 1468.391954][T25626] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1470.144887][T25645] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5903'. [ 1470.210952][T25646] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5903'. [ 1470.372168][T25646] netlink: 'syz.4.5903': attribute type 29 has an invalid length. [ 1470.550049][T25646] netlink: 'syz.4.5903': attribute type 29 has an invalid length. [ 1470.689202][T25645] netlink: 'syz.4.5903': attribute type 29 has an invalid length. [ 1473.519281][T25662] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5908'. [ 1474.192151][T25673] netlink: 'syz.1.5910': attribute type 3 has an invalid length. [ 1474.313567][T25673] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5910'. [ 1474.979964][T25684] netlink: 'syz.1.5913': attribute type 29 has an invalid length. [ 1475.067745][T25684] netlink: 'syz.1.5913': attribute type 29 has an invalid length. [ 1477.805433][T25711] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5924'. [ 1478.642663][T25724] netlink: 'syz.4.5925': attribute type 3 has an invalid length. [ 1478.659572][T25724] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1483.738670][T25768] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5941'. [ 1484.984763][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.994256][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.990999][T25803] netlink: 'syz.2.5952': attribute type 29 has an invalid length. [ 1488.096380][T25803] netlink: 'syz.2.5952': attribute type 29 has an invalid length. [ 1488.742150][T25808] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5953'. [ 1489.232791][T25819] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1492.381907][T25869] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5967'. [ 1492.887247][T25877] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5971'. [ 1494.129211][T25898] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5979'. [ 1497.148145][T25907] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5984'. [ 1497.186851][T25909] netlink: 'syz.4.5983': attribute type 29 has an invalid length. [ 1497.291478][T25909] netlink: 'syz.4.5983': attribute type 29 has an invalid length. [ 1498.890605][T25930] netlink: 'syz.3.5998': attribute type 29 has an invalid length. [ 1498.950259][T25930] netlink: 'syz.3.5998': attribute type 29 has an invalid length. [ 1501.534034][T25953] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5995'. [ 1501.555917][T25953] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1501.620031][T25953] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1504.491914][T25965] netlink: 'syz.1.6001': attribute type 39 has an invalid length. [ 1508.039170][T25998] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6013'. [ 1508.052191][T25998] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1508.063213][T25998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1509.808431][T26011] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6017'. [ 1516.408832][T26054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6031'. [ 1516.447454][T26054] bridge_slave_0: entered allmulticast mode [ 1519.973138][T26094] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6044'. [ 1521.322884][T26115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1522.348662][T26120] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6051'. [ 1525.302257][T26163] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1526.347255][T26178] netlink: 'syz.3.6071': attribute type 28 has an invalid length. [ 1526.389670][T26178] netlink: 'syz.3.6071': attribute type 29 has an invalid length. [ 1526.415732][T26178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6071'. [ 1526.916116][T26173] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6068'. [ 1529.985623][T26219] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.6083'. [ 1530.405355][T26230] netlink: 'syz.1.6088': attribute type 10 has an invalid length. [ 1530.592728][T26229] delete_channel: no stack [ 1534.499084][T26269] netlink: 'syz.2.6100': attribute type 1 has an invalid length. [ 1534.534951][T26269] netlink: 'syz.2.6100': attribute type 2 has an invalid length. [ 1534.546067][T26269] netlink: 'syz.2.6100': attribute type 2 has an invalid length. [ 1534.592800][T26269] netlink: 'syz.2.6100': attribute type 3 has an invalid length. [ 1534.698080][T26269] netlink: 'syz.2.6100': attribute type 4 has an invalid length. [ 1534.776527][T26269] netlink: 'syz.2.6100': attribute type 5 has an invalid length. [ 1534.850142][T26269] netlink: 'syz.2.6100': attribute type 6 has an invalid length. [ 1534.872770][T26269] netlink: 'syz.2.6100': attribute type 7 has an invalid length. [ 1534.882980][T26269] netlink: 'syz.2.6100': attribute type 9 has an invalid length. [ 1534.891211][T26269] netlink: 'syz.2.6100': attribute type 10 has an invalid length. [ 1534.899286][T26269] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.6100'. [ 1537.386304][T26309] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6110'. [ 1537.395805][T26311] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6111'. [ 1538.147687][T26312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6109'. [ 1540.717382][T26348] validate_nla: 7 callbacks suppressed [ 1540.717403][T26348] netlink: 'syz.1.6120': attribute type 10 has an invalid length. [ 1540.805343][T26355] netlink: 'syz.2.6121': attribute type 3 has an invalid length. [ 1540.879565][T26355] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6121'. [ 1542.250750][T26383] netlink: 'syz.4.6129': attribute type 28 has an invalid length. [ 1542.302221][T26383] netlink: 'syz.4.6129': attribute type 29 has an invalid length. [ 1542.328567][T26383] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6129'. [ 1542.375212][T26381] netlink: 'syz.3.6131': attribute type 10 has an invalid length. [ 1542.772035][T26380] delete_channel: no stack [ 1543.670467][T26402] netlink: 'syz.2.6132': attribute type 10 has an invalid length. [ 1544.610695][ T5783] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13 [ 1546.406961][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.421925][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.022057][T26440] netlink: 'syz.4.6145': attribute type 10 has an invalid length. [ 1547.290011][T26439] delete_channel: no stack [ 1548.610562][T26452] netlink: 'syz.4.6149': attribute type 10 has an invalid length. [ 1553.787756][T26494] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6160'. [ 1554.205694][T26497] netlink: 'syz.1.6160': attribute type 1 has an invalid length. [ 1554.338313][T26497] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6160'. [ 1555.162757][T26511] netlink: 'syz.4.6163': attribute type 10 has an invalid length. [ 1558.513435][T26539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1558.707573][T26539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1558.849884][T26536] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1558.887217][T26545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1564.306780][T26575] netlink: 'syz.1.6181': attribute type 10 has an invalid length. [ 1564.396683][T26581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1565.139909][T26596] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6186'. [ 1565.881867][T26592] netlink: 'syz.3.6186': attribute type 1 has an invalid length. [ 1565.913246][T26592] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6186'. [ 1566.655032][T26612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6190'. [ 1566.737458][T26613] netlink: 192444 bytes leftover after parsing attributes in process `syz.3.6189'. [ 1569.253723][T26624] netlink: 'syz.1.6193': attribute type 10 has an invalid length. [ 1569.282947][T26624] team0: left promiscuous mode [ 1569.302604][T26624] team_slave_0: left promiscuous mode [ 1569.314132][T26624] žÿ: left promiscuous mode [ 1569.333574][T26624] geneve0: left promiscuous mode [ 1569.339209][T26624] geneve1: left promiscuous mode [ 1569.359599][T26624] team0: left allmulticast mode [ 1569.389668][T26624] team_slave_0: left allmulticast mode [ 1569.402194][T26624] žÿ: left allmulticast mode [ 1569.406889][T26624] geneve0: left allmulticast mode [ 1569.552077][T26624] geneve1: left allmulticast mode [ 1569.627818][T26630] netlink: 'syz.3.6195': attribute type 10 has an invalid length. [ 1571.246424][T26652] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1571.527644][T26643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1571.858633][T26653] netlink: 'syz.2.6200': attribute type 1 has an invalid length. [ 1571.928967][T26653] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1572.610827][T26655] netlink: 'syz.3.6202': attribute type 9 has an invalid length. [ 1572.648462][T26655] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6202'. [ 1573.194577][T26655] netlink: 'syz.3.6202': attribute type 9 has an invalid length. [ 1573.257625][T26655] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6202'. [ 1574.040159][T26676] netlink: 'syz.4.6214': attribute type 10 has an invalid length. [ 1575.013269][T26682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1577.246649][T26701] netlink: 'syz.2.6215': attribute type 9 has an invalid length. [ 1577.356909][T26701] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6215'. [ 1577.736459][T26704] netlink: 'syz.2.6215': attribute type 9 has an invalid length. [ 1577.812391][T26704] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6215'. [ 1579.562637][T26713] netlink: 'syz.3.6218': attribute type 10 has an invalid length. [ 1581.558394][T26726] syzkaller0: entered promiscuous mode [ 1581.596000][T26726] syzkaller0: entered allmulticast mode [ 1582.355175][T26738] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6223'. [ 1582.760079][T26744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6223'. [ 1588.765945][T26741] netlink: 'syz.1.6223': attribute type 10 has an invalid length. [ 1588.777494][T26741] team0: Port device dummy0 added [ 1588.805849][T26742] netlink: 'syz.1.6223': attribute type 10 has an invalid length. [ 1588.836989][T26742] team0: Port device dummy0 removed [ 1588.851913][T26744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6223'. [ 1588.873021][T26738] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1588.884562][T26738] CPU: 1 PID: 26738 Comm: syz.1.6223 Not tainted syzkaller #0 [ 1588.892259][T26738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1588.902448][T26738] Call Trace: [ 1588.905761][T26738] [ 1588.908731][T26738] dump_stack_lvl+0x18c/0x250 [ 1588.913465][T26738] ? show_regs_print_info+0x20/0x20 [ 1588.918715][T26738] ? load_image+0x400/0x400 [ 1588.923290][T26738] sysfs_warn_dup+0x8e/0xa0 [ 1588.927841][T26738] sysfs_do_create_link_sd+0xc0/0x110 [ 1588.933277][T26738] device_add_class_symlinks+0x1cf/0x240 [ 1588.938951][T26738] device_add+0x507/0xc20 [ 1588.943492][T26738] wiphy_register+0x1dad/0x2ae0 [ 1588.948386][T26738] ? cfg80211_event_work+0x40/0x40 [ 1588.953514][T26738] ? minstrel_ht_alloc+0x88a/0x990 [ 1588.958655][T26738] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1588.964746][T26738] ieee80211_register_hw+0x3464/0x4250 [ 1588.970249][T26738] ? ieee80211_tasklet_handler+0x20/0x20 [ 1588.975899][T26738] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1588.981818][T26738] ? __debug_object_init+0xec/0x450 [ 1588.987043][T26738] ? __asan_memset+0x22/0x40 [ 1588.991653][T26738] ? __hrtimer_init+0x186/0x270 [ 1588.996523][T26738] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1589.002283][T26738] ? mac80211_hwsim_free+0x220/0x220 [ 1589.007588][T26738] ? rcu_is_watching+0x15/0xb0 [ 1589.012373][T26738] ? kstrndup+0xbd/0x140 [ 1589.016644][T26738] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1589.021958][T26738] ? __nla_validate+0x50/0x50 [ 1589.026670][T26738] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1589.033029][T26738] ? __nla_parse+0x40/0x50 [ 1589.037466][T26738] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1589.043816][T26738] genl_family_rcv_msg_doit+0x211/0x310 [ 1589.049396][T26738] ? end_current_label_crit_section+0x170/0x170 [ 1589.055667][T26738] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1589.061592][T26738] ? bpf_lsm_capable+0x9/0x10 [ 1589.066293][T26738] ? security_capable+0x89/0xb0 [ 1589.071204][T26738] genl_rcv_msg+0x619/0x7a0 [ 1589.075736][T26738] ? genl_bind+0x360/0x360 [ 1589.080172][T26738] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1589.086612][T26738] ? perf_trace_lock+0x304/0x3b0 [ 1589.091585][T26738] netlink_rcv_skb+0x241/0x4d0 [ 1589.096374][T26738] ? genl_bind+0x360/0x360 [ 1589.100814][T26738] ? netlink_ack+0x1180/0x1180 [ 1589.105608][T26738] ? __lock_acquire+0x7d40/0x7d40 [ 1589.110662][T26738] ? down_read+0x1ac/0x2e0 [ 1589.115103][T26738] genl_rcv+0x28/0x40 [ 1589.119106][T26738] netlink_unicast+0x751/0x8d0 [ 1589.123916][T26738] netlink_sendmsg+0x8d0/0xbf0 [ 1589.128714][T26738] ? perf_trace_lock+0x304/0x3b0 [ 1589.133680][T26738] ? netlink_getsockopt+0x590/0x590 [ 1589.138902][T26738] ? aa_sock_msg_perm+0x94/0x150 [ 1589.143867][T26738] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1589.149176][T26738] ? security_socket_sendmsg+0x80/0xa0 [ 1589.154650][T26738] ? netlink_getsockopt+0x590/0x590 [ 1589.159881][T26738] ____sys_sendmsg+0x5ba/0x960 [ 1589.164681][T26738] ? __asan_memset+0x22/0x40 [ 1589.169288][T26738] ? __sys_sendmsg_sock+0x30/0x30 [ 1589.174352][T26738] ? __import_iovec+0x5f2/0x850 [ 1589.179239][T26738] ? import_iovec+0x73/0xa0 [ 1589.183770][T26738] ___sys_sendmsg+0x2a6/0x360 [ 1589.188469][T26738] ? __sys_sendmsg+0x2a0/0x2a0 [ 1589.193323][T26738] __se_sys_sendmsg+0x1c2/0x2b0 [ 1589.198213][T26738] ? __x64_sys_sendmsg+0x80/0x80 [ 1589.203192][T26738] ? lockdep_hardirqs_on+0x98/0x150 [ 1589.208419][T26738] do_syscall_64+0x55/0xa0 [ 1589.212869][T26738] ? clear_bhb_loop+0x40/0x90 [ 1589.217567][T26738] ? clear_bhb_loop+0x40/0x90 [ 1589.222265][T26738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1589.228171][T26738] RIP: 0033:0x7f5893d9aeb9 [ 1589.232605][T26738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.252227][T26738] RSP: 002b:00007f5891ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1589.260846][T26738] RAX: ffffffffffffffda RBX: 00007f5894015fa0 RCX: 00007f5893d9aeb9 [ 1589.268933][T26738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1589.276935][T26738] RBP: 00007f5893e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1589.285015][T26738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1589.292999][T26738] R13: 00007f5894016038 R14: 00007f5894015fa0 R15: 00007ffe38257778 [ 1589.301015][T26738] [ 1589.660932][T26774] netlink: 'syz.2.6230': attribute type 10 has an invalid length. [ 1590.679672][T26782] netlink: 'syz.1.6232': attribute type 10 has an invalid length. [ 1590.765149][T26782] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6232'. [ 1591.201684][T26798] netlink: 'syz.1.6235': attribute type 9 has an invalid length. [ 1591.225748][T26798] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6235'. [ 1591.706382][T26801] netlink: 'syz.1.6235': attribute type 9 has an invalid length. [ 1591.739827][T26801] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6235'. [ 1593.123508][T26817] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1593.175304][T26817] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1593.280365][T26819] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1593.356817][T26821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6242'. [ 1596.984832][T26842] netlink: 'syz.4.6246': attribute type 10 has an invalid length. [ 1597.069596][T26842] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6246'. [ 1599.688250][T26872] syzkaller0: entered promiscuous mode [ 1599.766658][T26872] syzkaller0: entered allmulticast mode [ 1600.032438][T26883] netlink: 'syz.1.6256': attribute type 1 has an invalid length. [ 1600.060224][T26883] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.6256'. [ 1606.269084][T26883] netlink: 'syz.1.6256': attribute type 10 has an invalid length. [ 1606.316669][T26883] team0 (unregistering): Port device team_slave_0 removed [ 1606.338443][T26883] team0 (unregistering): Port device 72žÿ removed [ 1606.368587][T26883] team0 (unregistering): Port device geneve0 removed [ 1606.394810][T26883] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.404289][T26883] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.413838][T26883] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.442096][T26883] team0 (unregistering): Port device geneve1 removed [ 1606.828963][T26912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1606.942166][T26912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1607.145012][T26916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1607.322744][T26914] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1608.191739][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.199000][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.069123][T26921] netlink: 'syz.4.6266': attribute type 9 has an invalid length. [ 1610.096423][T26921] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6266'. [ 1610.633169][T26921] netlink: 'syz.4.6266': attribute type 9 has an invalid length. [ 1610.644171][T26921] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6266'. [ 