last executing test programs: 4.228933148s ago: executing program 1 (id=3791): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x2000000000000015, 0x0, 0x0) 1.72284173s ago: executing program 3 (id=3833): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x4, 0x800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) 1.556845503s ago: executing program 3 (id=3836): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) 1.493777454s ago: executing program 0 (id=3838): socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x8, 0x9, 0x0, 0x8000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x24004014) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, 0x0, &(0x7f0000000640)=""/234}, 0x20) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d21"], 0x33fe0) 1.435939676s ago: executing program 3 (id=3840): r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.333658347s ago: executing program 2 (id=3841): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r0 = getpid() r1 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000000), 0xff7b) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='-\v'], 0x33) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) close(r5) 1.18611146s ago: executing program 4 (id=3842): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x7, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6cae45a9, 0x0, @perf_bp={0x0}, 0x5010, 0x100000005, 0x9, 0x5, 0x40008, 0xfffffffe, 0xd, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8000000000210e, 0x40, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408001, 0xaea}, 0x10407, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x4b5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) socketpair(0x1a, 0x0, 0x7c6d, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x1, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.13576858s ago: executing program 3 (id=3843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.13516205s ago: executing program 2 (id=3844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000008480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1869d0d4d9cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f33ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00bb02000000000000c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a03bda7b6222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f5bce1cdaa99705a8fa48f61071f548d411353965615c24c1860790dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 1.078415551s ago: executing program 1 (id=3845): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000950000000000000015e975053f451b3c9a182992ef7d1d93b6e115d2f7a7cdbee9e4fb2d9f01a2edfc92720af9df7669718b30af057896c6ff70"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x15, 0xa, 0x9, 0x0) socket$kcm(0x15, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.036115562s ago: executing program 0 (id=3846): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, 0x0, &(0x7f0000000540)=r3}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x2c, 0x0, 0x28) 1.008065382s ago: executing program 4 (id=3847): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x4, 0x800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) 919.670944ms ago: executing program 1 (id=3848): socket$kcm(0x10, 0x2, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@bloom_filter={0x1e, 0xa4, 0x9, 0x80000000, 0x0, 0xffffffffffffffff, 0x19f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x5, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='c 122'], 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000380)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c00", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a00000008000000000000000000", @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f5"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000031"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) 889.076285ms ago: executing program 3 (id=3849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x112) r1 = getpid() r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xee, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000580)={0x641f046d77943aa8, 0x80, 0x6, 0x2, 0x7, 0xe7, 0x0, 0x2, 0xc02, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x3, 0x3, 0x8, 0x7fffffffffffffff, 0x8000, 0x400, 0x0, 0x101, 0x0, 0x6}, 0xffffffffffffffff, 0x9, r4, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xb) ioctl$TUNSETLINK(r8, 0x400454cd, 0x6) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x4) 841.639005ms ago: executing program 0 (id=3850): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9e25, 0x0, 0x800, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000beb2800000000000000000f5ddf", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8953, &(0x7f0000000000)={'xfrm0\x00', @random="4d8500a400"}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) 841.124955ms ago: executing program 2 (id=3851): perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14705, 0x32, 0xfffffbff, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x10, 0x5, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x59, 0xfe, 0x6, 0x0, 0x0, 0x210e, 0x82410, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, r0, 0x9) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x10}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfe, 0xffffffff, 0xaf6, 0x120, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x1, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000280)=r1, 0x4) 762.974496ms ago: executing program 4 (id=3852): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) close(0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000), 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) write$cgroup_freezer_state(r5, &(0x7f0000000840)='FROZEN\x00', 0x7) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000040)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x34}, @call={0x85, 0x0, 0x0, 0x8f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5d86, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x0, 0x3, 0x0, 0x3, 0x100, 0x1e}, @ldst={0x3, 0x0, 0x2, 0xa, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}], &(0x7f0000000180)='GPL\x00', 0xa5, 0xa2, &(0x7f00000001c0)=""/162, 0x41000, 0x59, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000600)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x1, 0x2, 0xca}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000680)=[r1, r5], &(0x7f00000006c0)=[{0x1, 0x5, 0xd, 0x8}, {0x2, 0x1, 0x6, 0x5}, {0x1, 0x1, 0x1, 0x3}, {0x5, 0x3, 0xd, 0x6}, {0x0, 0x4, 0x0, 0x9}, {0x1, 0x4, 0xc, 0x7}, {0x5, 0x1, 0x2, 0x5}, {0x2, 0x3, 0xb, 0x3}, {0x4, 0x2, 0x3, 0xa}], 0x10, 0x8, @void, @value}, 0x94) close(r5) close(r4) 642.762639ms ago: executing program 1 (id=3853): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000240), 0x1}, 0x14105, 0x20032, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000000006000000000000009500000c00"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000060000001810a000", @ANYRES32, @ANYBLOB="0054000000000000006600000000000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 502.556591ms ago: executing program 0 (id=3854): r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000640)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 411.342143ms ago: executing program 2 (id=3855): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r0 = getpid() r1 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000000), 0xff7b) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='-\v'], 0x33) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) close(r5) 394.725063ms ago: executing program 4 (id=3856): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) 347.088253ms ago: executing program 1 (id=3857): socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x8, 0x9, 0x0, 0x8000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x24004014) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, 0x0, &(0x7f0000000640)=""/234}, 0x20) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d21"], 0x33fe0) 287.835285ms ago: executing program 0 (id=3858): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000950000000000000015e975053f451b3c9a182992ef7d1d93b6e115d2f7a7cdbee9e4fb2d9f01a2edfc92720af9df7669718b30af057896c6ff70"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x15, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 287.134945ms ago: executing program 2 (id=3859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 185.347467ms ago: executing program 4 (id=3860): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000056000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000001f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 71.440468ms ago: executing program 3 (id=3861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 71.205828ms ago: executing program 4 (id=3862): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x18) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) 70.423418ms ago: executing program 1 (id=3863): socket$kcm(0x10, 0x2, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@bloom_filter={0x1e, 0xa4, 0x9, 0x80000000, 0x0, 0xffffffffffffffff, 0x19f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x5, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r3], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='c 122'], 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}], 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c00", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a00000008000000000000000000", @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f5"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000031"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r4, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) 32.041639ms ago: executing program 0 (id=3864): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f008001d1abd52f4a1615756b4c22b76e2e2b477293f2a", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=3865): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r1, &(0x7f0000001900)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/199, 0xc7}, {&(0x7f0000001800)=""/136, 0x88}, {&(0x7f0000000400)=""/77, 0x4d}], 0x5, &(0x7f00000018c0)=""/31, 0x1f}, 0x2000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, 0x0, &(0x7f0000000240)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ink becomes ready [ 68.517457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.539002][ T4167] device veth0_macvtap entered promiscuous mode [ 68.568142][ T4175] device veth1_vlan entered promiscuous mode [ 68.578956][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.593989][ T4167] device veth1_macvtap entered promiscuous mode [ 68.612496][ T4171] device veth0_macvtap entered promiscuous mode [ 68.628304][ T4173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.639844][ T4173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.651138][ T4173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.659948][ T4173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.670413][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.680330][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.688711][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.697675][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.706793][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.716997][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.726037][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.736928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.746174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.757624][ T4171] device veth1_macvtap entered promiscuous mode [ 68.795088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.803147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.811999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.838113][ T4175] device veth0_macvtap entered promiscuous mode [ 68.861597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.872388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.883003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.892096][ T4178] device veth0_vlan entered promiscuous mode [ 68.902395][ T4175] device veth1_macvtap entered promiscuous mode [ 68.910687][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.922100][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.933842][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.946189][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.957227][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.969121][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.002115][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.011238][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.021606][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.030603][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.042694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.052478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.061325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.070541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.079765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.090805][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.101556][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.112477][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.123339][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.133550][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 69.139876][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.157366][ T4178] device veth1_vlan entered promiscuous mode [ 69.177753][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.193068][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.203386][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.214421][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 69.220646][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.230971][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.241585][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.253150][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.262886][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.273604][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.283832][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.295359][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 69.296122][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.301591][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 69.321469][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.329476][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.338203][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.346977][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.356131][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.365238][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 69.372014][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.381312][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.394242][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.428579][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.441200][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.452867][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.463547][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.473439][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.484084][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.498489][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.533485][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.541630][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.542286][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.559450][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.568632][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.577050][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.585960][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.597472][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.610856][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.620089][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.629178][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.650174][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.660683][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.669702][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.678527][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.696810][ T4178] device veth0_macvtap entered promiscuous mode [ 69.776618][ T4178] device veth1_macvtap entered promiscuous mode [ 69.787501][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.796290][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.802231][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.807793][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.840592][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.853374][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.861830][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.875433][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.905927][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.919009][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.930156][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.941045][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.951226][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.962597][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.972850][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.985217][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.997212][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.033965][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.054008][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.066603][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.081580][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.092295][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.104048][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.113916][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.124981][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.134860][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.145318][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.157186][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.184096][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.198794][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.211700][ T4178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.224244][ T4178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.232989][ T4178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.249742][ T4178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.265257][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.291463][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.307749][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.345022][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.353067][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.416657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.436396][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.475235][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.487716][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.503493][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.553631][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.576274][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.623992][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.630546][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.666418][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.708887][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.736921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.781046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.869155][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.913541][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.004218][ C0] hrtimer: interrupt took 44711 ns [ 71.058337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.204981][ T2364] Bluetooth: hci0: command 0x0419 tx timeout [ 71.290531][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.297166][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.304291][ T2364] Bluetooth: hci1: command 0x0419 tx timeout [ 71.385265][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 71.398824][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 71.452605][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 74.947877][ T4328] netlink: 'syz.1.38': attribute type 39 has an invalid length. [ 77.786970][ T4374] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.909752][ T4379] Zero length message leads to an empty skb [ 78.008453][ T4383] netlink: 'syz.4.60': attribute type 21 has an invalid length. [ 78.118532][ T4383] netlink: 156 bytes leftover after parsing attributes in process `syz.4.60'. [ 79.203474][ T4415] netlink: 'syz.4.76': attribute type 21 has an invalid length. [ 79.223988][ T4415] netlink: 156 bytes leftover after parsing attributes in process `syz.4.76'. [ 79.599786][ T4420] netlink: 'syz.4.79': attribute type 39 has an invalid length. [ 80.564763][ T4445] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.713800][ T4445] netlink: 'syz.3.89': attribute type 21 has an invalid length. [ 80.735682][ T4445] netlink: 156 bytes leftover after parsing attributes in process `syz.3.89'. [ 81.383665][ T4462] netlink: 'syz.3.98': attribute type 39 has an invalid length. [ 81.529674][ T1107] cfg80211: failed to load regulatory.db [ 82.050960][ T4479] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.120108][ T4479] netlink: 'syz.2.104': attribute type 21 has an invalid length. [ 82.135738][ T4479] netlink: 156 bytes leftover after parsing attributes in process `syz.2.104'. [ 83.688674][ T4502] netlink: 'syz.0.125': attribute type 21 has an invalid length. [ 83.712648][ T4502] netlink: 152 bytes leftover after parsing attributes in process `syz.0.125'. [ 85.146122][ T4541] netlink: 'syz.3.130': attribute type 21 has an invalid length. [ 85.183451][ T4541] netlink: 152 bytes leftover after parsing attributes in process `syz.3.130'. [ 85.560199][ T4531] syz.4.126 (4531) used greatest stack depth: 19648 bytes left [ 86.644637][ T4572] netlink: 'syz.1.146': attribute type 21 has an invalid length. [ 86.657817][ T4572] netlink: 152 bytes leftover after parsing attributes in process `syz.1.146'. [ 87.370029][ T4591] netlink: 'syz.4.154': attribute type 21 has an invalid length. [ 87.391725][ T4591] netlink: 156 bytes leftover after parsing attributes in process `syz.4.154'. [ 87.689548][ T4598] netlink: 'syz.2.158': attribute type 39 has an invalid length. [ 88.057625][ T4608] netlink: 'syz.4.161': attribute type 21 has an invalid length. [ 88.093942][ T4608] netlink: 152 bytes leftover after parsing attributes in process `syz.4.161'. [ 89.311411][ T4642] netlink: 'syz.0.176': attribute type 39 has an invalid length. [ 89.543615][ T4644] netlink: 'syz.1.178': attribute type 21 has an invalid length. [ 89.570997][ T4644] netlink: 152 bytes leftover after parsing attributes in process `syz.1.178'. [ 90.670107][ T4673] netlink: 'syz.3.191': attribute type 21 has an invalid length. [ 90.685724][ T4673] netlink: 156 bytes leftover after parsing attributes in process `syz.3.191'. [ 90.843352][ T4680] netlink: 'syz.2.193': attribute type 21 has an invalid length. [ 90.870092][ T4680] netlink: 152 bytes leftover after parsing attributes in process `syz.2.193'. [ 90.881435][ T4687] netlink: 'syz.3.195': attribute type 39 has an invalid length. [ 91.943034][ T4708] netlink: 'syz.3.205': attribute type 21 has an invalid length. [ 91.953171][ T4708] netlink: 156 bytes leftover after parsing attributes in process `syz.3.205'. [ 92.241653][ T4713] netlink: 'syz.1.207': attribute type 21 has an invalid length. [ 92.264589][ T4713] netlink: 152 bytes leftover after parsing attributes in process `syz.1.207'. [ 92.274366][ T4717] netlink: 'syz.3.218': attribute type 21 has an invalid length. [ 92.282642][ T4717] netlink: 156 bytes leftover after parsing attributes in process `syz.3.218'. [ 92.298174][ T4719] netlink: 'syz.4.208': attribute type 39 has an invalid length. [ 92.583783][ T4722] netlink: 'syz.2.220': attribute type 21 has an invalid length. [ 92.593115][ T4722] netlink: 152 bytes leftover after parsing attributes in process `syz.2.220'. [ 93.670753][ T4756] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.789301][ T4756] netlink: 'syz.0.223': attribute type 21 has an invalid length. [ 93.804729][ T4756] netlink: 156 bytes leftover after parsing attributes in process `syz.0.223'. [ 94.150482][ T4765] netlink: 'syz.0.227': attribute type 21 has an invalid length. [ 94.186040][ T4765] netlink: 152 bytes leftover after parsing attributes in process `syz.0.227'. [ 95.143349][ T4790] netlink: 'syz.4.238': attribute type 21 has an invalid length. [ 95.170157][ T4790] netlink: 156 bytes leftover after parsing attributes in process `syz.4.238'. [ 95.441134][ T4794] netlink: 'syz.2.240': attribute type 21 has an invalid length. [ 95.463127][ T4794] netlink: 152 bytes leftover after parsing attributes in process `syz.2.240'. [ 96.478618][ T4818] netlink: 'syz.3.249': attribute type 21 has an invalid length. [ 96.512709][ T4818] netlink: 156 bytes leftover after parsing attributes in process `syz.3.249'. [ 96.818399][ T4826] netlink: 152 bytes leftover after parsing attributes in process `syz.3.252'. [ 97.820489][ T4847] validate_nla: 1 callbacks suppressed [ 97.820528][ T4847] netlink: 'syz.4.262': attribute type 21 has an invalid length. [ 97.863411][ T4847] netlink: 156 bytes leftover after parsing attributes in process `syz.4.262'. [ 98.401347][ T4855] netlink: 'syz.0.265': attribute type 21 has an invalid length. [ 98.415200][ T4855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.265'. [ 99.356395][ T4880] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.517251][ T4880] netlink: 'syz.1.275': attribute type 21 has an invalid length. [ 99.547590][ T4880] netlink: 156 bytes leftover after parsing attributes in process `syz.1.275'. [ 100.034120][ T4890] netlink: 'syz.4.280': attribute type 21 has an invalid length. [ 100.050686][ T4890] netlink: 152 bytes leftover after parsing attributes in process `syz.4.280'. [ 101.177484][ T4914] netlink: 'syz.1.289': attribute type 21 has an invalid length. [ 101.217688][ T4914] netlink: 156 bytes leftover after parsing attributes in process `syz.1.289'. [ 101.530840][ T4921] netlink: 'syz.1.292': attribute type 21 has an invalid length. [ 101.540905][ T4921] netlink: 152 bytes leftover after parsing attributes in process `syz.1.292'. [ 102.888221][ T4945] netlink: 'syz.4.302': attribute type 21 has an invalid length. [ 102.915089][ T4945] netlink: 156 bytes leftover after parsing attributes in process `syz.4.302'. [ 103.435708][ T4955] netlink: 'syz.4.306': attribute type 21 has an invalid length. [ 103.473403][ T4955] netlink: 152 bytes leftover after parsing attributes in process `syz.4.306'. [ 104.432245][ T4983] netlink: 'syz.0.316': attribute type 21 has an invalid length. [ 104.448284][ T4983] netlink: 156 bytes leftover after parsing attributes in process `syz.0.316'. [ 105.051614][ T4999] netlink: 'syz.3.321': attribute type 21 has an invalid length. [ 105.063761][ T4999] netlink: 152 bytes leftover after parsing attributes in process `syz.3.321'. [ 106.283518][ T5025] netlink: 'syz.1.336': attribute type 10 has an invalid length. [ 106.303043][ T5025] device geneve0 entered promiscuous mode [ 106.382040][ T5025] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 106.391767][ T5027] netlink: 'syz.2.337': attribute type 21 has an invalid length. [ 106.406564][ T5027] netlink: 152 bytes leftover after parsing attributes in process `syz.2.337'. [ 106.417604][ T5025] syz.1.336 (5025) used greatest stack depth: 19256 bytes left [ 107.847666][ T5049] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 108.320536][ T5062] netlink: 'syz.1.350': attribute type 21 has an invalid length. [ 108.334553][ T5062] netlink: 152 bytes leftover after parsing attributes in process `syz.1.350'. [ 109.175445][ T5079] netlink: 'syz.3.360': attribute type 10 has an invalid length. [ 109.212940][ T5079] device geneve0 entered promiscuous mode [ 109.247533][ T5079] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 109.983029][ T5093] netlink: 'syz.0.367': attribute type 21 has an invalid length. [ 110.001490][ T5093] netlink: 152 bytes leftover after parsing attributes in process `syz.0.367'. [ 110.646877][ T5106] netlink: 'syz.3.371': attribute type 10 has an invalid length. [ 111.027124][ T5112] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 111.088895][ T5112] device geneve0 entered promiscuous mode [ 111.203431][ T5112] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 111.227910][ T5120] netlink: 'syz.4.377': attribute type 21 has an invalid length. [ 111.263684][ T5120] netlink: 156 bytes leftover after parsing attributes in process `syz.4.377'. [ 111.293048][ T5112] syz.0.373 (5112) used greatest stack depth: 18680 bytes left [ 111.579737][ T5123] netlink: 'syz.2.378': attribute type 21 has an invalid length. [ 111.588446][ T5123] netlink: 152 bytes leftover after parsing attributes in process `syz.2.378'. [ 112.788511][ T5144] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 112.897809][ T5147] netlink: 'syz.1.386': attribute type 10 has an invalid length. [ 113.335984][ T5155] netlink: 'syz.1.391': attribute type 10 has an invalid length. [ 113.736055][ T5162] netlink: 'syz.1.394': attribute type 21 has an invalid length. [ 113.744955][ T5162] netlink: 152 bytes leftover after parsing attributes in process `syz.1.394'. [ 113.965698][ T5166] netlink: 'syz.3.397': attribute type 10 has an invalid length. [ 113.978954][ T5169] netlink: 'syz.4.398': attribute type 10 has an invalid length. [ 114.038716][ T5169] device geneve0 entered promiscuous mode [ 114.272378][ T5169] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 114.572183][ T5183] netlink: 'syz.4.403': attribute type 10 has an invalid length. [ 115.656835][ T5196] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 117.390488][ T5232] netlink: 'syz.2.428': attribute type 39 has an invalid length. [ 118.040720][ T5243] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 118.362174][ T5251] netlink: 'syz.1.437': attribute type 21 has an invalid length. [ 118.378369][ T5251] netlink: 156 bytes leftover after parsing attributes in process `syz.1.437'. [ 118.786646][ T5260] netlink: 'syz.2.441': attribute type 10 has an invalid length. [ 118.801672][ T5260] device geneve0 entered promiscuous mode [ 118.878505][ T5260] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 119.345358][ T5264] netlink: 'syz.0.442': attribute type 39 has an invalid length. [ 120.075369][ T5281] netlink: 'syz.3.451': attribute type 21 has an invalid length. [ 120.095997][ T5281] netlink: 156 bytes leftover after parsing attributes in process `syz.3.451'. [ 120.412800][ T5289] netlink: 'syz.1.453': attribute type 10 has an invalid length. [ 120.854479][ T5297] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 121.601819][ T5314] netlink: 'syz.0.464': attribute type 10 has an invalid length. [ 121.833147][ T5318] netlink: 'syz.0.466': attribute type 21 has an invalid length. [ 121.851320][ T5318] netlink: 156 bytes leftover after parsing attributes in process `syz.0.466'. [ 123.488924][ T5341] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 123.644804][ T5343] netlink: 'syz.0.479': attribute type 21 has an invalid length. [ 123.653628][ T5343] netlink: 156 bytes leftover after parsing attributes in process `syz.0.479'. [ 126.602871][ T5391] netlink: 'syz.0.502': attribute type 10 has an invalid length. [ 129.870353][ T5445] netlink: 'syz.3.528': attribute type 10 has an invalid length. [ 130.242324][ T5447] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 130.500497][ T5453] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 131.533381][ T5476] netlink: 'syz.4.542': attribute type 10 has an invalid length. [ 132.173757][ T5491] netlink: 'syz.2.549': attribute type 10 has an invalid length. [ 132.730251][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736782][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.881825][ T5488] ieee80211 phy219: Failed to add default virtual iface [ 133.539481][ T5513] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 135.042693][ T5535] netlink: 'syz.2.567': attribute type 21 has an invalid length. [ 135.059849][ T5535] netlink: 156 bytes leftover after parsing attributes in process `syz.2.567'. [ 