last executing test programs: 41.230084146s ago: executing program 1 (id=3432): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003567d25a806f8c6394f96724fc60", 0x14}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048042) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc6004001141050006004700000037153e370248018000f017", 0x2b}], 0x1}, 0x0) recvmsg$kcm(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={0x0, r2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x42) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 40.922018212s ago: executing program 1 (id=3436): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f94df812521399ef781ac9ccd72f712688c6b219a0614b7ac3de8bcaf74bebb3b0", 0x21}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000ed7f0000000000000000850000000f00000018010008646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 39.878180781s ago: executing program 1 (id=3444): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x72000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280)="9878b2c002e3d71ac210") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x13040, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001418) 17.871295136s ago: executing program 0 (id=3517): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffff9c, &(0x7f0000000300), 0x204040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'tunl0\x00', 0x10}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) 17.298070085s ago: executing program 0 (id=3521): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x72000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280)="9878b2c002e3d71ac210") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x13040, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001418) 14.719204315s ago: executing program 0 (id=3528): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x72000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280)="9878b2c002e3d71ac210") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x13040, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001418) 12.740375444s ago: executing program 0 (id=3533): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900), 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000002640)=ANY=[@ANYBLOB="0007000042009103347e5dc342b2e678b6a4"], 0xfe33) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000500)}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.173075532s ago: executing program 0 (id=3535): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x61, &(0x7f0000000300)=[{&(0x7f0000000080)="b57a4f02000000000000000086780df56e5be7070102180a4e7719b506a0e27b", 0x20}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r4) 11.922060664s ago: executing program 0 (id=3538): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x72000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280)="9878b2c002e3d71ac210") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x13040, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001418) 7.816993773s ago: executing program 3 (id=3546): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800e00000000000000000000000000000008000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f0000000380)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) 5.851450041s ago: executing program 4 (id=3549): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffff9c, &(0x7f0000000300), 0x204040, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'tunl0\x00', 0x10}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) 5.839756452s ago: executing program 3 (id=3550): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800e00000000000000000000000000000008000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f0000000380)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 4.162833865s ago: executing program 4 (id=3551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x60, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b0000000300000004000006040000000700000000000000030000000000000000000000000000000000000000000000000000000000000d00000000001706eb9a000005000000000000002e61615f2e"], 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000003, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) 4.161926545s ago: executing program 2 (id=3560): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000fc0)=' \xb4\xcfhj0\x04\x9e\x92\xee\x87\xa1X\xbb\xea/\xbe\x18\xeb\xa9\bsDi\xb2\xc6E\x14\x8a\x1d\xc0\xd9\xe6\x10\xc0s\xe8\xc1\x12\xbd\xe2tX}\xa3\x1e \xfady7D -\x96x\x81\xdb.?\x16\xbb\x93\x1c') 4.149513026s ago: executing program 3 (id=3552): syz_clone(0x72000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280)="9878b2c002e3d71ac210") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x13040, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001418) 3.114833164s ago: executing program 4 (id=3553): socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001600000000000000ae330018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0xf, 0x0, 0xffffffd0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000}, 0x17) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x9f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', r2, r3, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = gettid() sendmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r4, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}], 0x60}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)='8', 0x1}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.999197714s ago: executing program 2 (id=3554): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800e00000000000000000000000000000008000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f0000000380)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 1.8745131s ago: executing program 2 (id=3555): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @void, @value}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000300000000000000000000850000004100000018010000202064250000000000202b207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r7 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x8) write$cgroup_devices(r7, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) 1.775142138s ago: executing program 4 (id=3557): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000080000000100000f05000000000000000003000000000000000000002e0073051c133e437148d1accd15d8c4378e5c34b219ba827c07b634a4c5dbc7bf2775ebb504f594bc8e02fd3d6827857bdfecc833595aa7b45f8ca97eb2092ab8967ee6b6d3"], &(0x7f0000000040)=""/249, 0x39, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007022491daafffffb703000008000000b704000000000000850000000a0000000700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2009) openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='cpu\t&0\t\t\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1.748118441s ago: executing program 3 (id=3558): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x61, &(0x7f0000000300)=[{&(0x7f0000000080)="b57a4f02000000000000000086780df56e5be7070102180a4e7719b506a0e27b", 0x20}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r4) 1.537926989s ago: executing program 4 (id=3559): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b7030000000000008500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r2}, 0xc) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c80)="dbcceac64076966dfc990be911a618894260d27f38dff28f124f782a4dbab0eaeb065e01a32909f9a5cd0ce91f897cb6facd9b18e9a5079e6f0046303b0726b2960c01162a30ae5e7578b09ae39987cb690dbf9d0a675dab0707ffb8b1987b7974dac279694df76f72e7c9ccdbf26a", 0x6f}], 0x1, &(0x7f0000000c40)}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r3, 0x5451, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)={r0}) recvmsg$unix(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/81, 0x51}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000540)=""/102, 0x66}, {&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/100, 0x64}, {&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000740)=""/106, 0x6a}, {&(0x7f00000007c0)=""/237, 0xed}], 0x9, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x12142) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x80000000}, {0x1, 0x0, 0x1}], 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x649ecba8ceec18da, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000200000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90624fc600d00030004000100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.490235683s ago: executing program 3 (id=3561): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800e00000000000000000000000000000008000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f0000000380)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 1.356950254s ago: executing program 1 (id=3476): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x21, &(0x7f0000000200), 0x10) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0200002000"}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000040)=r2, 0x4) 1.337617925s ago: executing program 2 (id=3562): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000500)="cbbc1c57f5e7230ef757cd79b9180e0d7b8646c579b80e676f47010153b189545d4644628a37212ee00c9f6a2f6d07dae5dc08dc3f1620b9c0874623f293ac32dedce7c2820e55e8df3b771de680ee171494f00d4c4ba98b9390bc71ec0b5caa348d24c87d8b68aa48cb91604d3402f60a9f13ff253ff97781c09269b7f8217d7774e733a84308f310595613fa42ee0cff5148418dbb455abd604480d90034769442420df5a610a31b7d25676a95a29dc4ddb03f8e40425daa3b76cb52af59b41713f37a83f6bf50dbe5b5b247b87ae40a2e8144b9841f4682d4e223f520300a35fbd40c12e6cb524250bb7c36cf20870e3209c893e2758c8d66", &(0x7f0000000600)=""/69, &(0x7f0000000040)="e370b10fd6530931503a6065c75021927e", &(0x7f0000000780), 0x5bdf}, 0x38) r0 = socket$kcm(0x22, 0x3, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) 1.148911101s ago: executing program 1 (id=3563): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00') r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) close(r2) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', @random="7fff00004ec6"}) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007e810864160af36514000cc00400020208000300020400000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) 983.132586ms ago: executing program 3 (id=3564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000fc0)=' \xb4\xcfhj0\x04\x9e\x92\xee\x87\xa1X\xbb\xea/\xbe\x18\xeb\xa9\bsDi\xb2\xc6E\x14\x8a\x1d\xc0\xd9\xe6\x10\xc0s\xe8\xc1\x12\xbd\xe2tX}\xa3\x1e \xfady7D -\x96x\x81\xdb.?\x16\xbb\x93\x1c') 982.163186ms ago: executing program 4 (id=3565): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r3, 0x10, r0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000456422d8b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 711.050899ms ago: executing program 2 (id=3566): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x25) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x13, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5e76a366}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xe0}, @ldst={0x0, 0x3, 0x2, 0x0, 0x1, 0xfffffffffffffffc, 0xffffffffffffffe0}]}, &(0x7f0000000200)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x80047456, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800000000400000060000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xa5, &(0x7f0000000340)=""/165, 0x40f00, 0x64, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000005c0)=[{0x5, 0x0, 0x0, 0xc}, {0x0, 0x5, 0x3}, {0x2}, {0x2, 0x3, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0xc}, {0x1, 0x0, 0x2, 0x1}], 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 1.159569ms ago: executing program 1 (id=3567): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x72000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280)="9878b2c002e3d71ac210") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x13040, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001418) 0s ago: executing program 2 (id=3576): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="d794dc49a007a3c4d6a71ca395b87d6a43afca267968a5e8959a7ac63f34c948f348ed84cf615d72a12bfbdbdaf230ebafbd164a896e34a6f2c432d7feb238498bd18b9b25e8281c5cd58225e0d18a0232b8e701b918363ba4cc33d1517f2edb578607e00544ea2c53c630785644e241374ac152046049c08411312c2f74318be3755b6fba9da059e3eb9c96bc690904e2438c3ad592b4d3dbe758166e8c4bf81c477087e50f69223fe73ed2a695a7d6be79074b975c9cd2be872cc321ff9a80a35c301cd7b90ab719b092ec09962f70eb8f8b2702cdd92f19e05924a882d0e339409b4ac47a7873c8c5d61f147c4b2408eb456c8be927ac09", @ANYRESOCT=r1, @ANYBLOB="4d9551260d193f822e8a2b4ca975da0406de64f9842c4164e7362bbab7019cbe2c20ac44ef6f366d14fc0246639f3a797b5963489baa722e7701817dd22ea2cd9bf65caccf727afa58dd52a0833ea3bd330f30aaed4d8c612880c816cbd24cd9c2bf94c4ab78ac98e7e36e84d86c5046de35d7b3d1133cd493972008e84a05117732e3b654715e0c8841ddbd101ea5c2f1bb323c97e7f2be06e908fe3db3875114dca9d6", @ANYRES32, @ANYRES8=r0, @ANYBLOB="7636c29af22353df642cc9ee9235f8165cea92576c147d7e5cf3cd0efe2a419f207874e4e71e3077649e216e3b48eb63be38b1917c6616408c9569722db6e6a3b5ed4b35c1991406ee251b9e8ef26eaa40db9e3ba0b4f3f97f3e596421a43f6816d36b979cde3edaf834f9cd9f46da666d736197692db61a4076b75bcb062a4abe07b23656f3292cc8aef42058c69c9d4c96d688ac319131e05842e0fdc09692b07e3c04764b6a4eb1ea6857", @ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000000c0200000000006100f15137d09c6bab844fb61d7189ba3e131e942d815e34c40c35993a27236e823270ae55be93fbe3db7af1c135492d3fc3a505ff4c74b5bcc356ee4ec247ce61800f0e1adc6b2ddf0f3d8983ccc3aa90d8b4cdf51b54d2b02ba4111a21f90358234ec2ad4e"], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000fc0)=' \xb4\xcfhj0\x04\x9e\x92\xee\x87\xa1X\xbb\xea/\xbe\x18\xeb\xa9\bsDi\xb2\xc6E\x14\x8a\x1d\xc0\xd9\xe6\x10\xc0s\xe8\xc1\x12\xbd\xe2tX}\xa3\x1e \xfady7D -\x96x\x81\xdb.?\x16\xbb\x93\x1c') kernel console output (not intermixed with test programs): t device bond0 added [ 247.383797][ T7440] netlink: 'syz.1.1343': attribute type 21 has an invalid length. [ 247.396405][ T7440] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1343'. [ 247.415172][ T7440] netlink: 'syz.1.1343': attribute type 5 has an invalid length. [ 247.427416][ T7440] netlink: 'syz.1.1343': attribute type 6 has an invalid length. [ 247.438504][ T7440] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1343'. [ 247.715431][ T7455] -: renamed from syzkaller0 [ 248.187598][ T7464] netlink: 'syz.1.1354': attribute type 28 has an invalid length. [ 248.373459][ T7472] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1358'. [ 248.459851][ T7475] device vlan1 entered promiscuous mode [ 248.641222][ T7483] netlink: 'syz.3.1362': attribute type 10 has an invalid length. [ 248.662915][ T7483] device bond_slave_0 left promiscuous mode [ 248.700164][ T7483] device bond_slave_1 left promiscuous mode [ 248.905325][ T7487] netlink: 'syz.0.1370': attribute type 9 has an invalid length. [ 248.924614][ T7483] device bond_slave_0 entered promiscuous mode [ 248.931700][ T7483] device bond_slave_1 entered promiscuous mode [ 248.960588][ T7487] netlink: 131264 bytes leftover after parsing attributes in process `syz.0.1370'. [ 249.078273][ T7483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.132081][ T7483] team0: Port device bond0 added [ 249.207400][ T7484] netlink: 'syz.4.1360': attribute type 21 has an invalid length. [ 249.226258][ T7484] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1360'. [ 249.242218][ T7484] netlink: 'syz.4.1360': attribute type 5 has an invalid length. [ 249.317390][ T7484] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1360'. [ 249.370440][ T7494] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1361'. [ 249.701673][ T7503] -: renamed from syzkaller0 [ 251.210910][ T7535] device syzkaller0 entered promiscuous mode [ 251.230748][ T7536] syzkaller0: create flow: hash 2026721118 index 2 [ 251.285354][ T7] syzkaller0: tun_net_xmit 48 [ 251.437801][ T7545] device bond0 left promiscuous mode [ 251.452969][ T7545] device bond_slave_0 left promiscuous mode [ 251.475104][ T7545] device bond_slave_1 left promiscuous mode [ 251.496617][ T7545] device macvlan0 left promiscuous mode [ 251.581440][ T7545] device bond_slave_0 entered promiscuous mode [ 251.588343][ T7545] device bond_slave_1 entered promiscuous mode [ 251.627804][ T7545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.676458][ T7545] team0: Port device bond0 added [ 251.894758][ T7542] validate_nla: 2 callbacks suppressed [ 251.894775][ T7542] netlink: 'syz.0.1378': attribute type 21 has an invalid length. [ 251.920340][ T7542] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1378'. [ 251.929847][ T7542] netlink: 'syz.0.1378': attribute type 5 has an invalid length. [ 251.950629][ T7542] netlink: 'syz.0.1378': attribute type 6 has an invalid length. [ 251.959096][ T7542] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1378'. [ 252.010539][ T7533] syzkaller0: delete flow: hash 2026721118 index 2 [ 252.050842][ T7554] netlink: 'syz.2.1379': attribute type 9 has an invalid length. [ 252.085414][ T7554] netlink: 131264 bytes leftover after parsing attributes in process `syz.2.1379'. [ 254.139793][ T7566] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1381'. [ 254.422184][ T7573] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1389'. [ 254.481740][ T7573] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 254.572777][ T7581] device lo entered promiscuous mode [ 254.602625][ T7579] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1388'. [ 254.818983][ T7587] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1394'. [ 255.062889][ T7589] device vlan1 entered promiscuous mode [ 255.171078][ T7598] -: renamed from syzkaller0 [ 255.368732][ T7600] netlink: 'syz.1.1399': attribute type 10 has an invalid length. [ 255.389430][ T7600] device bond_slave_0 left promiscuous mode [ 255.397079][ T7600] device bond_slave_1 left promiscuous mode [ 255.444185][ T7600] device bond_slave_0 entered promiscuous mode [ 255.451153][ T7600] device bond_slave_1 entered promiscuous mode [ 255.509230][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.510483][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530897][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.557344][ T7600] team0: Port device bond0 added [ 255.702900][ T3653] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 255.762665][ T7617] device syzkaller0 entered promiscuous mode [ 255.777250][ T22] syzkaller0: tun_net_xmit 48 [ 255.813427][ T7609] -: renamed from syzkaller0 [ 255.840411][ T7617] syzkaller0: create flow: hash 2026721118 index 2 [ 256.136655][ T7627] netlink: 'syz.4.1404': attribute type 28 has an invalid length. [ 256.266447][ T7616] syzkaller0: delete flow: hash 2026721118 index 2 [ 256.421210][ T7633] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1419'. [ 256.451931][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 256.476189][ T7633] net_ratelimit: 2 callbacks suppressed [ 256.476205][ T7633] netlink: zone id is out of range [ 256.505098][ T7633] netlink: zone id is out of range [ 256.516866][ T7633] netlink: zone id is out of range [ 256.528717][ T7633] netlink: zone id is out of range [ 256.535666][ T7633] netlink: zone id is out of range [ 256.566989][ T7633] netlink: zone id is out of range [ 256.770940][ T7633] netlink: set zone limit has 8 unknown bytes [ 258.226684][ T7635] netlink: 'syz.1.1420': attribute type 28 has an invalid length. [ 258.460079][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'. [ 258.538093][ T7652] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1413'. [ 258.740616][ T7662] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 258.912099][ T7664] -: renamed from syzkaller0 [ 259.134834][ T7672] netlink: 'syz.0.1425': attribute type 21 has an invalid length. [ 259.173820][ T7672] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1425'. [ 259.184017][ T7672] netlink: 'syz.0.1425': attribute type 5 has an invalid length. [ 259.199471][ T7672] netlink: 'syz.0.1425': attribute type 6 has an invalid length. [ 259.223928][ T7672] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1425'. [ 259.258581][ T7677] -: renamed from syzkaller0 [ 259.396830][ T7680] device syzkaller0 entered promiscuous mode [ 259.435411][ T7682] syzkaller0: create flow: hash 2026721118 index 2 [ 259.464185][ T3683] syzkaller0: tun_net_xmit 48 [ 259.516845][ T7683] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1430'. [ 259.526924][ T7683] netlink: 'syz.4.1430': attribute type 1 has an invalid length. [ 259.619926][ T7679] syzkaller0: delete flow: hash 2026721118 index 2 [ 259.714091][ T7686] device lo entered promiscuous mode [ 261.335943][ T7695] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 261.345150][ T7693] netlink: 'syz.3.1434': attribute type 40 has an invalid length. [ 261.463454][ T7704] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1448'. [ 261.520729][ T7704] netlink: zone id is out of range [ 261.549746][ T7704] netlink: zone id is out of range [ 261.580458][ T7704] netlink: zone id is out of range [ 261.598595][ T7704] netlink: zone id is out of range [ 261.655631][ T7704] netlink: zone id is out of range [ 261.947459][ T7721] -: renamed from syzkaller0 [ 261.990368][ T7719] netlink: 'syz.2.1442': attribute type 21 has an invalid length. [ 262.019752][ T7719] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1442'. [ 262.021574][ T7704] netlink: set zone limit has 8 unknown bytes [ 262.036493][ T7719] netlink: 'syz.2.1442': attribute type 5 has an invalid length. [ 262.044934][ T7719] netlink: 'syz.2.1442': attribute type 6 has an invalid length. [ 262.053483][ T7719] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1442'. [ 262.417859][ T7724] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1456'. [ 262.451369][ T7724] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 262.554380][ T7728] device lo entered promiscuous mode [ 262.575521][ T7732] -: renamed from syzkaller0 [ 262.690550][ T3653] Bluetooth: hci2: command 0x0406 tx timeout [ 263.074959][ T7744] device bond_slave_0 left promiscuous mode [ 263.091076][ T7744] device bond_slave_1 left promiscuous mode [ 263.306094][ T7751] syzkaller0: create flow: hash 2026721118 index 2 [ 263.358789][ T7748] device syzkaller0 entered promiscuous mode [ 263.393597][ T3651] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 263.405821][ T22] syzkaller0: tun_net_xmit 48 [ 263.650676][ T6652] wlan1: Trigger new scan to find an IBSS to join [ 264.258224][ T7741] syzkaller0: delete flow: hash 2026721118 index 2 [ 265.937671][ T7786] device batadv0 entered promiscuous mode [ 266.005213][ T7784] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1465'. [ 266.016722][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.024201][ T7784] validate_nla: 5 callbacks suppressed [ 266.024213][ T7784] netlink: 'syz.0.1465': attribute type 1 has an invalid length. [ 266.092742][ T7788] netlink: 'syz.4.1470': attribute type 40 has an invalid length. [ 266.123271][ T7784] device lo entered promiscuous mode [ 266.621625][ T6760] wlan1: Trigger new scan to find an IBSS to join [ 267.294643][ T7810] device syzkaller0 entered promiscuous mode [ 267.301613][ T7813] syzkaller0: create flow: hash 2026721118 index 2 [ 267.397186][ T3713] syzkaller0: tun_net_xmit 48 [ 267.459748][ T3651] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7 [ 267.508376][ T7808] syzkaller0: delete flow: hash 2026721118 index 2 [ 268.625328][ T6659] wlan1: Creating new IBSS network, BSSID 66:d0:17:31:41:29 [ 269.102958][ T7822] netlink: 'syz.0.1483': attribute type 40 has an invalid length. [ 269.483896][ T7833] device syzkaller0 entered promiscuous mode [ 269.504408][ T7835] netlink: 'syz.4.1499': attribute type 40 has an invalid length. [ 269.520047][ T3683] syzkaller0: tun_net_xmit 48 [ 269.577624][ T7837] netlink: 'syz.3.1488': attribute type 21 has an invalid length. [ 269.627428][ T7837] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1488'. [ 269.638431][ T7833] syzkaller0: create flow: hash 2026721118 index 2 [ 269.671739][ T7837] netlink: 'syz.3.1488': attribute type 5 has an invalid length. [ 269.691777][ T7837] netlink: 'syz.3.1488': attribute type 6 has an invalid length. [ 269.736808][ T7837] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1488'. [ 269.774574][ T7848] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1491'. [ 269.784415][ T7848] netlink: zone id is out of range [ 269.789778][ T7848] netlink: zone id is out of range [ 269.795906][ T7848] netlink: zone id is out of range [ 269.803110][ T7848] netlink: zone id is out of range [ 269.841548][ T7848] netlink: zone id is out of range [ 269.896413][ T7832] syzkaller0: delete flow: hash 2026721118 index 2 [ 270.231615][ T7848] netlink: set zone limit has 8 unknown bytes [ 272.275175][ T7863] netlink: 'syz.0.1500': attribute type 28 has an invalid length. [ 272.283567][ T7865] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1501'. [ 272.293306][ T7877] netlink: 'syz.1.1506': attribute type 21 has an invalid length. [ 272.347604][ T7877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1506'. [ 272.371803][ T7877] netlink: 'syz.1.1506': attribute type 5 has an invalid length. [ 272.421557][ T7877] netlink: 'syz.1.1506': attribute type 6 has an invalid length. [ 272.429303][ T7877] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1506'. [ 272.492452][ T7879] netlink: 'syz.4.1507': attribute type 40 has an invalid length. [ 273.165679][ T7907] device syzkaller0 entered promiscuous mode [ 273.204535][ T7910] syzkaller0: create flow: hash 2026721118 index 2 [ 273.234367][ T22] syzkaller0: tun_net_xmit 48 [ 273.267148][ T7913] netlink: 'syz.0.1519': attribute type 28 has an invalid length. [ 273.525032][ T7906] syzkaller0: delete flow: hash 2026721118 index 2 [ 275.286949][ T7919] netlink: 'syz.3.1523': attribute type 40 has an invalid length. [ 275.294930][ T7921] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1524'. [ 275.837085][ T7944] netlink: 'syz.2.1532': attribute type 28 has an invalid length. [ 276.085656][ T7946] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1533'. [ 276.157922][ T7946] netlink: zone id is out of range [ 276.186279][ T7946] netlink: zone id is out of range [ 276.228236][ T7946] netlink: zone id is out of range [ 276.259763][ T7946] netlink: zone id is out of range [ 276.266400][ T7946] netlink: zone id is out of range [ 276.297149][ T7946] netlink: zone id is out of range [ 276.440736][ T7955] netlink: 'syz.0.1538': attribute type 21 has an invalid length. [ 276.468692][ T7955] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.509300][ T7955] IPv6: Can't replace route, no match found [ 276.714394][ T7946] netlink: set zone limit has 8 unknown bytes [ 276.895494][ T7970] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1552'. [ 277.681227][ T7994] netlink: 'syz.0.1562': attribute type 29 has an invalid length. [ 277.776453][ T7994] netlink: 'syz.0.1562': attribute type 29 has an invalid length. [ 278.300760][ T8008] netlink: 'syz.4.1554': attribute type 21 has an invalid length. [ 278.343961][ T8008] IPv6: NLM_F_CREATE should be specified when creating new route [ 278.361635][ T8008] IPv6: Can't replace route, no match found [ 278.497078][ T8013] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1557'. [ 279.277877][ T8039] netlink: 'syz.2.1568': attribute type 29 has an invalid length. [ 279.337767][ T8039] netlink: 'syz.2.1568': attribute type 29 has an invalid length. [ 279.766510][ T8060] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1575'. [ 280.097855][ T8064] device syzkaller0 entered promiscuous mode [ 280.151736][ T8070] syzkaller0: create flow: hash 2026721118 index 2 [ 280.212890][ T3683] syzkaller0: tun_net_xmit 48 [ 280.217965][ T8068] netlink: 'syz.2.1579': attribute type 21 has an invalid length. [ 280.240937][ T8068] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1579'. [ 280.254778][ T8068] netlink: 'syz.2.1579': attribute type 5 has an invalid length. [ 280.264181][ T8068] netlink: 'syz.2.1579': attribute type 6 has an invalid length. [ 280.272744][ T8068] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1579'. [ 280.439616][ T8063] syzkaller0: delete flow: hash 2026721118 index 2 [ 280.459838][ T8084] netlink: 'syz.4.1584': attribute type 29 has an invalid length. [ 280.482647][ T8075] netlink: 'syz.3.1580': attribute type 21 has an invalid length. [ 280.509454][ T8075] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.529145][ T8075] IPv6: Can't replace route, no match found [ 282.544807][ T8108] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1595'. [ 282.561485][ T8105] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1593'. [ 282.587369][ T8105] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1593'. [ 282.698727][ T8112] device lo entered promiscuous mode [ 283.028892][ T8121] validate_nla: 5 callbacks suppressed [ 283.029041][ T8121] netlink: 'syz.3.1598': attribute type 29 has an invalid length. [ 283.086962][ T8121] netlink: 'syz.3.1598': attribute type 29 has an invalid length. [ 283.229210][ T8124] syzkaller0: create flow: hash 2026721118 index 2 [ 283.271657][ T8122] device syzkaller0 entered promiscuous mode [ 283.326423][ T7] syzkaller0: tun_net_xmit 48 [ 283.608461][ T8117] syzkaller0: delete flow: hash 2026721118 index 2 [ 283.620663][ T8130] netlink: 'syz.0.1601': attribute type 40 has an invalid length. [ 286.078421][ T3650] Bluetooth: hci4: unexpected event 0x16 length: 15 > 6 [ 286.163448][ T8159] device wg2 left promiscuous mode [ 286.275671][ T8164] netlink: 'syz.1.1613': attribute type 21 has an invalid length. [ 286.302489][ T8164] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.322779][ T8164] IPv6: Can't replace route, no match found [ 286.453155][ T8167] netlink: 'syz.2.1614': attribute type 21 has an invalid length. [ 286.462390][ T8167] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1614'. [ 286.472211][ T8167] netlink: 'syz.2.1614': attribute type 5 has an invalid length. [ 286.507567][ T8167] netlink: 'syz.2.1614': attribute type 6 has an invalid length. [ 286.526651][ T8167] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1614'. [ 286.592510][ T8174] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1617'. [ 286.810468][ T8179] netlink: 'syz.4.1619': attribute type 28 has an invalid length. [ 287.002804][ T8191] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1634'. [ 287.274803][ T8194] device syzkaller0 entered promiscuous mode [ 287.282618][ T3720] syzkaller0: tun_net_xmit 48 [ 287.375530][ T8194] syzkaller0: create flow: hash 2026721118 index 2 [ 287.417501][ T8204] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1628'. [ 287.677543][ T8193] syzkaller0: delete flow: hash 2026721118 index 2 [ 289.932744][ T8233] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1639'. [ 290.229581][ T8243] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1651'. [ 290.594162][ T8257] device wg2 left promiscuous mode [ 290.630710][ T8259] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1654'. [ 290.948669][ T8264] netlink: 'syz.0.1643': attribute type 21 has an invalid length. [ 290.995838][ T8264] IPv6: Can't replace route, no match found [ 291.119177][ T8272] netlink: 'syz.3.1645': attribute type 29 has an invalid length. [ 291.166364][ T8272] netlink: 'syz.3.1645': attribute type 29 has an invalid length. [ 291.254917][ T6637] device hsr_slave_0 left promiscuous mode [ 291.267231][ T6637] device hsr_slave_1 left promiscuous mode [ 291.297848][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.357488][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.386214][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.411770][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.519842][ T6637] device veth1_vlan left promiscuous mode [ 291.537960][ T6637] device veth0_vlan left promiscuous mode [ 292.094173][ T6637] team0 (unregistering): Port device vlan0 removed [ 292.492796][ T6637] team0 (unregistering): Port device team_slave_1 removed [ 292.524758][ T6637] team0 (unregistering): Port device team_slave_0 removed [ 292.555758][ T6637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.588693][ T6637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.900275][ T6637] bond0 (unregistering): Released all slaves [ 292.927027][ T8274] netlink: 'syz.4.1646': attribute type 21 has an invalid length. [ 292.936006][ T8274] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1646'. [ 292.945501][ T8274] netlink: 'syz.4.1646': attribute type 5 has an invalid length. [ 292.954730][ T8274] netlink: 'syz.4.1646': attribute type 6 has an invalid length. [ 292.962648][ T8274] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1646'. [ 293.042484][ T8287] device syzkaller0 entered promiscuous mode [ 294.732285][ T8302] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1658'. [ 295.528062][ T8326] device lo left promiscuous mode [ 295.602712][ T8326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.222814][ T8339] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1672'. [ 296.320000][ T8343] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1674'. [ 296.360434][ T8343] netlink: zone id is out of range [ 296.365573][ T8343] netlink: zone id is out of range [ 296.416037][ T8343] netlink: zone id is out of range [ 296.443342][ T8343] netlink: zone id is out of range [ 296.485258][ T8343] netlink: zone id is out of range [ 297.167206][ T8343] netlink: set zone limit has 8 unknown bytes [ 298.165308][ T8388] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1686'. [ 