1613.221207][T26946] netlink: 'syz.3.6273': attribute type 1 has an invalid length. [ 1613.229135][T26946] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.6273'. [ 1613.420018][T26946] netlink: 'syz.3.6273': attribute type 10 has an invalid length. [ 1613.603637][T26946] ` (unregistering): Port device team_slave_0 removed [ 1613.676974][T26946] ` (unregistering): Port device 26±ÿ removed [ 1613.767610][T26946] ` (unregistering): Port device geneve0 removed [ 1613.909197][T26949] netlink: 'syz.4.6274': attribute type 10 has an invalid length. [ 1613.953729][T26949] batman_adv: batadv0: Adding interface: wlan0 [ 1613.985290][T26949] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1614.019832][T26949] batman_adv: batadv0: Interface activated: wlan0 [ 1614.261922][T26957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1614.272335][T26957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1614.303712][T26957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1614.332067][T26957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1617.865096][T26992] netlink: 'syz.3.6288': attribute type 10 has an invalid length. [ 1617.923974][T26993] netlink: 'syz.4.6289': attribute type 1 has an invalid length. [ 1617.973868][T26993] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.6289'. [ 1618.211258][T26993] netlink: 'syz.4.6289': attribute type 10 has an invalid length. [ 1618.446694][T26993] ` (unregistering): Port device team_slave_0 removed [ 1618.581318][T26993] ` (unregistering): Port device 72žÿ removed [ 1618.704482][T26993] ` (unregistering): Port device geneve0 removed [ 1618.933878][T26993] ` (unregistering): Port device hsr0 removed [ 1619.532959][T27007] netlink: 'syz.2.6292': attribute type 10 has an invalid length. [ 1620.669079][T27019] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6296'. [ 1620.786720][T27020] netlink: 'syz.1.6296': attribute type 11 has an invalid length. [ 1620.816672][T27020] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.6296'. [ 1620.862461][T27020] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1620.888597][T27020] CPU: 1 PID: 27020 Comm: syz.1.6296 Not tainted syzkaller #0 [ 1620.896139][T27020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1620.906327][T27020] Call Trace: [ 1620.909642][T27020] [ 1620.912604][T27020] dump_stack_lvl+0x18c/0x250 [ 1620.917333][T27020] ? show_regs_print_info+0x20/0x20 [ 1620.922672][T27020] ? load_image+0x400/0x400 [ 1620.927230][T27020] sysfs_warn_dup+0x8e/0xa0 [ 1620.931938][T27020] sysfs_do_create_link_sd+0xc0/0x110 [ 1620.937342][T27020] device_add_class_symlinks+0x1cf/0x240 [ 1620.943017][T27020] device_add+0x507/0xc20 [ 1620.947390][T27020] wiphy_register+0x1dad/0x2ae0 [ 1620.952299][T27020] ? cfg80211_event_work+0x40/0x40 [ 1620.957527][T27020] ? minstrel_ht_alloc+0x88a/0x990 [ 1620.962691][T27020] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1620.968801][T27020] ieee80211_register_hw+0x3464/0x4250 [ 1620.974338][T27020] ? ieee80211_tasklet_handler+0x20/0x20 [ 1620.980015][T27020] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1620.985946][T27020] ? __debug_object_init+0xec/0x450 [ 1620.991202][T27020] ? __asan_memset+0x22/0x40 [ 1620.995858][T27020] ? __hrtimer_init+0x186/0x270 [ 1621.000948][T27020] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1621.006851][T27020] ? mac80211_hwsim_free+0x220/0x220 [ 1621.012275][T27020] ? rcu_is_watching+0x15/0xb0 [ 1621.017076][T27020] ? kstrndup+0xbd/0x140 [ 1621.021368][T27020] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1621.026570][T27020] ? __nla_validate+0x50/0x50 [ 1621.031302][T27020] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1621.037691][T27020] ? __nla_parse+0x40/0x50 [ 1621.042149][T27020] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1621.048519][T27020] genl_family_rcv_msg_doit+0x211/0x310 [ 1621.054115][T27020] ? end_current_label_crit_section+0x170/0x170 [ 1621.060403][T27020] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1621.066348][T27020] ? bpf_lsm_capable+0x9/0x10 [ 1621.071060][T27020] ? security_capable+0x89/0xb0 [ 1621.075966][T27020] genl_rcv_msg+0x619/0x7a0 [ 1621.080518][T27020] ? genl_bind+0x360/0x360 [ 1621.085320][T27020] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1621.091775][T27020] ? ref_tracker_free+0x690/0x840 [ 1621.096858][T27020] netlink_rcv_skb+0x241/0x4d0 [ 1621.101673][T27020] ? genl_bind+0x360/0x360 [ 1621.106143][T27020] ? netlink_ack+0x1180/0x1180 [ 1621.110958][T27020] ? __lock_acquire+0x7d40/0x7d40 [ 1621.116026][T27020] ? down_read+0x1ac/0x2e0 [ 1621.120484][T27020] genl_rcv+0x28/0x40 [ 1621.124508][T27020] netlink_unicast+0x751/0x8d0 [ 1621.129317][T27020] netlink_sendmsg+0x8d0/0xbf0 [ 1621.134131][T27020] ? netlink_getsockopt+0x590/0x590 [ 1621.139367][T27020] ? aa_sock_msg_perm+0x94/0x150 [ 1621.144345][T27020] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1621.149666][T27020] ? security_socket_sendmsg+0x80/0xa0 [ 1621.155158][T27020] ? netlink_getsockopt+0x590/0x590 [ 1621.160396][T27020] ____sys_sendmsg+0x5ba/0x960 [ 1621.165214][T27020] ? __asan_memset+0x22/0x40 [ 1621.169839][T27020] ? __sys_sendmsg_sock+0x30/0x30 [ 1621.174991][T27020] ? __import_iovec+0x5f2/0x850 [ 1621.179906][T27020] ? import_iovec+0x73/0xa0 [ 1621.184450][T27020] ___sys_sendmsg+0x2a6/0x360 [ 1621.189249][T27020] ? __sys_sendmsg+0x2a0/0x2a0 [ 1621.194137][T27020] __se_sys_sendmsg+0x1c2/0x2b0 [ 1621.199026][T27020] ? __x64_sys_sendmsg+0x80/0x80 [ 1621.204104][T27020] ? lockdep_hardirqs_on+0x98/0x150 [ 1621.209337][T27020] do_syscall_64+0x55/0xa0 [ 1621.213886][T27020] ? clear_bhb_loop+0x40/0x90 [ 1621.218617][T27020] ? clear_bhb_loop+0x40/0x90 [ 1621.223358][T27020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1621.229305][T27020] RIP: 0033:0x7f5893d9aeb9 [ 1621.233933][T27020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.253758][T27020] RSP: 002b:00007f5891fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1621.262222][T27020] RAX: ffffffffffffffda RBX: 00007f5894016090 RCX: 00007f5893d9aeb9 [ 1621.270318][T27020] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1621.278318][T27020] RBP: 00007f5893e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1621.286317][T27020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1621.294403][T27020] R13: 00007f5894016128 R14: 00007f5894016090 R15: 00007ffe38257778 [ 1621.302427][T27020] [ 1623.676465][T27042] delete_channel: no stack [ 1625.561328][T27064] wg2: left promiscuous mode [ 1625.826398][T27065] wg2: entered promiscuous mode [ 1626.321735][T27068] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6308'. [ 1626.414264][T27069] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6308'. [ 1627.359335][T27085] netlink: 'syz.1.6312': attribute type 10 has an invalid length. [ 1628.113571][T27090] netlink: 'syz.1.6314': attribute type 9 has an invalid length. [ 1628.121514][T27090] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6314'. [ 1628.210762][T27096] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6313'. [ 1628.274566][T27096] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6313'. [ 1628.299882][T27097] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6313'. [ 1628.352776][T27096] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6313'. [ 1628.384132][T27090] netlink: 'syz.1.6314': attribute type 9 has an invalid length. [ 1628.436214][T27090] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6314'. [ 1628.471303][T27095] delete_channel: no stack [ 1628.490700][T27095] delete_channel: no stack [ 1630.659537][T27116] netlink: 'syz.1.6322': attribute type 1 has an invalid length. [ 1631.981149][T27125] batman_adv: batadv0: Interface deactivated: wlan0 [ 1632.042821][T27125] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 1632.062266][T27125] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 1632.129028][T27124] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6331'. [ 1632.220895][T27125] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 1632.242015][T27125] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 1632.320243][T27125] batman_adv: batadv0: Interface activated: wlan0 [ 1632.354338][T27130] syz.4.6331[27130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1632.361185][T27130] syz.4.6331[27130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1634.644896][T27138] netlink: 'syz.4.6326': attribute type 10 has an invalid length. [ 1634.746205][T27138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6326'. [ 1635.149749][T27136] delete_channel: no stack [ 1636.799031][T27166] netlink: 'syz.2.6335': attribute type 10 has an invalid length. [ 1637.210292][T27166] mac80211_hwsim hwsim8 O3ãc¤±: left promiscuous mode [ 1637.297065][T27166] mac80211_hwsim hwsim8 O3ãc¤±: left allmulticast mode [ 1637.353915][T27166] `: Port device O3ãc¤± added [ 1637.470836][T27168] netlink: 'syz.1.6336': attribute type 2 has an invalid length. [ 1637.516315][T27165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1637.591425][T27168] netlink: 'syz.1.6336': attribute type 8 has an invalid length. [ 1637.650083][T27168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6336'. [ 1638.634548][T27175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6345'. [ 1643.391761][T27191] batman_adv: batadv0: Interface deactivated: wlan0 [ 1643.647572][T27194] syz.1.6340[27194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1643.647751][T27194] syz.1.6340[27194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1645.218384][T27191] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 1645.236861][T27191] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 1645.262427][T27192] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6340'. [ 1645.275968][T27193] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 1645.313988][T27193] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 1645.341914][T27193] batman_adv: batadv0: Interface activated: wlan0 [ 1646.194022][T27210] netlink: 'syz.2.6346': attribute type 2 has an invalid length. [ 1646.248743][T27210] netlink: 'syz.2.6346': attribute type 8 has an invalid length. [ 1646.288949][T27210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6346'. [ 1646.783837][T27216] netlink: 'syz.1.6347': attribute type 10 has an invalid length. [ 1646.914728][T27216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6347'. [ 1647.049801][T27215] delete_channel: no stack [ 1647.193682][T27224] netlink: 'syz.4.6350': attribute type 10 has an invalid length. [ 1647.217498][T27223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1647.448093][T27230] netlink: 'syz.2.6353': attribute type 10 has an invalid length. [ 1647.701560][T27226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6351'. [ 1649.523591][T27260] netlink: 'syz.2.6362': attribute type 10 has an invalid length. [ 1649.557061][T27260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6362'. [ 1649.593364][T27260] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1649.639241][T27260] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.868213][T27260] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1650.001597][T27259] delete_channel: no stack [ 1650.682679][T27276] netlink: 'syz.4.6366': attribute type 10 has an invalid length. [ 1651.691004][T27280] delete_channel: no stack [ 1652.962014][T27308] netlink: 'syz.4.6376': attribute type 2 has an invalid length. [ 1653.040297][T27308] netlink: 'syz.4.6376': attribute type 8 has an invalid length. [ 1653.048703][T27308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6376'. [ 1654.048864][T27320] netlink: 'syz.3.6377': attribute type 10 has an invalid length. [ 1654.097851][T27320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6377'. [ 1654.860069][T27317] delete_channel: no stack [ 1657.190932][T27358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6389'. [ 1658.827536][T27367] delete_channel: no stack [ 1659.028566][T27381] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1659.050067][T27381] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1659.079838][T27381] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1659.098751][T27381] batman_adv: batadv0: Interface activated: wlan0 [ 1659.263748][T27380] syz.2.6397[27380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1659.278220][T27380] syz.2.6397[27380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1661.268023][T27394] netlink: 'syz.3.6402': attribute type 10 has an invalid length. [ 1664.212919][T27416] delete_channel: no stack [ 1666.326301][T27425] netlink: 'syz.1.6416': attribute type 4 has an invalid length. [ 1666.383664][T27425] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6416'. [ 1666.437226][T27425] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1666.521925][T27425] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1669.518158][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.524827][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.106622][T27507] netlink: 'syz.3.6424': attribute type 4 has an invalid length. [ 1674.188308][T27507] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6424'. [ 1674.444542][T27507] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1675.772042][T27507] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1682.735241][T27581] netlink: 'syz.2.6445': attribute type 9 has an invalid length. [ 1682.743802][T27581] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6445'. [ 1683.209778][T27581] netlink: 'syz.2.6445': attribute type 10 has an invalid length. [ 1683.227756][T27581] hsr_slave_0: left allmulticast mode [ 1683.240431][T27581] `: Port device hsr_slave_0 added [ 1690.836112][T27657] netlink: 'syz.1.6464': attribute type 9 has an invalid length. [ 1690.967782][T27657] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6464'. [ 1691.483655][T27661] netlink: 'syz.1.6464': attribute type 10 has an invalid length. [ 1691.566668][T27661] hsr_slave_0: left allmulticast mode [ 1702.253360][T27723] netlink: 'syz.3.6479': attribute type 9 has an invalid length. [ 1702.358402][T27723] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6479'. [ 1702.971659][T27726] netlink: 'syz.3.6479': attribute type 10 has an invalid length. [ 1702.983767][T27726] hsr_slave_0: left allmulticast mode [ 1706.075536][T27768] netlink: 'syz.4.6495': attribute type 9 has an invalid length. [ 1706.189609][T27768] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6495'. [ 1706.824195][T27772] netlink: 'syz.4.6495': attribute type 10 has an invalid length. [ 1716.367748][T27863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6521'. [ 1719.336794][T27882] netlink: 'syz.4.6528': attribute type 4 has an invalid length. [ 1719.369502][T27882] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6528'. [ 1722.141605][T27903] syz.4.6532[27903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1722.141761][T27903] syz.4.6532[27903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1725.387864][T27932] syz.1.6542[27932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1725.464908][T27932] syz.1.6542[27932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1725.494096][T27935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6540'. [ 1728.241902][T27956] IPv6: NLM_F_CREATE should be specified when creating new route [ 1728.275483][T27956] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6548'. [ 1730.315909][T27969] syz.2.6553[27969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1730.316059][T27969] syz.2.6553[27969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1731.146954][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.186594][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1743.491786][T28115] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1744.699096][T28135] netlink: 'syz.1.6603': attribute type 3 has an invalid length. [ 1744.737912][T28135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6603'. [ 1747.765547][T28149] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6605'. [ 1748.413360][T28159] ÿ: renamed from bond_slave_0 [ 1753.225310][T28195] netlink: 'syz.4.6620': attribute type 1 has an invalid length. [ 1753.234664][T28195] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6620'. [ 1769.010762][T28374] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6677'. [ 1788.506087][T28518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1788.544641][T28518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1788.605173][T28521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1788.705736][T28518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1792.156785][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.163465][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1799.999479][T28644] netlink: 'syz.4.6765': attribute type 21 has an invalid length. [ 1802.082435][T28674] netlink: 'syz.4.6775': attribute type 3 has an invalid length. [ 1802.099503][T28674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6775'. [ 1806.441362][T28722] netlink: 'syz.2.6792': attribute type 1 has an invalid length. [ 1806.449739][T28722] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.6792'. [ 1807.362983][T28733] netlink: 'syz.1.6795': attribute type 7 has an invalid length. [ 