135.562391][ T5540] netlink: 'syz.2.568': attribute type 10 has an invalid length. [ 136.773136][ T5566] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 136.805653][ T5565] netlink: 'syz.3.580': attribute type 21 has an invalid length. [ 136.827122][ T5565] netlink: 156 bytes leftover after parsing attributes in process `syz.3.580'. [ 138.012761][ T5591] netlink: 'syz.4.591': attribute type 10 has an invalid length. [ 138.842074][ T5602] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 140.173457][ T5632] netlink: 'syz.2.609': attribute type 10 has an invalid length. [ 141.018875][ T5644] netlink: 'syz.1.616': attribute type 21 has an invalid length. [ 141.044576][ T5644] netlink: 156 bytes leftover after parsing attributes in process `syz.1.616'. [ 141.732327][ T5659] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 142.043668][ T5661] netlink: 'syz.3.623': attribute type 10 has an invalid length. [ 142.052634][ T5663] netlink: 'syz.0.624': attribute type 10 has an invalid length. [ 144.394304][ T5699] netlink: 'syz.1.642': attribute type 10 has an invalid length. [ 145.145683][ T5716] netlink: 'syz.2.651': attribute type 10 has an invalid length. [ 146.980958][ T5728] ieee80211 phy271: Failed to add default virtual iface [ 147.488688][ T5744] netlink: 'syz.2.662': attribute type 10 has an invalid length. [ 147.969246][ T5750] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 147.981495][ T5752] netlink: 'syz.0.666': attribute type 10 has an invalid length. [ 151.431474][ T5804] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 151.810361][ T5811] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 153.949725][ T5847] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 157.018408][ T5891] netlink: 'syz.4.733': attribute type 10 has an invalid length. [ 158.955821][ T5917] netlink: 'syz.4.748': attribute type 10 has an invalid length. [ 160.781613][ T5944] netlink: 'syz.2.761': attribute type 10 has an invalid length. [ 161.861847][ T5963] netlink: 'syz.0.770': attribute type 10 has an invalid length. [ 165.523136][ T6024] netlink: 'syz.4.801': attribute type 10 has an invalid length. [ 165.763642][ T6028] netlink: 'syz.1.803': attribute type 10 has an invalid length. [ 166.718289][ T6049] netlink: 'syz.2.812': attribute type 10 has an invalid length. [ 166.731843][ T6048] netlink: 'syz.3.813': attribute type 10 has an invalid length. [ 167.771557][ T6065] netlink: 'syz.2.820': attribute type 10 has an invalid length. [ 167.780689][ T6067] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 167.789831][ T6069] netlink: 'syz.4.823': attribute type 10 has an invalid length. [ 168.317765][ T6073] netlink: 'syz.2.825': attribute type 10 has an invalid length. [ 168.330640][ T6075] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 168.917821][ T6085] netlink: 'syz.0.831': attribute type 10 has an invalid length. [ 171.622239][ T6132] validate_nla: 3 callbacks suppressed [ 171.622261][ T6132] netlink: 'syz.0.850': attribute type 10 has an invalid length. [ 171.906698][ T6143] netlink: 'syz.4.856': attribute type 10 has an invalid length. [ 172.659622][ T6152] netlink: 'syz.1.861': attribute type 10 has an invalid length. [ 173.722609][ T6164] netlink: 'syz.4.877': attribute type 10 has an invalid length. [ 173.737450][ T6184] netlink: 'syz.3.874': attribute type 10 has an invalid length. [ 175.250344][ T6212] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 175.306806][ T6218] netlink: 'syz.2.890': attribute type 10 has an invalid length. [ 177.533095][ T6259] netlink: 'syz.1.907': attribute type 10 has an invalid length. [ 178.673290][ T6279] netlink: 'syz.4.917': attribute type 10 has an invalid length. [ 180.111770][ T6315] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 181.558426][ T6337] netlink: 'syz.4.941': attribute type 10 has an invalid length. [ 186.010535][ T4212] Bluetooth: hci1: command 0x0406 tx timeout [ 186.014386][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 186.039615][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 186.064421][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 186.104595][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 192.963735][ T6564] ieee80211 phy407: Failed to add default virtual iface [ 194.172915][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.179296][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.366333][ T6587] ieee80211 phy411: Failed to add default virtual iface [ 197.703889][ T6676] netlink: 'syz.0.1096': attribute type 10 has an invalid length. [ 199.099849][ T6702] netlink: 'syz.4.1110': attribute type 10 has an invalid length. [ 200.767551][ T6745] netlink: 'syz.0.1128': attribute type 21 has an invalid length. [ 200.782263][ T6745] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1128'. [ 200.797670][ T6749] netlink: 'syz.2.1129': attribute type 10 has an invalid length. [ 202.380482][ T6784] netlink: 'syz.2.1145': attribute type 21 has an invalid length. [ 202.393118][ T6784] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1145'. [ 202.936979][ T6798] netlink: 'syz.2.1161': attribute type 21 has an invalid length. [ 202.950305][ T6798] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1161'. [ 203.717671][ T6813] netlink: 'syz.0.1157': attribute type 10 has an invalid length. [ 205.253350][ T6842] netlink: 'syz.1.1169': attribute type 10 has an invalid length. [ 205.269705][ T6845] netlink: 'syz.2.1170': attribute type 10 has an invalid length. [ 206.595389][ T6877] netlink: 'syz.1.1187': attribute type 10 has an invalid length. [ 206.997451][ T6885] netlink: 'syz.3.1189': attribute type 10 has an invalid length. [ 207.675228][ T6879] ieee80211 phy434: Failed to add default virtual iface [ 208.101740][ T6914] netlink: 'syz.4.1202': attribute type 10 has an invalid length. [ 208.752398][ T6928] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 208.845993][ T6932] netlink: 'syz.1.1221': attribute type 21 has an invalid length. [ 208.879803][ T6932] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1221'. [ 210.588863][ T6973] netlink: 'syz.3.1226': attribute type 21 has an invalid length. [ 210.615455][ T6973] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1226'. [ 211.703833][ T6995] netlink: 'syz.4.1236': attribute type 10 has an invalid length. [ 212.040849][ T7009] netlink: 'syz.4.1241': attribute type 21 has an invalid length. [ 212.069611][ T7009] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1241'. [ 212.265970][ T7022] netlink: 'syz.1.1247': attribute type 10 has an invalid length. [ 213.117902][ T7033] netlink: 'syz.0.1252': attribute type 10 has an invalid length. [ 213.499581][ T7043] netlink: 'syz.3.1257': attribute type 21 has an invalid length. [ 213.513109][ T7043] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1257'. [ 214.186616][ T7064] netlink: 'syz.0.1265': attribute type 10 has an invalid length. [ 215.167920][ T7084] netlink: 'syz.2.1272': attribute type 21 has an invalid length. [ 215.185324][ T7084] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1272'. [ 216.577150][ T7117] netlink: 'syz.2.1285': attribute type 10 has an invalid length. [ 218.879278][ T7168] netlink: 'syz.3.1306': attribute type 10 has an invalid length. [ 221.991005][ T7253] netlink: 'syz.0.1350': attribute type 21 has an invalid length. [ 222.005919][ T7253] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1350'. [ 223.020456][ T7299] netlink: 'syz.3.1358': attribute type 21 has an invalid length. [ 223.035371][ T7299] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1358'. [ 224.019246][ T7340] netlink: 'syz.2.1374': attribute type 21 has an invalid length. [ 224.044668][ T7340] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1374'. [ 225.259684][ T7379] netlink: 'syz.1.1390': attribute type 21 has an invalid length. [ 225.331377][ T7379] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1390'. [ 227.052862][ T7422] netlink: 'syz.4.1404': attribute type 21 has an invalid length. [ 227.078613][ T7422] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1404'. [ 228.672740][ T7483] netlink: 'syz.1.1427': attribute type 21 has an invalid length. [ 228.681984][ T7483] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1427'. [ 229.537949][ T7527] netlink: 'syz.1.1442': attribute type 21 has an invalid length. [ 229.584687][ T7527] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1442'. [ 229.754786][ T7537] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 230.985975][ T7573] netlink: 'syz.4.1457': attribute type 21 has an invalid length. [ 231.011309][ T7573] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1457'. [ 232.002467][ T7590] netlink: 'syz.1.1462': attribute type 10 has an invalid length. [ 232.286405][ T7620] netlink: 'syz.3.1472': attribute type 21 has an invalid length. [ 232.376137][ T7620] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1472'. [ 234.151515][ T7655] netlink: 'syz.0.1485': attribute type 10 has an invalid length. [ 234.613130][ T7670] netlink: 'syz.0.1489': attribute type 21 has an invalid length. [ 234.664538][ T7670] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1489'. [ 235.776221][ T7690] netlink: 'syz.0.1509': attribute type 21 has an invalid length. [ 235.804896][ T7690] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1509'. [ 235.823105][ T7708] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 237.212506][ T7750] netlink: 'syz.0.1516': attribute type 21 has an invalid length. [ 237.234690][ T7750] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1516'. [ 237.412674][ T7757] netlink: 'syz.4.1518': attribute type 10 has an invalid length. [ 238.686384][ T7795] netlink: 'syz.4.1532': attribute type 21 has an invalid length. [ 238.731291][ T7795] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1532'. [ 239.511147][ T7802] netlink: 'syz.3.1534': attribute type 10 has an invalid length. [ 240.681491][ T7839] netlink: 'syz.3.1546': attribute type 21 has an invalid length. [ 240.693802][ T7839] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1546'. [ 240.847231][ T7846] netlink: 'syz.0.1557': attribute type 21 has an invalid length. [ 240.893817][ T7846] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1557'. [ 241.179029][ T7861] netlink: 'syz.0.1550': attribute type 10 has an invalid length. [ 241.990641][ T7898] netlink: 'syz.2.1562': attribute type 21 has an invalid length. [ 242.029841][ T7898] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1562'. [ 242.259899][ T7908] netlink: 'syz.1.1567': attribute type 10 has an invalid length. [ 242.359334][ T7908] team0: Port device netdevsim0 added [ 242.371527][ T7906] netlink: 'syz.4.1565': attribute type 10 has an invalid length. [ 243.128591][ T7949] netlink: 'syz.2.1578': attribute type 21 has an invalid length. [ 243.178092][ T7949] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1578'. [ 243.505244][ T7968] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 243.643870][ T7968] team0: Port device netdevsim0 added [ 243.799387][ T7974] netlink: 'syz.0.1584': attribute type 10 has an invalid length. [ 244.215369][ T7994] netlink: 'syz.0.1595': attribute type 21 has an invalid length. [ 244.225200][ T7994] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1595'. [ 244.935808][ T8010] team0: Port device netdevsim0 added [ 245.020790][ T8010] syz.0.1600 (8010) used greatest stack depth: 18168 bytes left [ 245.672810][ T8033] team0: Port device netdevsim0 added [ 245.844278][ T8033] syz.3.1617 (8033) used greatest stack depth: 17024 bytes left [ 245.995621][ T8055] validate_nla: 3 callbacks suppressed [ 245.995702][ T8055] netlink: 'syz.4.1612': attribute type 21 has an invalid length. [ 246.121154][ T8055] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1612'. [ 246.924997][ T8098] netlink: 'syz.3.1626': attribute type 10 has an invalid length. [ 247.272314][ T8104] netlink: 'syz.3.1630': attribute type 21 has an invalid length. [ 247.312838][ T8104] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1630'. [ 248.061089][ T8138] netlink: 'syz.1.1640': attribute type 10 has an invalid length. [ 248.471671][ T8154] netlink: 'syz.0.1647': attribute type 10 has an invalid length. [ 248.493460][ T8151] netlink: 'syz.4.1646': attribute type 21 has an invalid length. [ 248.513067][ T8151] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1646'. [ 249.490619][ T8187] netlink: 'syz.1.1658': attribute type 10 has an invalid length. [ 249.617898][ T8195] netlink: 'syz.3.1660': attribute type 10 has an invalid length. [ 249.742110][ T8198] netlink: 'syz.4.1662': attribute type 21 has an invalid length. [ 249.768424][ T8198] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1662'. [ 250.137663][ T8218] netlink: 'syz.0.1680': attribute type 21 has an invalid length. [ 250.190213][ T8218] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1680'. [ 251.041152][ T8253] validate_nla: 3 callbacks suppressed [ 251.041188][ T8253] netlink: 'syz.3.1683': attribute type 21 has an invalid length. [ 251.083842][ T8253] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1683'. [ 251.268117][ T8262] netlink: 'syz.1.1698': attribute type 21 has an invalid length. [ 251.329690][ T8262] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1698'. [ 251.654974][ T8274] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 251.922030][ T8289] netlink: 'syz.0.1696': attribute type 10 has an invalid length. [ 252.256398][ T8302] netlink: 'syz.2.1702': attribute type 21 has an invalid length. [ 252.291344][ T8302] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1702'. [ 252.853394][ T8320] netlink: 'syz.1.1709': attribute type 10 has an invalid length. [ 253.459584][ T8341] netlink: 'syz.1.1716': attribute type 21 has an invalid length. [ 253.524805][ T8341] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1716'. [ 253.543761][ T8339] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 253.870577][ T8359] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 254.754835][ T8386] netlink: 'syz.2.1734': attribute type 21 has an invalid length. [ 254.798784][ T8386] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1734'. [ 255.628141][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.634544][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.985210][ T8432] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1753'. [ 256.073919][ T8437] validate_nla: 2 callbacks suppressed [ 256.074050][ T8437] netlink: 'syz.4.1754': attribute type 10 has an invalid length. [ 256.299735][ T8437] team0: Port device netdevsim0 added [ 257.302995][ T8470] netlink: 'syz.0.1771': attribute type 21 has an invalid length. [ 257.319298][ T8470] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1771'. [ 257.612534][ T8478] netlink: 'syz.2.1777': attribute type 10 has an invalid length. [ 257.752591][ T8486] netlink: 'syz.0.1789': attribute type 10 has an invalid length. [ 258.244981][ T8502] netlink: 'syz.3.1785': attribute type 21 has an invalid length. [ 258.253304][ T8502] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1785'. [ 259.303812][ T8532] netlink: 'syz.1.1797': attribute type 10 has an invalid length. [ 260.033382][ T8562] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 260.141569][ T8566] netlink: 'syz.2.1812': attribute type 10 has an invalid length. [ 261.435646][ T8600] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 261.726845][ T8606] netlink: 'syz.0.1827': attribute type 10 has an invalid length. [ 262.861307][ T8652] netlink: 'syz.3.1841': attribute type 10 has an invalid length. [ 263.313180][ T8658] netlink: 'syz.4.1845': attribute type 10 has an invalid length. [ 264.355826][ T8699] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 265.382898][ T8739] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 266.261800][ T8768] netlink: 'syz.4.1887': attribute type 10 has an invalid length. [ 267.666448][ T8808] netlink: 'syz.1.1899': attribute type 10 has an invalid length. [ 269.602309][ T8859] netlink: 'syz.0.1916': attribute type 10 has an invalid length. [ 270.951376][ T8924] netlink: 'syz.3.1934': attribute type 10 has an invalid length. [ 272.458882][ T8977] netlink: 'syz.4.1951': attribute type 10 has an invalid length. [ 273.476928][ T9025] netlink: 'syz.3.1965': attribute