298.397414][ T8393] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1691'. [ 298.450411][ T8393] netlink: zone id is out of range [ 298.455593][ T8393] netlink: zone id is out of range [ 298.585114][ T8393] netlink: zone id is out of range [ 299.617728][ T8418] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1707'. [ 299.923962][ T8427] device lo left promiscuous mode [ 300.877234][ T8438] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1703'. [ 301.566340][ T8463] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1711'. [ 301.895508][ T8463] net_ratelimit: 4 callbacks suppressed [ 301.895606][ T8463] netlink: zone id is out of range [ 302.014048][ T8463] netlink: zone id is out of range [ 302.066742][ T8463] netlink: zone id is out of range [ 302.103048][ T8463] netlink: zone id is out of range [ 302.158387][ T8463] netlink: zone id is out of range [ 302.177669][ T8473] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1713'. [ 303.270781][ T8463] netlink: set zone limit has 8 unknown bytes [ 303.575909][ T8494] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1723'. [ 304.158105][ T8514] device lo left promiscuous mode [ 304.225134][ T8514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.505579][ T8523] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1732'. [ 304.530781][ T8523] netlink: zone id is out of range [ 304.546424][ T8523] netlink: zone id is out of range [ 304.556673][ T8523] netlink: zone id is out of range [ 304.766910][ T8530] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1734'. [ 304.799715][ T8529] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1731'. [ 304.980275][ T8532] netlink: 'syz.0.1735': attribute type 28 has an invalid length. [ 305.071667][ T8539] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1737'. [ 305.848063][ T8562] netlink: 'syz.3.1746': attribute type 11 has an invalid length. [ 306.022730][ T8566] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1748'. [ 306.104235][ T8571] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1751'. [ 306.140448][ T8572] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1750'. [ 306.151614][ T8569] netlink: 'syz.2.1749': attribute type 28 has an invalid length. [ 306.521635][ T8581] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1763'. [ 306.867181][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.095568][ T8595] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1757'. [ 307.216685][ T8602] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 307.247092][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.321318][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.403789][ T8602] device batadv_slave_0 entered promiscuous mode [ 307.445767][ T8602] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 307.874821][ T8614] net_ratelimit: 9 callbacks suppressed [ 307.874838][ T8614] netlink: zone id is out of range [ 307.900908][ T8614] netlink: zone id is out of range [ 307.906887][ T8615] netlink: 'syz.0.1765': attribute type 28 has an invalid length. [ 307.928493][ T8614] netlink: zone id is out of range [ 307.944953][ T8614] netlink: zone id is out of range [ 307.978075][ T8614] netlink: zone id is out of range [ 308.440932][ T8614] netlink: set zone limit has 8 unknown bytes [ 308.868340][ T8640] netlink: 'syz.4.1774': attribute type 9 has an invalid length. [ 308.926754][ T8640] __nla_validate_parse: 3 callbacks suppressed [ 308.927423][ T8640] netlink: 131264 bytes leftover after parsing attributes in process `syz.4.1774'. [ 309.061916][ T8644] netlink: 'syz.0.1777': attribute type 10 has an invalid length. [ 309.069893][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.162908][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.206947][ T8644] device batadv_slave_0 entered promiscuous mode [ 309.241970][ T8644] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 309.870258][ T8649] netlink: 'syz.4.1780': attribute type 28 has an invalid length. [ 310.033038][ T8660] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1778'. [ 310.243238][ T8668] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1786'. [ 310.260258][ T8668] netlink: zone id is out of range [ 310.276144][ T8668] netlink: zone id is out of range [ 310.315572][ T8670] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1784'. [ 310.325251][ T8668] netlink: zone id is out of range [ 310.361186][ T8668] netlink: zone id is out of range [ 311.052916][ T8682] device veth0_vlan left promiscuous mode [ 311.073374][ T8682] device veth0_vlan entered promiscuous mode [ 311.097388][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.143048][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.218815][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.291776][ T8688] -: renamed from syzkaller0 [ 311.944288][ T8702] netlink: 'syz.1.1794': attribute type 28 has an invalid length. [ 312.315392][ T8705] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1798'. [ 312.548814][ T8715] netlink: 'syz.0.1799': attribute type 11 has an invalid length. [ 312.559028][ T8719] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1802'. [ 312.898399][ T8719] net_ratelimit: 7 callbacks suppressed [ 312.898416][ T8719] netlink: set zone limit has 8 unknown bytes [ 312.962753][ T8725] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1813'. [ 313.579415][ T8736] device veth0_vlan left promiscuous mode [ 313.608353][ T8736] device veth0_vlan entered promiscuous mode [ 313.782562][ T8738] -: renamed from syzkaller0 [ 313.804576][ T8750] netlink: 'syz.2.1808': attribute type 28 has an invalid length. [ 314.197897][ T8761] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1815'. [ 314.286784][ T8761] netlink: zone id is out of range [ 314.344240][ T8761] netlink: zone id is out of range [ 314.389611][ T8761] netlink: zone id is out of range [ 314.434650][ T8761] netlink: zone id is out of range [ 314.514371][ T8761] netlink: zone id is out of range [ 314.986029][ T8761] netlink: set zone limit has 8 unknown bytes [ 315.423961][ T8784] -: renamed from syzkaller0 [ 315.961621][ T8796] netlink: 'syz.2.1826': attribute type 28 has an invalid length. [ 316.950839][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.957221][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.799004][ T8814] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1832'. [ 317.841180][ T8814] netlink: zone id is out of range [ 317.860295][ T8814] netlink: zone id is out of range [ 317.883302][ T8814] netlink: zone id is out of range [ 317.959253][ T8814] netlink: zone id is out of range [ 318.007604][ T8814] netlink: zone id is out of range [ 318.346740][ T8814] netlink: set zone limit has 8 unknown bytes [ 319.111402][ T8832] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1838'. [ 319.137277][ T8836] netlink: 'syz.4.1840': attribute type 28 has an invalid length. [ 319.157928][ T8838] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1839'. [ 319.336795][ T8840] device veth0_vlan left promiscuous mode [ 319.382239][ T8840] device veth0_vlan entered promiscuous mode [ 319.489733][ T8845] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1853'. [ 320.843393][ T8870] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1848'. [ 320.896035][ T8870] netlink: zone id is out of range [ 320.910470][ T8870] netlink: zone id is out of range [ 320.921674][ T8870] netlink: zone id is out of range [ 320.927604][ T8870] netlink: zone id is out of range [ 320.985808][ T8870] netlink: zone id is out of range [ 321.244434][ T8883] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1852'. [ 321.399317][ T8887] netlink: 'syz.1.1854': attribute type 28 has an invalid length. [ 321.494205][ T8870] netlink: set zone limit has 8 unknown bytes [ 321.837857][ T8894] device syzkaller0 entered promiscuous mode [ 321.954859][ T8897] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1868'. [ 322.005177][ T8901] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1867'. [ 322.052492][ T8901] netlink: zone id is out of range [ 324.949864][ T8902] device veth0_vlan left promiscuous mode [ 324.965747][ T8902] device veth0_vlan entered promiscuous mode [ 324.984058][ T8912] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1861'. [ 325.262023][ T8929] netlink: 'syz.1.1869': attribute type 28 has an invalid length. [ 325.279656][ T8933] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1871'. [ 325.296847][ T8933] net_ratelimit: 5 callbacks suppressed [ 325.296862][ T8933] netlink: zone id is out of range [ 325.318572][ T8933] netlink: zone id is out of range [ 325.324621][ T8933] netlink: zone id is out of range [ 325.349612][ T8933] netlink: zone id is out of range [ 325.370005][ T8933] netlink: zone id is out of range [ 325.727025][ T8933] netlink: set zone limit has 8 unknown bytes [ 326.029783][ T8949] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1878'. [ 326.887095][ T8955] netlink: 'syz.2.1880': attribute type 9 has an invalid length. [ 326.950595][ T8955] netlink: 131264 bytes leftover after parsing attributes in process `syz.2.1880'. [ 326.993923][ T8964] netlink: 'syz.3.1884': attribute type 28 has an invalid length. [ 327.573123][ T8975] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1890'. [ 327.763893][ T8982] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1891'. [ 327.790334][ T8982] netlink: zone id is out of range [ 327.829316][ T8984] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1892'. [ 327.829346][ T8982] netlink: zone id is out of range [ 327.829402][ T8982] netlink: zone id is out of range [ 327.859650][ T8982] netlink: zone id is out of range [ 328.814237][ T8995] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1905'. [ 329.250391][ T3651] Bluetooth: hci5: command 0x0406 tx timeout [ 329.521685][ T9008] netlink: 'syz.3.1899': attribute type 9 has an invalid length. [ 329.533574][ T9008] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.1899'. [ 329.863037][ T9012] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1902'. [ 330.206533][ T9020] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1906'. [ 331.266568][ T9045] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1916'. [ 331.546813][ T9053] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1921'. [ 331.701126][ T9060] netlink: 'syz.1.1918': attribute type 9 has an invalid length. [ 331.709237][ T9060] netlink: 131264 bytes leftover after parsing attributes in process `syz.1.1918'. [ 332.573083][ T9073] device syzkaller0 entered promiscuous mode [ 332.978081][ T9088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1931'. [ 333.033108][ T9088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1931'. [ 333.081140][ T9087] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1932'. [ 333.172141][ T9091] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1933'. [ 334.878554][ T9123] netlink: 'syz.0.1940': attribute type 9 has an invalid length. [ 335.010745][ T9123] netlink: 131264 bytes leftover after parsing attributes in process `syz.0.1940'. [ 335.079648][ T9130] -: renamed from syzkaller0 [ 335.865466][ T9138] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1947'. [ 335.919789][ T9140] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1948'. [ 336.014062][ T9150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1949'. [ 336.105467][ T9151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1949'. [ 336.309945][ T9149] device sit0 left promiscuous mode [ 337.256223][ T9180] netlink: 'syz.2.1963': attribute type 9 has an invalid length. [ 337.316880][ T9180] netlink: 131264 bytes leftover after parsing attributes in process `syz.2.1963'. [ 337.827910][ T3653] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 337.863100][ T9188] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1964'. [ 338.065298][ T9192] device syzkaller0 entered promiscuous mode [ 338.134560][ T9203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1971'. [ 338.161342][ T9203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1971'. [ 338.293918][ T9208] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1975'. [ 339.388346][ T9227] netlink: 'syz.3.1980': attribute type 28 has an invalid length. [ 339.809093][ T9238] device syzkaller0 entered promiscuous mode [ 340.155255][ T3653] Bluetooth: hci5: unexpected event 0x3b length: 15 > 10 [ 340.353610][ T9244] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1989'. [ 340.932008][ T9262] netlink: 'syz.0.1994': attribute type 28 has an invalid length. [ 341.010110][ T9263] __nla_validate_parse: 2 callbacks suppressed [ 341.075628][ T9263] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2003'. [ 342.133262][ T9298] netlink: 'syz.1.2010': attribute type 28 has an invalid length. [ 342.166645][ T9303] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2009'. [ 342.429209][ T9306] netlink: 'syz.3.2011': attribute type 9 has an invalid length. [ 342.445524][ T9306] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.2011'. [ 343.100016][ T9313] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2022'. [ 343.816176][ T9344] device veth0_vlan left promiscuous mode [ 343.855192][ T9344] device veth0_vlan entered promiscuous mode [ 343.924331][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.951223][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.971874][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.125823][ T9358] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2039'. [ 344.180549][ T9358] net_ratelimit: 8 callbacks suppressed [ 344.180567][ T9358] netlink: zone id is out of range [ 344.207006][ T9358] netlink: zone id is out of range [ 344.223244][ T9358] netlink: zone id is out of range [ 344.239356][ T9363] netlink: 'syz.0.2028': attribute type 9 has an invalid length. [ 344.248328][ T9358] netlink: zone id is out of range [ 344.262022][ T9358] netlink: zone id is out of range [ 344.295450][ T9358] netlink: zone id is out of range [ 344.303421][ T9363] netlink: 131264 bytes leftover after parsing attributes in process `syz.0.2028'. [ 344.844252][ T9358] netlink: set zone limit has 8 unknown bytes [ 345.118651][ T9377] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2045'. [ 345.162997][ T9377] netlink: zone id is out of range [ 345.184844][ T9377] netlink: zone id is out of range [ 345.198135][ T9377] netlink: zone id is out of range [ 345.521165][ T9395] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2038'. [ 345.981484][ T9409] netlink: 'syz.3.2046': attribute type 9 has an invalid length. [ 345.999957][ T9409] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.2046'. [ 346.364523][ T9415] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2050'. [ 346.935909][ T9432] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2067'. [ 347.383655][ T9435] device sit0 left promiscuous mode [ 347.997050][ T9458] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2063'. [ 349.147456][ T9479] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2070'. [ 349.196189][ T9479] net_ratelimit: 17 callbacks suppressed [ 349.196204][ T9479] netlink: zone id is out of range [ 349.226978][ T9479] netlink: zone id is out of range [ 349.300265][ T9479] netlink: zone id is out of range [ 349.306169][ T9479] netlink: zone id is out of range [ 349.405860][ T9479] netlink: zone id is out of range [ 349.856927][ T9495] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2078'. [ 350.262089][ T9479] netlink: set zone limit has 8 unknown bytes [ 352.214771][ T9540] device veth0_vlan left promiscuous mode [ 352.289731][ T9540] device veth0_vlan entered promiscuous mode [ 353.535157][ T9561] netlink: 'syz.4.2103': attribute type 28 has an invalid length. [ 353.613761][ T9565] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2104'. [ 354.545003][ T9587] device veth0_vlan left promiscuous mode [ 354.711565][ T9587] device veth0_vlan entered promiscuous mode [ 354.751849][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.821001][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.902133][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.295426][ T9602] netlink: 'syz.2.2117': attribute type 28 has an invalid length. [ 355.327321][ T9604] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2119'. [ 356.472745][ T9626] device veth0_vlan left promiscuous mode [ 356.503572][ T9626] device veth0_vlan entered promiscuous mode [ 356.650365][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.689932][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.828368][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.769026][ T9652] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2143'. [ 360.294464][ T9675] netlink: 'syz.2.2140': attribute type 28 has an invalid length. [ 361.855747][ T3653] Bluetooth: hci2: Malformed Event: 0x13 [ 362.882442][ T9712] netlink: 'syz.1.2154': attribute type 21 has an invalid length. [ 363.501888][ T9720] netlink: 'syz.0.2156': attribute type 28 has an invalid length. [ 365.979295][ T9751] netlink: 'syz.4.2178': attribute type 10 has an invalid length. [ 366.424644][ T9759] netlink: 'syz.0.2170': attribute type 28 has an invalid length. [ 367.192945][ T3650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.209171][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.218064][ T3650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.251821][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.260316][ T3650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 367.269211][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.342535][ T9776] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2177'. [ 367.898880][ T9770] chnl_net:caif_netlink_parms(): no params data found [ 367.994355][ T9770] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.008193][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.016711][ T9770] device bridge_slave_0 entered promiscuous mode [ 368.031810][ T9770] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.038953][ T9770] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.056740][ T9770] device bridge_slave_1 entered promiscuous mode [ 368.116306][ T9770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.135783][ T9770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.181028][ T9770] team0: Port device team_slave_0 added [ 368.188691][ T9770] team0: Port device team_slave_1 added [ 368.222017][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.228969][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.261574][ T9770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.278352][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.287664][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.322559][ T9770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.396641][ T9770] device hsr_slave_0 entered promiscuous mode [ 368.409782][ T9770] device hsr_slave_1 entered promiscuous mode [ 368.416847][ T9770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.430761][ T9770] Cannot create hsr debugfs directory [ 368.718851][ T9770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.851620][ T9770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.974612][ T9770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.104626][ T9770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.291953][ T9770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.330366][ T3653] Bluetooth: hci0: command tx timeout [ 369.348335][ T9770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.358574][ T9770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.374531][ T9770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.447644][ T9770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.471928][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.487059][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.502719][ T9770] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.519763][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.529491][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.544577][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.551699][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.589158][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.597734][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.613584][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.627635][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.634755][ T6652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.649404][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.658743][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.675272][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.688938][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.704828][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.716208][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.737736][ T9770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.756675][ T9770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.771230][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.779227][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.797289][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.809368][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.828957][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.849123][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.082876][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.095956][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.107870][ T9770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.138405][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.148287][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.169131][ T9770] device veth0_vlan entered promiscuous mode [ 370.181103][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.189680][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.199195][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.208561][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.256716][ T9770] device veth1_vlan entered promiscuous mode [ 370.280653][ T9770] device veth0_macvtap entered promiscuous mode [ 370.290054][ T9770] device veth1_macvtap entered promiscuous mode [ 370.307596][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.318107][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.329486][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.341998][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.352163][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.369015][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.382794][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.390113][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 370.406451][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 370.416002][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.430047][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.440417][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.448474][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.464647][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.480560][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.497690][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.510858][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.527687][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.539706][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.556870][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.567394][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.584243][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.596545][ T9770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.611644][ T9770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.628406][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.641176][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.654026][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 370.665145][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.681336][ T9770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.697690][ T9770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.707696][ T9770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.722945][ T9770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.881568][ T6622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.889566][ T6622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.939084][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 370.965708][ T5426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.979037][ T5426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.998732][ T5426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.222387][ T9789] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2167'. [ 371.419759][ T3653] Bluetooth: hci0: command tx timeout [ 372.144367][ T9806] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2193'. [ 372.830930][ T9818] device veth0_vlan left promiscuous mode [ 372.910010][ T9818] device veth0_vlan entered promiscuous mode [ 373.168571][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.268450][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.381511][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.490279][ T3650] Bluetooth: hci0: command tx timeout [ 373.737490][ T9831] netlink: 'syz.4.2184': attribute type 28 has an invalid length. [ 375.581070][ T3650] Bluetooth: hci0: command tx timeout [ 375.705800][ T9859] device veth0_vlan left promiscuous mode [ 375.768868][ T9859] device veth0_vlan entered promiscuous mode [ 375.817582][ T9858] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2198'. [ 376.053080][ T3653] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 376.335344][ T9870] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 376.648156][ T9877] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2206'. [ 377.249778][ T9888] device syzkaller0 entered promiscuous mode [ 378.039583][ T9904] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2215'. [ 378.389536][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.395914][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.112526][ T9912] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2218'. [ 380.203606][ T9941] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2228'. [ 380.872802][ T9952] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2233'. [ 381.429761][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.437332][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.564209][ T9954] device bridge_slave_1 left promiscuous mode [ 381.588044][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.629156][ T9954] device bridge_slave_0 left promiscuous mode [ 381.685478][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.955703][ T3653] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 383.974825][ T9996] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2244'. [ 386.131583][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.138964][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.465861][T10022] device bridge_slave_1 left promiscuous mode [ 386.489158][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.551160][T10022] device bridge_slave_0 left promiscuous mode [ 386.600226][T10022] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.867979][T10028] device veth0_vlan left promiscuous mode [ 386.885127][T10028] device veth0_vlan entered promiscuous mode [ 387.568177][T10047] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2265'. [ 390.849031][T10086] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.894844][T10087] device bridge_slave_1 left promiscuous mode [ 390.916565][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.939813][T10087] device bridge_slave_0 left promiscuous mode [ 390.971179][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.362141][T10097] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2281'. [ 391.434220][T10104] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2284'. [ 391.559452][T10107] device syzkaller0 entered promiscuous mode [ 391.849307][T10109] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2296'. [ 392.172645][T10122] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 392.829129][T10142] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2298'. [ 392.994349][T10145] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2301'. [ 400.604874][T10236] device syzkaller0 entered promiscuous mode [ 401.523299][T10256] device veth1_macvtap left promiscuous mode [ 402.439948][T10283] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2347'. [ 403.996800][T10321] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2362'. [ 405.103420][T10339] netlink: 'syz.4.2368': attribute type 10 has an invalid length. [ 405.135284][T10339] device bond_slave_0 left promiscuous mode [ 405.168560][T10339] device bond_slave_1 left promiscuous mode [ 405.293395][T10339] team0: Port device bond0 removed [ 406.659479][T10364] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2377'. [ 408.924387][T10410] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2392'. [ 409.700702][ T6760] device hsr_slave_0 left promiscuous mode [ 409.759751][ T6760] device hsr_slave_1 left promiscuous mode [ 409.805848][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.877697][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.068883][ T6760] device veth1_macvtap left promiscuous mode [ 410.097322][ T6760] device veth1_vlan left promiscuous mode [ 410.118172][ T6760] device veth0_vlan left promiscuous mode [ 410.994802][ T6760] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 411.063967][ T6760] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 411.089519][ T6760] team0 (unregistering): Port device vlan0 removed [ 411.244955][ T6760] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 411.279989][ T6760] team0 (unregistering): Port device team_slave_1 removed [ 411.313865][ T6760] team0 (unregistering): Port device team_slave_0 removed [ 411.345561][ T6760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.379547][ T6760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.629508][ T6760] team0 (unregistering): Port device bond0 removed [ 411.726614][ T6760] bond0 (unregistering): Released all slaves [ 411.757410][T10424] netlink: 'syz.3.2398': attribute type 10 has an invalid length. [ 412.292998][T10443] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2406'. [ 412.843932][T10470] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 412.896659][T10470] device bond_slave_0 left promiscuous mode [ 412.917242][T10470] device bond_slave_1 left promiscuous mode [ 412.924443][T10470] device batadv_slave_0 left promiscuous mode [ 412.960067][T10470] team0: Port device bond0 removed [ 412.969329][T10472] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2419'. [ 414.181816][T10483] device veth1_macvtap left promiscuous mode [ 414.768983][T10506] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2432'. [ 415.081922][T10515] netlink: 'syz.1.2436': attribute type 10 has an invalid length. [ 415.181597][T10515] team0: Port device bond0 removed [ 415.227706][T10510] netlink: 'syz.2.2434': attribute type 10 has an invalid length. [ 415.436453][T10510] device bond0 left promiscuous mode [ 415.473459][T10510] device bond_slave_0 left promiscuous mode [ 415.479507][T10510] device bond_slave_1 left promiscuous mode [ 415.485710][T10510] device macvlan0 left promiscuous mode [ 415.504695][T10510] device bond_slave_0 entered promiscuous mode [ 415.511198][T10510] device bond_slave_1 entered promiscuous mode [ 415.549459][T10510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.605685][T10510] team0: Port device bond0 added [ 420.094129][T10549] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2447'. [ 421.583508][T10584] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2461'. [ 422.592463][T10615] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2473'. [ 422.666497][T10614] netlink: 'syz.0.2470': attribute type 10 has an invalid length. [ 422.685032][T10614] device bond_slave_0 entered promiscuous mode [ 422.691285][T10614] device bond_slave_1 entered promiscuous mode [ 422.697603][T10614] device batadv_slave_0 entered promiscuous mode [ 422.712857][T10614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.723253][T10614] team0: Port device bond0 added [ 422.920863][T10622] device veth1_macvtap entered promiscuous mode [ 422.927518][T10622] device macsec0 entered promiscuous mode [ 422.985097][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 424.439232][T10661] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2486'. [ 424.653531][T10660] netlink: 'syz.3.2487': attribute type 10 has an invalid length. [ 424.757380][T10660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.793613][T10660] team0: Port device bond0 added [ 426.200128][T10708] device macsec0 entered promiscuous mode [ 428.203809][T10750] device veth1_macvtap entered promiscuous mode [ 428.211022][T10750] device macsec0 entered promiscuous mode [ 428.235834][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.161943][T10789] device macsec0 entered promiscuous mode [ 433.206857][T10840] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2555'. [ 433.385310][T10831] netlink: 'syz.1.2549': attribute type 10 has an invalid length. [ 433.417411][T10831] device bond_slave_0 entered promiscuous mode [ 433.423675][T10831] device bond_slave_1 entered promiscuous mode [ 433.615014][T10831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.728699][T10831] team0: Port device bond0 added [ 435.519710][T10884] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2568'. [ 