1808.932149][T28765] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6806'. [ 1808.977512][T28765] openvswitch: netlink: Flow actions attr not present in new flow. [ 1814.202520][T28798] syzkaller0: entered promiscuous mode [ 1814.208089][T28798] syzkaller0: entered allmulticast mode [ 1822.402347][T28863] netlink: 'syz.3.6838': attribute type 3 has an invalid length. [ 1822.461009][T28863] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.6838'. [ 1823.840658][T28884] sit0: entered promiscuous mode [ 1831.511964][T28954] netlink: 'syz.1.6874': attribute type 9 has an invalid length. [ 1831.539500][T28954] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6874'. [ 1831.683249][T28957] netlink: 'syz.1.6874': attribute type 9 has an invalid length. [ 1831.700676][T28957] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6874'. [ 1832.153768][T28967] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.6869'. [ 1832.428453][T28973] syzkaller0: entered promiscuous mode [ 1832.434202][T28973] syzkaller0: entered allmulticast mode [ 1835.916831][T28995] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.6884'. [ 1839.630049][T29033] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.6893'. [ 1842.938017][T29073] netlink: 'syz.2.6906': attribute type 10 has an invalid length. [ 1843.007527][T29076] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.6905'. [ 1843.904817][T29092] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.6912'. [ 1847.676335][T29127] netlink: 'syz.2.6922': attribute type 1 has an invalid length. [ 1847.690554][T29127] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6922'. [ 1853.998008][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.004624][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1856.875938][T29254] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6961'. [ 1866.605980][T29332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6987'. [ 1867.898547][T29368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7001'. [ 1870.831134][T29391] syzkaller0: left promiscuous mode [ 1870.837955][T29391] syzkaller0: left allmulticast mode [ 1873.669960][T29418] syzkaller0: left promiscuous mode [ 1873.682636][T29418] syzkaller0: left allmulticast mode [ 1873.943826][T29430] syzkaller0: entered promiscuous mode [ 1882.599469][T29489] syzkaller0: entered promiscuous mode [ 1882.605028][T29489] syzkaller0: entered allmulticast mode [ 1883.479907][T29511] syzkaller0: entered promiscuous mode [ 1887.615873][T29523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.623584][T29523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.632359][T29523] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1887.643158][T29523] batman_adv: batadv0: Interface deactivated: wlan0 [ 1887.651277][T29523] batman_adv: batadv0: Removing interface: wlan0 [ 1891.542971][T29564] syzkaller0: left allmulticast mode [ 1893.978843][T29599] syzkaller0: entered promiscuous mode [ 1895.720221][T29623] delete_channel: no stack [ 1897.024623][T29651] netlink: 'syz.4.7099': attribute type 4 has an invalid length. [ 1897.159717][T29651] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7099'. [ 1897.291436][T29651] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1898.370217][T29651] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1899.881940][T29671] syzkaller0: left promiscuous mode [ 1901.401289][T29699] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7118'. [ 1901.410825][T29699] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1901.447044][T29702] syzkaller0: entered allmulticast mode [ 1903.034569][T29749] netlink: 'syz.2.7136': attribute type 29 has an invalid length. [ 1903.070001][T29749] netlink: 'syz.2.7136': attribute type 29 has an invalid length. [ 1903.089493][T29749] netlink: 'syz.2.7136': attribute type 29 has an invalid length. [ 1903.170728][T29749] netlink: 'syz.2.7136': attribute type 29 has an invalid length. [ 1904.036553][T29769] netlink: 'syz.3.7144': attribute type 3 has an invalid length. [ 1904.091247][T29769] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7144'. [ 1906.671637][T29826] netlink: 'syz.4.7161': attribute type 29 has an invalid length. [ 1906.764807][T29826] netlink: 'syz.4.7161': attribute type 29 has an invalid length. [ 1906.907060][T29834] netlink: 'syz.4.7161': attribute type 29 has an invalid length. [ 1906.952901][T29830] netlink: 'syz.4.7161': attribute type 29 has an invalid length. [ 1914.097716][T29929] syzkaller0: entered promiscuous mode [ 1914.104481][T29929] syzkaller0: entered allmulticast mode [ 1915.053834][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.060254][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.471761][T29954] bridge_slave_1: entered promiscuous mode [ 1916.281107][T29972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7206'. [ 1918.205400][T30009] bridge_slave_1: entered promiscuous mode [ 1923.203937][T30082] bridge_slave_1: entered promiscuous mode [ 1923.228276][T30081] netlink: 'syz.4.7247': attribute type 10 has an invalid length. [ 1923.242918][T30081] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1926.082638][T30124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7249'. [ 1926.269409][T30123] netlink: 'syz.3.7250': attribute type 10 has an invalid length. [ 1926.296252][T30123] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7250'. [ 1928.586921][T30162] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7264'. [ 1931.195545][T30202] netlink: 'syz.2.7275': attribute type 22 has an invalid length. [ 1931.209442][T30202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7275'. [ 1931.270225][T30204] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7277'. [ 1932.314268][T30219] delete_channel: no stack [ 1934.238841][T30264] netlink: 'syz.3.7294': attribute type 10 has an invalid length. [ 1935.419734][T30277] syzkaller0: entered promiscuous mode [ 1935.428282][T30277] syzkaller0: entered allmulticast mode [ 1937.698267][T30302] delete_channel: no stack [ 1940.670286][T30350] delete_channel: no stack [ 1940.985817][T30370] netlink: 'syz.2.7331': attribute type 19 has an invalid length. [ 1941.041419][T30370] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.7331'. [ 1941.593732][T30379] netlink: 'syz.2.7333': attribute type 11 has an invalid length. [ 1941.603795][T30379] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7333'. [ 1941.937983][T30386] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1942.876281][T30396] delete_channel: no stack [ 1942.888244][T30406] netlink: 'syz.1.7340': attribute type 2 has an invalid length. [ 1942.907866][T30406] netlink: 'syz.1.7340': attribute type 8 has an invalid length. [ 1942.938543][T30406] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7340'. [ 1943.266924][T30411] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7344'. [ 1943.429833][T30411] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1943.661001][T30420] netlink: 'syz.1.7347': attribute type 11 has an invalid length. [ 1943.681899][T30420] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7347'. [ 1947.743638][T30478] netlink: 'syz.3.7362': attribute type 11 has an invalid length. [ 1947.779421][T30478] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7362'. [ 1947.992271][T30485] IPv6: Can't replace route, no match found [ 1948.318911][T30495] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7368'. [ 1948.373264][T30495] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1949.931565][T30525] IPv6: Can't replace route, no match found [ 1950.898751][T30544] netlink: 'syz.2.7387': attribute type 29 has an invalid length. [ 1950.908585][T30544] netlink: 'syz.2.7387': attribute type 29 has an invalid length. [ 1950.929099][T30544] netlink: 'syz.2.7387': attribute type 29 has an invalid length. [ 1951.672709][T30565] netlink: 'syz.1.7394': attribute type 9 has an invalid length. [ 1951.685985][T30565] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1951.966677][T30565] netlink: 'syz.1.7394': attribute type 9 has an invalid length. [ 1951.983844][T30565] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1952.305877][T30572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7397'. [ 1952.446869][T30573] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7395'. [ 1952.478039][T30573] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1953.187644][T30586] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1953.300900][T30588] netlink: 'syz.1.7400': attribute type 10 has an invalid length. [ 1953.319219][T30588] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1955.846791][T30601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7413'. [ 1957.683827][T30641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7418'. [ 1960.053729][T30679] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7429'. [ 1960.306190][T30685] netlink: 'syz.3.7432': attribute type 10 has an invalid length. [ 1960.314940][T30685] bridge_slave_1: left promiscuous mode [ 1960.340278][T30687] netlink: 'syz.1.7433': attribute type 27 has an invalid length. [ 1961.248961][T30707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1964.027066][T30753] netlink: 'syz.4.7458': attribute type 10 has an invalid length. [ 1964.206891][T30759] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 1968.675282][T30807] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7475'. [ 1968.984893][T30806] netlink: 'syz.2.7476': attribute type 10 has an invalid length. [ 1971.172394][T30839] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7487'. [ 1973.729123][T30879] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7498'. [ 1976.475435][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.481941][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.591017][T30912] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7511'. [ 1977.650818][T30929] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 1979.261859][T30953] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7526'. [ 1980.288277][T30978] netlink: 'syz.1.7532': attribute type 1 has an invalid length. [ 1980.385432][T30978] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7532'. [ 1982.082487][T30997] netlink: 'syz.1.7539': attribute type 19 has an invalid length. [ 1982.099633][T30997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7539'. [ 1982.277569][T30998] netlink: 49819 bytes leftover after parsing attributes in process `syz.2.7538'. [ 1984.821714][T31038] Ÿë: entered promiscuous mode [ 1984.856753][T31038] Ÿë: entered allmulticast mode [ 1984.975703][T31040] netlink: 49819 bytes leftover after parsing attributes in process `syz.4.7551'. [ 1987.440597][T31082] netlink: 'syz.2.7559': attribute type 10 has an invalid length. [ 1988.355791][T31094] netlink: 'syz.4.7562': attribute type 39 has an invalid length. [ 1989.138414][T31110] netlink: 49819 bytes leftover after parsing attributes in process `syz.3.7565'. [ 1989.164630][T31109] netlink: 'syz.4.7564': attribute type 1 has an invalid length. [ 1989.165637][T31109] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7564'. [ 1992.236451][T31161] Ÿë: port 1(veth0_to_team) entered blocking state [ 1992.243404][T31161] Ÿë: port 1(veth0_to_team) entered forwarding state [ 1992.287047][T31161] Ÿë: entered promiscuous mode [ 1992.371118][T31161] Ÿë: entered allmulticast mode [ 1996.194429][T31224] Ÿë: entered promiscuous mode [ 1996.251339][T31224] Ÿë: entered allmulticast mode [ 1998.457485][T31235] netlink: 'syz.1.7604': attribute type 3 has an invalid length. [ 1998.480622][T31235] netlink: 98944 bytes leftover after parsing attributes in process `syz.1.7604'. [ 2002.082587][T31277] netlink: 'syz.4.7618': attribute type 10 has an invalid length. [ 2002.107017][T31277] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7618'. [ 2002.125143][T31271] netlink: 'syz.1.7616': attribute type 10 has an invalid length. [ 2002.137694][T31280] netlink: 'syz.2.7619': attribute type 10 has an invalid length. [ 2003.287713][T31280] `: Port device O3ãc¤± removed [ 2006.436020][T31321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7630'. [ 2006.859051][ T5783] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 2008.377092][ T5783] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 2009.238190][T31352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7646'. [ 2010.820293][T31385] netlink: 'syz.1.7649': attribute type 10 has an invalid length. [ 2012.099417][T31399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7651'. [ 2012.233937][T31399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7651'. [ 2012.416141][T31405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7651'. [ 2012.518167][T31407] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7651'. [ 2014.505502][T31412] netlink: 'syz.2.7662': attribute type 10 has an invalid length. [ 2014.526902][T31412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7662'. [ 2014.553410][T31412] `: entered promiscuous mode [ 2014.558277][T31412] team_slave_0: entered promiscuous mode [ 2014.592557][T31412] team_slave_1: entered promiscuous mode [ 2014.619563][T31412] geneve0: entered promiscuous mode [ 2014.645939][T31412] hsr_slave_0: entered promiscuous mode [ 2014.657314][T31412] `: entered allmulticast mode [ 2014.680189][T31412] team_slave_0: entered allmulticast mode [ 2014.686337][T31412] team_slave_1: entered allmulticast mode [ 2014.692720][T31412] geneve0: entered allmulticast mode [ 2014.698405][T31412] hsr_slave_0: entered allmulticast mode [ 2014.707572][T31412] 8021q: adding VLAN 0 to HW filter on device ` [ 2014.716324][T31412] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 2015.652504][T31439] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7661'. [ 2019.761558][T31473] netlink: 'syz.3.7674': attribute type 10 has an invalid length. [ 2019.804042][T31473] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7674'. [ 2020.056905][T31478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7675'. [ 2020.139625][T31478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7675'. [ 2020.178201][T31481] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7675'. [ 2020.267970][T31475] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7675'. [ 2024.704347][T31519] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7689'. [ 2024.786582][T31519] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7689'. [ 2024.809823][T31519] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7689'. [ 2024.852515][T31527] netlink: 'syz.2.7691': attribute type 9 has an invalid length. [ 2024.858347][T31516] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7689'. [ 2024.860624][T31527] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7691'. [ 2025.278708][T31527] netlink: 'syz.2.7691': attribute type 9 has an invalid length. [ 2025.287702][T31527] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7691'. [ 2025.779480][T31535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7700'. [ 2025.880024][T31535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7700'. [ 2025.975212][T31543] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7700'. [ 2026.007806][T31544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7700'. [ 2026.198728][T31551] netlink: 'syz.1.7695': attribute type 10 has an invalid length. [ 2026.258444][T31551] geneve0: entered promiscuous mode [ 2026.402714][T31552] netlink: 'syz.2.7696': attribute type 39 has an invalid length. [ 2026.484905][T31552] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 2026.680118][T31549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2028.282417][T31552] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 2028.631207][T31573] netlink: 'syz.1.7704': attribute type 9 has an invalid length. [ 2028.643611][T31573] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7704'. [ 2028.689350][T31566] wg2: left promiscuous mode [ 2028.857750][T31571] wg2: entered promiscuous mode [ 2028.865471][T31577] netlink: 49819 bytes leftover after parsing attributes in process `syz.2.7705'. [ 2029.375379][T31579] netlink: 'syz.1.7704': attribute type 9 has an invalid length. [ 2029.875431][T31593] netlink: 'syz.3.7708': attribute type 10 has an invalid length. [ 2029.891559][T31589] __nla_validate_parse: 1 callbacks suppressed [ 2029.891581][T31589] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7708'. [ 2029.932319][T31595] netlink: 'syz.3.7708': attribute type 10 has an invalid length. [ 2029.964691][T31589] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2030.000925][T31589] CPU: 1 PID: 31589 Comm: syz.3.7708 Not tainted syzkaller #0 [ 2030.008523][T31589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2030.018662][T31589] Call Trace: [ 2030.022090][T31589] [ 2030.025077][T31589] dump_stack_lvl+0x18c/0x250 [ 2030.029841][T31589] ? show_regs_print_info+0x20/0x20 [ 2030.035114][T31589] ? load_image+0x400/0x400 [ 2030.039815][T31589] sysfs_warn_dup+0x8e/0xa0 [ 2030.044385][T31589] sysfs_do_create_link_sd+0xc0/0x110 [ 2030.050092][T31589] device_add_class_symlinks+0x1cf/0x240 [ 2030.055894][T31589] device_add+0x507/0xc20 [ 2030.060323][T31589] wiphy_register+0x1dad/0x2ae0 [ 2030.065298][T31589] ? cfg80211_event_work+0x40/0x40 [ 2030.070517][T31589] ? minstrel_ht_alloc+0x88a/0x990 [ 