type 10 has an invalid length. [ 274.704674][ T9074] netlink: 'syz.4.1978': attribute type 10 has an invalid length. [ 276.024563][ T9125] netlink: 'syz.2.1993': attribute type 10 has an invalid length. [ 276.321259][ T9140] netlink: 'syz.2.2008': attribute type 10 has an invalid length. [ 277.682483][ T9155] ieee80211 phy477: Failed to add default virtual iface [ 279.699520][ T9252] netlink: 'syz.2.2028': attribute type 10 has an invalid length. [ 281.525388][ T9319] netlink: 'syz.1.2049': attribute type 10 has an invalid length. [ 283.216800][ T9355] netlink: 'syz.4.2062': attribute type 10 has an invalid length. [ 285.351598][ T9408] netlink: 'syz.0.2082': attribute type 10 has an invalid length. [ 285.627661][ T9426] netlink: 'syz.3.2090': attribute type 10 has an invalid length. [ 287.006818][ T9474] netlink: 'syz.4.2102': attribute type 10 has an invalid length. [ 287.203956][ T9476] syz.1.2116 (9476) used obsolete PPPIOCDETACH ioctl [ 287.423781][ T9491] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2109'. [ 287.997951][ T9518] device syzkaller0 entered promiscuous mode [ 288.199712][ T9522] delete_channel: no stack [ 290.152008][ T9536] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 290.404864][ T9555] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2141'. [ 291.181312][ T9579] netlink: 'syz.4.2152': attribute type 10 has an invalid length. [ 291.247910][ T9579] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2152'. [ 291.866960][ T9593] netlink: 'syz.2.2158': attribute type 29 has an invalid length. [ 291.890806][ T9593] netlink: 'syz.2.2158': attribute type 29 has an invalid length. [ 291.913498][ T9593] netlink: 'syz.2.2158': attribute type 29 has an invalid length. [ 291.923359][ T9593] netlink: 'syz.2.2158': attribute type 29 has an invalid length. [ 291.982437][ T9593] netlink: 'syz.2.2158': attribute type 29 has an invalid length. [ 292.166476][ T9601] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2159'. [ 292.388709][ T9608] delete_channel: no stack [ 293.149726][ T9659] netlink: 'syz.2.2188': attribute type 11 has an invalid length. [ 293.168011][ T9659] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2188'. [ 293.700530][ T9696] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2205'. [ 296.545133][ T9786] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2247'. [ 296.616432][ T9786] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 297.337034][ T9793] netlink: 'syz.2.2248': attribute type 3 has an invalid length. [ 298.713752][ T9805] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2255'. [ 299.921931][ T9873] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2285'. [ 300.273535][ T9893] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 300.303426][ T9893] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2294'. [ 300.941469][ T9916] team0: Port device team_slave_0 removed [ 300.975018][ T9916] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 303.092263][ T9999] netlink: 'syz.2.2343': attribute type 10 has an invalid length. [ 303.309910][T10010] netlink: 'syz.3.2347': attribute type 10 has an invalid length. [ 303.465056][T10010] team0: Port device macvlan0 added [ 304.500947][T10062] netlink: 'syz.4.2366': attribute type 10 has an invalid length. [ 305.062203][T10062] team0: Port device macvlan0 added [ 305.124992][T10064] netlink: 'syz.1.2361': attribute type 10 has an invalid length. [ 305.134575][ T4190] Bluetooth: hci3: command 0x0406 tx timeout [ 305.304360][ T1110] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 305.312957][ T1110] Bluetooth: hci2: Injecting HCI hardware error event [ 305.358787][ T4170] Bluetooth: hci2: hardware error 0x00 [ 306.494311][ T4190] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 306.524253][ T4190] Bluetooth: hci4: Injecting HCI hardware error event [ 306.531470][ T4168] Bluetooth: hci4: hardware error 0x00 [ 306.710082][T10106] netlink: 'syz.4.2381': attribute type 10 has an invalid length. [ 306.848655][T10109] netlink: 'syz.0.2382': attribute type 10 has an invalid length. [ 306.988782][T10109] team0: Port device macvlan0 added [ 307.763089][T10148] netlink: 'syz.0.2398': attribute type 10 has an invalid length. [ 308.003532][T10157] netlink: 'syz.2.2402': attribute type 10 has an invalid length. [ 308.197929][T10157] team0: Port device macvlan0 added [ 308.665575][T10188] netlink: 'syz.3.2416': attribute type 10 has an invalid length. [ 309.267602][T10208] netlink: 'syz.1.2423': attribute type 10 has an invalid length. [ 310.017553][T10208] team0: Port device macvlan0 added [ 310.099149][T10223] netlink: 'syz.2.2429': attribute type 13 has an invalid length. [ 310.121009][T10223] device macvtap0 entered promiscuous mode [ 310.162359][T10223] macvtap0: refused to change device tx_queue_len [ 310.297570][T10233] netlink: 'syz.1.2433': attribute type 10 has an invalid length. [ 313.356472][T10257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2442'. [ 313.396003][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 313.432216][T10257] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2442'. [ 313.474008][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 313.528305][T10257] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2442'. [ 313.655646][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 313.704602][T10257] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2442'. [ 314.247729][T10288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2468'. [ 314.295331][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2468'. [ 314.306857][T10288] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2468'. [ 314.653125][T10311] can: request_module (can-proto-0) failed. [ 317.050427][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.059560][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.538472][T10406] __nla_validate_parse: 13 callbacks suppressed [ 318.538527][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2496'. [ 318.574511][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 318.638449][T10406] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2496'. [ 318.664691][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 318.694370][T10406] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2496'. [ 318.739749][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'. [ 318.770098][T10406] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2496'. [ 319.772643][T10427] netlink: 'syz.3.2502': attribute type 27 has an invalid length. [ 320.322895][T10453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2512'. [ 320.353984][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 320.373182][T10453] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2512'. [ 321.490963][T10470] netlink: 'syz.4.2521': attribute type 27 has an invalid length. [ 322.429514][T10505] netlink: 'syz.0.2535': attribute type 10 has an invalid length. [ 322.656746][T10505] device veth0_vlan left promiscuous mode [ 322.715498][T10505] device veth0_vlan entered promiscuous mode [ 322.741471][T10505] team0: Device veth0_vlan failed to register rx_handler [ 322.955444][T10515] netlink: 'syz.1.2538': attribute type 27 has an invalid length. [ 326.069306][T10617] __nla_validate_parse: 4 callbacks suppressed [ 326.069362][T10617] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2578'. [ 326.529199][T10638] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2584'. [ 326.681401][T10649] netlink: 'syz.2.2572': attribute type 27 has an invalid length. [ 326.921441][T10661] netlink: 'syz.2.2580': attribute type 10 has an invalid length. [ 326.940131][T10661] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2580'. [ 326.952543][T10661] device batadv_slave_1 entered promiscuous mode [ 326.979137][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.999339][T10661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.010573][T10661] bridge0: port 3(batadv_slave_1) entered blocking state [ 327.044670][T10661] bridge0: port 3(batadv_slave_1) entered disabled state [ 327.102802][T10661] bridge0: port 3(batadv_slave_1) entered blocking state [ 327.110300][T10661] bridge0: port 3(batadv_slave_1) entered forwarding state [ 327.719884][T10684] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2593'. [ 327.751972][T10689] netlink: 'syz.0.2595': attribute type 27 has an invalid length. [ 328.721411][T10729] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2611'. [ 332.226451][T10869] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2664'. [ 332.272496][T10869] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2664'. [ 332.311411][T10862] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2664'. [ 332.581832][T10887] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2675'. [ 332.752452][T10892] netlink: 'syz.2.2678': attribute type 2 has an invalid length. [ 332.824285][T10892] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2678'. [ 332.901030][T10907] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2683'. [ 333.481731][T10925] device syzkaller0 entered promiscuous mode [ 333.812185][T10940] netlink: 66 bytes leftover after parsing attributes in process `syz.1.2696'. [ 335.677166][T11015] delete_channel: no stack [ 336.085121][T11034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.093042][T11034] IPv6: NLM_F_CREATE should be set when creating new route [ 336.101035][T11034] IPv6: NLM_F_CREATE should be set when creating new route [ 336.108791][T11034] IPv6: NLM_F_CREATE should be set when creating new route [ 336.527694][T11049] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 336.574275][T11049] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 336.611202][T11049] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 336.814861][T11061] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2747'. [ 337.221802][T11072] netlink: 'syz.3.2752': attribute type 10 has an invalid length. [ 337.242082][T11066] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2751'. [ 339.791515][T11138] netlink: 'syz.3.2782': attribute type 2 has an invalid length. [ 339.846096][T11138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2782'. [ 340.449540][T11168] netlink: 'syz.2.2794': attribute type 29 has an invalid length. [ 340.514012][T11168] netlink: 'syz.2.2794': attribute type 29 has an invalid length. [ 340.554406][T11171] netlink: 'syz.2.2794': attribute type 29 has an invalid length. [ 341.215981][T11194] netlink: 66 bytes leftover after parsing attributes in process `syz.2.2806'. [ 341.304714][T11189] netlink: 'syz.0.2804': attribute type 2 has an invalid length. [ 341.382087][T11189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2804'. [ 341.513370][T11204] device syzkaller0 entered promiscuous mode [ 342.576454][T11241] netlink: 'syz.2.2826': attribute type 10 has an invalid length. [ 342.733992][T11244] netlink: 66 bytes leftover after parsing attributes in process `syz.0.2823'. [ 343.044250][ T2364] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 343.053057][ T2364] Bluetooth: hci1: Injecting HCI hardware error event [ 343.060570][T11256] device syzkaller0 entered promiscuous mode [ 343.108759][ T4168] Bluetooth: hci1: hardware error 0x00 [ 343.650360][T11284] netlink: 'syz.1.2844': attribute type 29 has an invalid length. [ 343.755760][T11284] netlink: 'syz.1.2844': attribute type 29 has an invalid length. [ 343.785258][T11286] netlink: 'syz.1.2844': attribute type 29 has an invalid length. [ 343.924256][T10407] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 343.948445][T10407] Bluetooth: hci0: Injecting HCI hardware error event [ 343.970408][ T4170] Bluetooth: hci0: hardware error 0x00 [ 344.862748][T11321] netlink: 'syz.4.2858': attribute type 29 has an invalid length. [ 344.876377][T11321] netlink: 'syz.4.2858': attribute type 29 has an invalid length. [ 344.953439][T11321] netlink: 'syz.4.2858': attribute type 29 has an invalid length. [ 345.279041][T10407] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 345.344179][T10407] Bluetooth: hci3: Injecting HCI hardware error event [ 345.351384][ T146] Bluetooth: hci3: hardware error 0x00 [ 345.555257][T11347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.562508][T11347] IPv6: NLM_F_CREATE should be set when creating new route [ 345.569878][T11347] IPv6: NLM_F_CREATE should be set when creating new route [ 345.577163][T11347] IPv6: NLM_F_CREATE should be set when creating new route [ 345.798502][T11359] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 346.625334][T11386] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2885'. [ 348.073963][T11425] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2900'. [ 349.578936][T11476] netlink: 'syz.0.2917': attribute type 3 has an invalid length. [ 349.922745][ T1206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.160436][ T1206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.244770][T11487] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2921'. [ 350.397953][T11477] chnl_net:caif_netlink_parms(): no params data found [ 350.454358][ T1206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.600168][ T1206] team0: Port device netdevsim0 removed [ 350.616308][ T1206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.688438][T11477] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.700484][T11477] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.709849][T11477] device bridge_slave_0 entered promiscuous mode [ 350.726073][T11477] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.733244][T11477] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.742548][T11477] device bridge_slave_1 entered promiscuous mode [ 350.895042][T11477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.028218][T11477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.206951][T11477] team0: Port device team_slave_0 added [ 351.248814][T11477] team0: Port device team_slave_1 added [ 351.487052][T11477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.494045][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.524320][ T1107] Bluetooth: hci5: command 0x0409 tx timeout [ 351.544306][T11477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.624933][T11530] netlink: 'syz.4.2934': attribute type 3 has an invalid length. [ 352.561040][T11526] netlink: 'syz.3.2932': attribute type 10 has an invalid length. [ 352.569132][T11526] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2932'. [ 352.582274][T11477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.595576][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.641143][T11477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.818353][T11477] device hsr_slave_0 entered promiscuous mode [ 352.866400][T11477] device hsr_slave_1 entered promiscuous mode [ 352.923584][T11477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.968738][T11477] Cannot create hsr debugfs directory [ 353.612972][ T4207] Bluetooth: hci5: command 0x041b tx timeout [ 353.624872][T11571] netlink: 'syz.4.2947': attribute type 10 has an invalid length. [ 354.637821][T11615] device syzkaller0 entered promiscuous mode [ 354.848963][T11477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 354.860407][T11477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 354.883017][T11477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 354.893864][T11477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.141643][T11627] netlink: 'syz.0.2963': attribute type 10 has an invalid length. [ 355.335207][T11477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.526961][T11645] device syzkaller0 entered promiscuous mode [ 355.557856][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.578241][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.688277][ T4207] Bluetooth: hci5: command 0x040f tx timeout [ 355.790959][T11477] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.866773][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.895346][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.914973][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.922097][ T9817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.959640][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.983178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.005260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.013964][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.021147][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.113166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.147422][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.209022][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.228053][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.278851][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.291670][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.302733][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.322528][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.332665][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.353849][T11477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.367289][T11477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.396882][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.413566][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.701346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.715462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 356.747359][T11477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.830019][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 356.842674][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.916552][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.931223][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.953814][T11477] device veth0_vlan entered promiscuous mode [ 356.979246][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.989089][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.022897][T11477] device veth1_vlan entered promiscuous mode [ 357.080865][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 357.091204][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 357.099884][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.109339][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.128946][T11477] device veth0_macvtap entered promiscuous mode [ 357.173878][T11477] device veth1_macvtap entered promiscuous mode [ 357.206247][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.216981][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.226906][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.237516][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.247414][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.257885][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.269702][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.281315][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.292085][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.305181][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.317228][T11477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.334742][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.362647][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.372652][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.389755][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.405767][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.416613][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.441599][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.496792][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.521644][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.533210][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.550942][T11477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.604030][T11477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.623606][T11477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.683049][T11477] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.702324][T11477] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.722439][T11477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.731937][T11477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.759316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.767878][ T4190] Bluetooth: hci5: command 0x0419 tx timeout [ 357.801788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.026861][T11715] netlink: 'syz.3.2980': attribute type 10 has an invalid length. [ 358.056237][T11715] team0: Device ipvlan1 failed to register rx_handler [ 358.304295][T11712] device pim6reg1 entered promiscuous mode [ 359.185011][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.193270][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.516311][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.531801][T11758] netlink: 'syz.4.2999': attribute type 10 has an invalid length. [ 359.758765][T11768] device sit0 entered promiscuous mode [ 359.776246][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.812827][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.925520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 361.101302][T11804] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3018'. [ 361.809356][T11837] netlink: 'syz.2.3030': attribute type 10 has an invalid length. [ 362.871845][T11856] device sit0 entered promiscuous mode [ 363.046849][T11862] netlink: 'syz.3.3039': attribute type 21 has an invalid length. [ 363.078681][T11862] netlink: 'syz.3.3039': attribute type 1 has an invalid length. [ 363.094277][T11874] netlink: 'syz.2.3042': attribute type 10 has an invalid length. [ 363.161383][T11824] chnl_net:caif_netlink_parms(): no params data found [ 363.493396][T11824] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.514908][T11824] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.547242][T11824] device bridge_slave_0 entered promiscuous mode [ 363.558841][T11824] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.566598][T11824] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.575263][T11824] device bridge_slave_1 entered promiscuous mode [ 363.604484][T10407] Bluetooth: hci2: command 0x0409 tx timeout [ 363.920114][T11824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.976162][T11824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.005901][T11905] netlink: 'syz.3.3054': attribute type 10 has an invalid length. [ 364.157768][T11824] team0: Port device team_slave_0 added [ 364.186322][T11824] team0: Port device team_slave_1 added [ 364.318988][T11824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.386463][T11824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.464026][T11824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.524959][T11824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.532114][T11824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.602695][T11824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.862679][T11824] device hsr_slave_0 entered promiscuous mode [ 364.870024][T11824] device hsr_slave_1 entered promiscuous mode [ 364.891619][T11824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.907167][T11824] Cannot create hsr debugfs directory [ 364.912754][T11947] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3072'. [ 365.140649][T11959] device syzkaller0 entered promiscuous mode [ 365.493906][T11824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.681309][T11824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.691974][T10407] Bluetooth: hci2: command 0x041b tx timeout [ 365.816787][T11824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.848030][T11984] netlink: 'syz.4.3085': attribute type 21 has an invalid length. [ 365.862266][T11984] netlink: 'syz.4.3085': attribute type 1 has an invalid length. [ 365.912962][T11824] team0: Port device netdevsim0 removed [ 365.922972][T11824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.196423][T12000] device syzkaller0 entered promiscuous mode [ 366.462544][T11824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.556645][T11824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.580912][T12015] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3098'. [ 366.618270][T11824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.671234][T11824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.835902][T12026] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.3105'. [ 366.852733][T12029] netlink: 'syz.1.3104': attribute type 21 has an invalid length. [ 366.869800][T12029] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 367.172464][T12043] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3110'. [ 367.216431][T11824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.283460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.316637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.361632][T11824] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.407075][T12049] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3113'. [ 367.470413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.492130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.508183][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.515327][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.616236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 367.648039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 367.703506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.734969][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.742194][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.762243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 367.764950][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 367.778741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 367.824602][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.847682][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.862265][T12074] netlink: 'syz.2.3121': attribute type 21 has an invalid length. [ 367.879924][T12074] netlink: 'syz.2.3121': attribute type 1 has an invalid length. [ 367.967567][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.995138][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.013273][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.034587][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.044952][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.198193][T12088] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3128'. [ 368.213172][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 368.226834][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.303115][T11824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 368.831364][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.842281][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.983936][T12117] device syzkaller0 entered promiscuous mode [ 369.019059][T11824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.315571][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.345712][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.507731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 369.535917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.585509][T12140] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.3149'. [ 369.662524][T11824] device veth0_vlan entered promiscuous mode [ 369.676499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.699747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.775779][T11824] device veth1_vlan entered promiscuous mode [ 369.844391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 369.852320][T10407] Bluetooth: hci2: command 0x0419 tx timeout [ 369.875582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 370.031882][T12153] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3155'. [ 370.125651][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.152942][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.196991][T11824] device veth0_macvtap entered promiscuous mode [ 370.341653][T11824] device veth1_macvtap entered promiscuous mode [ 370.417237][T12168] device syzkaller0 entered promiscuous mode [ 370.526265][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.545396][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.559958][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.572042][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.590859][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.602928][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.618793][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.630080][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.640065][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.658626][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.669846][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.680979][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.700885][T11824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.787945][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.797173][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.809255][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.821015][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.895980][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.911581][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.930867][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.943382][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.968819][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.002269][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.012878][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.033090][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.043976][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.056911][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.069922][T11824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.086375][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.097090][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.115731][T12185] netlink: 'syz.3.3167': attribute type 10 has an invalid length. [ 371.156972][T12188] netlink: 'syz.3.3167': attribute type 10 has an invalid length. [ 371.190715][T12188] team0: Port device netdevsim0 removed [ 371.207922][T12188] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 371.227664][T11824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.270549][T11824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.314313][T11824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.340849][T11824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.382025][T12198] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.3172'. [ 371.894668][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.930931][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.033022][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 372.048784][T12233] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.3188'. [ 372.083685][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.169035][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.273921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 372.539446][T12248] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3195'. [ 372.565427][T12254] device syzkaller0 entered promiscuous mode [ 372.927208][T12262] device syzkaller0 entered promiscuous mode [ 373.603492][T12299] device bond_slave_1 entered promiscuous mode [ 373.755312][T12269] chnl_net:caif_netlink_parms(): no params data found [ 374.184267][T12269] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.212116][T12269] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.254350][T12269] device bridge_slave_0 entered promiscuous mode [ 374.321367][T12269] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.356364][T12269] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.385215][T12269] device bridge_slave_1 entered promiscuous mode [ 374.588300][T12269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.716231][T12269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.876142][T12360] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.3240'. [ 374.952510][T12269] team0: Port device team_slave_0 added [ 375.043031][T12269] team0: Port device team_slave_1 added [ 375.063244][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 375.177289][T12269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.209725][T12269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.280258][T12269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.336570][T12269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.359349][T12269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.407799][T12269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.603518][T12398] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.3255'. [ 