435.789703][T10895] netlink: 'syz.4.2573': attribute type 10 has an invalid length. [ 435.805844][T10895] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2573'. [ 435.841271][T10895] device ipvlan1 entered promiscuous mode [ 435.908692][T10895] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 438.563534][T10927] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2582'. [ 439.199190][T10936] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2587'. [ 439.834333][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.840688][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.153248][T10967] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2597'. [ 443.487445][T10972] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2599'. [ 443.687574][T10977] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2610'. [ 443.907781][T10980] device macsec0 entered promiscuous mode [ 444.414696][T11006] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2611'. [ 444.588457][T11015] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2614'. [ 445.264724][T11052] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2625'. [ 445.601337][T11064] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2630'. [ 446.118369][T11087] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2638'. [ 446.641054][T11107] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2644'. [ 447.837667][T11135] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2652'. [ 448.122343][T11148] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2658'. [ 448.559970][T11168] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2666'. [ 449.541259][T11181] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2670'. [ 450.432215][T11203] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2679'. [ 451.008586][T11215] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2684'. [ 454.402831][T11259] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2697'. [ 457.809084][T11318] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2711'. [ 461.696618][T11372] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2725'. [ 461.797091][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.807108][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.819027][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.830374][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.839183][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.847312][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.733924][T11373] chnl_net:caif_netlink_parms(): no params data found [ 463.082032][T11373] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.089288][T11373] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.103462][T11373] device bridge_slave_0 entered promiscuous mode [ 463.189990][T11373] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.220627][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.228778][T11373] device bridge_slave_1 entered promiscuous mode [ 463.322733][T11373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.369213][T11373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.550424][T11373] team0: Port device team_slave_0 added [ 463.600265][T11373] team0: Port device team_slave_1 added [ 463.802266][T11373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.809236][T11373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.982340][ T3650] Bluetooth: hci1: command tx timeout [ 464.091382][T11373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.261396][T11373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.321971][T11373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.425881][T11373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.644621][T11373] device hsr_slave_0 entered promiscuous mode [ 464.870594][T11373] device hsr_slave_1 entered promiscuous mode [ 465.000885][T11419] netlink: 'syz.1.2733': attribute type 10 has an invalid length. [ 465.150370][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2733'. [ 465.175371][T11419] device ipvlan1 entered promiscuous mode [ 465.197736][T11419] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 466.050354][ T3650] Bluetooth: hci1: command tx timeout [ 466.341572][T11436] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2737'. [ 466.982328][T11373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.355359][T11373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.895134][T11373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.130346][ T3650] Bluetooth: hci1: command tx timeout [ 468.361577][T11373] team0: Port device netdevsim0 removed [ 468.368259][T11373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.002925][T11489] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2753'. [ 470.210302][ T3653] Bluetooth: hci1: command tx timeout [ 471.182579][T11373] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 471.368538][T11373] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 471.520625][T11373] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 471.679194][T11373] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 472.485090][T11373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.899048][T11373] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.101371][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.109251][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.413409][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.449643][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.620427][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.627541][ T6637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.814844][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.941632][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 474.136409][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.143593][ T6637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.312962][T11540] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2765'. [ 474.500962][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 474.631851][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 474.679670][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 474.894647][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 475.107717][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 475.223356][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 475.400955][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 475.560458][T11373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 475.640268][T11373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.741999][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 475.749905][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 475.851299][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.073822][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.263448][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.511666][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 477.425939][T11587] netlink: 'syz.0.2777': attribute type 10 has an invalid length. [ 477.476604][T11587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2777'. [ 477.667129][T11587] device ipvlan1 entered promiscuous mode [ 477.797509][T11587] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 477.868010][T11589] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2779'. [ 478.939067][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.958425][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.025373][T11373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.171094][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.179776][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.403119][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.492389][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.610608][T11373] device veth0_vlan entered promiscuous mode [ 479.627659][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.997850][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.224241][T11373] device veth1_vlan entered promiscuous mode [ 480.251533][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 480.466368][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 480.500859][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 480.569439][T11373] device veth0_macvtap entered promiscuous mode [ 480.640457][T11373] device veth1_macvtap entered promiscuous mode [ 480.775469][T11373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.880212][T11373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.924487][T11373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.073624][T11373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.134702][T11373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.206970][T11373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.267912][T11373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.337093][T11373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.505537][T11373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.616628][T11643] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2793'. [ 481.763263][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 481.801081][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 481.860719][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 481.908059][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.089466][T11373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.189891][T11373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.447641][T11373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.755059][T11373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.948878][T11373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.996296][T11373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.063925][T11373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.138676][T11373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.215512][T11373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.326454][T11373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.482905][T11373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.576825][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.596595][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.756049][T11663] netlink: 'syz.3.2798': attribute type 10 has an invalid length. [ 483.781369][T11663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2798'. [ 483.848743][T11663] device ipvlan1 entered promiscuous mode [ 483.873920][T11663] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 483.977150][T11373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.012495][T11373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.200225][T11373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.445214][T11373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.729023][T11689] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2805'. [ 485.580778][ T6760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.588786][ T6760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.820357][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 485.927060][ T5426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.954762][ T5426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.061091][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 486.550925][T11709] netlink: 'syz.3.2811': attribute type 10 has an invalid length. [ 488.523140][T11746] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2818'. [ 493.024856][T11833] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2842'. [ 493.090396][ T3653] Bluetooth: hci0: command 0x0406 tx timeout [ 499.764259][T11992] netlink: 'syz.4.2884': attribute type 10 has an invalid length. [ 499.834161][T11992] team0: Port device netdevsim0 added [ 500.652606][ T6760] device hsr_slave_0 left promiscuous mode [ 500.673527][ T6760] device hsr_slave_1 left promiscuous mode [ 500.689625][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.710253][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.727285][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.767152][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.260496][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.266815][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.353639][ T6760] device veth1_macvtap left promiscuous mode [ 501.359708][ T6760] device veth0_macvtap left promiscuous mode [ 501.480836][ T6760] device veth1_vlan left promiscuous mode [ 501.486797][ T6760] device veth0_vlan left promiscuous mode [ 502.938944][ T6760] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 503.094026][ T6760] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 503.514118][ T6760] team0 (unregistering): Port device team_slave_1 removed [ 503.578033][ T6760] team0 (unregistering): Port device team_slave_0 removed [ 503.640359][ T6760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.708738][ T6760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.212622][ T6760] team0 (unregistering): Port device bond0 removed [ 504.425657][ T6760] bond0 (unregistering): Released all slaves [ 504.490315][T12017] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2891'. [ 504.848202][T12056] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2902'. [ 505.276388][T12065] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2905'. [ 506.833326][T12102] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2915'. [ 507.123143][T12109] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2918'. [ 508.932220][T12141] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2928'. [ 509.125303][T12146] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2931'. [ 510.257626][T12190] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2942'. [ 510.585976][T12201] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2944'. [ 510.668494][T12203] netlink: 'syz.2.2946': attribute type 10 has an invalid length. [ 510.722878][T12203] device ipvlan1 entered promiscuous mode [ 510.813056][T12203] batman_adv: batadv0: Adding interface: ipvlan1 [ 510.851133][T12203] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.880847][T12203] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 511.784465][T12236] device syzkaller0 entered promiscuous mode [ 512.131149][T12240] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2954'. [ 512.194080][T12242] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2957'. [ 516.215302][T12296] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2969'. [ 516.384159][T12294] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2968'. [ 522.641921][T12336] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2981'. [ 523.103580][T12338] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2982'. [ 523.322483][T12341] netlink: 'syz.0.2983': attribute type 10 has an invalid length. [ 523.756325][T12341] team0: Port device netdevsim0 added [ 524.568546][ T3650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.619839][ T3650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.628192][ T3650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.636391][ T3650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.650339][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 524.680327][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.774364][ T3653] Bluetooth: hci4: command tx timeout [ 527.840837][T12350] chnl_net:caif_netlink_parms(): no params data found [ 528.860586][ T3653] Bluetooth: hci4: command tx timeout [ 528.961118][ T3650] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 528.969951][ T3650] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 528.977917][ T3650] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 528.986191][ T3651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 528.994054][ T3650] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 529.001333][ T3651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 529.311119][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.318283][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.564768][T12350] device bridge_slave_0 entered promiscuous mode [ 529.798951][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.913309][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.052823][T12350] device bridge_slave_1 entered promiscuous mode [ 530.593282][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.933749][ T3653] Bluetooth: hci4: command tx timeout [ 530.941528][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.097760][ T3653] Bluetooth: hci6: command tx timeout [ 531.730947][T12350] team0: Port device team_slave_0 added [ 531.738690][T12350] team0: Port device team_slave_1 added [ 532.587930][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.701522][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.010242][ T3653] Bluetooth: hci4: command tx timeout [ 533.173783][ T3653] Bluetooth: hci6: command tx timeout [ 533.352227][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.493600][T12373] chnl_net:caif_netlink_parms(): no params data found [ 533.738743][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.928244][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.535931][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.250598][ T3653] Bluetooth: hci6: command tx timeout [ 535.788342][T12350] device hsr_slave_0 entered promiscuous mode [ 535.889550][T12350] device hsr_slave_1 entered promiscuous mode [ 536.051419][T12350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.059011][T12350] Cannot create hsr debugfs directory [ 536.669740][T12373] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.762513][T12373] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.921074][T12373] device bridge_slave_0 entered promiscuous mode [ 537.202246][T12373] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.209359][T12373] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.330596][ T3653] Bluetooth: hci6: command tx timeout [ 537.424404][T12373] device bridge_slave_1 entered promiscuous mode [ 538.287314][T12373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.536830][T12373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.734675][T12350] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.382961][T12373] team0: Port device team_slave_0 added [ 540.593076][T12350] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.862026][T12373] team0: Port device team_slave_1 added [ 541.393051][T12350] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.706228][T12373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.850529][T12373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.490201][T12373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.007393][T12350] team0: Port device netdevsim0 removed [ 543.181842][T12350] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.531487][T12373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.538457][T12373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.060191][T12373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.773425][T12373] device hsr_slave_0 entered promiscuous mode [ 545.108549][T12373] device hsr_slave_1 entered promiscuous mode [ 545.460505][T12373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.468093][T12373] Cannot create hsr debugfs directory [ 547.547531][T12350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 548.230450][T12373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.565042][T12350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 548.856085][T12350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 549.013512][T12373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.735081][T12350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 549.846252][T12373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.287316][T12373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.525062][T12350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.599195][T12350] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.610710][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 550.618462][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.647546][T12373] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 550.704238][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 550.720738][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.729208][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.736321][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.752370][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 550.767564][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.781526][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.788612][ T6652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.804929][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 550.815781][T12373] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 550.876805][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 550.894156][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 550.908637][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 550.927757][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.943647][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 550.960752][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.969301][T12373] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 550.996859][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.009646][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.022100][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.039074][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.048657][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.085907][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.103085][T12373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 551.309186][T12373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.399510][T12373] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.425399][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 551.442914][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.479576][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.488457][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.507124][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.514295][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.568199][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.590050][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.607373][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.614501][ T6652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.655230][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.698559][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.730074][T12373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.754521][T12373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.803089][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.816383][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.834293][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.847566][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.866409][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.878401][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.894258][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.911262][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.927784][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.965884][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 552.001204][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 552.016325][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 552.040718][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 552.081277][T12350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.528749][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 552.550738][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 552.600286][T12373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.770500][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 552.779194][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 552.819883][T12373] device veth0_vlan entered promiscuous mode [ 552.836157][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 552.850870][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 552.912681][T12373] device veth1_vlan entered promiscuous mode [ 552.921138][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 552.929000][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 552.975585][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 553.016418][ T6637] device hsr_slave_0 left promiscuous mode [ 553.036025][ T6637] device hsr_slave_1 left promiscuous mode [ 553.051549][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.058947][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.110844][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.118252][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.169313][ T6637] device veth1_macvtap left promiscuous mode [ 553.188357][ T6637] device veth0_macvtap left promiscuous mode [ 553.197293][ T6637] device veth1_vlan left promiscuous mode [ 553.208747][ T6637] device veth0_vlan left promiscuous mode [ 554.583154][ T6637] team0 (unregistering): Port device team_slave_1 removed [ 554.618199][ T6637] team0 (unregistering): Port device team_slave_0 removed [ 554.648944][ T6637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.682799][ T6637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.933349][ T6637] team0 (unregistering): Port device bond0 removed [ 555.033695][ T6637] bond0 (unregistering): Released all slaves [ 555.067449][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 555.205518][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.223093][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.237603][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.246167][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.263320][T12350] device veth0_vlan entered promiscuous mode [ 555.283258][T12373] device veth0_macvtap entered promiscuous mode [ 555.299776][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.307844][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.316734][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.326258][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.334088][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.344575][T12373] device veth1_macvtap entered promiscuous mode [ 555.353951][T12350] device veth1_vlan entered promiscuous mode [ 555.387876][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.399400][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.411643][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.422342][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.432401][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.443566][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.454859][T12373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.466012][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.474686][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.483229][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 555.491537][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.501070][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.510055][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.518459][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.528512][T12350] device veth0_macvtap entered promiscuous mode [ 555.537713][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.548246][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.562654][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.573944][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.584522][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.595212][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.605282][T12373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.615796][T12373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.627525][T12373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.637321][T12350] device veth1_macvtap entered promiscuous mode [ 555.645617][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.654438][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.662671][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.671395][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.683207][T12373] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.692906][T12373] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.701758][T12373] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.711034][T12373] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.736389][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.747208][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.760323][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.770949][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.780985][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.791769][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.803020][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.813760][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.825122][T12350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.840532][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.849173][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.869321][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.880552][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.893820][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.904722][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.916016][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.927450][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.937486][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.947953][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.957869][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.968307][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.979923][T12350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.991097][T12350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.000183][T12350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.011957][T12350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.023437][T12350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.040461][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 556.060546][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.102514][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.117251][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.129576][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.175058][ T6760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.185162][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.191349][ T6760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.204038][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 556.213429][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.249524][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.414307][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.471537][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.895877][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 557.930965][ T6659] device hsr_slave_0 left promiscuous mode [ 557.937250][ T6659] device hsr_slave_1 left promiscuous mode [ 557.944420][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.951909][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.959487][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.968005][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.988695][ T6659] device veth1_macvtap left promiscuous mode [ 557.995624][ T6659] device veth1_vlan left promiscuous mode [ 558.001514][ T6659] device veth0_vlan left promiscuous mode [ 559.008294][ T6659] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 559.158355][ T6659] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 559.200473][ T6659] team0 (unregistering): Port device vlan0 removed [ 559.407339][ T6659] team0 (unregistering): Port device team_slave_1 removed [ 559.446997][ T6659] team0 (unregistering): Port device team_slave_0 removed [ 559.480748][ T6659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.519261][ T6659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.858685][ T6659] bond0 (unregistering): Released all slaves [ 559.892929][T12427] netlink: 'syz.3.2992': attribute type 10 has an invalid length. [ 559.902780][T12427] batman_adv: batadv0: Adding interface: ipvlan1 [ 559.909123][T12427] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.934809][T12427] batman_adv: batadv0: Interface activated: ipvlan1 [ 559.944260][T12445] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2993'. [ 559.958869][T12447] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2994'. [ 560.574582][T12463] netlink: 'syz.1.3001': attribute type 10 has an invalid length. [ 560.981219][T12463] team0: Port device netdevsim0 added [ 562.145423][T12491] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3012'. [ 562.160454][T12493] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3013'. [ 562.692655][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.699032][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.283687][T12540] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3026'. [ 564.429651][T12543] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3027'. [ 566.195712][T12596] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3041'. [ 566.232589][T12597] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3040'. [ 566.396184][T12601] device syzkaller0 entered promiscuous mode [ 568.099364][T12645] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3056'. [ 568.399268][T12650] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3058'. [ 