2030.075789][T31589] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2030.081910][T31589] ieee80211_register_hw+0x3464/0x4250 [ 2030.087556][T31589] ? ieee80211_tasklet_handler+0x20/0x20 [ 2030.093223][T31589] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2030.099149][T31589] ? __debug_object_init+0xec/0x450 [ 2030.104390][T31589] ? __asan_memset+0x22/0x40 [ 2030.109015][T31589] ? __hrtimer_init+0x186/0x270 [ 2030.113987][T31589] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2030.119881][T31589] ? mac80211_hwsim_free+0x220/0x220 [ 2030.125283][T31589] ? rcu_is_watching+0x15/0xb0 [ 2030.130074][T31589] ? kstrndup+0xbd/0x140 [ 2030.134397][T31589] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2030.139674][T31589] ? __nla_validate+0x50/0x50 [ 2030.144430][T31589] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2030.150823][T31589] ? __nla_parse+0x40/0x50 [ 2030.155283][T31589] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2030.161659][T31589] genl_family_rcv_msg_doit+0x211/0x310 [ 2030.167240][T31589] ? end_current_label_crit_section+0x170/0x170 [ 2030.173576][T31589] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2030.179614][T31589] ? bpf_lsm_capable+0x9/0x10 [ 2030.184315][T31589] ? security_capable+0x89/0xb0 [ 2030.189216][T31589] genl_rcv_msg+0x619/0x7a0 [ 2030.193784][T31589] ? genl_bind+0x360/0x360 [ 2030.198230][T31589] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2030.204693][T31589] ? perf_trace_lock+0x304/0x3b0 [ 2030.209774][T31589] netlink_rcv_skb+0x241/0x4d0 [ 2030.214576][T31589] ? genl_bind+0x360/0x360 [ 2030.219024][T31589] ? netlink_ack+0x1180/0x1180 [ 2030.223843][T31589] ? __lock_acquire+0x7d40/0x7d40 [ 2030.228908][T31589] ? down_read+0x1ac/0x2e0 [ 2030.233365][T31589] genl_rcv+0x28/0x40 [ 2030.237404][T31589] netlink_unicast+0x751/0x8d0 [ 2030.242259][T31589] netlink_sendmsg+0x8d0/0xbf0 [ 2030.247079][T31589] ? perf_trace_lock+0x304/0x3b0 [ 2030.252065][T31589] ? netlink_getsockopt+0x590/0x590 [ 2030.257384][T31589] ? aa_sock_msg_perm+0x94/0x150 [ 2030.262350][T31589] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2030.267664][T31589] ? security_socket_sendmsg+0x80/0xa0 [ 2030.273151][T31589] ? netlink_getsockopt+0x590/0x590 [ 2030.278471][T31589] ____sys_sendmsg+0x5ba/0x960 [ 2030.283294][T31589] ? __asan_memset+0x22/0x40 [ 2030.287916][T31589] ? __sys_sendmsg_sock+0x30/0x30 [ 2030.292992][T31589] ? __import_iovec+0x5f2/0x850 [ 2030.297892][T31589] ? import_iovec+0x73/0xa0 [ 2030.302437][T31589] ___sys_sendmsg+0x2a6/0x360 [ 2030.307177][T31589] ? __sys_sendmsg+0x2a0/0x2a0 [ 2030.312095][T31589] ? trace_call_bpf+0xc3/0x6c0 [ 2030.316915][T31589] ? debug_mutex_init+0x38/0x70 [ 2030.321840][T31589] __se_sys_sendmsg+0x1c2/0x2b0 [ 2030.326810][T31589] ? __x64_sys_sendmsg+0x80/0x80 [ 2030.331809][T31589] ? lockdep_hardirqs_on+0x98/0x150 [ 2030.337043][T31589] do_syscall_64+0x55/0xa0 [ 2030.341683][T31589] ? clear_bhb_loop+0x40/0x90 [ 2030.346463][T31589] ? clear_bhb_loop+0x40/0x90 [ 2030.351273][T31589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2030.357199][T31589] RIP: 0033:0x7ff1d519aeb9 [ 2030.361640][T31589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2030.381273][T31589] RSP: 002b:00007ff1d607b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2030.389718][T31589] RAX: ffffffffffffffda RBX: 00007ff1d5415fa0 RCX: 00007ff1d519aeb9 [ 2030.397714][T31589] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2030.405709][T31589] RBP: 00007ff1d5208c1f R08: 0000000000000000 R09: 0000000000000000 [ 2030.413706][T31589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2030.421700][T31589] R13: 00007ff1d5416038 R14: 00007ff1d5415fa0 R15: 00007ffd15498208 [ 2030.429726][T31589] [ 2030.454442][T31595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7708'. [ 2030.476432][T31595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7708'. [ 2030.494072][T31593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7708'. [ 2030.594633][T31600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7708'. [ 2031.718653][T31604] delete_channel: no stack [ 2032.595097][T31619] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7713'. [ 2032.807103][T31623] netlink: 'syz.3.7714': attribute type 39 has an invalid length. [ 2032.808952][T31628] netlink: 'syz.4.7713': attribute type 11 has an invalid length. [ 2032.919660][T31628] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.7713'. [ 2033.502110][T31623] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 2033.597451][T31628] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2033.605656][T31628] CPU: 0 PID: 31628 Comm: syz.4.7713 Not tainted syzkaller #0 [ 2033.613150][T31628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2033.623600][T31628] Call Trace: [ 2033.626931][T31628] [ 2033.630263][T31628] dump_stack_lvl+0x18c/0x250 [ 2033.635039][T31628] ? show_regs_print_info+0x20/0x20 [ 2033.640298][T31628] ? load_image+0x400/0x400 [ 2033.644875][T31628] sysfs_warn_dup+0x8e/0xa0 [ 2033.649510][T31628] sysfs_do_create_link_sd+0xc0/0x110 [ 2033.654942][T31628] device_add_class_symlinks+0x1cf/0x240 [ 2033.660640][T31628] device_add+0x507/0xc20 [ 2033.665050][T31628] wiphy_register+0x1dad/0x2ae0 [ 2033.670060][T31628] ? cfg80211_event_work+0x40/0x40 [ 2033.675453][T31628] ? minstrel_ht_alloc+0x88a/0x990 [ 2033.680700][T31628] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2033.686801][T31628] ieee80211_register_hw+0x3464/0x4250 [ 2033.692399][T31628] ? ieee80211_tasklet_handler+0x20/0x20 [ 2033.698070][T31628] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2033.704093][T31628] ? __debug_object_init+0xec/0x450 [ 2033.709422][T31628] ? __asan_memset+0x22/0x40 [ 2033.714138][T31628] ? __hrtimer_init+0x186/0x270 [ 2033.719102][T31628] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2033.724866][T31628] ? mac80211_hwsim_free+0x220/0x220 [ 2033.730170][T31628] ? rcu_is_watching+0x15/0xb0 [ 2033.734949][T31628] ? kstrndup+0xbd/0x140 [ 2033.739305][T31628] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2033.744442][T31628] ? __nla_validate+0x50/0x50 [ 2033.749156][T31628] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2033.755526][T31628] ? __nla_parse+0x40/0x50 [ 2033.760075][T31628] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2033.766538][T31628] genl_family_rcv_msg_doit+0x211/0x310 [ 2033.772296][T31628] ? end_current_label_crit_section+0x170/0x170 [ 2033.778591][T31628] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2033.784523][T31628] ? bpf_lsm_capable+0x9/0x10 [ 2033.789225][T31628] ? security_capable+0x89/0xb0 [ 2033.794193][T31628] genl_rcv_msg+0x619/0x7a0 [ 2033.798726][T31628] ? genl_bind+0x360/0x360 [ 2033.803172][T31628] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2033.809541][T31628] netlink_rcv_skb+0x241/0x4d0 [ 2033.814330][T31628] ? genl_bind+0x360/0x360 [ 2033.818779][T31628] ? netlink_ack+0x1180/0x1180 [ 2033.823577][T31628] ? __lock_acquire+0x7d40/0x7d40 [ 2033.828709][T31628] ? net_generic+0x1e/0x240 [ 2033.833241][T31628] ? down_read+0x1ac/0x2e0 [ 2033.837689][T31628] genl_rcv+0x28/0x40 [ 2033.841701][T31628] netlink_unicast+0x751/0x8d0 [ 2033.846499][T31628] netlink_sendmsg+0x8d0/0xbf0 [ 2033.851295][T31628] ? netlink_getsockopt+0x590/0x590 [ 2033.856517][T31628] ? aa_sock_msg_perm+0x94/0x150 [ 2033.861506][T31628] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2033.866894][T31628] ? security_socket_sendmsg+0x80/0xa0 [ 2033.872455][T31628] ? netlink_getsockopt+0x590/0x590 [ 2033.878113][T31628] ____sys_sendmsg+0x5ba/0x960 [ 2033.883085][T31628] ? __asan_memset+0x22/0x40 [ 2033.887697][T31628] ? __sys_sendmsg_sock+0x30/0x30 [ 2033.892752][T31628] ? __import_iovec+0x5f2/0x850 [ 2033.897695][T31628] ? import_iovec+0x73/0xa0 [ 2033.902246][T31628] ___sys_sendmsg+0x2a6/0x360 [ 2033.906943][T31628] ? __sys_sendmsg+0x2a0/0x2a0 [ 2033.911759][T31628] ? trace_call_bpf+0xc3/0x6c0 [ 2033.916572][T31628] __se_sys_sendmsg+0x1c2/0x2b0 [ 2033.921616][T31628] ? __x64_sys_sendmsg+0x80/0x80 [ 2033.927392][T31628] ? trace_sys_enter+0x1f/0x80 [ 2033.932217][T31628] do_syscall_64+0x55/0xa0 [ 2033.936679][T31628] ? clear_bhb_loop+0x40/0x90 [ 2033.941482][T31628] ? clear_bhb_loop+0x40/0x90 [ 2033.946283][T31628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2033.952281][T31628] RIP: 0033:0x7f0fb739aeb9 [ 2033.956812][T31628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2033.976610][T31628] RSP: 002b:00007f0fb81c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2033.985395][T31628] RAX: ffffffffffffffda RBX: 00007f0fb7616090 RCX: 00007f0fb739aeb9 [ 2033.993442][T31628] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2034.001434][T31628] RBP: 00007f0fb7408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2034.009435][T31628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2034.017451][T31628] R13: 00007f0fb7616128 R14: 00007f0fb7616090 R15: 00007fff90011208 [ 2034.025623][T31628] [ 2034.654934][T31657] netlink: 49819 bytes leftover after parsing attributes in process `syz.1.7721'. [ 2035.085124][T31645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2036.972832][T31680] sctp: [Deprecated]: syz.1.7727 (pid 31680) Use of int in maxseg socket option. [ 2036.972832][T31680] Use struct sctp_assoc_value instead [ 2037.364881][T31683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7727'. [ 2037.885704][T31693] netlink: 'syz.2.7730': attribute type 10 has an invalid length. [ 2038.117891][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.124992][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.173492][T31693] geneve0: left allmulticast mode [ 2038.185198][T31693] `: Port device geneve0 removed [ 2038.480455][T31706] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7734'. [ 2038.523828][T31706] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2038.646907][T31706] CPU: 1 PID: 31706 Comm: syz.2.7734 Not tainted syzkaller #0 [ 2038.654489][T31706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2038.664609][T31706] Call Trace: [ 2038.667929][T31706] [ 2038.670909][T31706] dump_stack_lvl+0x18c/0x250 [ 2038.675660][T31706] ? show_regs_print_info+0x20/0x20 [ 2038.680932][T31706] ? load_image+0x400/0x400 [ 2038.685536][T31706] sysfs_warn_dup+0x8e/0xa0 [ 2038.690102][T31706] sysfs_do_create_link_sd+0xc0/0x110 [ 2038.695703][T31706] device_add_class_symlinks+0x1cf/0x240 [ 2038.701400][T31706] device_add+0x507/0xc20 [ 2038.705800][T31706] wiphy_register+0x1dad/0x2ae0 [ 2038.710755][T31706] ? cfg80211_event_work+0x40/0x40 [ 2038.715912][T31706] ? minstrel_ht_alloc+0x88a/0x990 [ 2038.721105][T31706] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2038.727364][T31706] ieee80211_register_hw+0x3464/0x4250 [ 2038.732958][T31706] ? ieee80211_tasklet_handler+0x20/0x20 [ 2038.738645][T31706] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2038.744685][T31706] ? __debug_object_init+0xec/0x450 [ 2038.749953][T31706] ? __asan_memset+0x22/0x40 [ 2038.754609][T31706] ? __hrtimer_init+0x186/0x270 [ 2038.759568][T31706] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2038.765410][T31706] ? mac80211_hwsim_free+0x220/0x220 [ 2038.770749][T31706] ? rcu_is_watching+0x15/0xb0 [ 2038.775652][T31706] ? kstrndup+0xbd/0x140 [ 2038.779983][T31706] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2038.785171][T31706] ? __nla_validate+0x50/0x50 [ 2038.790027][T31706] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2038.796449][T31706] ? __nla_parse+0x40/0x50 [ 2038.801024][T31706] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2038.807439][T31706] genl_family_rcv_msg_doit+0x211/0x310 [ 2038.813071][T31706] ? end_current_label_crit_section+0x170/0x170 [ 2038.819390][T31706] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2038.825376][T31706] ? bpf_lsm_capable+0x9/0x10 [ 2038.830107][T31706] ? security_capable+0x89/0xb0 [ 2038.835037][T31706] genl_rcv_msg+0x619/0x7a0 [ 2038.839623][T31706] ? genl_bind+0x360/0x360 [ 2038.844093][T31706] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2038.850484][T31706] ? perf_trace_lock+0x304/0x3b0 [ 2038.855604][T31706] netlink_rcv_skb+0x241/0x4d0 [ 2038.860427][T31706] ? genl_bind+0x360/0x360 [ 2038.864913][T31706] ? netlink_ack+0x1180/0x1180 [ 2038.869765][T31706] ? __lock_acquire+0x7d40/0x7d40 [ 2038.874845][T31706] ? net_generic+0x1e/0x240 [ 2038.879416][T31706] ? down_read+0x1ac/0x2e0 [ 2038.883902][T31706] genl_rcv+0x28/0x40 [ 2038.887944][T31706] netlink_unicast+0x751/0x8d0 [ 2038.892796][T31706] netlink_sendmsg+0x8d0/0xbf0 [ 2038.897620][T31706] ? perf_trace_lock+0x304/0x3b0 [ 2038.902645][T31706] ? netlink_getsockopt+0x590/0x590 [ 2038.907907][T31706] ? aa_sock_msg_perm+0x94/0x150 [ 2038.913124][T31706] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2038.918465][T31706] ? security_socket_sendmsg+0x80/0xa0 [ 2038.924014][T31706] ? netlink_getsockopt+0x590/0x590 [ 2038.929271][T31706] ____sys_sendmsg+0x5ba/0x960 [ 2038.934117][T31706] ? __asan_memset+0x22/0x40 [ 2038.938760][T31706] ? __sys_sendmsg_sock+0x30/0x30 [ 2038.943836][T31706] ? __import_iovec+0x5f2/0x850 [ 2038.948763][T31706] ? import_iovec+0x73/0xa0 [ 2038.953470][T31706] ___sys_sendmsg+0x2a6/0x360 [ 2038.958220][T31706] ? __sys_sendmsg+0x2a0/0x2a0 [ 2038.963257][T31706] __se_sys_sendmsg+0x1c2/0x2b0 [ 2038.968271][T31706] ? __x64_sys_sendmsg+0x80/0x80 [ 2038.973311][T31706] ? lockdep_hardirqs_on+0x98/0x150 [ 2038.978664][T31706] do_syscall_64+0x55/0xa0 [ 2038.983129][T31706] ? clear_bhb_loop+0x40/0x90 [ 2038.987849][T31706] ? clear_bhb_loop+0x40/0x90 [ 2038.992619][T31706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2038.998823][T31706] RIP: 0033:0x7f056639aeb9 [ 2039.003289][T31706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2039.023041][T31706] RSP: 002b:00007f05671e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2039.031603][T31706] RAX: ffffffffffffffda RBX: 00007f0566615fa0 RCX: 00007f056639aeb9 [ 2039.039623][T31706] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2039.047652][T31706] RBP: 00007f0566408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2039.055861][T31706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2039.063886][T31706] R13: 00007f0566616038 R14: 00007f0566615fa0 R15: 00007ffe39c85ff8 [ 2039.071949][T31706] [ 2039.262517][T31708] netlink: 'syz.2.7734': attribute type 10 has an invalid length. [ 2039.359259][T31700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2039.488961][T31716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7734'. [ 2040.472332][T31708] dummy0: entered promiscuous mode [ 2040.479368][T31708] dummy0: entered allmulticast mode [ 2040.485410][T31708] `: Port device dummy0 added [ 2040.491767][T31713] netlink: 'syz.2.7734': attribute type 10 has an invalid length. [ 2040.522093][T31713] dummy0: left promiscuous mode [ 2040.527165][T31713] dummy0: left allmulticast mode [ 2040.537610][T31713] `: Port device dummy0 removed [ 2040.574586][T31716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7734'. [ 2040.915922][T31733] netlink: 'syz.1.7737': attribute type 4 has an invalid length. [ 2040.946609][T31733] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7737'. [ 2041.122184][T31736] netlink: 'syz.4.7741': attribute type 39 has an invalid length. [ 2041.487353][T31736] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 2041.545974][T31736] hsr_slave_1 (unregistering): left promiscuous mode [ 2041.685433][T31743] netlink: 'syz.3.7743': attribute type 10 has an invalid length. [ 2041.717170][T31743] geneve0: entered promiscuous mode [ 2042.012322][T31751] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7745'. [ 2042.049688][T31751] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 2042.084872][T31751] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 2042.146806][T31749] syz.3.7745[31749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2042.151907][T31749] syz.3.7745[31749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2042.229589][T31751] batman_adv: batadv0: Interface activated: wlan0 [ 2044.426708][T31769] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7750'. [ 2044.457313][T31769] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2044.489629][T31769] CPU: 0 PID: 31769 Comm: syz.4.7750 Not tainted syzkaller #0 [ 2044.497195][T31769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2044.507306][T31769] Call Trace: [ 2044.510630][T31769] [ 2044.513601][T31769] dump_stack_lvl+0x18c/0x250 [ 2044.518419][T31769] ? show_regs_print_info+0x20/0x20 [ 2044.523733][T31769] ? load_image+0x400/0x400 [ 2044.528297][T31769] sysfs_warn_dup+0x8e/0xa0 [ 2044.532918][T31769] sysfs_do_create_link_sd+0xc0/0x110 [ 2044.538321][T31769] device_add_class_symlinks+0x1cf/0x240 [ 2044.543992][T31769] device_add+0x507/0xc20 [ 2044.548448][T31769] wiphy_register+0x1dad/0x2ae0 [ 2044.553447][T31769] ? cfg80211_event_work+0x40/0x40 [ 2044.558668][T31769] ? minstrel_ht_alloc+0x88a/0x990 [ 2044.563915][T31769] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2044.570023][T31769] ieee80211_register_hw+0x3464/0x4250 [ 2044.575565][T31769] ? ieee80211_tasklet_handler+0x20/0x20 [ 2044.581230][T31769] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2044.587170][T31769] ? __debug_object_init+0xec/0x450 [ 2044.592496][T31769] ? __asan_memset+0x22/0x40 [ 2044.597123][T31769] ? __hrtimer_init+0x186/0x270 [ 