375.666367][T12269] device hsr_slave_0 entered promiscuous mode [ 375.697121][T12269] device hsr_slave_1 entered promiscuous mode [ 375.730257][T12269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.759522][T12269] Cannot create hsr debugfs directory [ 376.435337][T12269] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.520051][T12269] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.667856][T12269] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.771973][T12269] team0: Port device netdevsim0 removed [ 376.849034][T12269] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.932984][T12450] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3279'. [ 377.014735][T12461] netlink: 'syz.0.3285': attribute type 21 has an invalid length. [ 377.029209][T12461] netlink: 'syz.0.3285': attribute type 22 has an invalid length. [ 377.133796][T10842] Bluetooth: hci3: command 0x041b tx timeout [ 377.197851][T12471] netlink: 'syz.0.3290': attribute type 10 has an invalid length. [ 377.221687][T12471] batman_adv: batadv0: Adding interface: team0 [ 377.259750][T12471] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.361741][T12471] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 377.379644][T12269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.404689][T12468] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.3289'. [ 377.454978][T12472] netlink: 'syz.0.3290': attribute type 10 has an invalid length. [ 377.488019][T12472] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3290'. [ 377.553204][T12472] device team0 entered promiscuous mode [ 377.562696][T12472] device team_slave_0 entered promiscuous mode [ 377.579053][T12472] device team_slave_1 entered promiscuous mode [ 377.624542][T12472] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.633437][T12472] batman_adv: batadv0: Interface activated: team0 [ 377.672822][T12472] batman_adv: batadv0: Interface deactivated: team0 [ 377.685817][T12472] batman_adv: batadv0: Removing interface: team0 [ 377.695674][T12472] bridge0: port 3(team0) entered blocking state [ 377.703521][T12472] bridge0: port 3(team0) entered disabled state [ 377.723323][T12472] bridge0: port 3(team0) entered blocking state [ 377.729742][T12472] bridge0: port 3(team0) entered forwarding state [ 377.747670][ T1206] device hsr_slave_0 left promiscuous mode [ 377.768138][ T1206] device hsr_slave_1 left promiscuous mode [ 377.814213][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.822998][ T1206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.834465][ T1206] bridge0: port 3(batadv_slave_1) entered disabled state [ 377.865758][ T1206] device bridge_slave_1 left promiscuous mode [ 377.872867][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.900026][ T1206] device bridge_slave_0 left promiscuous mode [ 377.914310][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.081868][ T1206] device veth1_macvtap left promiscuous mode [ 378.105609][ T1206] device veth0_macvtap left promiscuous mode [ 378.121835][ T1206] device veth1_vlan left promiscuous mode [ 378.135194][ T1206] device veth0_vlan left promiscuous mode [ 378.487143][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.493514][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.583489][ T1206] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 378.768662][ T1206] team0 (unregistering): Port device macvlan0 removed [ 378.983890][ T1206] team0 (unregistering): Port device team_slave_1 removed [ 379.022350][ T1206] team0 (unregistering): Port device team_slave_0 removed [ 379.068863][ T1206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.148717][ T1206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.216526][T10842] Bluetooth: hci3: command 0x040f tx timeout [ 379.344444][ T1206] bond0 (unregistering): Released all slaves [ 379.391426][T12269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 379.403017][T12493] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.3300'. [ 379.413852][T12516] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3311'. [ 379.443947][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3315'. [ 379.453656][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 379.466069][T12524] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3315'. [ 379.475677][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 379.495365][T12524] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3315'. [ 379.532416][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 379.588744][T12269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.645996][T12269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 380.033929][T12269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.072814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.095271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.160796][T12269] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.195305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.214827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.246140][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.253418][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.282783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.309191][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.339055][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.375012][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.382173][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.448709][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.481098][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.492462][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.502935][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.581323][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.592955][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.624781][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.677558][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.710939][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.735388][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.762928][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.819944][T12269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.223889][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.291029][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.304924][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 381.354801][T12269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.024775][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.075214][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.190872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.211354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.240900][T12269] device veth0_vlan entered promiscuous mode [ 382.260331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.275279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.350605][T12269] device veth1_vlan entered promiscuous mode [ 382.458276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 382.481432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 382.517077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.549271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.627347][T12618] device syzkaller0 entered promiscuous mode [ 382.676981][T12269] device veth0_macvtap entered promiscuous mode [ 382.705158][T12631] __nla_validate_parse: 5 callbacks suppressed [ 382.705177][T12631] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.3357'. [ 382.773960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 382.936229][T12269] device veth1_macvtap entered promiscuous mode [ 382.955180][T12634] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.3359'. [ 383.038219][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.069195][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.089689][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.139167][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.164300][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.205200][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.244198][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.264752][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.285770][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.304170][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.334271][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.354112][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.386541][T12269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.397219][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.427148][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.498896][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.537517][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.614261][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.674264][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.714180][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.751885][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.785501][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.816594][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.887323][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.967500][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.992681][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.038963][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.063211][T12269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.130557][T12269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.187831][T12269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.199002][T12269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.208681][T12269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.272755][T12658] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3367'. [ 384.316503][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.346675][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 384.417366][T12670] syz.2.3373 uses obsolete (PF_INET,SOCK_PACKET) [ 384.483046][T12670] delete_channel: no stack [ 384.518803][T12670] delete_channel: no stack [ 384.814472][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.853229][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.039707][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 385.175042][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.234340][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.315542][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 386.988529][T12723] chnl_net:caif_netlink_parms(): no params data found [ 387.205672][T12766] device pim6reg1 entered promiscuous mode [ 387.657493][T12723] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.666094][T12723] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.684979][T12723] device bridge_slave_0 entered promiscuous mode [ 387.763536][T12723] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.770930][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.779509][T12723] device bridge_slave_1 entered promiscuous mode [ 388.244647][T10840] Bluetooth: hci1: command 0x0409 tx timeout [ 389.757129][T12723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.797347][T12723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.939831][T12723] team0: Port device team_slave_0 added [ 390.050395][T12723] team0: Port device team_slave_1 added [ 390.076527][T12820] netlink: 'syz.1.3432': attribute type 10 has an invalid length. [ 390.133659][T12813] device syzkaller0 entered promiscuous mode [ 390.324276][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 390.375218][T12723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.397236][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.476471][T12723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.547351][T12723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.576843][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.656914][T12723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.690304][T12827] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.3437'. [ 390.800729][T12723] device hsr_slave_0 entered promiscuous mode [ 390.830329][T12723] device hsr_slave_1 entered promiscuous mode [ 390.854862][T12723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.862458][T12723] Cannot create hsr debugfs directory [ 391.405311][T12723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.517957][T12723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.577250][T12862] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.3452'. [ 391.658169][T12723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.707244][T12865] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.3453'. [ 391.770777][T12723] bond0: (slave netdevsim0): Releasing backup interface [ 391.835744][T12723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.208750][T12723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.255013][T12723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.293499][T12723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.369056][T12723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.404431][ T2364] Bluetooth: hci1: command 0x040f tx timeout [ 392.432653][T12892] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.3466'. [ 392.597802][T12895] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.3467'. [ 392.970040][T12723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.062973][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 393.095963][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.135445][T12913] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.3477'. [ 393.167696][T12723] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.223332][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.252945][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.301520][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.308664][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.319713][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.335159][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.351667][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.358856][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.396959][T12923] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.3480'. [ 393.423318][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.475289][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.521253][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.565542][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.608912][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.665397][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 393.691880][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 393.762091][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 393.788342][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 393.808487][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.860358][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 393.875488][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 393.895074][T12942] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.3489'. [ 393.915069][T12723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 394.132686][T12953] device syzkaller0 entered promiscuous mode [ 394.268891][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 394.283374][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 394.301048][T12723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.487909][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 397.529150][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.545285][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.649450][T12984] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.3505'. [ 397.682701][T12723] device veth0_vlan entered promiscuous mode [ 397.698544][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.711249][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.720858][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.738932][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.792256][T12723] device veth1_vlan entered promiscuous mode [ 397.882865][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 397.895278][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 397.913486][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 