568.506441][T12655] device syzkaller0 entered promiscuous mode [ 569.615147][T12676] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3067'. [ 570.082353][T12692] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3072'. [ 571.829652][T12723] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3081'. [ 572.219643][T12732] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3085'. [ 574.175399][T12765] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3094'. [ 574.869390][T12789] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3100'. [ 577.018158][T12835] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3114'. [ 578.646731][T12874] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3128'. [ 579.274304][T12895] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3141'. [ 581.613379][T12945] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3148'. [ 585.250424][ T3651] Bluetooth: hci1: command 0x0406 tx timeout [ 585.259552][T13004] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3163'. [ 587.303549][T13056] netlink: 'syz.4.3180': attribute type 11 has an invalid length. [ 587.373864][T13056] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3180'. [ 587.496256][T13059] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3181'. [ 587.548725][T13062] netlink: 755 bytes leftover after parsing attributes in process `syz.4.3180'. [ 589.310837][T13095] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3193'. [ 589.409395][T13098] sock: sock_set_timeout: `syz.1.3194' (pid 13098) tries to set negative timeout [ 597.306163][T13200] netlink: 'syz.0.3223': attribute type 29 has an invalid length. [ 597.366343][T13200] netlink: 'syz.0.3223': attribute type 29 has an invalid length. [ 597.421578][T13203] netlink: 'syz.0.3223': attribute type 29 has an invalid length. [ 599.556056][T13247] sock: sock_set_timeout: `syz.0.3234' (pid 13247) tries to set negative timeout [ 600.881765][T13268] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3240'. [ 603.137135][T13297] sock: sock_set_timeout: `syz.3.3250' (pid 13297) tries to set negative timeout [ 604.339544][T13319] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3257'. [ 606.587700][T13355] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3269'. [ 606.918339][ T3651] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 609.256118][T13406] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3281'. [ 612.912223][T13463] netlink: 'syz.3.3298': attribute type 29 has an invalid length. [ 613.035183][T13463] netlink: 'syz.3.3298': attribute type 29 has an invalid length. [ 613.188863][T13466] netlink: 'syz.3.3298': attribute type 29 has an invalid length. [ 613.279247][T13477] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3312'. [ 615.129172][T13508] netlink: 'syz.3.3310': attribute type 11 has an invalid length. [ 615.295850][T13508] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3310'. [ 616.184406][T13511] netlink: 755 bytes leftover after parsing attributes in process `syz.3.3310'. [ 616.223887][T13524] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3315'. [ 619.365664][T13583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.498842][T13583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.516985][T13583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.530987][T13583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.547824][T13583] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 619.561967][T13583] batman_adv: batadv0: Removing interface: ipvlan1 [ 621.589040][T13624] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3342'. [ 621.746445][ T3651] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 621.982419][T13635] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3354'. [ 622.882884][T13660] netlink: 'syz.3.3350': attribute type 29 has an invalid length. [ 622.908433][T13660] netlink: 'syz.3.3350': attribute type 29 has an invalid length. [ 623.028891][T13666] netlink: 'syz.3.3350': attribute type 29 has an invalid length. [ 623.400537][T13660] netlink: 'syz.3.3350': attribute type 29 has an invalid length. [ 623.415419][T13666] netlink: 'syz.3.3350': attribute type 29 has an invalid length. [ 623.438158][T13672] netlink: 'syz.3.3350': attribute type 29 has an invalid length. [ 624.170625][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.176964][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.575424][T13698] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3360'. [ 626.262810][T13734] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3370'. [ 628.557600][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.571581][T13775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.589130][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.607103][T13775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.623310][T13775] batman_adv: batadv0: Removing interface: ipvlan1 [ 628.974193][T13778] netlink: 'syz.3.3381': attribute type 21 has an invalid length. [ 629.037518][T13783] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3383'. [ 633.013649][T13843] netlink: 'syz.2.3398': attribute type 29 has an invalid length. [ 633.026812][T13843] netlink: 'syz.2.3398': attribute type 29 has an invalid length. [ 633.048798][T13843] netlink: 'syz.2.3398': attribute type 29 has an invalid length. [ 633.119777][T13846] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3399'. [ 633.211322][T13848] netlink: 'syz.4.3400': attribute type 11 has an invalid length. [ 633.219290][T13848] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3400'. [ 633.315499][T13855] netlink: 755 bytes leftover after parsing attributes in process `syz.4.3400'. [ 636.203209][T13889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.242947][T13889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.419887][T13889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.437227][T13889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.027400][T13904] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3414'. [ 638.824113][T13937] netlink: 'syz.1.3422': attribute type 29 has an invalid length. [ 638.877814][T13937] netlink: 'syz.1.3422': attribute type 29 has an invalid length. [ 638.938335][T13939] netlink: 'syz.1.3422': attribute type 29 has an invalid length. [ 638.978847][T13941] netlink: 'syz.1.3422': attribute type 29 has an invalid length. [ 639.016196][T13937] netlink: 'syz.1.3422': attribute type 29 has an invalid length. [ 639.052454][T13937] netlink: 'syz.1.3422': attribute type 29 has an invalid length. [ 640.164820][T13955] netlink: 'syz.3.3426': attribute type 11 has an invalid length. [ 640.185290][T13955] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3426'. [ 640.628885][T13957] netlink: 755 bytes leftover after parsing attributes in process `syz.3.3426'. [ 641.094491][T13975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.130692][T13975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.407007][T14011] netlink: 'syz.0.3443': attribute type 11 has an invalid length. [ 642.444116][T14011] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3443'. [ 642.664074][T14016] netlink: 755 bytes leftover after parsing attributes in process `syz.0.3443'. [ 650.600023][T14107] netlink: 'syz.2.3470': attribute type 29 has an invalid length. [ 650.626178][T14107] netlink: 'syz.2.3470': attribute type 29 has an invalid length. [ 650.674277][T14112] netlink: 'syz.2.3470': attribute type 29 has an invalid length. [ 650.804080][T14107] netlink: 'syz.2.3470': attribute type 29 has an invalid length. [ 650.922951][T14114] netlink: 'syz.2.3470': attribute type 29 has an invalid length. [ 650.966003][T14107] netlink: 'syz.2.3470': attribute type 29 has an invalid length. [ 651.905524][ T3651] Bluetooth: hci4: command 0x0406 tx timeout [ 651.911619][ T3651] Bluetooth: hci6: command 0x0406 tx timeout [ 652.716918][T14131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.771668][T14131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.810010][T14131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.971872][T14131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.457142][ T3651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 653.465901][ T3651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 653.473550][ T3651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 653.483216][ T3651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 653.491118][ T3651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 653.498961][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 655.161646][ T3651] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 655.356883][T14144] chnl_net:caif_netlink_parms(): no params data found [ 655.574351][ T3651] Bluetooth: hci3: command tx timeout [ 656.104729][T14198] netlink: 'syz.4.3490': attribute type 29 has an invalid length. [ 656.501541][T14144] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.508684][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.563678][T14144] device bridge_slave_0 entered promiscuous mode [ 656.652136][T14198] netlink: 'syz.4.3490': attribute type 29 has an invalid length. [ 656.740875][T14144] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.748052][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.791205][T14144] device bridge_slave_1 entered promiscuous mode [ 656.814155][T14201] netlink: 'syz.4.3490': attribute type 29 has an invalid length. [ 656.985119][T14202] netlink: 'syz.4.3490': attribute type 29 has an invalid length. [ 657.001663][T14144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.063444][T14144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.295003][T14144] team0: Port device team_slave_0 added [ 657.387739][T14144] team0: Port device team_slave_1 added [ 657.653931][ T3653] Bluetooth: hci3: command tx timeout [ 657.834547][T14144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.861447][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.233886][T14144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.470348][T14144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.642232][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.991349][T14144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.442785][ T3653] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 659.720033][T14144] device hsr_slave_0 entered promiscuous mode [ 659.731269][ T3653] Bluetooth: hci3: command tx timeout [ 660.254287][T14144] device hsr_slave_1 entered promiscuous mode [ 660.536918][T14144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.670340][T14144] Cannot create hsr debugfs directory [ 661.810615][ T3653] Bluetooth: hci3: command tx timeout [ 661.815075][T14144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.566937][T14144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.919897][T14144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.598332][T14144] team0: Port device netdevsim0 removed [ 663.732243][T14144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.794016][ T3651] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 664.509606][T14144] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 664.844150][T14144] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 664.993227][T14144] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 665.532689][T14144] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 666.008841][T14144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.243031][T12422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.293569][T12422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.456269][T14144] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.673013][T12422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 666.812552][T12422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.064105][T12422] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.071289][T12422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.188945][T12422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 667.331424][T12422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 667.404456][T12422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.482537][T12422] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.489673][T12422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.618528][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 667.775868][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 667.952536][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 668.149235][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 668.337523][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 668.460596][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 668.652536][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 668.738488][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 668.754134][T14356] netlink: 'syz.3.3530': attribute type 11 has an invalid length. [ 668.912003][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 668.931238][T14356] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3530'. [ 669.088394][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 669.392163][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.525891][T14144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 671.711934][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.719898][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.897435][T14144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.459762][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 672.675391][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 672.949886][T14144] device veth0_vlan entered promiscuous mode [ 673.078449][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.157010][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.389023][T14144] device veth1_vlan entered promiscuous mode [ 673.534322][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.619558][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.951792][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.104668][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.274388][T14413] netlink: 'syz.2.3544': attribute type 11 has an invalid length. [ 674.367087][T14144] device veth0_macvtap entered promiscuous mode [ 674.464162][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 674.573454][T14144] device veth1_macvtap entered promiscuous mode [ 674.582177][T14413] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3544'. [ 674.921219][T14144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.200041][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 675.525311][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 675.581891][T14144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.590352][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 675.599346][ T6622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.861673][T14144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.181758][T14144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.221232][T14144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.230055][T14144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.288795][ T6622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.348581][ T6622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.196288][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 680.486891][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.516827][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.663629][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 680.725641][T14461] netlink: 'syz.4.3559': attribute type 11 has an invalid length. [ 680.814725][T14461] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3559'. [ 681.014832][ T3653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.039142][ T3653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.047309][ T3653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.063644][ T3653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.072257][ T3653] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 681.079898][ T3653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 681.308084][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3563'. [ 682.960576][ T6637] device hsr_slave_0 left promiscuous mode [ 683.066633][ T6637] device hsr_slave_1 left promiscuous mode [ 683.121923][ T6637] device bridge_slave_1 left promiscuous mode [ 683.129301][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.139873][ T6637] device bridge_slave_0 left promiscuous mode [ 683.148019][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.170474][ T3653] Bluetooth: hci2: command tx timeout [ 683.194370][ T6637] device veth1_macvtap left promiscuous mode [ 683.201145][ T6637] device veth0_macvtap left promiscuous mode [ 683.207235][ T6637] device veth1_vlan left promiscuous