2044.602063][T31769] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2044.607943][T31769] ? mac80211_hwsim_free+0x220/0x220 [ 2044.613264][T31769] ? rcu_is_watching+0x15/0xb0 [ 2044.618057][T31769] ? kstrndup+0xbd/0x140 [ 2044.622347][T31769] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2044.627506][T31769] ? __nla_validate+0x50/0x50 [ 2044.632240][T31769] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2044.638624][T31769] ? __nla_parse+0x40/0x50 [ 2044.643120][T31769] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2044.649610][T31769] genl_family_rcv_msg_doit+0x211/0x310 [ 2044.655194][T31769] ? end_current_label_crit_section+0x170/0x170 [ 2044.661482][T31769] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2044.667423][T31769] ? bpf_lsm_capable+0x9/0x10 [ 2044.672226][T31769] ? security_capable+0x89/0xb0 [ 2044.677124][T31769] genl_rcv_msg+0x619/0x7a0 [ 2044.681671][T31769] ? genl_bind+0x360/0x360 [ 2044.686128][T31769] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2044.692487][T31769] ? perf_trace_lock+0x304/0x3b0 [ 2044.697478][T31769] netlink_rcv_skb+0x241/0x4d0 [ 2044.702297][T31769] ? genl_bind+0x360/0x360 [ 2044.706761][T31769] ? netlink_ack+0x1180/0x1180 [ 2044.711579][T31769] ? __lock_acquire+0x7d40/0x7d40 [ 2044.716628][T31769] ? net_generic+0x1e/0x240 [ 2044.721173][T31769] ? down_read+0x1ac/0x2e0 [ 2044.725624][T31769] genl_rcv+0x28/0x40 [ 2044.729638][T31769] netlink_unicast+0x751/0x8d0 [ 2044.734448][T31769] netlink_sendmsg+0x8d0/0xbf0 [ 2044.739243][T31769] ? perf_trace_lock+0x304/0x3b0 [ 2044.744233][T31769] ? netlink_getsockopt+0x590/0x590 [ 2044.749470][T31769] ? aa_sock_msg_perm+0x94/0x150 [ 2044.754449][T31769] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2044.759857][T31769] ? security_socket_sendmsg+0x80/0xa0 [ 2044.765336][T31769] ? netlink_getsockopt+0x590/0x590 [ 2044.770571][T31769] ____sys_sendmsg+0x5ba/0x960 [ 2044.775462][T31769] ? __asan_memset+0x22/0x40 [ 2044.780094][T31769] ? __sys_sendmsg_sock+0x30/0x30 [ 2044.785155][T31769] ? __import_iovec+0x5f2/0x850 [ 2044.790054][T31769] ? import_iovec+0x73/0xa0 [ 2044.794601][T31769] ___sys_sendmsg+0x2a6/0x360 [ 2044.799402][T31769] ? __sys_sendmsg+0x2a0/0x2a0 [ 2044.804228][T31769] ? debug_mutex_init+0x38/0x70 [ 2044.809150][T31769] __se_sys_sendmsg+0x1c2/0x2b0 [ 2044.814029][T31769] ? __x64_sys_sendmsg+0x80/0x80 [ 2044.819036][T31769] ? lockdep_hardirqs_on+0x98/0x150 [ 2044.824268][T31769] do_syscall_64+0x55/0xa0 [ 2044.828712][T31769] ? clear_bhb_loop+0x40/0x90 [ 2044.833424][T31769] ? clear_bhb_loop+0x40/0x90 [ 2044.838129][T31769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2044.844067][T31769] RIP: 0033:0x7f0fb739aeb9 [ 2044.848511][T31769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2044.868417][T31769] RSP: 002b:00007f0fb81e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2044.876877][T31769] RAX: ffffffffffffffda RBX: 00007f0fb7615fa0 RCX: 00007f0fb739aeb9 [ 2044.884871][T31769] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2044.892864][T31769] RBP: 00007f0fb7408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2044.900860][T31769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2044.908938][T31769] R13: 00007f0fb7616038 R14: 00007f0fb7615fa0 R15: 00007fff90011208 [ 2044.916970][T31769] [ 2044.991211][T31772] netlink: 'syz.4.7750': attribute type 10 has an invalid length. [ 2045.064681][T31782] netlink: 'syz.4.7750': attribute type 10 has an invalid length. [ 2045.256330][T31772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7750'. [ 2045.297013][T31772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7750'. [ 2045.408316][T31779] netlink: 49819 bytes leftover after parsing attributes in process `syz.3.7752'. [ 2045.435817][T31769] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7750'. [ 2045.469324][T31782] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7750'. [ 2045.871310][T31791] netlink: 'syz.3.7755': attribute type 9 has an invalid length. [ 2045.943912][T31791] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7755'. [ 2046.443728][T31793] netlink: 'syz.3.7755': attribute type 9 has an invalid length. [ 2046.483270][T31793] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7755'. [ 2046.698614][T31794] delete_channel: no stack [ 2046.705000][T31794] delete_channel: no stack [ 2047.182539][T31802] netlink: 'syz.2.7759': attribute type 4 has an invalid length. [ 2047.190848][T31802] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7759'. [ 2047.282006][T31808] netlink: 'syz.1.7758': attribute type 10 has an invalid length. [ 2047.606551][T31820] netlink: 'syz.4.7763': attribute type 13 has an invalid length. [ 2047.614798][T31820] netlink: 'syz.4.7763': attribute type 58 has an invalid length. [ 2047.623552][T31820] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7763'. [ 2047.755507][T31820] netlink: 'syz.4.7763': attribute type 29 has an invalid length. [ 2047.978249][T31820] netlink: 'syz.4.7763': attribute type 29 has an invalid length. [ 2048.905046][T31842] syz.1.7766[31842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2048.905211][T31842] syz.1.7766[31842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2049.226950][T31833] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 2049.259250][T31833] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 2049.350890][T31840] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 2049.368202][T31840] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 2050.226251][T31853] validate_nla: 1 callbacks suppressed [ 2050.226270][T31853] netlink: 'syz.3.7770': attribute type 4 has an invalid length. [ 2050.252790][T31853] __nla_validate_parse: 3 callbacks suppressed [ 2050.252808][T31853] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7770'. [ 2050.387085][T31859] netlink: 49819 bytes leftover after parsing attributes in process `syz.4.7769'. [ 2051.618296][T31874] netlink: 'syz.2.7778': attribute type 13 has an invalid length. [ 2051.629377][T31874] netlink: 'syz.2.7778': attribute type 58 has an invalid length. [ 2051.665212][T31874] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7778'. [ 2051.836707][T31875] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7786'. [ 2051.931587][T31874] netlink: 'syz.2.7778': attribute type 29 has an invalid length. [ 2052.180764][T31874] netlink: 'syz.2.7778': attribute type 29 has an invalid length. [ 2052.218239][T31877] netlink: 'syz.4.7786': attribute type 4 has an invalid length. [ 2052.241205][T31877] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7786'. [ 2052.683915][T31893] netlink: 49819 bytes leftover after parsing attributes in process `syz.3.7784'. [ 2054.063352][T31929] netlink: 'syz.4.7798': attribute type 9 has an invalid length. [ 2054.071639][T31929] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7798'. [ 2054.420855][T31929] netlink: 'syz.4.7798': attribute type 9 has an invalid length. [ 2054.428904][T31929] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7798'. [ 2054.570072][T31935] delete_channel: no stack [ 2054.585166][T31935] delete_channel: no stack [ 2055.692194][T31968] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7811'. [ 2055.824363][T31973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7814'. [ 2056.237959][T31982] netlink: 'syz.3.7818': attribute type 10 has an invalid length. [ 2057.556405][T32003] netlink: 'syz.4.7823': attribute type 10 has an invalid length. [ 2057.575972][T32006] netlink: 'syz.1.7826': attribute type 13 has an invalid length. [ 2057.601584][T32006] netlink: 'syz.1.7826': attribute type 58 has an invalid length. [ 2057.619580][T32006] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7826'. [ 2057.666755][T32006] netlink: 'syz.1.7826': attribute type 29 has an invalid length. [ 2057.707520][T32006] netlink: 'syz.1.7826': attribute type 29 has an invalid length. [ 2057.869858][T32012] netlink: 49819 bytes leftover after parsing attributes in process `syz.4.7829'. [ 2059.253195][T32053] netlink: 'syz.4.7846': attribute type 12 has an invalid length. [ 2059.289545][T32053] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7846'. [ 2059.436270][T32063] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7851'. [ 2060.338353][T32080] netlink: 'syz.1.7857': attribute type 10 has an invalid length. [ 2060.361317][T32080] hsr_slave_0: entered allmulticast mode [ 2060.515128][T32082] IPv6: Can't replace route, no match found [ 2060.649698][T32084] IPv6: Can't replace route, no match found [ 2061.176725][T32098] netlink: 'syz.2.7866': attribute type 29 has an invalid length. [ 2061.251064][T32098] netlink: 'syz.2.7866': attribute type 29 has an invalid length. [ 2061.404929][T32099] netlink: 'syz.2.7866': attribute type 29 has an invalid length. [ 2065.092397][T32149] netlink: 'syz.4.7888': attribute type 1 has an invalid length. [ 2065.100744][T32149] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.7888'. [ 2066.032739][T32172] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7898'. [ 2066.174424][T32176] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.7900'. [ 2066.184003][T32176] tc_dump_action: action bad kind [ 2066.875210][T32190] netlink: 'syz.1.7906': attribute type 1 has an invalid length. [ 2066.899295][T32190] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7906'. [ 2067.187333][T32202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7911'. [ 2067.209467][T32202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7911'. [ 2067.242447][T32202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7911'. [ 2067.276025][T32202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7911'. [ 2068.545436][T32240] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7927'. [ 2068.565660][T32240] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7927'. [ 2070.536064][T32298] netlink: 'syz.3.7951': attribute type 5 has an invalid length. [ 2072.842883][T32361] netlink: 'syz.3.7976': attribute type 1 has an invalid length. [ 2072.866412][T32361] __nla_validate_parse: 2 callbacks suppressed [ 2072.866431][T32361] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.7976'. [ 2073.704668][T32378] netlink: 'syz.2.7984': attribute type 3 has an invalid length. [ 2073.720036][T32378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7984'. [ 2074.039469][T32383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7986'. [ 2074.048650][T32383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7986'. [ 2074.062480][T32383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7986'. [ 2074.080150][T32383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7986'. [ 2074.753752][T32404] syz.4.7993[32404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2074.754101][T32404] syz.4.7993[32404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2076.757282][T32427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8005'. [ 2077.108753][T32439] sit0: left promiscuous mode [ 2077.183740][T32445] sit0: entered promiscuous mode [ 2077.710724][T32455] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8016'. [ 2078.218355][T32467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2079.019618][T32492] syzkaller0: left promiscuous mode [ 2079.025460][T32492] syzkaller0: left allmulticast mode [ 2079.318176][T32500] sit0: entered promiscuous mode [ 2082.474366][T32517] syzkaller0: entered promiscuous mode [ 2082.488650][T32517] syzkaller0: entered allmulticast mode [ 2082.529456][T32521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8043'. [ 2082.538629][T32521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8043'. [ 2082.600112][T32521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8043'. [ 2082.627646][T32521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8043'. [ 2083.413964][T32543] syz.3.8051[32543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2083.414103][T32543] syz.3.8051[32543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2083.685389][ T5783] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10 [ 2083.702946][T32553] netlink: 'syz.4.8057': attribute type 6 has an invalid length. [ 2083.715501][T32553] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8057'. [ 2084.969945][T32575] syzkaller0: entered promiscuous mode [ 2084.979143][T32575] syzkaller0: entered allmulticast mode [ 2085.758015][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 2089.262315][T32635] __sock_release: fasync list not empty! [ 2090.780384][T32649] netlink: 'syz.4.8095': attribute type 1 has an invalid length. [ 2090.809379][T32649] netlink: 'syz.4.8095': attribute type 3 has an invalid length. [ 2090.819081][T32649] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8095'. [ 2091.225421][T32664] __sock_release: fasync list not empty! [ 2091.738090][T32685] netlink: 'syz.2.8108': attribute type 1 has an invalid length. [ 2091.752428][T32685] netlink: 'syz.2.8108': attribute type 3 has an invalid length. [ 2091.788209][T32685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8108'. [ 2093.297157][T32698] __sock_release: fasync list not empty! [ 2094.935470][T32738] netlink: 'syz.3.8124': attribute type 1 has an invalid length. [ 2094.946735][T32738] netlink: 'syz.3.8124': attribute type 3 has an invalid length. [ 2094.955172][T32738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8124'. [ 2095.233782][T32740] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8125'. [ 2096.506960][ T300] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8141'. [ 2096.538085][ T301] netlink: 'syz.1.8139': attribute type 1 has an invalid length. [ 2096.559325][ T301] netlink: 'syz.1.8139': attribute type 3 has an invalid length. [ 2096.568555][ T301] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8139'. [ 2096.686229][ T304] syzkaller0: entered promiscuous mode [ 2096.692175][ T304] syzkaller0: entered allmulticast mode [ 2099.361239][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.368510][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.766679][ T346] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8153'. [ 2099.844528][ T351] netlink: 'syz.1.8154': attribute type 1 has an invalid length. [ 2099.863508][ T351] netlink: 'syz.1.8154': attribute type 3 has an invalid length. [ 2099.872034][ T351] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8154'. [ 2100.027801][ T353] syzkaller0: entered promiscuous mode [ 2100.035485][ T353] syzkaller0: entered allmulticast mode [ 2103.675959][ T370] netlink: 'syz.2.8159': attribute type 4 has an invalid length. [ 2103.683921][ T370] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8159'. [ 2103.821125][ T382] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8162'. [ 2103.844843][ T382] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2103.857126][ T382] CPU: 1 PID: 382 Comm: syz.1.8162 Not tainted syzkaller #0 [ 2103.864598][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2103.874800][ T382] Call Trace: [ 2103.878146][ T382] [ 2103.881126][ T382] dump_stack_lvl+0x18c/0x250 [ 2103.885885][ T382] ? show_regs_print_info+0x20/0x20 [ 2103.891155][ T382] ? load_image+0x400/0x400 [ 2103.895763][ T382] sysfs_warn_dup+0x8e/0xa0 [ 2103.900330][ T382] sysfs_do_create_link_sd+0xc0/0x110 [ 2103.905857][ T382] device_add_class_symlinks+0x1cf/0x240 [ 2103.911573][ T382] device_add+0x507/0xc20 [ 2103.915980][ T382] wiphy_register+0x1dad/0x2ae0 [ 2103.920935][ T382] ? cfg80211_event_work+0x40/0x40 [ 2103.926099][ T382] ? minstrel_ht_alloc+0x88a/0x990 [ 2103.931284][ T382] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2103.937410][ T382] ieee80211_register_hw+0x3464/0x4250 [ 2103.942983][ T382] ? ieee80211_tasklet_handler+0x20/0x20 [ 2103.948668][ T382] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2103.954623][ T382] ? __debug_object_init+0xec/0x450 [ 2103.959888][ T382] ? __asan_memset+0x22/0x40 [ 2103.964551][ T382] ? __hrtimer_init+0x186/0x270 [ 2103.969469][ T382] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2103.975314][ T382] ? mac80211_hwsim_free+0x220/0x220 [ 2103.980669][ T382] ? rcu_is_watching+0x15/0xb0 [ 2103.985492][ T382] ? kstrndup+0xbd/0x140 [ 2103.989845][ T382] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2103.995039][ T382] ? __nla_validate+0x50/0x50 [ 2103.999804][ T382] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2104.006238][ T382] ? __nla_parse+0x40/0x50 [ 2104.010730][ T382] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2104.017126][ T382] genl_family_rcv_msg_doit+0x211/0x310 [ 2104.022735][ T382] ? end_current_label_crit_section+0x170/0x170 [ 2104.029048][ T382] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2104.035028][ T382] ? bpf_lsm_capable+0x9/0x10 [ 2104.039770][ T382] ? security_capable+0x89/0xb0 [ 2104.044724][ T382] genl_rcv_msg+0x619/0x7a0 [ 2104.049321][ T382] ? genl_bind+0x360/0x360 [ 2104.053809][ T382] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2104.060314][ T382] ? perf_trace_lock+0x304/0x3b0 [ 2104.065448][ T382] netlink_rcv_skb+0x241/0x4d0 [ 2104.070389][ T382] ? genl_bind+0x360/0x360 [ 2104.074854][ T382] ? netlink_ack+0x1180/0x1180 [ 2104.079672][ T382] ? __lock_acquire+0x7d40/0x7d40 [ 2104.084825][ T382] ? down_read+0x1ac/0x2e0 [ 2104.089281][ T382] genl_rcv+0x28/0x40 [ 2104.093296][ T382] netlink_unicast+0x751/0x8d0 [ 2104.098112][ T382] netlink_sendmsg+0x8d0/0xbf0 [ 2104.103003][ T382] ? perf_trace_lock+0x304/0x3b0 [ 2104.108158][ T382] ? netlink_getsockopt+0x590/0x590 [ 2104.113486][ T382] ? aa_sock_msg_perm+0x94/0x150 [ 2104.118465][ T382] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2104.123787][ T382] ? security_socket_sendmsg+0x80/0xa0 [ 2104.129274][ T382] ? netlink_getsockopt+0x590/0x590 [ 2104.134520][ T382] ____sys_sendmsg+0x5ba/0x960 [ 2104.139340][ T382] ? __asan_memset+0x22/0x40 [ 2104.143957][ T382] ? __sys_sendmsg_sock+0x30/0x30 [ 2104.149007][ T382] ? __import_iovec+0x5f2/0x850 [ 2104.153903][ T382] ? import_iovec+0x73/0xa0 [ 2104.158446][ T382] ___sys_sendmsg+0x2a6/0x360 [ 2104.163160][ T382] ? __sys_sendmsg+0x2a0/0x2a0 [ 2104.167992][ T382] ? debug_mutex_init+0x38/0x70 [ 2104.172917][ T382] __se_sys_sendmsg+0x1c2/0x2b0 [ 2104.177885][ T382] ? __x64_sys_sendmsg+0x80/0x80 [ 2104.182876][ T382] ? lockdep_hardirqs_on+0x98/0x150 [ 2104.188107][ T382] do_syscall_64+0x55/0xa0 [ 2104.192693][ T382] ? clear_bhb_loop+0x40/0x90 [ 2104.197394][ T382] ? clear_bhb_loop+0x40/0x90 [ 2104.202293][ T382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2104.208209][ T382] RIP: 0033:0x7f5893d9aeb9 [ 2104.212661][ T382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2104.232294][ T382] RSP: 002b:00007f5891ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2104.240738][ T382] RAX: ffffffffffffffda RBX: 00007f5894015fa0 RCX: 00007f5893d9aeb9 [ 2104.248732][ T382] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2104.256725][ T382] RBP: 00007f5893e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2104.264808][ T382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2104.272802][ T382] R13: 00007f5894016038 R14: 00007f5894015fa0 R15: 00007ffe38257778 [ 2104.280838][ T382] [ 2109.576761][ T468] syzkaller0: entered promiscuous mode [ 2109.630966][ T468] syzkaller0: entered allmulticast mode [ 2114.284042][ T493] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2114.998925][ T518] netlink: 'syz.4.8211': attribute type 10 has an invalid length. [ 2115.484695][ T528] netlink: 'syz.4.8216': attribute type 10 has an invalid length. [ 2116.125883][ T535] netlink: 'syz.1.8219': attribute type 39 has an invalid length. [ 2116.880171][ T549] netlink: 'syz.2.8223': attribute type 19 has an invalid length. [ 2116.907858][ T549] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.8223'. [ 2116.959322][ T550] netlink: 'syz.4.8221': attribute type 4 has an invalid length. [ 2117.002859][ T550] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8221'. [ 2117.956492][ T566] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 2118.071833][ T570] netlink: 'syz.3.8229': attribute type 5 has an invalid length. [ 2118.084462][ T570] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.8229'. [ 2118.508743][ T574] netlink: 'syz.3.8232': attribute type 2 has an invalid length. [ 2118.518962][ T574] netlink: 'syz.3.8232': attribute type 8 has an invalid length. [ 2118.559614][ T574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8232'. [ 2119.768436][ T604] netlink: 'syz.1.8235': attribute type 4 has an invalid length. [ 2119.801642][ T604] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8235'. [ 2119.837059][ T604] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2120.638037][ T622] netlink: 'syz.1.8246': attribute type 29 has an invalid length. [ 2120.670290][ T622] netlink: 'syz.1.8246': attribute type 29 has an invalid length. [ 2120.714770][ T622] netlink: 'syz.1.8246': attribute type 29 has an invalid length. [ 2121.624504][ T638] netlink: 'syz.3.8251': attribute type 11 has an invalid length. [ 2121.659454][ T638] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8251'. [ 2123.316102][ T665] netlink: 'syz.1.8262': attribute type 9 has an invalid length. [ 2123.379518][ T665] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8262'. [ 2123.698355][ T670] netlink: 'syz.1.8262': attribute type 9 has an invalid length. [ 2123.710481][ T670] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8262'. [ 2123.775959][ T673] netlink: 'syz.4.8264': attribute type 5 has an invalid length. [ 2123.795793][ T673] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.8264'. [ 2125.306012][ T689] netlink: 'syz.2.8268': attribute type 10 has an invalid length. [ 2126.691920][ T714] netlink: 'syz.2.8278': attribute type 10 has an invalid length. [ 2126.703245][ T714] bridge_slave_1: left promiscuous mode [ 2126.974087][ T723] netlink: 'syz.3.8282': attribute type 9 has an invalid length. [ 2126.986786][ T723] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8282'. [ 2127.447191][ T723] netlink: 'syz.3.8282': attribute type 9 has an invalid length. [ 2127.474064][ T723] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8282'. [ 2128.204321][ T740] netlink: 'syz.4.8288': attribute type 10 has an invalid length. [ 2128.218422][ T740] bridge_slave_1: left promiscuous mode [ 2128.268478][ T742] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2129.431490][ T765] netlink: 'syz.1.8296': attribute type 21 has an invalid length. [ 2129.449508][ T765] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8296'. [ 2129.836514][ T771] netlink: 'syz.2.8298': attribute type 9 has an invalid length. [ 2129.919408][ T771] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8298'. [ 2130.377070][ T777] netlink: 'syz.2.8298': attribute type 9 has an invalid length. [ 2130.401478][ T777] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8298'. [ 2132.855944][ T788] netlink: 'syz.1.8300': attribute type 10 has an invalid length. [ 2133.746652][ T5783] Bluetooth: hci0: unexpected event for opcode 0x0008 [ 2135.958121][ T834] netlink: 'syz.1.8315': attribute type 10 has an invalid length. [ 2136.295299][ T826] netlink: 'syz.2.8312': attribute type 29 has an invalid length. [ 2136.340795][ T826] netlink: 'syz.2.8312': attribute type 29 has an invalid length. [ 2137.851715][ T5783] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2137.862517][ T5783] Bluetooth: hci0: Injecting HCI hardware error event [ 2137.873029][ T5783] Bluetooth: hci0: hardware error 0x00 [ 2138.824357][ T862] netlink: 'syz.4.8328': attribute type 10 has an invalid length. [ 2138.856888][ T862] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8328'. [ 2139.067919][ T861] delete_channel: no stack [ 2139.611702][ T871] netlink: 'syz.4.8332': attribute type 10 has an invalid length. [ 2139.736736][ T882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8324'. [ 2139.759782][ T882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8324'. [ 2139.780085][ T882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8324'. [ 2139.919401][ T5783] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2139.942126][ T882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8324'. [ 2140.077852][ T887] netlink: 'syz.4.8325': attribute type 10 has an invalid length. [ 2140.754244][ T902] netlink: 'syz.4.8329': attribute type 9 has an invalid length. [ 2140.816431][ T902] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8329'. [ 2141.244453][ T906] netlink: 'syz.4.8329': attribute type 9 has an invalid length. [ 2141.275034][ T906] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8329'. [ 2142.695844][ T944] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.8338'. [ 2142.983947][ T952] netlink: 'syz.1.8349': attribute type 9 has an invalid length. [ 2142.994826][ T952] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8349'. [ 2143.332191][ T955] netlink: 'syz.3.8340': attribute type 10 has an invalid length. [ 2143.598548][ T954] netlink: 'syz.1.8349': attribute type 9 has an invalid length. [ 2143.630069][ T954] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8349'. [ 2145.854712][ T970] netlink: 'syz.3.8345': attribute type 10 has an invalid length. [ 2147.355589][ T977] netlink: 'syz.2.8348': attribute type 10 has an invalid length. [ 2147.379000][ T977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8348'. [ 2147.464047][ T975] delete_channel: no stack [ 2147.751159][ T992] netlink: 'syz.1.8353': attribute type 10 has an invalid length. [ 2147.759414][ T992] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8353'. [ 2148.803900][ T1009] netlink: 'syz.2.8355': attribute type 21 has an invalid length. [ 2149.212232][ T1022] netlink: 'syz.2.8360': attribute type 9 has an invalid length. [ 2149.223296][ T1022] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8360'. [ 2149.614422][ T1022] netlink: 'syz.2.8360': attribute type 9 has an invalid length. [ 2149.638286][ T1022] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8360'. [ 2150.481834][ T1040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8364'. [ 2150.579786][ T1040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8364'. [ 2150.600889][ T1037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8364'. [ 2151.024044][ T1048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8364'. [ 2151.808342][ T1050] netlink: 'syz.4.8365': attribute type 10 has an invalid length. [ 2151.816668][ T1050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8365'. [ 2152.349041][ T1060] sit0: left promiscuous mode [ 2152.625513][ T1060] netlink: 'syz.4.8369': attribute type 21 has an invalid length. [ 2153.265499][ T1072] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8370'. [ 2154.062794][ T1087] netlink: 'syz.2.8373': attribute type 10 has an invalid length. [ 2155.687719][ T1104] wg2: left promiscuous mode [ 2155.713212][ T1106] wg2: entered promiscuous mode [ 2155.720921][ T1114] netlink: 'syz.2.8387': attribute type 10 has an invalid length. [ 2155.845241][ T1118] netlink: 'syz.3.8381': attribute type 10 has an invalid length. [ 2155.912537][ T1118] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8381'. [ 2158.277317][ T1144] netlink: 'syz.2.8389': attribute type 10 has an invalid length. [ 2158.591547][ T1153] syz.1.8393[1153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2158.591715][ T1153] syz.1.8393[1153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2158.830641][ T1157] netlink: 'syz.1.8393': attribute type 21 has an invalid length. [ 2160.959276][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.965674][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.015681][ T1183] netlink: 'syz.4.8399': attribute type 10 has an invalid length. [ 2161.030961][ T1183] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8399'. [ 2161.658541][ T1193] netlink: 'syz.1.8401': attribute type 10 has an invalid length. [ 2162.136806][ T1197] netlink: 'syz.3.8404': attribute type 10 has an invalid length. [ 2164.032181][ T1244] netlink: 'syz.1.8418': attribute type 10 has an invalid length. [ 2164.052010][ T1244] bridge_slave_1: left promiscuous mode [ 2164.197772][ T1249] syz.4.8420[1249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2164.197935][ T1249] syz.4.8420[1249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2164.529103][ T1249] netlink: 'syz.4.8420': attribute type 21 has an invalid length. [ 2167.680747][ T1284] netlink: 'syz.4.8427': attribute type 10 has an invalid length. [ 2172.176627][ T1351] netlink: 'syz.2.8454': attribute type 10 has an invalid length. [ 2177.425754][ T1421] netlink: 'syz.4.8480': attribute type 10 has an invalid length. [ 2177.468006][ T1421] netdevsim netdevsim4 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.496675][ T1421] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.551820][ T1421] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.590249][ T1421] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.064796][ T1489] netlink: 'syz.2.8506': attribute type 10 has an invalid length. [ 2181.094748][ T1489] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.117453][ T1489] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.174503][ T1489] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.216070][ T1489] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.290058][ T1489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.339374][ T1489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.363961][ T1489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.380883][ T1489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.399097][ T1489] geneve1: entered promiscuous mode [ 2181.404974][ T1489] geneve1: entered allmulticast mode [ 2181.418242][ T1489] `: Port device geneve1 added [ 2195.355074][ T1794] netlink: 'syz.1.8627': attribute type 10 has an invalid length. [ 2199.887217][ T1899] netlink: 'syz.3.8671': attribute type 10 has an invalid length. [ 2199.948982][ T1899] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.966511][ T1899] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.975623][ T1899] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.984701][ T1899] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.244654][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.251382][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.686811][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.693557][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2314.097236][ T855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2314.111181][ T855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2314.119683][ T855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2314.130138][ T855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2314.141434][ T855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2314.149671][ T855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2315.128883][ T4220] chnl_net:caif_netlink_parms(): no params data found [ 2315.436346][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.487266][ T4220] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.495033][ T4220] bridge_slave_0: entered allmulticast mode [ 2315.502795][ T4220] bridge_slave_0: entered promiscuous mode [ 2315.543263][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.563584][ T4220] bridge0: port 2(bridge_slave_1) entered disabled state [ 2315.575016][ T4220] bridge_slave_1: entered allmulticast mode [ 2315.584858][ T4220] bridge_slave_1: entered promiscuous mode [ 2315.705081][ T4220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2315.732068][ T4220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2315.839014][ T4220] team0: Port device team_slave_0 added [ 2315.872918][ T4220] team0: Port device team_slave_1 added [ 2316.235922][ T5783] Bluetooth: hci1: command tx timeout [ 2316.272277][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2316.359254][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2316.453355][ T4220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2316.605353][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2316.627918][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2316.654707][ T4220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2316.691865][ T4279] netlink: 'syz.1.9601': attribute type 10 has an invalid length. [ 2317.113673][ T4220] hsr_slave_0: entered promiscuous mode [ 2317.128951][ T4220] hsr_slave_1: entered promiscuous mode [ 2318.309412][ T5783] Bluetooth: hci1: command tx timeout [ 2320.142857][ T4220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2320.153918][ T4220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2320.178279][ T4220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2320.213718][ T4220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2320.389289][ T5783] Bluetooth: hci1: command tx timeout [ 2321.001346][ T4220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2321.102966][ T4220] 8021q: adding VLAN 0 to HW filter on device team0 [ 2321.170909][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 2321.178158][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2321.226192][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 2321.233459][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2321.537068][T13924] batman_adv: batadv0: Interface deactivated: wlan0 [ 2321.568536][T13924] batman_adv: batadv0: Removing interface: wlan0 [ 2321.674855][T13924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2321.710020][T13924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2322.471123][ T5783] Bluetooth: hci1: command tx timeout [ 2323.035881][ T4220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2323.117999][ T4220] veth0_vlan: entered promiscuous mode [ 2323.134755][ T4220] veth1_vlan: entered promiscuous mode [ 2323.201914][ T4220] veth0_macvtap: entered promiscuous mode [ 2323.212695][ T4220] veth1_macvtap: entered promiscuous mode [ 2323.235058][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2323.248467][ T4220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2323.260516][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.270890][ T4220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2323.281613][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.293362][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2323.314730][ T4220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2323.326576][ T4220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2323.336170][ T4220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2323.345342][ T4220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2323.698053][ T4408] netlink: 'syz.2.9621': attribute type 10 has an invalid length. [ 2323.712723][ T4408] `: left promiscuous mode [ 2323.729468][ T4408] team_slave_0: left promiscuous mode [ 2323.744046][ T4408] team_slave_1: left promiscuous mode [ 2323.752535][ T4408] hsr_slave_0: left promiscuous mode [ 2323.759306][ T4408] geneve1: left promiscuous mode [ 2323.766331][ T4408] `: left allmulticast mode [ 2323.776569][ T4408] team_slave_0: left allmulticast mode [ 2323.782922][ T4408] team_slave_1: left allmulticast mode [ 2323.788518][ T4408] hsr_slave_0: left allmulticast mode [ 2323.794298][ T4408] geneve1: left allmulticast mode [ 2323.805924][ T4408] batman_adv: batadv0: Adding interface: ` [ 2323.812177][ T4408] batman_adv: batadv0: The MTU of interface ` is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2323.841337][ T4408] batman_adv: batadv0: Not using interface ` (retrying later): interface not active [ 2323.877283][ T4220] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 2323.887976][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.898180][ T4220] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 2323.908010][ T4220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2323.933704][T13924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2323.969023][T13924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2324.019848][T24865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2324.038671][T24865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2325.888260][ T4442] netlink: 'syz.4.9639': attribute type 10 has an invalid length. [ 2325.897705][ T855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2325.907710][ T855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2325.918654][ T855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2325.928671][ T855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2325.949574][ T855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2325.957024][ T855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2326.069648][ T783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.427795][ T783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.686354][ T783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2327.327977][ T783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2327.635570][ T4441] chnl_net:caif_netlink_parms(): no params data found [ 2327.990733][ T5783] Bluetooth: hci2: command tx timeout [ 2328.737815][ T4488] netlink: 'syz.1.9643': attribute type 10 has an invalid length. [ 2328.808146][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 2328.875970][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 2328.914013][ T4441] bridge_slave_0: entered allmulticast mode [ 2328.945930][ T4441] bridge_slave_0: entered promiscuous mode [ 2329.567131][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 2329.586390][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 2329.609211][ T4441] bridge_slave_1: entered allmulticast mode [ 2329.616811][ T4441] bridge_slave_1: entered promiscuous mode [ 2330.125265][ T5783] Bluetooth: hci2: command tx timeout [ 2330.264726][ T4441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2330.295003][ T4441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2330.705961][ T4441] team0: Port device team_slave_0 added [ 2330.743794][ T4441] team0: Port device team_slave_1 added [ 2330.919280][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2330.926375][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2331.037641][ T4441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2331.086626][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2331.114393][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2331.155035][ T4441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2331.728815][ T4441] hsr_slave_0: entered promiscuous mode [ 2331.754488][ T4441] hsr_slave_1: entered promiscuous mode [ 2331.766817][ T4441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2331.778264][ T4441] Cannot create hsr debugfs directory [ 2332.079230][ T4553] netlink: 'syz.3.9658': attribute type 10 has an invalid length. [ 2332.140119][ T4553] batman_adv: batadv0: Adding interface: team0 [ 2332.146356][ T4553] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2332.193130][ T4553] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2332.208379][ T5783] Bluetooth: hci2: command tx timeout [ 2334.231380][ T5783] Bluetooth: hci2: command tx timeout [ 2334.738046][ T4595] netlink: 'syz.1.9668': attribute type 10 has an invalid length. [ 2335.371484][ T4441] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2335.403771][ T4441] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2335.808076][ T4441] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2335.836371][ T4441] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2336.629394][ T783] batman_adv: batadv0: Interface deactivated: wlan0 [ 2336.963141][ T783] batman_adv: batadv0: Removing interface: wlan0 [ 2337.077665][ T783] veth0_to_team: left allmulticast mode [ 2337.097459][ T783] veth0_to_team: left promiscuous mode [ 2337.107195][ T783] Ÿë: port 1(veth0_to_team) entered disabled state [ 2337.141349][ T783] batman_adv: batadv0: Removing interface: ` [ 2337.159906][ T783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2337.167387][ T783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2337.193530][ T783] veth1_vlan: left promiscuous mode [ 2337.636739][ T783] ` (unregistering): Port device geneve1 removed [ 2337.898593][ T783] ` (unregistering): Port device hsr_slave_0 removed [ 2338.047744][ T783] ` (unregistering): Port device team_slave_1 removed [ 2338.110732][ T783] ` (unregistering): Port device team_slave_0 removed [ 2338.708722][ T4441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2338.794930][ T4441] 8021q: adding VLAN 0 to HW filter on device team0 [ 2338.836880][T13924] bridge0: port 1(bridge_slave_0) entered blocking state [ 2338.844438][T13924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2338.912874][T13924] bridge0: port 2(bridge_slave_1) entered blocking state [ 2338.920241][T13924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2339.574150][ T4441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2339.725623][ T4441] veth0_vlan: entered promiscuous mode [ 2339.747462][ T4441] veth1_vlan: entered promiscuous mode [ 2339.838617][ T4441] veth0_macvtap: entered promiscuous mode [ 2339.863380][ T4441] veth1_macvtap: entered promiscuous mode [ 2339.919342][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2339.935311][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2339.948178][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2339.985709][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.019236][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.039257][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2340.073919][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.112180][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2340.178117][ T4441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.219548][ T4441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.228524][ T4441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.265336][ T4441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.455578][ T4441] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 2340.512851][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2340.566363][T13907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2340.611994][T13907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2340.755487][ T8944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2340.783991][ T8944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2342.009822][ T4796] netlink: 'syz.1.9730': attribute type 153 has an invalid length. [ 2342.018332][ T4796] netlink: 'syz.1.9730': attribute type 1 has an invalid length. [ 2342.072161][ T4796] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.9730'. [ 2342.155757][ T855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2342.166790][ T855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2342.176055][ T855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2342.191538][ T855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2342.201632][ T855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2342.209232][ T855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2343.827925][ T4800] chnl_net:caif_netlink_parms(): no params data found [ 2344.223726][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state [ 2344.231785][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state [ 2344.279390][ T4800] bridge_slave_0: entered allmulticast mode [ 2344.310218][ T5783] Bluetooth: hci3: command tx timeout [ 2344.320703][ T4800] bridge_slave_0: entered promiscuous mode [ 2344.426427][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state [ 2344.450642][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state [ 2344.458038][ T4800] bridge_slave_1: entered allmulticast mode [ 2344.466279][ T4800] bridge_slave_1: entered promiscuous mode [ 2344.583275][ T4800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2344.651712][ T4800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2344.779425][ T4800] team0: Port device team_slave_0 added [ 2344.804026][ T4800] team0: Port device team_slave_1 added [ 2344.942749][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2344.979126][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2345.049286][ T4800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2345.116584][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.123421][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.176200][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2345.190025][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2345.259139][ T4800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2345.470405][ T4800] hsr_slave_0: entered promiscuous mode [ 2345.491534][ T4800] hsr_slave_1: entered promiscuous mode [ 2345.503371][ T4800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2345.519158][ T4800] Cannot create hsr debugfs directory [ 2346.389322][ T5783] Bluetooth: hci3: command tx timeout [ 2348.469869][ T5783] Bluetooth: hci3: command tx timeout [ 2348.768835][ T4800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2348.917256][ T4800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2348.933831][ T4800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2348.994785][ T4800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2349.072393][ T783] batman_adv: batadv0: Interface deactivated: wlan0 [ 2349.142577][ T783] batman_adv: batadv0: Removing interface: wlan0 [ 2349.326971][ T783] veth0_to_team: left allmulticast mode [ 2349.369180][ T783] veth0_to_team: left promiscuous mode [ 2349.374963][ T783] Ÿë: port 1(veth0_to_team) entered disabled state [ 2349.439976][ T783] hsr_slave_0: left promiscuous mode [ 2349.456595][ T783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2349.474756][ T783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2350.549211][ T5783] Bluetooth: hci3: command tx timeout [ 2353.247892][ T5122] bond0: mtu less than device minimum [ 2353.535172][ T4800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2353.602990][ T4800] 8021q: adding VLAN 0 to HW filter on device team0 [ 2353.647207][T13924] bridge0: port 1(bridge_slave_0) entered blocking state [ 2353.654525][T13924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2353.768575][T24865] bridge0: port 2(bridge_slave_1) entered blocking state [ 2353.775852][T24865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2354.537180][ T4800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2354.618528][ T5202] netlink: 'syz.1.9878': attribute type 153 has an invalid length. [ 2354.666380][ T5202] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.9878'. [ 2355.334189][ T4800] veth0_vlan: entered promiscuous mode [ 2355.363286][ T4800] veth1_vlan: entered promiscuous mode [ 2355.466098][ T4800] veth0_macvtap: entered promiscuous mode [ 2355.501447][ T4800] veth1_macvtap: entered promiscuous mode [ 2355.558211][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2355.586082][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2355.619272][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2355.644161][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2355.672285][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2355.736819][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2355.767290][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2355.798068][ T4800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2355.821678][ T4800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2355.868133][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2355.907454][ T4800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2355.945456][ T4800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2355.964600][ T4800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2355.992918][ T4800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2356.246698][ T8954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2356.279953][ T8954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2356.364402][ T783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2356.377322][ T783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2357.171102][ T5284] netlink: 'syz.2.9913': attribute type 153 has an invalid length. [ 2357.213846][ T5284] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.9913'. [ 2357.652979][ T855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2357.667754][ T855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2357.682449][ T855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2357.697583][ T855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2357.706980][ T855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2357.714960][ T855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2358.322287][ T5323] bridge0: port 2(bridge_slave_1) entered disabled state [ 2358.330954][ T5323] bridge0: port 1(bridge_slave_0) entered disabled state [ 2358.380626][ T5323] bridge0: entered allmulticast mode [ 2358.428510][ T5328] bridge_slave_1: left allmulticast mode [ 2358.435505][ T5328] bridge_slave_1: left promiscuous mode [ 2358.445720][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 2358.478404][ T5328] bridge_slave_0: left allmulticast mode [ 2358.486974][ T5328] bridge_slave_0: left promiscuous mode [ 2358.494546][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 2358.680701][ T5339] netlink: 'syz.3.9936': attribute type 153 has an invalid length. [ 2358.723834][ T5296] chnl_net:caif_netlink_parms(): no params data found [ 2358.739564][ T5339] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.9936'. [ 2359.530632][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.537845][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.587107][ T5296] bridge_slave_0: entered allmulticast mode [ 2359.615491][ T5296] bridge_slave_0: entered promiscuous mode [ 2359.745492][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 2359.763384][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.794630][ T5296] bridge_slave_1: entered allmulticast mode [ 2359.819866][ T5296] bridge_slave_1: entered promiscuous mode [ 2359.830008][ T5783] Bluetooth: hci0: command tx timeout [ 2360.302795][ T5296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2360.357704][ T5296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2360.615995][ T5296] team0: Port device team_slave_0 added [ 2360.642205][ T5296] team0: Port device team_slave_1 added [ 2361.685979][ T5296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2361.706287][ T5296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2361.755922][ T5296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2361.789309][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.797272][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2361.805956][ T5445] bridge0: entered allmulticast mode [ 2361.841601][ T5446] bridge_slave_1: left allmulticast mode [ 2361.847323][ T5446] bridge_slave_1: left promiscuous mode [ 2361.881765][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.909571][ T5783] Bluetooth: hci0: command tx timeout [ 2361.944769][ T5446] bridge_slave_0: left allmulticast mode [ 2361.951446][ T5446] bridge_slave_0: left promiscuous mode [ 2361.969663][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 2362.136444][ T5296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2362.155912][ T5296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2362.191912][ T5296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2362.476224][ T5296] hsr_slave_0: entered promiscuous mode [ 2362.534834][ T5296] hsr_slave_1: entered promiscuous mode [ 2362.546431][ T5296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2362.563400][ T5296] Cannot create hsr debugfs directory [ 2363.207387][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state [ 2363.215218][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state [ 2363.326228][ T5497] bridge0: entered allmulticast mode [ 2363.479464][ T5501] bridge_slave_1: left allmulticast mode [ 2363.503820][ T5501] bridge_slave_1: left promiscuous mode [ 2363.531356][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 2363.556706][ T5501] bridge_slave_0: left allmulticast mode [ 2363.585524][ T5501] bridge_slave_0: left promiscuous mode [ 