397.940925][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.985819][T12723] device veth0_macvtap entered promiscuous mode [ 398.032120][T12723] device veth1_macvtap entered promiscuous mode [ 398.104970][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.124257][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.137643][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.149487][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.169094][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.184851][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.203927][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.221610][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.231928][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.242854][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.253283][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.265310][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.277229][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.288026][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.301318][T12723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.315220][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.330637][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.378015][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.402654][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.423174][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.434507][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.446458][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.457553][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.471346][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.482805][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.493965][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.534342][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.554183][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.594333][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.636309][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.663079][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.690823][T12723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.706784][T12723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.725266][T12723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.753471][T13010] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3516'. [ 398.780386][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.794510][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.941942][T13014] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 399.118051][T13014] device syzkaller0 entered promiscuous mode [ 399.154332][T13023] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.3519'. [ 399.218147][T12723] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.232733][T12723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.263341][T12723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.273435][T12723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.685253][T13041] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.3526'. [ 399.735884][ T9817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.786427][ T9817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.983378][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.091537][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.147350][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.264918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 400.606669][T13076] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.3542'. [ 401.137832][T13100] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3552'. [ 401.607258][T13098] chnl_net:caif_netlink_parms(): no params data found [ 402.242038][T13098] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.263777][T13098] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.283298][T13098] device bridge_slave_0 entered promiscuous mode [ 402.293665][T13148] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3566'. [ 402.312728][T13098] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.320802][T13098] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.329984][T13098] device bridge_slave_1 entered promiscuous mode [ 402.403073][T13098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.445023][T13098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.629946][T13098] team0: Port device team_slave_0 added [ 402.711782][T13162] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3572'. [ 402.741018][T13098] team0: Port device team_slave_1 added [ 402.898975][T13098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.938631][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.005194][T13098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.032023][T13098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.078031][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.104800][T13098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.145027][T10407] Bluetooth: hci0: command 0x0409 tx timeout [ 403.264443][T13098] device hsr_slave_0 entered promiscuous mode [ 403.300713][T13098] device hsr_slave_1 entered promiscuous mode [ 403.341748][T13098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.349552][T13098] Cannot create hsr debugfs directory [ 403.370299][T13190] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3584'. [ 403.705843][T13192] device syzkaller0 entered promiscuous mode [ 403.836995][T13198] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.3589'. [ 404.020580][T13215] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3597'. [ 404.030711][T13218] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3598'. [ 404.041617][T13218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.323056][T13098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.467213][T13098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.692400][T13098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.885793][T13247] device syzkaller0 entered promiscuous mode [ 404.993346][T13098] team0: Port device netdevsim0 removed [ 405.013822][T13098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.204608][T10407] Bluetooth: hci0: command 0x041b tx timeout [ 406.126233][T13098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 406.196135][T13282] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.3622'. [ 406.264569][T13098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 406.336658][T13098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 406.393129][T13098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 406.532532][T13298] netlink: 'syz.0.3627': attribute type 3 has an invalid length. [ 406.550597][T13298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3627'. [ 406.671631][T13301] device syzkaller0 entered promiscuous mode [ 406.992969][T13098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.088229][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.098049][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.130086][T13098] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.178641][T13325] netlink: 'syz.2.3638': attribute type 10 has an invalid length. [ 407.290528][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.299888][ T1110] Bluetooth: hci0: command 0x040f tx timeout [ 407.334468][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.365357][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.372477][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.432951][T13335] netlink: 'syz.3.3643': attribute type 3 has an invalid length. [ 407.452909][T13335] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3643'. [ 407.473416][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.534438][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.563926][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.583954][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.591152][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.600499][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.610907][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.675847][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.745444][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.765594][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.825991][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.981860][T13338] device syzkaller0 entered promiscuous mode [ 408.480000][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 408.498378][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.538661][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.566700][T13098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.578271][T13098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.598704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.621175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.180574][T13378] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3656'. [ 409.241429][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.249667][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 409.300256][T13098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.365967][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 409.887479][T13395] device syzkaller0 entered promiscuous mode [ 409.975577][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.987801][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.217848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 410.237761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 410.286003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 410.307957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 410.333000][T13098] device veth0_vlan entered promiscuous mode [ 410.361029][T13417] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3671'. [ 410.477093][T13098] device veth1_vlan entered promiscuous mode [ 410.563209][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 410.579535][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 410.602517][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.663508][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.717162][T13098] device veth0_macvtap entered promiscuous mode [ 410.800479][T13098] device veth1_macvtap entered promiscuous mode [ 410.847668][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.864824][ T9817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.960854][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.991822][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.004383][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.015343][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.026397][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.037481][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.048429][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.059630][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.070871][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.081532][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.092115][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.111623][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.123920][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.137733][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.154107][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.174201][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.192184][T13098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.201033][T13445] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.3682'. [ 411.228047][T13449] netlink: 61959 bytes leftover after parsing attributes in process `syz.3.3684'. [ 411.250353][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.265478][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.299164][T13453] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 411.311256][T13453] device syzkaller0 entered promiscuous mode [ 411.322457][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.346220][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.364634][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.387349][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.408394][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.423144][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.440372][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.453355][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.475999][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.494199][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.514133][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.535143][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.555538][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.574145][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.596463][T13098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.614231][T13098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.636541][T13098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.759848][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.788230][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.820361][T13098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.845011][T13098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.853930][T13098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.863287][T13098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.361942][T13488] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3696'. [ 412.410516][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.454245][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.625743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 412.649304][T13498] netlink: 61959 bytes leftover after parsing attributes in process `syz.3.3700'. [ 412.760542][T13500] device syzkaller0 entered promiscuous mode [ 412.796404][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.844182][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.958009][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 413.248516][T13522] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3708'. [ 413.736833][T13541] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.3717'. [ 414.094925][T13557] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3724'. [ 414.425297][T13575] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.3733'. [ 415.353004][T13610] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.3746'. [ 416.009314][T13626] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3756'. [ 416.104874][T13633] netlink: 61959 bytes leftover after parsing attributes in process `syz.2.3759'. [ 416.551467][T13652] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3768'. [ 416.845526][T13654] device syzkaller0 entered promiscuous mode [ 416.867820][T13665] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.3773'. [ 417.641347][T13696] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.3787'. [ 418.619250][T13731] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3803'. [ 419.039775][T13753] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3810'. [ 419.398717][T13767] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3817'. [ 419.956258][T13782] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3824'. [ 420.130693][T13788] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.3826'. [ 420.354342][T13800] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3831'. [ 420.777676][T13815] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3838'. [ 420.906060][T13822] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.3842'. [ 421.209945][T13837] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.3848'. [ 421.642999][T13850] pim6reg: tun_chr_ioctl cmd 1074025677 [ 421.663574][T13850] pim6reg: linktype set to 6 [ 421.860438][T13861] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3857'. [ 422.024876][ C0] ------------[ cut here ]------------ [ 422.024947][ C0] [ 422.024953][ C0] ====================================================== [ 422.024959][ C0] WARNING: possible circular locking dependency detected [ 422.024965][ C0] 5.15.179-syzkaller #0 Not tainted [ 422.024975][ C0] ------------------------------------------------------ [ 422.024981][ C0] ksoftirqd/0/14 is trying to acquire lock: [ 422.024991][ C0] ffffffff8c9fbd38 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 422.025058][ C0] [ 422.025058][ C0] but task is already holding lock: [ 422.025063][ C0] ffff8880b8e2a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x662/0xcf0 [ 422.025101][ C0] [ 422.025101][ C0] which lock already depends on the new lock. [ 422.025101][ C0] [ 422.025107][ C0] [ 422.025107][ C0] the existing dependency chain (in reverse order) is: [ 422.025112][ C0] [ 422.025112][ C0] -> #4 (hrtimer_bases.lock){-.