mode [ 683.214817][ T6637] device veth0_vlan left promiscuous mode [ 683.862560][ T6637] team0 (unregistering): Port device team_slave_1 removed [ 683.915103][ T6637] team0 (unregistering): Port device team_slave_0 removed [ 683.956714][ T6637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.016556][ T6637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.502827][ T6637] bond0 (unregistering): Released all slaves [ 684.598662][T14471] chnl_net:caif_netlink_parms(): no params data found [ 684.659598][T14471] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.666900][T14471] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.677532][T14471] device bridge_slave_0 entered promiscuous mode [ 684.686286][T14471] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.695801][T14471] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.704192][T14471] device bridge_slave_1 entered promiscuous mode [ 684.736711][T14471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.749542][T14471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.814714][T14471] team0: Port device team_slave_0 added [ 684.824352][T14471] team0: Port device team_slave_1 added [ 684.881754][T14471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.888728][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.917439][T14471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.948041][T14471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.957322][T14471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.989274][T14471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.033501][T14471] device hsr_slave_0 entered promiscuous mode [ 685.040836][T14471] device hsr_slave_1 entered promiscuous mode [ 685.047557][T14471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.055487][T14471] Cannot create hsr debugfs directory [ 685.251254][ T3653] Bluetooth: hci2: command tx timeout [ 685.322628][T14471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.478892][T14471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.590453][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.596792][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.683448][T14471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.179992][T14471] team0: Port device netdevsim0 removed [ 686.189009][T14471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.330363][ T3651] Bluetooth: hci2: command tx timeout [ 687.381976][ T6637] device hsr_slave_0 left promiscuous mode [ 687.388239][ T6637] device hsr_slave_1 left promiscuous mode [ 687.406539][ T6637] device veth1_macvtap left promiscuous mode [ 687.413229][ T6637] device veth0_macvtap left promiscuous mode [ 687.419307][ T6637] device veth1_vlan left promiscuous mode [ 687.425283][ T6637] device veth0_vlan left promiscuous mode [ 688.006353][ T6637] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 688.169362][ T6637] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 688.205565][ T6637] team0 (unregistering): Port device team_slave_1 removed [ 688.236875][ T6637] team0 (unregistering): Port device team_slave_0 removed [ 688.268060][ T6637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.308092][ T6637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.528879][ T6637] team0 (unregistering): Port device bond0 removed [ 688.618086][ T6637] bond0 (unregistering): Released all slaves [ 688.990348][T14471] ================================================================== [ 688.998464][T14471] BUG: KASAN: use-after-free in netdev_run_todo+0xdfb/0xf40 [ 689.005741][T14471] Write of size 4 at addr ffff88807e0e8048 by task syz-executor/14471 [ 689.013876][T14471] [ 689.016198][T14471] CPU: 1 PID: 14471 Comm: syz-executor Not tainted 6.1.112-syzkaller #0 [ 689.024506][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 689.034550][T14471] Call Trace: [ 689.037836][T14471] [ 689.040764][T14471] dump_stack_lvl+0x1e3/0x2cb [ 689.045456][T14471] ? nf_tcp_handle_invalid+0x642/0x642 [ 689.050912][T14471] ? panic+0x764/0x764 [ 689.054970][T14471] ? _printk+0xd1/0x111 [ 689.059127][T14471] ? __virt_addr_valid+0x17f/0x530 [ 689.064244][T14471] ? __virt_addr_valid+0x17f/0x530 [ 689.069353][T14471] print_report+0x15f/0x4f0 [ 689.073853][T14471] ? __virt_addr_valid+0x17f/0x530 [ 689.078952][T14471] ? __virt_addr_valid+0x17f/0x530 [ 689.084048][T14471] ? __virt_addr_valid+0x45b/0x530 [ 689.089148][T14471] ? __phys_addr+0xb6/0x170 [ 689.093640][T14471] ? netdev_run_todo+0xdfb/0xf40 [ 689.098570][T14471] kasan_report+0x136/0x160 [ 689.103058][T14471] ? __init_swait_queue_head+0xaa/0x140 [ 689.108591][T14471] ? netdev_run_todo+0xdfb/0xf40 [ 689.113523][T14471] kasan_check_range+0x27f/0x290 [ 689.118444][T14471] netdev_run_todo+0xdfb/0xf40 [ 689.123205][T14471] ? netdev_refcnt_read+0x50/0x50 [ 689.128215][T14471] ? do_raw_spin_unlock+0x137/0x8a0 [ 689.133396][T14471] ? bpf_offload_dev_netdev_register+0xe10/0xe10 [ 689.139732][T14471] ? _raw_spin_unlock+0x24/0x40 [ 689.144569][T14471] ? simple_release_fs+0x98/0xd0 [ 689.149490][T14471] nsim_destroy+0xac/0x140 [ 689.153896][T14471] __nsim_dev_port_del+0x153/0x1b0 [ 689.158993][T14471] nsim_dev_reload_destroy+0x286/0x490 [ 689.164458][T14471] ? nsim_bus_probe+0x20/0x20 [ 689.169147][T14471] nsim_drv_remove+0x5c/0x160 [ 689.173826][T14471] device_release_driver_internal+0x4f3/0x880 [ 689.179893][T14471] bus_remove_device+0x2e5/0x400 [ 689.184817][T14471] device_del+0x6e2/0xbd0 [ 689.189131][T14471] ? kill_device+0x160/0x160 [ 689.193709][T14471] device_unregister+0x1c/0xc0 [ 689.198455][T14471] del_device_store+0x35f/0x480 [ 689.203301][T14471] ? del_port_store+0x1d0/0x1d0 [ 689.208140][T14471] ? sysfs_kf_write+0x181/0x2a0 [ 689.212979][T14471] ? sysfs_kf_read+0x300/0x300 [ 689.217729][T14471] kernfs_fop_write_iter+0x3a2/0x4f0 [ 689.223009][T14471] vfs_write+0x857/0xbc0 [ 689.227237][T14471] ? file_end_write+0x250/0x250 [ 689.232068][T14471] ? do_sys_openat2+0x1f9/0x4f0 [ 689.236912][T14471] ? __fdget_pos+0x2c1/0x360 [ 689.241486][T14471] ksys_write+0x19c/0x2c0 [ 689.245798][T14471] ? print_irqtrace_events+0x210/0x210 [ 689.251243][T14471] ? __ia32_sys_read+0x80/0x80 [ 689.255988][T14471] ? syscall_enter_from_user_mode+0x2e/0x230 [ 689.261952][T14471] ? lockdep_hardirqs_on+0x94/0x130 [ 689.267132][T14471] ? syscall_enter_from_user_mode+0x2e/0x230 [ 689.273094][T14471] do_syscall_64+0x3b/0xb0 [ 689.277491][T14471] ? clear_bhb_loop+0x45/0xa0 [ 689.282154][T14471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.288041][T14471] RIP: 0033:0x7fee5db7cadf [ 689.292445][T14471] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 689.312040][T14471] RSP: 002b:00007ffcc6208930 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 689.320450][T14471] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fee5db7cadf [ 689.328407][T14471] RDX: 0000000000000001 RSI: 00007ffcc6208980 RDI: 0000000000000005 [ 689.336360][T14471] RBP: 00007fee5dbf13ae R08: 0000000000000000 R09: 00007ffcc6208787 [ 689.344315][T14471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 689.352266][T14471] R13: 00007ffcc6208980 R14: 00007fee5e864620 R15: 0000000000000003 [ 689.360227][T14471] [ 689.363227][T14471] [ 689.365530][T14471] Allocated by task 5388: [ 689.369834][T14471] kasan_set_track+0x4b/0x70 [ 689.374411][T14471] __kasan_slab_alloc+0x65/0x70 [ 689.379242][T14471] slab_post_alloc_hook+0x52/0x3a0 [ 689.384336][T14471] kmem_cache_alloc+0x10c/0x2d0 [ 689.389168][T14471] copy_net_ns+0x140/0x5d0 [ 689.393568][T14471] create_new_namespaces+0x425/0x7a0 [ 689.398833][T14471] unshare_nsproxy_namespaces+0x11e/0x170 [ 689.404532][T14471] ksys_unshare+0x580/0xb20 [ 689.409015][T14471] __x64_sys_unshare+0x34/0x40 [ 689.413759][T14471] do_syscall_64+0x3b/0xb0 [ 689.418154][T14471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.424032][T14471] [ 689.426336][T14471] Freed by task 6637: [ 689.430291][T14471] kasan_set_track+0x4b/0x70 [ 689.434867][T14471] kasan_save_free_info+0x27/0x40 [ 689.439871][T14471] ____kasan_slab_free+0xd6/0x120 [ 689.444872][T14471] kmem_cache_free+0x292/0x510 [ 689.449620][T14471] cleanup_net+0xab5/0xb60 [ 689.454019][T14471] process_one_work+0x8a9/0x11d0 [ 689.458938][T14471] worker_thread+0xa47/0x1200 [ 689.463596][T14471] kthread+0x28d/0x320 [ 689.467644][T14471] ret_from_fork+0x1f/0x30 [ 689.472047][T14471] [ 689.474352][T14471] Last potentially related work creation: [ 689.480039][T14471] kasan_save_stack+0x3b/0x60 [ 689.485132][T14471] __kasan_record_aux_stack+0xb0/0xc0 [ 689.490485][T14471] insert_work+0x54/0x3d0 [ 689.494794][T14471] __queue_work+0xb4b/0xf90 [ 689.499275][T14471] call_timer_fn+0x1ad/0x6b0 [ 689.503846][T14471] __run_timers+0x6a8/0x890 [ 689.508330][T14471] handle_softirqs+0x2ee/0xa40 [ 689.513078][T14471] __irq_exit_rcu+0x157/0x240 [ 689.517737][T14471] irq_exit_rcu+0x5/0x20 [ 689.521962][T14471] sysvec_apic_timer_interrupt+0x91/0xb0 [ 689.527577][T14471] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 689.533540][T14471] [ 689.535841][T14471] Second to last potentially related work creation: [ 689.542399][T14471] kasan_save_stack+0x3b/0x60 [ 689.547061][T14471] __kasan_record_aux_stack+0xb0/0xc0 [ 689.552412][T14471] insert_work+0x54/0x3d0 [ 689.556725][T14471] __queue_work+0xb4b/0xf90 [ 689.561206][T14471] call_timer_fn+0x1ad/0x6b0 [ 689.565776][T14471] __run_timers+0x6a8/0x890 [ 689.570257][T14471] handle_softirqs+0x2ee/0xa40 [ 689.575006][T14471] __irq_exit_rcu+0x157/0x240 [ 689.579664][T14471] irq_exit_rcu+0x5/0x20 [ 689.583892][T14471] sysvec_apic_timer_interrupt+0x91/0xb0 [ 689.589507][T14471] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 689.595471][T14471] [ 689.597772][T14471] The buggy address belongs to the object at ffff88807e0e8000 [ 689.597772][T14471] which belongs to the cache net_namespace of size 6976 [ 689.612065][T14471] The buggy address is located 72 bytes inside of [ 689.612065][T14471] 6976-byte region [ffff88807e0e8000, ffff88807e0e9b40) [ 689.625320][T14471] [ 689.627625][T14471] The buggy address belongs to the physical page: [ 689.634020][T14471] page:ffffea0001f83a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e0e8 [ 689.644169][T14471] head:ffffea0001f83a00 order:3 compound_mapcount:0 compound_pincount:0 [ 689.652494][T14471] memcg:ffff88807d7bf501 [ 689.656714][T14471] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 689.664695][T14471] raw: 00fff00000010200 ffffea0001e10400 dead000000000002 ffff888140009500 [ 689.673260][T14471] raw: 0000000000000000 0000000080040004 00000001ffffffff ffff88807d7bf501 [ 689.681818][T14471] page dumped because: kasan: bad access detected [ 689.688216][T14471] page_owner tracks the page as allocated [ 689.693907][T14471] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4810, tgid 4807 (syz.3.427), ts 106248785275, free_ts 106232455635 [ 689.716569][T14471] post_alloc_hook+0x18d/0x1b0 [ 689.721327][T14471] get_page_from_freelist+0x322e/0x33b0 [ 689.726855][T14471] __alloc_pages+0x28d/0x770 [ 689.731425][T14471] alloc_slab_page+0x6a/0x150 [ 689.736092][T14471] new_slab+0x84/0x2d0 [ 689.740146][T14471] ___slab_alloc+0xc20/0x1270 [ 689.744811][T14471] kmem_cache_alloc+0x1a5/0x2d0 [ 689.749644][T14471] copy_net_ns+0x140/0x5d0 [ 689.754045][T14471] create_new_namespaces+0x425/0x7a0 [ 689.759311][T14471] copy_namespaces+0x397/0x3f0 [ 689.764055][T14471] copy_process+0x1ab8/0x4060 [ 689.768712][T14471] kernel_clone+0x222/0x920 [ 689.773196][T14471] __x64_sys_clone+0x231/0x280 [ 689.777938][T14471] do_syscall_64+0x3b/0xb0 [ 689.782335][T14471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.788212][T14471] page last free stack trace: [ 689.792862][T14471] free_unref_page_prepare+0xf63/0x1120 [ 689.798388][T14471] free_unref_page+0x33/0x3e0 [ 689.803042][T14471] __unfreeze_partials+0x1b7/0x210 [ 689.808224][T14471] put_cpu_partial+0x17b/0x250 [ 689.812971][T14471] qlist_free_all+0x76/0xe0 [ 689.817456][T14471] kasan_quarantine_reduce+0x156/0x170 [ 689.822898][T14471] __kasan_slab_alloc+0x1f/0x70 [ 689.827742][T14471] slab_post_alloc_hook+0x52/0x3a0 [ 689.832852][T14471] kmem_cache_alloc+0x10c/0x2d0 [ 689.837691][T14471] getname_flags+0xb8/0x4f0 [ 689.842181][T14471] __x64_sys_newfstatat+0x130/0x1e0 [ 689.847372][T14471] do_syscall_64+0x3b/0xb0 [ 689.851779][T14471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.857666][T14471] [ 689.859971][T14471] Memory state around the buggy address: [ 689.865579][T14471] ffff88807e0e7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.873619][T14471] ffff88807e0e7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.881656][T14471] >ffff88807e0e8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 689.889696][T14471] ^ [ 689.896102][T14471] ffff88807e0e8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 689.904155][T14471] ffff88807e0e8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 689.912211][T14471] ================================================================== [ 689.928293][ T3653] Bluetooth: hci2: command tx timeout [ 689.934479][T14471] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 689.941685][T14471] CPU: 0 PID: 14471 Comm: syz-executor Not tainted 6.1.112-syzkaller #0 [ 689.950008][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 689.960049][T14471] Call Trace: [ 689.963311][T14471] [ 689.966226][T14471] dump_stack_lvl+0x1e3/0x2cb [ 689.970900][T14471] ? nf_tcp_handle_invalid+0x642/0x642 [ 689.976348][T14471] ? panic+0x764/0x764 [ 689.980404][T14471] ? preempt_schedule_common+0xa6/0xd0 [ 689.985846][T14471] ? vscnprintf+0x59/0x80 [ 689.990161][T14471] panic+0x318/0x764 [ 689.994042][T14471] ? check_panic_on_warn+0x1d/0xa0 [ 689.999136][T14471] ? memcpy_page_flushcache+0xfc/0xfc [ 690.004492][T14471] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 690.010454][T14471] ? _raw_spin_unlock+0x40/0x40 [ 690.015287][T14471] ? print_report+0x4a3/0x4f0 [ 690.019945][T14471] check_panic_on_warn+0x7e/0xa0 [ 690.024865][T14471] ? netdev_run_todo+0xdfb/0xf40 [ 690.029786][T14471] end_report+0x66/0x110 [ 690.034010][T14471] kasan_report+0x143/0x160 [ 690.038495][T14471] ? __init_swait_queue_head+0xaa/0x140 [ 690.044028][T14471] ? netdev_run_todo+0xdfb/0xf40 [ 690.048950][T14471] kasan_check_range+0x27f/0x290 [ 690.053867][T14471] netdev_run_todo+0xdfb/0xf40 [ 690.058619][T14471] ? netdev_refcnt_read+0x50/0x50 [ 690.063631][T14471] ? do_raw_spin_unlock+0x137/0x8a0 [ 690.068813][T14471] ? bpf_offload_dev_netdev_register+0xe10/0xe10 [ 690.075125][T14471] ? _raw_spin_unlock+0x24/0x40 [ 690.079957][T14471] ? simple_release_fs+0x98/0xd0 [ 690.084878][T14471] nsim_destroy+0xac/0x140 [ 690.089280][T14471] __nsim_dev_port_del+0x153/0x1b0 [ 690.094375][T14471] nsim_dev_reload_destroy+0x286/0x490 [ 690.099825][T14471] ? nsim_bus_probe+0x20/0x20 [ 690.104487][T14471] nsim_drv_remove+0x5c/0x160 [ 690.109149][T14471] device_release_driver_internal+0x4f3/0x880 [ 690.115203][T14471] bus_remove_device+0x2e5/0x400 [ 690.120125][T14471] device_del+0x6e2/0xbd0 [ 690.124442][T14471] ? kill_device+0x160/0x160 [ 690.129012][T14471] device_unregister+0x1c/0xc0 [ 690.133755][T14471] del_device_store+0x35f/0x480 [ 690.138590][T14471] ? del_port_store+0x1d0/0x1d0 [ 690.143427][T14471] ? sysfs_kf_write+0x181/0x2a0 [ 690.148264][T14471] ? sysfs_kf_read+0x300/0x300 [ 690.153014][T14471] kernfs_fop_write_iter+0x3a2/0x4f0 [ 690.158285][T14471] vfs_write+0x857/0xbc0 [ 690.162510][T14471] ? file_end_write+0x250/0x250 [ 690.167337][T14471] ? do_sys_openat2+0x1f9/0x4f0 [ 690.172181][T14471] ? __fdget_pos+0x2c1/0x360 [ 690.176754][T14471] ksys_write+0x19c/0x2c0 [ 690.181065][T14471] ? print_irqtrace_events+0x210/0x210 [ 690.186509][T14471] ? __ia32_sys_read+0x80/0x80 [ 690.191251][T14471] ? syscall_enter_from_user_mode+0x2e/0x230 [ 690.197213][T14471] ? lockdep_hardirqs_on+0x94/0x130 [ 690.202393][T14471] ? syscall_enter_from_user_mode+0x2e/0x230 [ 690.208354][T14471] do_syscall_64+0x3b/0xb0 [ 690.212754][T14471] ? clear_bhb_loop+0x45/0xa0 [ 690.217416][T14471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.223294][T14471] RIP: 0033:0x7fee5db7cadf [ 690.227693][T14471] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 690.247279][T14471] RSP: 002b:00007ffcc6208930 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 690.255676][T14471] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fee5db7cadf [ 690.263630][T14471] RDX: 0000000000000001 RSI: 00007ffcc6208980 RDI: 0000000000000005 [ 690.271583][T14471] RBP: 00007fee5dbf13ae R08: 0000000000000000 R09: 00007ffcc6208787 [ 690.279532][T14471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 690.287482][T14471] R13: 00007ffcc6208980 R14: 00007fee5e864620 R15: 0000000000000003 [ 690.295442][T14471] [ 690.298672][T14471] Kernel Offset: disabled [ 690.302979][T14471] Rebooting in 86400 seconds..