2363.609501][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 2363.989896][ T5783] Bluetooth: hci0: command tx timeout [ 2365.013294][ T5296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2365.028117][ T5296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2365.055428][ T5296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2365.076489][ T5296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2365.308641][ T5296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2365.333133][ T5296] 8021q: adding VLAN 0 to HW filter on device team0 [ 2365.407796][T13924] bridge0: port 1(bridge_slave_0) entered blocking state [ 2365.415009][T13924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2365.451570][T24865] bridge0: port 2(bridge_slave_1) entered blocking state [ 2365.458733][T24865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2365.552355][ T5296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2365.603737][ T8954] veth0_to_team: left allmulticast mode [ 2365.623094][ T8954] veth0_to_team: left promiscuous mode [ 2365.628848][ T8954] Ÿë: port 1(veth0_to_team) entered disabled state [ 2366.069520][ T5783] Bluetooth: hci0: command tx timeout [ 2369.042586][ T5296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2369.141348][ T5296] veth0_vlan: entered promiscuous mode [ 2369.171018][ T5296] veth1_vlan: entered promiscuous mode [ 2369.220514][ T5296] veth0_macvtap: entered promiscuous mode [ 2369.232406][ T5296] veth1_macvtap: entered promiscuous mode [ 2369.263657][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2369.279116][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2369.296398][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2369.307148][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2369.324379][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2369.335832][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2369.353446][ T5296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2369.374153][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2369.389285][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2369.408012][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2369.418768][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2369.437653][ T5296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2369.448410][ T5296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2369.461252][ T5296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2369.482671][ T5296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.497743][ T5296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.508087][ T5296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.517694][ T5296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.646644][T13924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2369.670481][T13924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2369.712882][T13907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2369.721470][T13907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2370.444938][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 2370.452913][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 2370.551138][ T5602] bridge0: entered allmulticast mode [ 2370.601774][ T5604] bridge_slave_1: left allmulticast mode [ 2370.658423][ T5604] bridge_slave_1: left promiscuous mode [ 2370.679917][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 2370.723130][ T5604] bridge_slave_0: left allmulticast mode [ 2370.759312][ T5604] bridge_slave_0: left promiscuous mode [ 2370.765200][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 2371.881827][ T5653] netlink: 'syz.1.10031': attribute type 153 has an invalid length. [ 2371.899263][ T5653] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.10031'. [ 2375.496750][ T5800] netlink: 'syz.4.10087': attribute type 153 has an invalid length. [ 2375.519293][ T5800] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.10087'. [ 2376.111788][ T5830] netlink: 'syz.3.10100': attribute type 153 has an invalid length. [ 2376.131470][ T5830] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.10100'. [ 2376.715858][ T5850] syzkaller0: entered promiscuous mode [ 2376.722528][ T5850] syzkaller0: entered allmulticast mode [ 2376.768950][ T5855] netlink: 'syz.2.10112': attribute type 153 has an invalid length. [ 2376.787272][ T5855] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10112'. [ 2379.185758][ T5925] netlink: 'syz.1.10146': attribute type 153 has an invalid length. [ 2379.197603][ T5925] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.10146'. [ 2380.843178][ T5943] netlink: 'syz.1.10155': attribute type 153 has an invalid length. [ 2380.870421][ T5943] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.10155'. [ 2382.224750][ T6006] netlink: 'syz.1.10186': attribute type 153 has an invalid length. [ 2382.245305][ T6006] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.10186'. [ 2382.736742][ T6030] netlink: 'syz.3.10197': attribute type 153 has an invalid length. [ 2382.772842][ T6030] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.10197'. [ 2382.827136][ T6032] syzkaller0: entered promiscuous mode [ 2382.835410][ T6032] syzkaller0: entered allmulticast mode [ 2385.851172][ T6076] netlink: 'syz.1.10219': attribute type 153 has an invalid length. [ 2385.863847][ T6076] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.10219'. [ 2389.413171][ T6100] syzkaller0: entered promiscuous mode [ 2389.421265][ T6100] syzkaller0: entered allmulticast mode [ 2389.822339][ T6104] netlink: 'syz.4.10230': attribute type 153 has an invalid length. [ 2389.852209][ T6104] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.10230'. [ 2392.591075][ T6135] netlink: 'syz.3.10243': attribute type 153 has an invalid length. [ 2392.627896][ T6135] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.10243'. [ 2393.456833][ T6140] syzkaller0: entered promiscuous mode [ 2393.471949][ T6140] syzkaller0: entered allmulticast mode [ 2396.598305][ T6178] netlink: 'syz.4.10261': attribute type 153 has an invalid length. [ 2396.606719][ T6178] netlink: 127896 bytes leftover after parsing attributes in process `syz.4.10261'. [ 2397.530178][ T6188] syzkaller0: entered promiscuous mode [ 2397.535747][ T6188] syzkaller0: entered allmulticast mode [ 2397.800772][ T6203] netlink: 'syz.2.10270': attribute type 153 has an invalid length. [ 2397.809994][ T6203] netlink: 127896 bytes leftover after parsing attributes in process `syz.2.10270'. [ 2400.800965][ T6234] netlink: 'syz.1.10283': attribute type 153 has an invalid length. [ 2400.843927][ T6234] netlink: 127896 bytes leftover after parsing attributes in process `syz.1.10283'. [ 2400.978531][ T6233] syzkaller0: entered promiscuous mode [ 2400.999025][ T6233] syzkaller0: entered allmulticast mode [ 2403.554218][ T6245] syzkaller0: entered promiscuous mode [ 2403.595694][ T6245] syzkaller0: entered allmulticast mode [ 2406.508988][ T6282] syzkaller0: entered promiscuous mode [ 2406.519178][ T6282] syzkaller0: entered allmulticast mode [ 2406.559886][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.566360][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2413.380915][ T6346] pim6reg1: entered promiscuous mode [ 2413.400642][ T6346] pim6reg1: entered allmulticast mode [ 2414.314791][ T6369] syzkaller0: entered promiscuous mode [ 2414.340083][ T6369] syzkaller0: entered allmulticast mode [ 2424.992204][ T6440] syzkaller0: entered promiscuous mode [ 2424.997918][ T6440] syzkaller0: entered allmulticast mode [ 2431.568696][ T6481] syzkaller0: entered promiscuous mode [ 2431.581183][ T6481] syzkaller0: entered allmulticast mode [ 2435.295253][ T6507] syzkaller0: entered promiscuous mode [ 2435.380822][ T6507] syzkaller0: entered allmulticast mode [ 2439.354269][ T855] Bluetooth: hci1: command 0x0406 tx timeout [ 2443.025983][ T6571] syzkaller0: entered promiscuous mode [ 2443.031952][ T6571] syzkaller0: entered allmulticast mode [ 2446.073479][ T6590] syzkaller0: entered promiscuous mode [ 2446.091380][ T6590] syzkaller0: entered allmulticast mode [ 2449.597140][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 2452.798935][ T6642] syzkaller0: entered promiscuous mode [ 2452.820454][ T6642] syzkaller0: entered allmulticast mode [ 2456.810163][ T6683] pimreg1: tun_chr_ioctl cmd 1074025692 [ 2456.931116][ T6681] syzkaller0: entered promiscuous mode [ 2456.936812][ T6681] syzkaller0: entered allmulticast mode [ 2461.397341][ T6741] syzkaller0: entered promiscuous mode [ 2461.412590][ T6741] syzkaller0: entered allmulticast mode [ 2464.951492][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 2465.304725][ T6783] syzkaller0: entered promiscuous mode [ 2465.312732][ T6783] syzkaller0: entered allmulticast mode [ 2468.002484][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.012229][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2471.300430][ T6840] syzkaller0: entered promiscuous mode [ 2471.305976][ T6840] syzkaller0: entered allmulticast mode [ 2481.669298][ T855] Bluetooth: hci0: command 0x0406 tx timeout [ 2482.772916][ T6957] syzkaller0: entered promiscuous mode [ 2482.789175][ T6957] syzkaller0: entered allmulticast mode [ 2490.274088][ T7009] syzkaller0: entered promiscuous mode [ 2490.299291][ T7009] syzkaller0: entered allmulticast mode [ 2495.852388][ T7054] macsec0: entered promiscuous mode [ 2495.858001][ T7054] macsec0: entered allmulticast mode [ 2495.883586][ T7054] veth1_macvtap: entered allmulticast mode [ 2495.970090][ T7051] veth1_macvtap: left allmulticast mode [ 2495.986301][ T7051] veth1_macvtap: left promiscuous mode [ 2496.000044][ T7051] macsec0: left promiscuous mode [ 2496.010165][ T7051] macsec0: left allmulticast mode [ 2497.160784][ T7064] syzkaller0: entered promiscuous mode [ 2497.174192][ T7064] syzkaller0: entered allmulticast mode [ 2502.416181][ T7116] syzkaller0: entered promiscuous mode [ 2502.429165][ T7116] syzkaller0: entered allmulticast mode [ 2504.403802][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2504.425174][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2504.440161][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2504.464256][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2504.489186][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2504.505260][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2506.453587][ T7140] syzkaller0: entered promiscuous mode [ 2506.459207][ T7140] syzkaller0: entered allmulticast mode [ 2506.514084][ T7151] sit0: entered allmulticast mode [ 2506.640118][ T855] Bluetooth: hci4: command tx timeout [ 2508.715250][ T855] Bluetooth: hci4: command tx timeout [ 2508.762963][ T7152] sit0: entered promiscuous mode [ 2509.417759][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 2509.874133][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 2509.930715][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2509.938049][ T7132] bridge_slave_0: entered allmulticast mode [ 2509.945722][ T7132] bridge_slave_0: entered promiscuous mode [ 2509.956971][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2509.964411][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2509.973416][ T7132] bridge_slave_1: entered allmulticast mode [ 2509.981042][ T7132] bridge_slave_1: entered promiscuous mode [ 2510.174570][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2510.336868][ T7175] syzkaller0: entered promiscuous mode [ 2510.400124][ T7175] syzkaller0: entered allmulticast mode [ 2510.444713][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2510.563371][ T7176] syzkaller0: entered promiscuous mode [ 2510.570177][ T7176] syzkaller0: entered allmulticast mode [ 2510.613811][ T7132] team0: Port device team_slave_0 added [ 2510.702975][ T7132] team0: Port device team_slave_1 added [ 2510.802070][ T855] Bluetooth: hci4: command tx timeout [ 2512.869669][ T855] Bluetooth: hci4: command tx timeout [ 2515.101441][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2515.108446][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2515.149364][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2515.171930][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2515.182027][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2515.217274][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2515.295144][ T7132] hsr_slave_0: entered promiscuous mode [ 2515.302450][ T7132] hsr_slave_1: entered promiscuous mode [ 2515.308934][ T7132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2515.316911][ T7132] Cannot create hsr debugfs directory [ 2515.686789][ T7132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2515.715172][ T7132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2515.735100][ T7132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2515.753791][ T7132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2515.990103][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2516.040965][ T7132] 8021q: adding VLAN 0 to HW filter on device team0 [ 2516.061882][T13907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2516.069119][T13907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2516.134633][T24865] bridge0: port 2(bridge_slave_1) entered blocking state [ 2516.141792][T24865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2516.531107][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2517.004673][ T7132] veth0_vlan: entered promiscuous mode [ 2517.039813][ T7132] veth1_vlan: entered promiscuous mode [ 2517.103637][ T7132] veth0_macvtap: entered promiscuous mode [ 2517.125711][ T7132] veth1_macvtap: entered promiscuous mode [ 2517.164886][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2517.185765][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.207619][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2517.218658][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.237424][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2517.248330][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.264847][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2517.279127][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.290800][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2517.318477][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2517.335736][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.346646][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2517.368342][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.378802][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2517.396448][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.406847][ T7132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2517.432517][ T7132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.448695][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2517.478976][ T7132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2517.487960][ T7132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2517.505362][ T7132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2517.516017][ T7132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2517.665002][T24865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2517.688026][T24865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2517.724880][ T5557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2517.738646][ T5557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2518.328145][ T5557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2518.401395][ T5557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2518.479240][ T5557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2518.566076][ T5557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2519.724209][ T5557] hsr_slave_0: left promiscuous mode [ 2519.734108][ T5557] hsr_slave_1: left promiscuous mode [ 2519.742446][ T5557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2519.751044][ T5557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2519.759894][ T5557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2519.767352][ T5557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2519.805243][ T5557] veth1_macvtap: left promiscuous mode [ 2519.811348][ T5557] veth0_macvtap: left promiscuous mode [ 2519.817045][ T5557] veth1_vlan: left promiscuous mode [ 2519.828916][ T5557] veth0_vlan: left promiscuous mode [ 2520.550218][ T5557] team0 (unregistering): Port device team_slave_1 removed [ 2520.604339][ T5557] team0 (unregistering): Port device team_slave_0 removed [ 2520.658195][ T5557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2520.717040][ T5557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2521.125777][ T5557] bond0 (unregistering): Released all slaves [ 2529.433781][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.440270][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.874210][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.880704][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2628.789126][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 2652.313274][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.322925][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.752352][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.758709][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.192349][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.198737][ T1290] ieee802154 phy1 wpan1: encryption failed: -22