-.}-{2:2}: [ 422.025134][ C0] lock_acquire+0x1db/0x4f0 [ 422.025150][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 422.025167][ C0] hrtimer_start_range_ns+0x105/0xc80 [ 422.025183][ C0] enqueue_task_rt+0x5a0/0xbf0 [ 422.025200][ C0] enqueue_task+0x19d/0x2e0 [ 422.025218][ C0] __sched_setscheduler+0x1396/0x1db0 [ 422.025234][ C0] sched_set_fifo+0x10e/0x1e0 [ 422.025248][ C0] drm_vblank_worker_init+0x149/0x190 [ 422.025265][ C0] drm_vblank_init+0x274/0x330 [ 422.025282][ C0] vkms_init+0x330/0x6d0 [ 422.025297][ C0] do_one_initcall+0x22b/0x7a0 [ 422.025314][ C0] do_initcall_level+0x157/0x210 [ 422.025333][ C0] do_initcalls+0x49/0x90 [ 422.025349][ C0] kernel_init_freeable+0x425/0x5c0 [ 422.025366][ C0] kernel_init+0x19/0x290 [ 422.025380][ C0] ret_from_fork+0x1f/0x30 [ 422.025396][ C0] [ 422.025396][ C0] -> #3 (&rt_b->rt_runtime_lock){-...}-{2:2}: [ 422.025420][ C0] lock_acquire+0x1db/0x4f0 [ 422.025435][ C0] _raw_spin_lock+0x2a/0x40 [ 422.025449][ C0] rq_online_rt+0x123/0x300 [ 422.025465][ C0] sched_cpu_activate+0x508/0x6b0 [ 422.025482][ C0] cpuhp_invoke_callback+0x49f/0x820 [ 422.025501][ C0] cpuhp_thread_fun+0x3ee/0x790 [ 422.025520][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 422.025535][ C0] kthread+0x3f6/0x4f0 [ 422.025549][ C0] ret_from_fork+0x1f/0x30 [ 422.025566][ C0] [ 422.025566][ C0] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 422.025588][ C0] lock_acquire+0x1db/0x4f0 [ 422.025603][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 422.025620][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 422.025640][ C0] task_fork_fair+0x5d/0x350 [ 422.025656][ C0] sched_cgroup_fork+0x2d3/0x330 [ 422.025674][ C0] copy_process+0x224a/0x3ef0 [ 422.025691][ C0] kernel_clone+0x210/0x960 [ 422.025708][ C0] kernel_thread+0x12e/0x1a0 [ 422.025725][ C0] rest_init+0x21/0x330 [ 422.025740][ C0] start_kernel+0x48c/0x540 [ 422.025757][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 422.025777][ C0] [ 422.025777][ C0] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 422.025802][ C0] lock_acquire+0x1db/0x4f0 [ 422.025818][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 422.025835][ C0] try_to_wake_up+0xae/0x12c0 [ 422.025854][ C0] up+0x6e/0x90 [ 422.025881][ C0] __up_console_sem+0x11a/0x1e0 [ 422.025901][ C0] console_unlock+0x1145/0x12b0 [ 422.025917][ C0] vprintk_emit+0xbf/0x150 [ 422.025934][ C0] dev_vprintk_emit+0x2aa/0x330 [ 422.025953][ C0] dev_printk_emit+0xd9/0x120 [ 422.025970][ C0] _dev_warn+0x11e/0x170 [ 422.025985][ C0] firmware_fallback_sysfs+0x681/0xc90 [ 422.026006][ C0] _request_firmware+0xc72/0x12c0 [ 422.026025][ C0] request_firmware_work_func+0x126/0x270 [ 422.026044][ C0] process_one_work+0x8a1/0x10c0 [ 422.026063][ C0] worker_thread+0xaca/0x1280 [ 422.026082][ C0] kthread+0x3f6/0x4f0 [ 422.026097][ C0] ret_from_fork+0x1f/0x30 [ 422.026114][ C0] [ 422.026114][ C0] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 422.026139][ C0] validate_chain+0x1649/0x5930 [ 422.026156][ C0] __lock_acquire+0x1295/0x1ff0 [ 422.026173][ C0] lock_acquire+0x1db/0x4f0 [ 422.026188][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 422.026205][ C0] down_trylock+0x1c/0xa0 [ 422.026223][ C0] __down_trylock_console_sem+0x105/0x250 [ 422.026242][ C0] console_trylock_spinning+0x8a/0x3f0 [ 422.026261][ C0] vprintk_emit+0xa6/0x150 [ 422.026276][ C0] _printk+0xd1/0x120 [ 422.026291][ C0] report_bug+0x1e5/0x2e0 [ 422.026310][ C0] handle_bug+0x3d/0x70 [ 422.026326][ C0] exc_invalid_op+0x16/0x40 [ 422.026344][ C0] asm_exc_invalid_op+0x16/0x20 [ 422.026360][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 422.026377][ C0] bpf_probe_read_compat+0xe4/0x180 [ 422.026395][ C0] bpf_prog_3d2613b5dfc7747f+0x32/0x560 [ 422.026411][ C0] bpf_trace_run2+0x19e/0x340 [ 422.026428][ C0] enqueue_hrtimer+0x324/0x390 [ 422.026445][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 422.026461][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 422.026478][ C0] handle_softirqs+0x3a7/0x930 [ 422.026495][ C0] run_ksoftirqd+0xc6/0x120 [ 422.026512][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 422.026528][ C0] kthread+0x3f6/0x4f0 [ 422.026544][ C0] ret_from_fork+0x1f/0x30 [ 422.026562][ C0] [ 422.026562][ C0] other info that might help us debug this: [ 422.026562][ C0] [ 422.026568][ C0] Chain exists of: [ 422.026568][ C0] (console_sem).lock --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 422.026568][ C0] [ 422.026599][ C0] Possible unsafe locking scenario: [ 422.026599][ C0] [ 422.026604][ C0] CPU0 CPU1 [ 422.026609][ C0] ---- ---- [ 422.026614][ C0] lock(hrtimer_bases.lock); [ 422.026625][ C0] lock(&rt_b->rt_runtime_lock); [ 422.026637][ C0] lock(hrtimer_bases.lock); [ 422.026650][ C0] lock((console_sem).lock); [ 422.026661][ C0] [ 422.026661][ C0] *** DEADLOCK *** [ 422.026661][ C0] [ 422.026665][ C0] 2 locks held by ksoftirqd/0/14: [ 422.026676][ C0] #0: ffff8880b8e2a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x662/0xcf0 [ 422.026722][ C0] #1: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 422.026767][ C0] [ 422.026767][ C0] stack backtrace: [ 422.026783][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.179-syzkaller #0 [ 422.026803][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 422.026819][ C0] Call Trace: [ 422.026824][ C0] [ 422.026831][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 422.026854][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 422.026887][ C0] ? print_circular_bug+0x12b/0x1a0 [ 422.026909][ C0] check_noncircular+0x2f8/0x3b0 [ 422.026929][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 422.026949][ C0] ? add_chain_block+0x850/0x850 [ 422.026969][ C0] ? lockdep_lock+0x11f/0x2a0 [ 422.026991][ C0] ? _find_first_zero_bit+0xcf/0xf0 [ 422.027016][ C0] validate_chain+0x1649/0x5930 [ 422.027037][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 422.027066][ C0] ? reacquire_held_locks+0x660/0x660 [ 422.027091][ C0] ? lockdep_lock+0x11f/0x2a0 [ 422.027111][ C0] ? lockdep_unlock+0x166/0x300 [ 422.027129][ C0] ? lockdep_lock+0x2a0/0x2a0 [ 422.027150][ C0] ? mark_lock+0x98/0x340 [ 422.027170][ C0] __lock_acquire+0x1295/0x1ff0 [ 422.027197][ C0] lock_acquire+0x1db/0x4f0 [ 422.027215][ C0] ? down_trylock+0x1c/0xa0 [ 422.027236][ C0] ? vsnprintf+0x1c70/0x1c70 [ 422.027259][ C0] ? read_lock_is_recursive+0x10/0x10 [ 422.027279][ C0] ? memcpy+0x3c/0x60 [ 422.027299][ C0] ? vsnprintf+0x1b93/0x1c70 [ 422.027321][ C0] ? _prb_commit+0x30a/0x3e0 [ 422.027342][ C0] ? prb_reserve+0x1240/0x1240 [ 422.027364][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 422.027382][ C0] ? down_trylock+0x1c/0xa0 [ 422.027402][ C0] ? _raw_spin_lock+0x40/0x40 [ 422.027422][ C0] ? vprintk_store+0xf1b/0x1300 [ 422.027442][ C0] down_trylock+0x1c/0xa0 [ 422.027465][ C0] __down_trylock_console_sem+0x105/0x250 [ 422.027486][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 422.027504][ C0] ? vprintk_emit+0xa6/0x150 [ 422.027522][ C0] ? console_trylock+0x70/0x70 [ 422.027541][ C0] ? mark_lock+0x98/0x340 [ 422.027561][ C0] ? vprintk_emit+0xa6/0x150 [ 422.027579][ C0] console_trylock_spinning+0x8a/0x3f0 [ 422.027599][ C0] ? vprintk_emit+0x150/0x150 [ 422.027624][ C0] vprintk_emit+0xa6/0x150 [ 422.027644][ C0] _printk+0xd1/0x120 [ 422.027662][ C0] ? mark_lock+0x98/0x340 [ 422.027679][ C0] ? report_bug+0x16e/0x2e0 [ 422.027700][ C0] ? panic+0x860/0x860 [ 422.027715][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 422.027735][ C0] ? find_bug+0x9c/0x350 [ 422.027754][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 422.027773][ C0] report_bug+0x1e5/0x2e0 [ 422.027796][ C0] handle_bug+0x3d/0x70 [ 422.027814][ C0] exc_invalid_op+0x16/0x40 [ 422.027834][ C0] asm_exc_invalid_op+0x16/0x20 [ 422.027852][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 422.027880][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 422.027904][ C0] RSP: 0018:ffffc90000d37990 EFLAGS: 00010046 [ 422.027919][ C0] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff88813ff21dc0 [ 422.027934][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.027945][ C0] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: ffffed1027fe43b9 [ 422.027960][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 422.027972][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000d37a08 [ 422.027988][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 422.028007][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 422.028032][ C0] bpf_probe_read_compat+0xe4/0x180 [ 422.028053][ C0] bpf_prog_3d2613b5dfc7747f+0x32/0x560 [ 422.028071][ C0] bpf_trace_run2+0x19e/0x340 [ 422.028090][ C0] ? _raw_spin_lock_irq+0xa9/0x110 [ 422.028109][ C0] ? bpf_trace_run1+0x2f0/0x2f0 [ 422.028131][ C0] enqueue_hrtimer+0x324/0x390 [ 422.028152][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 422.028179][ C0] ? hrtimer_interrupt+0x980/0x980 [ 422.028198][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 422.028222][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 422.028244][ C0] handle_softirqs+0x3a7/0x930 [ 422.028265][ C0] ? run_ksoftirqd+0xc6/0x120 [ 422.028285][ C0] ? do_softirq+0x240/0x240 [ 422.028302][ C0] ? preempt_schedule_common+0xa6/0xd0 [ 422.028324][ C0] ? run_ksoftirqd+0xa3/0x120 [ 422.028342][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 422.028366][ C0] run_ksoftirqd+0xc6/0x120 [ 422.028384][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 422.028406][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 422.028426][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 422.028450][ C0] kthread+0x3f6/0x4f0 [ 422.028467][ C0] ? cpu_report_death+0x180/0x180 [ 422.028484][ C0] ? kthread_blkcg+0xd0/0xd0 [ 422.028504][ C0] ret_from_fork+0x1f/0x30 [ 422.028531][ C0] [ 423.128614][ C0] WARNING: CPU: 0 PID: 14 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 423.137728][ C0] Modules linked in: [ 423.141622][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.179-syzkaller #0 [ 423.149678][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.159725][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 423.165880][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 423.185476][ C0] RSP: 0018:ffffc90000d37990 EFLAGS: 00010046 [ 423.191534][ C0] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff88813ff21dc0 [ 423.199497][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.207459][ C0] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: ffffed1027fe43b9 [ 423.215422][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 423.223485][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000d37a08 [ 423.231446][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 423.240380][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.246959][ C0] CR2: 000055557e0a5808 CR3: 0000000065c1f000 CR4: 00000000003506f0 [ 423.255104][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 423.263065][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 423.271029][ C0] Call Trace: [ 423.274302][ C0] [ 423.277238][ C0] ? __warn+0x15b/0x300 [ 423.281387][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 423.286927][ C0] ? report_bug+0x1b7/0x2e0 [ 423.291439][ C0] ? handle_bug+0x3d/0x70 [ 423.295761][ C0] ? exc_invalid_op+0x16/0x40 [ 423.300431][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 423.305468][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 423.310921][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 423.316460][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 423.322003][ C0] bpf_probe_read_compat+0xe4/0x180 [ 423.327196][ C0] bpf_prog_3d2613b5dfc7747f+0x32/0x560 [ 423.332737][ C0] bpf_trace_run2+0x19e/0x340 [ 423.337410][ C0] ? _raw_spin_lock_irq+0xa9/0x110 [ 423.342514][ C0] ? bpf_trace_run1+0x2f0/0x2f0 [ 423.347360][ C0] enqueue_hrtimer+0x324/0x390 [ 423.352118][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 423.357315][ C0] ? hrtimer_interrupt+0x980/0x980 [ 423.362415][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 423.368479][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 423.373671][ C0] handle_softirqs+0x3a7/0x930 [ 423.378430][ C0] ? run_ksoftirqd+0xc6/0x120 [ 423.383105][ C0] ? do_softirq+0x240/0x240 [ 423.387597][ C0] ? preempt_schedule_common+0xa6/0xd0 [ 423.393054][ C0] ? run_ksoftirqd+0xa3/0x120 [ 423.397732][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 423.403012][ C0] run_ksoftirqd+0xc6/0x120 [ 423.407507][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 423.412703][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 423.417896][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 423.422852][ C0] kthread+0x3f6/0x4f0 [ 423.426919][ C0] ? cpu_report_death+0x180/0x180 [ 423.431935][ C0] ? kthread_blkcg+0xd0/0xd0 [ 423.436519][ C0] ret_from_fork+0x1f/0x30 [ 423.440935][ C0] [ 423.443958][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 423.451228][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 5.15.179-syzkaller #0 [ 423.459304][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.469349][ C0] Call Trace: [ 423.472620][ C0] [ 423.475540][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 423.480215][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 423.485840][ C0] ? panic+0x860/0x860 [ 423.489904][ C0] ? copy_from_user_nofault+0x120/0x1c0 [ 423.495528][ C0] ? copy_from_user_nofault+0x120/0x1c0 [ 423.501066][ C0] panic+0x318/0x860 [ 423.504953][ C0] ? __warn+0x16a/0x300 [ 423.509111][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 423.514306][ C0] ? ret_from_fork+0x1f/0x30 [ 423.518892][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 423.524430][ C0] __warn+0x2b2/0x300 [ 423.528410][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 423.533948][ C0] report_bug+0x1b7/0x2e0 [ 423.538282][ C0] handle_bug+0x3d/0x70 [ 423.542432][ C0] exc_invalid_op+0x16/0x40 [ 423.546930][ C0] asm_exc_invalid_op+0x16/0x20 [ 423.551778][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 423.557926][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 423.577526][ C0] RSP: 0018:ffffc90000d37990 EFLAGS: 00010046 [ 423.583591][ C0] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff88813ff21dc0 [ 423.591553][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.599512][ C0] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: ffffed1027fe43b9 [ 423.607475][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 423.615444][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000d37a08 [ 423.623496][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 423.628950][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 423.634500][ C0] bpf_probe_read_compat+0xe4/0x180 [ 423.639695][ C0] bpf_prog_3d2613b5dfc7747f+0x32/0x560 [ 423.645248][ C0] bpf_trace_run2+0x19e/0x340 [ 423.649917][ C0] ? _raw_spin_lock_irq+0xa9/0x110 [ 423.655023][ C0] ? bpf_trace_run1+0x2f0/0x2f0 [ 423.659871][ C0] enqueue_hrtimer+0x324/0x390 [ 423.664629][ C0] __hrtimer_run_queues+0x6b6/0xcf0 [ 423.669827][ C0] ? hrtimer_interrupt+0x980/0x980 [ 423.674930][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 423.681001][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 423.686106][ C0] handle_softirqs+0x3a7/0x930 [ 423.690863][ C0] ? run_ksoftirqd+0xc6/0x120 [ 423.695533][ C0] ? do_softirq+0x240/0x240 [ 423.700027][ C0] ? preempt_schedule_common+0xa6/0xd0 [ 423.705479][ C0] ? run_ksoftirqd+0xa3/0x120 [ 423.710145][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 423.715435][ C0] run_ksoftirqd+0xc6/0x120 [ 423.719954][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 423.725157][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 423.730358][ C0] smpboot_thread_fn+0x51b/0x9d0 [ 423.735307][ C0] kthread+0x3f6/0x4f0 [ 423.739459][ C0] ? cpu_report_death+0x180/0x180 [ 423.744474][ C0] ? kthread_blkcg+0xd0/0xd0 [ 423.749086][ C0] ret_from_fork+0x1f/0x30 [ 423.753510][ C0] [ 423.756801][ C0] Kernel Offset: disabled [ 423.761131][ C0] Rebooting in 86400 seconds..